Create Interactive Tour

Windows Analysis Report
https://url.uk.m.mimecastprotect.com/s/92k3C66qlfr1n3oipf6c5OlXL?domain=oq.com

Overview

General Information

Sample URL:	https://url.uk.m.mimecastprotect.com/s/92k3C66qlfr1n3oipf6c5OlXL?domain=oq.com
Analysis ID:	1671094
Infos:

Detection

Score:	0
Range:	0 - 100
Confidence:	80%

Signatures

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2580 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2160,i,15424739631380523908,7770385484142031453,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2200 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2160,i,15424739631380523908,7770385484142031453,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3500 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4828 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2160,i,15424739631380523908,7770385484142031453,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5848 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.uk.m.mimecastprotect.com/s/92k3C66qlfr1n3oipf6c5OlXL?domain=oq.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /service/get-caps-overrides HTTP/1.1Host: security-uk.m.mimecastprotect.comConnection: keep-aliveContent-Length: 15x-context-route: ttpwpsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, */*sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Origin: https://security-uk.m.mimecastprotect.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 22 Apr 2025 14:22:05 GMTContent-Type: text/html; charset=utf-8Content-Length: 180Connection: closex-content-type-options: nosniffx-xss-protection: 1; mode=blockx-frame-options: SAMEORIGINReferrer-Policy: no-referrerX-Robots-Tag: noindex, nofollowStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U"Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 22 Apr 2025 14:22:06 GMTContent-Type: text/html; charset=utf-8Content-Length: 180Connection: closex-content-type-options: nosniffx-xss-protection: 1; mode=blockx-frame-options: SAMEORIGINReferrer-Policy: no-referrerX-Robots-Tag: noindex, nofollowStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U"Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 22 Apr 2025 14:22:19 GMTContent-Type: text/html; charset=utf-8Content-Length: 180Connection: closex-content-type-options: nosniffx-xss-protection: 1; mode=blockx-frame-options: SAMEORIGINReferrer-Policy: no-referrerX-Robots-Tag: noindex, nofollowStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U"Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 22 Apr 2025 14:22:50 GMTContent-Type: text/html; charset=UTF-8Content-Length: 8257Connection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()referrer-policy: same-originserver-timing: chlray;desc="9345c68c8e08b6c9"x-content-options: nosniffx-frame-options: SAMEORIGIN

Source: chromecache_214.3.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007753ca29
Source: chromecache_214.3.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007753ca34
Source: chromecache_214.3.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007753ca37
Source: chromecache_214.3.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007753ca40
Source: chromecache_214.3.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007753ca4f
Source: chromecache_139.3.dr	String found in binary or memory: http://www.mimecast.com/
Source: chromecache_234.3.dr	String found in binary or memory: https://ad.doubleclick.net/activity;
Source: chromecache_234.3.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;
Source: chromecache_234.3.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/
Source: chromecache_234.3.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_234.3.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_240.3.dr, chromecache_198.3.dr	String found in binary or memory: https://cdn.cookielaw.org
Source: chromecache_240.3.dr, chromecache_198.3.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: chromecache_240.3.dr, chromecache_198.3.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: chromecache_240.3.dr, chromecache_198.3.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2V2Data.json
Source: chromecache_240.3.dr, chromecache_198.3.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: chromecache_139.3.dr	String found in binary or memory: https://community.mimecast.com/docs/DOC-241
Source: chromecache_240.3.dr, chromecache_198.3.dr	String found in binary or memory: https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck
Source: chromecache_240.3.dr, chromecache_198.3.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: chromecache_205.3.dr	String found in binary or memory: https://github.com/atfzl/eslint-plugin-css-modules/pull/82
Source: chromecache_234.3.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_239.3.dr	String found in binary or memory: https://github.com/vimeo/player.js
Source: chromecache_234.3.dr	String found in binary or memory: https://google.com
Source: chromecache_234.3.dr	String found in binary or memory: https://google.com/pagead/form-data
Source: chromecache_234.3.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_234.3.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion
Source: chromecache_133.3.dr	String found in binary or memory: https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages
Source: chromecache_234.3.dr	String found in binary or memory: https://m.youtube.com
Source: chromecache_214.3.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=ciq7kwj&ht=tk&f=14032.14034.14036.14038.49587&a=86472324&app=typek
Source: chromecache_234.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_234.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/ccm/collect
Source: chromecache_234.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_235.3.dr, chromecache_133.3.dr	String found in binary or memory: https://player.vimeo.com/NOTICE.txt
Source: chromecache_205.3.dr	String found in binary or memory: https://stackoverflow.com/questions/15751012/
Source: chromecache_234.3.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/23491a/00000000000000007753ca34/30/a?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/23491a/00000000000000007753ca34/30/d?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/23491a/00000000000000007753ca34/30/l?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/2b93b6/00000000000000007753ca37/30/a?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/2b93b6/00000000000000007753ca37/30/d?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/2b93b6/00000000000000007753ca37/30/l?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/46adfc/00000000000000007753ca29/30/a?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/46adfc/00000000000000007753ca29/30/d?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/46adfc/00000000000000007753ca29/30/l?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/63eba7/00000000000000007753ca4f/30/a?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/63eba7/00000000000000007753ca4f/30/d?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/63eba7/00000000000000007753ca4f/30/l?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/723dd9/00000000000000007753ca40/30/a?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/723dd9/00000000000000007753ca40/30/d?primer=f592e0a4b9356877842506ce34430
Source: chromecache_214.3.dr	String found in binary or memory: https://use.typekit.net/af/723dd9/00000000000000007753ca40/30/l?primer=f592e0a4b9356877842506ce34430
Source: chromecache_153.3.dr	String found in binary or memory: https://vimeo.com/ablincoln/vuid
Source: chromecache_234.3.dr	String found in binary or memory: https://www.google.com
Source: chromecache_234.3.dr	String found in binary or memory: https://www.google.com/ccm/collect
Source: chromecache_234.3.dr	String found in binary or memory: https://www.google.com/pagead/form-data
Source: chromecache_234.3.dr	String found in binary or memory: https://www.google.com/travel/flights/click/conversion
Source: chromecache_234.3.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_234.3.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_234.3.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_234.3.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_234.3.dr	String found in binary or memory: https://www.youtube.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910

Source: unknown	HTTPS traffic detected: 192.178.49.164:443 -> 192.168.2.5:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.130.217.180:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.130.217.180:443 -> 192.168.2.5:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.220.42.88:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.28.254:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.130.217.87:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.130.217.87:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.130.217.87:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.27.2:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.156:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.71:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.71:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.71:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.156:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.156:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.87.42:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.87.42:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.86.42:443 -> 192.168.2.5:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.32.137:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.27.2:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.27.2:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.27.2:443 -> 192.168.2.5:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.155.119:443 -> 192.168.2.5:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.138.60:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.27.2:443 -> 192.168.2.5:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.128.61:443 -> 192.168.2.5:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.227:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.202.204:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.0.217:443 -> 192.168.2.5:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.0.217:443 -> 192.168.2.5:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.0.217:443 -> 192.168.2.5:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.0.217:443 -> 192.168.2.5:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.0.217:443 -> 192.168.2.5:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.19:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.0.217:443 -> 192.168.2.5:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.71:443 -> 192.168.2.5:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.156:443 -> 192.168.2.5:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.202.204:443 -> 192.168.2.5:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.138.60:443 -> 192.168.2.5:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.141:443 -> 192.168.2.5:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.138.60:443 -> 192.168.2.5:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.203:443 -> 192.168.2.5:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.15.67:443 -> 192.168.2.5:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.64.217:443 -> 192.168.2.5:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.64.217:443 -> 192.168.2.5:49911 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@28/199@58/23

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2160,i,15424739631380523908,7770385484142031453,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2200 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2160,i,15424739631380523908,7770385484142031453,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3500 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.uk.m.mimecastprotect.com/s/92k3C66qlfr1n3oipf6c5OlXL?domain=oq.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2160,i,15424739631380523908,7770385484142031453,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5848 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2160,i,15424739631380523908,7770385484142031453,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2200 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2160,i,15424739631380523908,7770385484142031453,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3500 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2160,i,15424739631380523908,7770385484142031453,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5848 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://url.uk.m.mimecastprotect.com/s/92k3C66qlfr1n3oipf6c5OlXL?domain=oq.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://assets.oq.com/-/media/oq/images/home/global-company-home-hero-1920x1133.jpg?mh=892&mw=1900&rev=e6c6eeff31694fa6975be6d1674c4a1a&hash=CE2BA7FC0ABE7B959873EF05F2CA56D9	0%	Avira URL Cloud	safe
https://assets.oq.com/-/media/oq/images/home/downstream-tile-scroller.jpg?mh=780&mw=584&rev=0b0eea57254e4523a6310c18c5c79ce7&hash=3F205526C3A94ACCA1788CFB0E26B9D6	0%	Avira URL Cloud	safe
https://assets.oq.com/-/media/oq/images/home/innovation---home-hero-1920x1133.jpg?mh=892&mw=1900&rev=1d73e947bd4a4b47bf546b16741457ca&hash=40E20750960BFCD1961A297F1A94EC60	0%	Avira URL Cloud	safe
https://assets.oq.com/dist/fonts/icons.woff2?v=a67dd319b658	0%	Avira URL Cloud	safe
https://assets.oq.com/dist/images/oq-logo.svg?v=b392d8916ca8d1a12d5b90e318209933	0%	Avira URL Cloud	safe
https://assets.oq.com/-/media/oq/images/home/energy-transition-tile-scroller-584x780.jpg?mh=780&mw=584&rev=82234abfe3b64ec4b3335d5a2997bba1&hash=CC3B9BAF4944F7F6CD8217F5E93AF653	0%	Avira URL Cloud	safe
https://assets.oq.com/dist/lib/plyr/dist/plyr.polyfilled.min.js?v=046c76bf752698a3cf2658ba476051b7	0%	Avira URL Cloud	safe
https://assets.oq.com/-/media/oq/images/news/exceeding-omr-78-mil---list-tile.jpg?mh=300&mw=376&rev=7dfad02f8b934a0bab254df6512ea167&hash=5FBF5D79CA68392E8A5E553E736DD6DB	0%	Avira URL Cloud	safe
https://assets.oq.com/-/media/oq/images/home/upstream-tile-scroller.jpg?mh=780&mw=584&rev=82b12dacbd0a492aaaae49d307f82541&hash=69AAA61A80D3F699D300D57AD5C65ED1	0%	Avira URL Cloud	safe
https://assets.oq.com/dist/lib/plyr/dist/plyr.min.css?v=cdcdf7547a296a9e24ddb81b86256a43	0%	Avira URL Cloud	safe
https://assets.oq.com/dist/js/libs/slick.min.js?v=77f46a52421a9ad6011c921a07f8a767	0%	Avira URL Cloud	safe
https://assets.oq.com/-/media/oq/images/home/decarbonisation-tile-scroller-584x780.jpg?mh=780&mw=584&rev=53112b0e9c4d4f4ebe09b0a9cc790378&hash=B81424C085F4FAF101C984FF57A83957	0%	Avira URL Cloud	safe
https://assets.oq.com/dist/css/main.min.css?v=e0f3a550f5813268d8a48faae72ca2d3	0%	Avira URL Cloud	safe
https://assets.oq.com/dist/images/apple-touch-icon.png?v=afa653ac24aba3b496241dbcd913289d	0%	Avira URL Cloud	safe
https://oq.com/dist/images/content/html5/growth-impact/financials-filings.jpg?v=3	0%	Avira URL Cloud	safe
https://oq.com/dist/images/content/html5/growth-impact/company-overview.jpg?v=3	0%	Avira URL Cloud	safe
https://assets.oq.com/-/media/oq/images/home/people-tile-scroller-584x780.jpg?mh=780&mw=584&rev=8ad2488be52548e5b22fa8aa3e5262ee&hash=3374FE74D7836CD79423AA21494554B5	0%	Avira URL Cloud	safe
https://oq.com/layouts/system/VisitorIdentificationCSS.aspx?1745331756558	0%	Avira URL Cloud	safe
https://assets.oq.com/dist/css/html5/iconcolumnswithinfo.min.css?v=70801508730617a76b85c1596d43666a	0%	Avira URL Cloud	safe
https://assets.oq.com/dist/lib/jquery/dist/jquery.min.js?v=dc5e7f18c8d36ac1d3d4753a87c98d0a	0%	Avira URL Cloud	safe
https://oq.com/dist/images/content/html5/growth-impact/vendors.jpg?v=3	0%	Avira URL Cloud	safe
https://oq.com/layouts/system/VisitorIdentification.js	0%	Avira URL Cloud	safe
https://assets.oq.com/-/media/oq/images/home/alternative-energy-home-hero-1920x1133.jpg?mh=892&mw=1900&rev=6b1aad2b7e7c441093305fc850562ad6&hash=1B0C6E21CE19F554B4F437FE711258FA	0%	Avira URL Cloud	safe
https://arclight.vimeo.com/add/player-stats?beacon=1&session-id=8a798cfd6f1e69034405f672b178a5b03f49bfcd1745331781	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
arclight.vimeo.com	34.120.202.204	true	false	high
lensflare.vimeo.com	34.120.15.67	true	false	high
player.vimeo.com.cdn.cloudflare.net	162.159.138.60	true	false	high
security-uk.m.mimecastprotect.com	91.220.42.88	true	false	high
oq.com	185.64.27.2	true	false	unknown
a1874.dscg1.akamai.net	23.220.73.207	true	false	high
vimeo.com	162.159.138.60	true	false	high
vimeo.map.fastly.net	151.101.0.217	true	false	high
url.uk.m.mimecastprotect.com	195.130.217.180	true	false	high
fresnel.vimeocdn.com	34.120.202.204	true	false	high
www.google.com	192.178.49.164	true	false	high
s-part-0043.t-0009.t-msedge.net	13.107.246.71	true	false	high
cdn.plyr.io	172.67.69.227	true	false	high
a1792.dscc.akamai.net	23.220.73.141	true	false	high
cdn.cookielaw.org	104.18.87.42	true	false	high
geolocation.onetrust.com	104.18.32.137	true	false	high
a1988.dscg1.akamai.net	23.220.73.156	true	false	high
use.typekit.net	unknown	unknown	false	high
assets.oq.com	unknown	unknown	false	unknown
i.vimeocdn.com	unknown	unknown	false	high
p.typekit.net	unknown	unknown	false	high
vod-adaptive-ak.vimeocdn.com	unknown	unknown	false	high
f.vimeocdn.com	unknown	unknown	false	high
player.vimeo.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://player.vimeo.com/api/player.js	false		high
https://i.vimeocdn.com/video/1016866142-4c9b3c8c8baa759c3cc15a1eb8bd9ae8419ac423dbf46ec3ecd965adbe4f3901-d?mw=1600&mh=3840	false		high
https://assets.oq.com/-/media/oq/images/home/downstream-tile-scroller.jpg?mh=780&mw=584&rev=0b0eea57254e4523a6310c18c5c79ce7&hash=3F205526C3A94ACCA1788CFB0E26B9D6	false	Avira URL Cloud: safe	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/styles.0ecbe67b2d69cf74a815.js	false		high
https://security-uk.m.mimecastprotect.com/ttpwp/resources/languages/en.json	false		high
https://player.vimeo.com/video/1017866889/outro?on_site=0&type=beginning	false		high
https://assets.oq.com/-/media/oq/images/home/global-company-home-hero-1920x1133.jpg?mh=892&mw=1900&rev=e6c6eeff31694fa6975be6d1674c4a1a&hash=CE2BA7FC0ABE7B959873EF05F2CA56D9	false	Avira URL Cloud: safe	unknown
https://assets.oq.com/dist/fonts/icons.woff2?v=a67dd319b658	false	Avira URL Cloud: safe	unknown
https://assets.oq.com/-/media/oq/images/home/innovation---home-hero-1920x1133.jpg?mh=892&mw=1900&rev=1d73e947bd4a4b47bf546b16741457ca&hash=40E20750960BFCD1961A297F1A94EC60	false	Avira URL Cloud: safe	unknown
https://lensflare.vimeo.com/add/vimeo.finish_video	false		high
https://assets.oq.com/-/media/oq/images/news/exceeding-omr-78-mil---list-tile.jpg?mh=300&mw=376&rev=7dfad02f8b934a0bab254df6512ea167&hash=5FBF5D79CA68392E8A5E553E736DD6DB	false	Avira URL Cloud: safe	unknown
https://assets.oq.com/dist/lib/plyr/dist/plyr.min.css?v=cdcdf7547a296a9e24ddb81b86256a43	false	Avira URL Cloud: safe	unknown
https://security-uk.m.mimecastprotect.com/api/ttp/url/get-page-data	false		high
https://cdn.cookielaw.org/scripttemplates/6.9.0/assets/otFlat.json	false		high
https://security-uk.m.mimecastprotect.com/ttpwp/resources/images/favicon.ico	false		high
https://lensflare.vimeo.com/add/vimeo.watch_video_heartbeat	false		high
https://assets.oq.com/dist/images/oq-logo.svg?v=b392d8916ca8d1a12d5b90e318209933	false	Avira URL Cloud: safe	unknown
https://assets.oq.com/dist/lib/plyr/dist/plyr.polyfilled.min.js?v=046c76bf752698a3cf2658ba476051b7	false	Avira URL Cloud: safe	unknown
https://vimeo.com/ablincoln/vuid?pid=a62a4ddf0a390eec07657a60139d2547cd31699d1745331766	false		high
https://assets.oq.com/-/media/oq/images/home/energy-transition-tile-scroller-584x780.jpg?mh=780&mw=584&rev=82234abfe3b64ec4b3335d5a2997bba1&hash=CC3B9BAF4944F7F6CD8217F5E93AF653	false	Avira URL Cloud: safe	unknown
https://assets.oq.com/-/media/oq/images/home/upstream-tile-scroller.jpg?mh=780&mw=584&rev=82b12dacbd0a492aaaae49d307f82541&hash=69AAA61A80D3F699D300D57AD5C65ED1	false	Avira URL Cloud: safe	unknown
https://player.vimeo.com/video/491695131?loop=true&autoplay=false&muted=false&gesture=media&playsinline=true&byline=false&portrait=false&title=false&speed=false&transparent=false&customControls=true&quality=720p	false		high
https://assets.oq.com/dist/js/libs/slick.min.js?v=77f46a52421a9ad6011c921a07f8a767	false	Avira URL Cloud: safe	unknown
https://assets.oq.com/dist/css/main.min.css?v=e0f3a550f5813268d8a48faae72ca2d3	false	Avira URL Cloud: safe	unknown
https://assets.oq.com/-/media/oq/images/home/decarbonisation-tile-scroller-584x780.jpg?mh=780&mw=584&rev=53112b0e9c4d4f4ebe09b0a9cc790378&hash=B81424C085F4FAF101C984FF57A83957	false	Avira URL Cloud: safe	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/polyfills.0ecbe67b2d69cf74a815.js	false		high
https://assets.oq.com/dist/images/apple-touch-icon.png?v=afa653ac24aba3b496241dbcd913289d	false	Avira URL Cloud: safe	unknown
https://assets.oq.com/-/media/oq/images/home/people-tile-scroller-584x780.jpg?mh=780&mw=584&rev=8ad2488be52548e5b22fa8aa3e5262ee&hash=3374FE74D7836CD79423AA21494554B5	false	Avira URL Cloud: safe	unknown
https://security-uk.m.mimecastprotect.com/ttpwp/resources/runtime.0ecbe67b2d69cf74a815.js	false		high
https://use.typekit.net/af/723dd9/00000000000000007753ca40/30/l?primer=f592e0a4b9356877842506ce344308576437e4f677d7c9b78ca2162e6cad991a&fvd=n6&v=3	false		high
https://player.vimeo.com/video/1017866889?loop=true&autoplay=false&muted=false&gesture=media&playsinline=true&byline=false&portrait=false&title=false&speed=false&transparent=false&customControls=true&quality=720p	false		high
https://oq.com/en	false		unknown
https://cdn.cookielaw.org/scripttemplates/6.9.0/otBannerSdk.js	false		high
https://use.typekit.net/ciq7kwj.css	false		high
https://oq.com/dist/images/content/html5/growth-impact/company-overview.jpg?v=3	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/consent/e46114d3-17df-4a47-b296-930f4c4a1f17/d385ee77-9574-4abc-8cac-bdab2fce255f/en.json	false		high
https://oq.com/layouts/system/VisitorIdentificationCSS.aspx?1745331756558	false	Avira URL Cloud: safe	unknown
https://f.vimeocdn.com/p/4.40.46/js/player.module.js	false		high
https://security-uk.m.mimecastprotect.com/ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2	false		high
https://security-uk.m.mimecastprotect.com/ttpwp/resources/fa-regular-400.33904a1b964c9b363ce7.woff2	false		high
https://i.vimeocdn.com/video/1935949486-bd75b3e8483ddea0ef1d61f453f3a81f18b091dcce2974acce480975f6ba189a-d?mw=80&q=85	false		high
https://security-uk.m.mimecastprotect.com/ttpwp/resources/main.0ecbe67b2d69cf74a815.js	false		high
https://security-uk.m.mimecastprotect.com/ttpwp/resources/images/mimecast-logo.png	false		high
https://player.vimeo.com/video/1017865153/outro?on_site=0&type=beginning	false		high
https://oq.com/dist/images/content/html5/growth-impact/financials-filings.jpg?v=3	false	Avira URL Cloud: safe	unknown
https://assets.oq.com/dist/lib/jquery/dist/jquery.min.js?v=dc5e7f18c8d36ac1d3d4753a87c98d0a	false	Avira URL Cloud: safe	unknown
https://assets.oq.com/dist/css/html5/iconcolumnswithinfo.min.css?v=70801508730617a76b85c1596d43666a	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false		high
https://cdn.cookielaw.org/consent/e46114d3-17df-4a47-b296-930f4c4a1f17/e46114d3-17df-4a47-b296-930f4c4a1f17.json	false		high
https://security-uk.m.mimecastprotect.com/service/get-caps-overrides	false		high
https://f.vimeocdn.com/p/4.40.46/js/vendor.module.js	false		high
https://player.vimeo.com/video/1019689266/outro?on_site=0&type=beginning	false		high
https://i.vimeocdn.com/video/1935949486-bd75b3e8483ddea0ef1d61f453f3a81f18b091dcce2974acce480975f6ba189a-d?mw=1600&mh=3840	false		high
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location	false		high
https://oq.com/layouts/system/VisitorIdentification.js	false	Avira URL Cloud: safe	unknown
https://oq.com/dist/images/content/html5/growth-impact/vendors.jpg?v=3	false	Avira URL Cloud: safe	unknown
https://player.vimeo.com/video/1017865153?loop=true&autoplay=false&muted=true&gesture=media&playsinline=true&byline=false&portrait=false&title=false&speed=false&transparent=false&customControls=true&quality=720p	false		high
https://i.vimeocdn.com/video/1016866142-4c9b3c8c8baa759c3cc15a1eb8bd9ae8419ac423dbf46ec3ecd965adbe4f3901-d?mw=80&q=85	false		high
https://player.vimeo.com/video/1019689266?loop=true&autoplay=false&muted=false&gesture=media&playsinline=true&byline=false&portrait=false&title=false&speed=false&transparent=false&customControls=true&quality=720p	false		high
https://security-uk.m.mimecastprotect.com/ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273	false		high
https://assets.oq.com/-/media/oq/images/home/alternative-energy-home-hero-1920x1133.jpg?mh=892&mw=1900&rev=6b1aad2b7e7c441093305fc850562ad6&hash=1B0C6E21CE19F554B4F437FE711258FA	false	Avira URL Cloud: safe	unknown
https://i.vimeocdn.com/video/1016866142-4c9b3c8c8baa759c3cc15a1eb8bd9ae8419ac423dbf46ec3ecd965adbe4f3901-d?w=640	false		high
https://arclight.vimeo.com/add/player-stats?beacon=1&session-id=8a798cfd6f1e69034405f672b178a5b03f49bfcd1745331781	false	Avira URL Cloud: safe	unknown
https://i.vimeocdn.com/video/1945769561-d380fe16500d84004442f824d838a33e6fabd60d6ffe114e9644d7fa6fdfbe7e-d?mw=1600&mh=3840	false		high
https://p.typekit.net/p.css?s=1&k=ciq7kwj&ht=tk&f=14032.14034.14036.14038.49587&a=86472324&app=typekit&e=css	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://ad.doubleclick.net/activity;register_conversion=1;	chromecache_234.3.dr	false	high
https://github.com/vimeo/player.js	chromecache_239.3.dr	false	high
https://google.com/pagead/form-data	chromecache_234.3.dr	false	high
https://www.youtube.com	chromecache_234.3.dr	false	high
https://www.google.com	chromecache_234.3.dr	false	high
http://typekit.com/eulas/00000000000000007753ca4f	chromecache_214.3.dr	false	high
https://use.typekit.net/af/63eba7/00000000000000007753ca4f/30/l?primer=f592e0a4b9356877842506ce34430	chromecache_214.3.dr	false	high
https://m.youtube.com	chromecache_234.3.dr	false	high
https://use.typekit.net/af/46adfc/00000000000000007753ca29/30/l?primer=f592e0a4b9356877842506ce34430	chromecache_214.3.dr	false	high
https://github.com/krux/postscribe/blob/master/LICENSE.	chromecache_234.3.dr	false	high
https://www.google.com/pagead/form-data	chromecache_234.3.dr	false	high
https://stackoverflow.com/questions/15751012/	chromecache_205.3.dr	false	high
http://www.mimecast.com/	chromecache_139.3.dr	false	high
https://cct.google/taggy/agent.js	chromecache_234.3.dr	false	high
https://use.typekit.net/af/723dd9/00000000000000007753ca40/30/a?primer=f592e0a4b9356877842506ce34430	chromecache_214.3.dr	false	high
https://github.com/atfzl/eslint-plugin-css-modules/pull/82	chromecache_205.3.dr	false	high
http://typekit.com/eulas/00000000000000007753ca40	chromecache_214.3.dr	false	high
https://use.typekit.net/af/723dd9/00000000000000007753ca40/30/d?primer=f592e0a4b9356877842506ce34430	chromecache_214.3.dr	false	high
https://use.typekit.net/af/2b93b6/00000000000000007753ca37/30/l?primer=f592e0a4b9356877842506ce34430	chromecache_214.3.dr	false	high
https://www.google.com/ccm/collect	chromecache_234.3.dr	false	high
https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck	chromecache_240.3.dr, chromecache_198.3.dr	false	high
https://cdn.cookielaw.org	chromecache_240.3.dr, chromecache_198.3.dr	false	high
https://use.typekit.net/af/2b93b6/00000000000000007753ca37/30/d?primer=f592e0a4b9356877842506ce34430	chromecache_214.3.dr	false	high
https://use.typekit.net/af/46adfc/00000000000000007753ca29/30/a?primer=f592e0a4b9356877842506ce34430	chromecache_214.3.dr	false	high
https://use.typekit.net/af/63eba7/00000000000000007753ca4f/30/a?primer=f592e0a4b9356877842506ce34430	chromecache_214.3.dr	false	high
http://typekit.com/eulas/00000000000000007753ca34	chromecache_214.3.dr	false	high
http://typekit.com/eulas/00000000000000007753ca37	chromecache_214.3.dr	false	high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion	chromecache_234.3.dr	false	high
https://use.typekit.net/af/23491a/00000000000000007753ca34/30/a?primer=f592e0a4b9356877842506ce34430	chromecache_214.3.dr	false	high
https://cdn.cookielaw.org/vendorlist/googleData.json	chromecache_240.3.dr, chromecache_198.3.dr	false	high
https://www.google.com/travel/flights/click/conversion	chromecache_234.3.dr	false	high
https://cdn.cookielaw.org/vendorlist/iabData.json	chromecache_240.3.dr, chromecache_198.3.dr	false	high
https://use.typekit.net/af/23491a/00000000000000007753ca34/30/l?primer=f592e0a4b9356877842506ce34430	chromecache_214.3.dr	false	high
https://cdn.cookielaw.org/vendorlist/iab2Data.json	chromecache_240.3.dr, chromecache_198.3.dr	false	high
http://typekit.com/eulas/00000000000000007753ca29	chromecache_214.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
195.130.217.180	url.uk.m.mimecastprotect.com	United Kingdom	42427	MIMECAST-UKGB	false
192.178.49.164	www.google.com	United States	15169	GOOGLEUS	false
151.101.64.217	unknown	United States	54113	FASTLYUS	false
151.101.0.217	vimeo.map.fastly.net	United States	54113	FASTLYUS	false
162.159.138.60	player.vimeo.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
195.130.217.87	unknown	United Kingdom	42427	MIMECAST-UKGB	false
23.220.73.156	a1988.dscg1.akamai.net	United States	13489	EPMTelecomunicacionesSAESPCO	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
185.64.27.2	oq.com	Oman	19905	NEUSTAR-AS6US	false
172.67.69.227	cdn.plyr.io	United States	13335	CLOUDFLARENETUS	false
91.220.42.88	security-uk.m.mimecastprotect.com	United Kingdom	42427	MIMECAST-UKGB	false
104.18.87.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
34.120.202.204	arclight.vimeo.com	United States	15169	GOOGLEUS	false
104.26.12.19	unknown	United States	13335	CLOUDFLARENETUS	false
34.120.15.67	lensflare.vimeo.com	United States	15169	GOOGLEUS	false
13.107.246.71	s-part-0043.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.220.73.207	a1874.dscg1.akamai.net	United States	13489	EPMTelecomunicacionesSAESPCO	false
172.64.155.119	unknown	United States	13335	CLOUDFLARENETUS	false
23.220.73.203	unknown	United States	13489	EPMTelecomunicacionesSAESPCO	false
162.159.128.61	unknown	United States	13335	CLOUDFLARENETUS	false
23.220.73.141	a1792.dscc.akamai.net	United States	13489	EPMTelecomunicacionesSAESPCO	false
104.18.86.42	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1671094
Start date and time:	2025-04-22 16:20:48 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://url.uk.m.mimecastprotect.com/s/92k3C66qlfr1n3oipf6c5OlXL?domain=oq.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@28/199@58/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.214.172, 142.250.69.14, 142.251.2.84, 142.250.68.238, 142.250.68.227, 142.250.68.232, 192.178.49.195, 192.178.49.170, 192.178.49.202, 142.250.68.234, 142.250.69.10, 184.29.183.29, 52.149.20.212
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, c2a9c95e369881c67228a6591cac2686.clo.footprintdns.com, ax-ring.msedge.net, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, c.pki.goog
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://url.uk.m.mimecastprotect.com/s/92k3C66qlfr1n3oipf6c5OlXL?domain=oq.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 283x300, components 3
Category:	downloaded
Size (bytes):	41550
Entropy (8bit):	7.925239290590901
Encrypted:	false
SSDEEP:	768:xYywuJGxXhOVPNGORqhun+Qs+kNvdcQung9VHyOCsVPqdirMgMhSj:xM5HOVNU6+QsjvFA2yOI8I+
MD5:	995E7E756074418CD73BC150F41E47E2
SHA1:	EC774040445EF508CC1DEEACDC837FBD45239E61
SHA-256:	781A61A8986197A8A6D2F888D25119A8CA5EFDEE44B442F05C7E8CDD44005278
SHA-512:	97E6352F25C1AF602B2AD816B6DF0AF92BD6691B551ED1DD08327B1EB7E82820CECCEC308186C8C2DC0121C3F5B4E8FFD8E1F220CFC27D85743793683B5CCFAA
Malicious:	false
Reputation:	low
URL:	https://assets.oq.com/-/media/oq/images/news/oq-exploration-and-production-shares---list-tile.jpg?mh=300&mw=376&rev=f312268f39034332ae4dfa31a05fdb8d&hash=BD6CA74B86FC1E13F7A3B6ACF5DDBA0D
Preview:	......JFIF.....`.`.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Source: https://oq.com/en	HTTP Parser: No favicon
Source: https://oq.com/en	HTTP Parser: No favicon
Source: https://oq.com/en	HTTP Parser: No favicon
Source: https://oq.com/en	HTTP Parser: No favicon
Source: https://oq.com/en	HTTP Parser: No favicon
Source: https://oq.com/en	HTTP Parser: No favicon
Source: https://oq.com/en	HTTP Parser: No favicon
Source: https://oq.com/en	HTTP Parser: No favicon
Source: https://oq.com/en	HTTP Parser: No favicon
Source: https://oq.com/en	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_234.3.dr	String found in binary or memory: Wt();Do(function(){a();Ao(b)\|\|Pm(a,b)},b)},Wt=function(){return[N.m.R,N.m.U]},Xt=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,Yt=/^www\.googleadservices\.com$/,bu=/^gad_source[_=](\d+)$/;function gu(){return Lo("dedupe_gclid",function(){return zr()})};var hu=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,iu=/^www.googleadservices.com$/;function ju(a){a\|\|(a=ku());return a.qo?!1:a.on\|\|a.pn\|\|a.sn\|\|a.qn\|\|a.Hf\|\|a.Xm\|\|a.rn\|\|a.fn?!0:!1}function ku(){var a={},b=es(!0);a.qo=!!b._up;var c=ut();a.on=c.aw!==void 0;a.pn=c.dc!==void 0;a.sn=c.wbraid!==void 0;a.qn=c.gbraid!==void 0;a.rn=c.gclsrc==="aw.ds";a.Hf=Ut().Hf;var d=A.referrer?fk(lk(A.referrer),"host"):"";a.fn=hu.test(d);a.Xm=iu.test(d);return a};var lu=["https://www.google.com","https://www.youtube.com","https://m.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_234.3.dr	String found in binary or memory: return f}hI.K="internal.enableAutoEventOnTimer";var $b=ua(["data-gtm-yt-inspected-"]),jI=["www.youtube.com","www.youtube-nocookie.com"],kI,lI=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: url.uk.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: security-uk.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: oq.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: assets.oq.com
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: player.vimeo.com
Source: global traffic	DNS traffic detected: DNS query: cdn.plyr.io
Source: global traffic	DNS traffic detected: DNS query: fresnel.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: i.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: f.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: arclight.vimeo.com
Source: global traffic	DNS traffic detected: DNS query: vimeo.com
Source: global traffic	DNS traffic detected: DNS query: vod-adaptive-ak.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: lensflare.vimeo.com

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 22, 2025 16:21:49.979993105 CEST	192.168.2.5	1.1.1.1	0xeecb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:49.980225086 CEST	192.168.2.5	1.1.1.1	0xbeef	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 22, 2025 16:21:52.572108984 CEST	192.168.2.5	1.1.1.1	0x24a6	Standard query (0)	url.uk.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:52.572108984 CEST	192.168.2.5	1.1.1.1	0x84b8	Standard query (0)	url.uk.m.mimecastprotect.com	65	IN (0x0001)	false
Apr 22, 2025 16:21:57.660460949 CEST	192.168.2.5	1.1.1.1	0x7483	Standard query (0)	security-uk.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:57.660615921 CEST	192.168.2.5	1.1.1.1	0x19ec	Standard query (0)	security-uk.m.mimecastprotect.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:03.900991917 CEST	192.168.2.5	1.1.1.1	0x7681	Standard query (0)	security-uk.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:03.901237965 CEST	192.168.2.5	1.1.1.1	0x2a0d	Standard query (0)	security-uk.m.mimecastprotect.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:30.205801010 CEST	192.168.2.5	1.1.1.1	0x4129	Standard query (0)	oq.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:30.205961943 CEST	192.168.2.5	1.1.1.1	0x20d	Standard query (0)	oq.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:32.221759081 CEST	192.168.2.5	1.1.1.1	0x19f3	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:32.222141027 CEST	192.168.2.5	1.1.1.1	0x4234	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Apr 22, 2025 16:22:32.223072052 CEST	192.168.2.5	1.1.1.1	0x9ed0	Standard query (0)	assets.oq.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:32.223233938 CEST	192.168.2.5	1.1.1.1	0x49c6	Standard query (0)	assets.oq.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:33.389602900 CEST	192.168.2.5	1.1.1.1	0xa99b	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:33.389782906 CEST	192.168.2.5	1.1.1.1	0xe7b9	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Apr 22, 2025 16:22:35.001961946 CEST	192.168.2.5	1.1.1.1	0xbab4	Standard query (0)	assets.oq.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:35.002346992 CEST	192.168.2.5	1.1.1.1	0x3d93	Standard query (0)	assets.oq.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:41.676140070 CEST	192.168.2.5	1.1.1.1	0x232e	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:41.676476955 CEST	192.168.2.5	1.1.1.1	0xd434	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 22, 2025 16:22:43.538048983 CEST	192.168.2.5	1.1.1.1	0xeb7	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:43.538314104 CEST	192.168.2.5	1.1.1.1	0xa72c	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:43.539145947 CEST	192.168.2.5	1.1.1.1	0xf76d	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:43.539278030 CEST	192.168.2.5	1.1.1.1	0x9d42	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 22, 2025 16:22:43.712646008 CEST	192.168.2.5	1.1.1.1	0xb875	Standard query (0)	oq.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:43.712795973 CEST	192.168.2.5	1.1.1.1	0x2ed2	Standard query (0)	oq.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:44.315875053 CEST	192.168.2.5	1.1.1.1	0x53ce	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:44.316150904 CEST	192.168.2.5	1.1.1.1	0x4432	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:44.319839954 CEST	192.168.2.5	1.1.1.1	0x9722	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:44.320033073 CEST	192.168.2.5	1.1.1.1	0x5679	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:45.610399961 CEST	192.168.2.5	1.1.1.1	0xece9	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:45.610626936 CEST	192.168.2.5	1.1.1.1	0xedb5	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:45.630438089 CEST	192.168.2.5	1.1.1.1	0x350	Standard query (0)	cdn.plyr.io	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:45.630605936 CEST	192.168.2.5	1.1.1.1	0xec8a	Standard query (0)	cdn.plyr.io	65	IN (0x0001)	false
Apr 22, 2025 16:22:46.611337900 CEST	192.168.2.5	1.1.1.1	0x8aed	Standard query (0)	fresnel.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:46.611576080 CEST	192.168.2.5	1.1.1.1	0x4087	Standard query (0)	fresnel.vimeocdn.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:46.611980915 CEST	192.168.2.5	1.1.1.1	0x2393	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:46.612142086 CEST	192.168.2.5	1.1.1.1	0x32c4	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:46.612464905 CEST	192.168.2.5	1.1.1.1	0x6287	Standard query (0)	f.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:46.612612963 CEST	192.168.2.5	1.1.1.1	0x61d9	Standard query (0)	f.vimeocdn.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:47.034044027 CEST	192.168.2.5	1.1.1.1	0xaa23	Standard query (0)	cdn.plyr.io	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:47.034251928 CEST	192.168.2.5	1.1.1.1	0x94b	Standard query (0)	cdn.plyr.io	65	IN (0x0001)	false
Apr 22, 2025 16:22:47.384341955 CEST	192.168.2.5	1.1.1.1	0x4b40	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:47.384800911 CEST	192.168.2.5	1.1.1.1	0x9f02	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:49.060195923 CEST	192.168.2.5	1.1.1.1	0xc27b	Standard query (0)	arclight.vimeo.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:49.060683012 CEST	192.168.2.5	1.1.1.1	0xc8d0	Standard query (0)	arclight.vimeo.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:49.615978003 CEST	192.168.2.5	1.1.1.1	0x3261	Standard query (0)	vimeo.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:49.616158962 CEST	192.168.2.5	1.1.1.1	0xc614	Standard query (0)	vimeo.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:51.768506050 CEST	192.168.2.5	1.1.1.1	0x717a	Standard query (0)	vod-adaptive-ak.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:51.768829107 CEST	192.168.2.5	1.1.1.1	0x7c91	Standard query (0)	vod-adaptive-ak.vimeocdn.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:52.023209095 CEST	192.168.2.5	1.1.1.1	0x8f6a	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:52.023430109 CEST	192.168.2.5	1.1.1.1	0x3e64	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:52.554599047 CEST	192.168.2.5	1.1.1.1	0xb2df	Standard query (0)	vod-adaptive-ak.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:52.554996967 CEST	192.168.2.5	1.1.1.1	0x374b	Standard query (0)	vod-adaptive-ak.vimeocdn.com	65	IN (0x0001)	false
Apr 22, 2025 16:22:55.694248915 CEST	192.168.2.5	1.1.1.1	0x22b0	Standard query (0)	lensflare.vimeo.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:55.694432974 CEST	192.168.2.5	1.1.1.1	0x3432	Standard query (0)	lensflare.vimeo.com	65	IN (0x0001)	false
Apr 22, 2025 16:23:16.337369919 CEST	192.168.2.5	1.1.1.1	0x7d69	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:23:16.337753057 CEST	192.168.2.5	1.1.1.1	0xab07	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 22, 2025 16:21:50.121560097 CEST	1.1.1.1	192.168.2.5	0xeecb	No error (0)	www.google.com		192.178.49.164	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:50.121582985 CEST	1.1.1.1	192.168.2.5	0xbeef	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 22, 2025 16:21:52.789693117 CEST	1.1.1.1	192.168.2.5	0x24a6	No error (0)	url.uk.m.mimecastprotect.com		195.130.217.180	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:52.789693117 CEST	1.1.1.1	192.168.2.5	0x24a6	No error (0)	url.uk.m.mimecastprotect.com		91.220.42.63	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:52.789693117 CEST	1.1.1.1	192.168.2.5	0x24a6	No error (0)	url.uk.m.mimecastprotect.com		91.220.42.235	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:52.789693117 CEST	1.1.1.1	192.168.2.5	0x24a6	No error (0)	url.uk.m.mimecastprotect.com		195.130.217.73	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:52.789693117 CEST	1.1.1.1	192.168.2.5	0x24a6	No error (0)	url.uk.m.mimecastprotect.com		195.130.217.187	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:52.789693117 CEST	1.1.1.1	192.168.2.5	0x24a6	No error (0)	url.uk.m.mimecastprotect.com		91.220.42.215	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:57.873712063 CEST	1.1.1.1	192.168.2.5	0x7483	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.88	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:57.873712063 CEST	1.1.1.1	192.168.2.5	0x7483	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.89	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:57.873712063 CEST	1.1.1.1	192.168.2.5	0x7483	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.89	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:57.873712063 CEST	1.1.1.1	192.168.2.5	0x7483	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.87	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:57.873712063 CEST	1.1.1.1	192.168.2.5	0x7483	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.87	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:21:57.873712063 CEST	1.1.1.1	192.168.2.5	0x7483	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.88	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:04.112409115 CEST	1.1.1.1	192.168.2.5	0x7681	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.87	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:04.112409115 CEST	1.1.1.1	192.168.2.5	0x7681	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.87	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:04.112409115 CEST	1.1.1.1	192.168.2.5	0x7681	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.88	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:04.112409115 CEST	1.1.1.1	192.168.2.5	0x7681	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.88	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:04.112409115 CEST	1.1.1.1	192.168.2.5	0x7681	No error (0)	security-uk.m.mimecastprotect.com		91.220.42.89	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:04.112409115 CEST	1.1.1.1	192.168.2.5	0x7681	No error (0)	security-uk.m.mimecastprotect.com		195.130.217.89	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:30.359419107 CEST	1.1.1.1	192.168.2.5	0x4129	No error (0)	oq.com		185.64.27.2	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:32.362112045 CEST	1.1.1.1	192.168.2.5	0x19f3	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:32.362112045 CEST	1.1.1.1	192.168.2.5	0x19f3	No error (0)	use-stls.adobe.com.edgesuite.net	a1988.dscg1.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:32.362112045 CEST	1.1.1.1	192.168.2.5	0x19f3	No error (0)	a1988.dscg1.akamai.net		23.220.73.156	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:32.362112045 CEST	1.1.1.1	192.168.2.5	0x19f3	No error (0)	a1988.dscg1.akamai.net		23.220.73.207	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:32.362431049 CEST	1.1.1.1	192.168.2.5	0x4234	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:32.362431049 CEST	1.1.1.1	192.168.2.5	0x4234	No error (0)	use-stls.adobe.com.edgesuite.net	a1988.dscg1.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:32.470278978 CEST	1.1.1.1	192.168.2.5	0x49c6	No error (0)	assets.oq.com	oq-cd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:32.470278978 CEST	1.1.1.1	192.168.2.5	0x49c6	No error (0)	oq-cd.azureedge.net	oq-cd.afd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:32.470278978 CEST	1.1.1.1	192.168.2.5	0x49c6	No error (0)	oq-cd.afd.azureedge.net	azureedge-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:32.470278978 CEST	1.1.1.1	192.168.2.5	0x49c6	No error (0)	azureedge-t-prod.trafficmanager.net	shed.dual-low.s-part-0043.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:32.488610983 CEST	1.1.1.1	192.168.2.5	0x9ed0	No error (0)	assets.oq.com	oq-cd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:32.488610983 CEST	1.1.1.1	192.168.2.5	0x9ed0	No error (0)	oq-cd.azureedge.net	oq-cd.afd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:32.488610983 CEST	1.1.1.1	192.168.2.5	0x9ed0	No error (0)	oq-cd.afd.azureedge.net	azureedge-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:32.488610983 CEST	1.1.1.1	192.168.2.5	0x9ed0	No error (0)	azureedge-t-prod.trafficmanager.net	shed.dual-low.s-part-0043.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:32.488610983 CEST	1.1.1.1	192.168.2.5	0x9ed0	No error (0)	shed.dual-low.s-part-0043.t-0009.t-msedge.net	s-part-0043.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:32.488610983 CEST	1.1.1.1	192.168.2.5	0x9ed0	No error (0)	s-part-0043.t-0009.t-msedge.net		13.107.246.71	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:33.529675961 CEST	1.1.1.1	192.168.2.5	0xa99b	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:33.529675961 CEST	1.1.1.1	192.168.2.5	0xa99b	No error (0)	p.typekit.net-stls-v3.edgesuite.net	a1874.dscg1.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:33.529675961 CEST	1.1.1.1	192.168.2.5	0xa99b	No error (0)	a1874.dscg1.akamai.net		23.220.73.207	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:33.529675961 CEST	1.1.1.1	192.168.2.5	0xa99b	No error (0)	a1874.dscg1.akamai.net		23.220.73.148	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:33.530054092 CEST	1.1.1.1	192.168.2.5	0xe7b9	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:33.530054092 CEST	1.1.1.1	192.168.2.5	0xe7b9	No error (0)	p.typekit.net-stls-v3.edgesuite.net	a1874.dscg1.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:35.265290022 CEST	1.1.1.1	192.168.2.5	0x3d93	No error (0)	assets.oq.com	oq-cd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:35.265290022 CEST	1.1.1.1	192.168.2.5	0x3d93	No error (0)	oq-cd.azureedge.net	oq-cd.afd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:35.265290022 CEST	1.1.1.1	192.168.2.5	0x3d93	No error (0)	oq-cd.afd.azureedge.net	azureedge-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:35.265290022 CEST	1.1.1.1	192.168.2.5	0x3d93	No error (0)	azureedge-t-prod.trafficmanager.net	shed.dual-low.s-part-0043.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:35.279400110 CEST	1.1.1.1	192.168.2.5	0xbab4	No error (0)	assets.oq.com	oq-cd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:35.279400110 CEST	1.1.1.1	192.168.2.5	0xbab4	No error (0)	oq-cd.azureedge.net	oq-cd.afd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:35.279400110 CEST	1.1.1.1	192.168.2.5	0xbab4	No error (0)	oq-cd.afd.azureedge.net	azureedge-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:35.279400110 CEST	1.1.1.1	192.168.2.5	0xbab4	No error (0)	azureedge-t-prod.trafficmanager.net	shed.dual-low.s-part-0043.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:35.279400110 CEST	1.1.1.1	192.168.2.5	0xbab4	No error (0)	shed.dual-low.s-part-0043.t-0009.t-msedge.net	s-part-0043.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:35.279400110 CEST	1.1.1.1	192.168.2.5	0xbab4	No error (0)	s-part-0043.t-0009.t-msedge.net		13.107.246.71	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:41.816207886 CEST	1.1.1.1	192.168.2.5	0x232e	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:41.816207886 CEST	1.1.1.1	192.168.2.5	0x232e	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:41.816515923 CEST	1.1.1.1	192.168.2.5	0xd434	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 22, 2025 16:22:43.678319931 CEST	1.1.1.1	192.168.2.5	0xeb7	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:43.678319931 CEST	1.1.1.1	192.168.2.5	0xeb7	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:43.678685904 CEST	1.1.1.1	192.168.2.5	0xa72c	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 22, 2025 16:22:43.679166079 CEST	1.1.1.1	192.168.2.5	0xf76d	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:43.679166079 CEST	1.1.1.1	192.168.2.5	0xf76d	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:43.680711031 CEST	1.1.1.1	192.168.2.5	0x9d42	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 22, 2025 16:22:43.869203091 CEST	1.1.1.1	192.168.2.5	0xb875	No error (0)	oq.com		185.64.27.2	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:44.456398964 CEST	1.1.1.1	192.168.2.5	0x53ce	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:44.456398964 CEST	1.1.1.1	192.168.2.5	0x53ce	No error (0)	player.vimeo.com.cdn.cloudflare.net		162.159.138.60	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:44.456398964 CEST	1.1.1.1	192.168.2.5	0x53ce	No error (0)	player.vimeo.com.cdn.cloudflare.net		162.159.128.61	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:44.456794977 CEST	1.1.1.1	192.168.2.5	0x4432	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:44.460200071 CEST	1.1.1.1	192.168.2.5	0x9722	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:44.460200071 CEST	1.1.1.1	192.168.2.5	0x9722	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:44.460211039 CEST	1.1.1.1	192.168.2.5	0x5679	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 22, 2025 16:22:45.751045942 CEST	1.1.1.1	192.168.2.5	0xece9	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:45.751045942 CEST	1.1.1.1	192.168.2.5	0xece9	No error (0)	player.vimeo.com.cdn.cloudflare.net		162.159.128.61	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:45.751045942 CEST	1.1.1.1	192.168.2.5	0xece9	No error (0)	player.vimeo.com.cdn.cloudflare.net		162.159.138.60	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:45.753979921 CEST	1.1.1.1	192.168.2.5	0xedb5	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:45.770859003 CEST	1.1.1.1	192.168.2.5	0xec8a	No error (0)	cdn.plyr.io			65	IN (0x0001)	false
Apr 22, 2025 16:22:45.775342941 CEST	1.1.1.1	192.168.2.5	0x350	No error (0)	cdn.plyr.io		172.67.69.227	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:45.775342941 CEST	1.1.1.1	192.168.2.5	0x350	No error (0)	cdn.plyr.io		104.26.12.19	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:45.775342941 CEST	1.1.1.1	192.168.2.5	0x350	No error (0)	cdn.plyr.io		104.26.13.19	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:46.752676010 CEST	1.1.1.1	192.168.2.5	0x6287	No error (0)	f.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:46.752676010 CEST	1.1.1.1	192.168.2.5	0x6287	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:46.752676010 CEST	1.1.1.1	192.168.2.5	0x6287	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:46.752676010 CEST	1.1.1.1	192.168.2.5	0x6287	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:46.752676010 CEST	1.1.1.1	192.168.2.5	0x6287	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:46.752824068 CEST	1.1.1.1	192.168.2.5	0x32c4	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:46.753014088 CEST	1.1.1.1	192.168.2.5	0x2393	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:46.753014088 CEST	1.1.1.1	192.168.2.5	0x2393	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:46.753014088 CEST	1.1.1.1	192.168.2.5	0x2393	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:46.753014088 CEST	1.1.1.1	192.168.2.5	0x2393	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:46.753014088 CEST	1.1.1.1	192.168.2.5	0x2393	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:46.753246069 CEST	1.1.1.1	192.168.2.5	0x61d9	No error (0)	f.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:46.754962921 CEST	1.1.1.1	192.168.2.5	0x8aed	No error (0)	fresnel.vimeocdn.com		34.120.202.204	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:47.174252033 CEST	1.1.1.1	192.168.2.5	0x94b	No error (0)	cdn.plyr.io			65	IN (0x0001)	false
Apr 22, 2025 16:22:47.174415112 CEST	1.1.1.1	192.168.2.5	0xaa23	No error (0)	cdn.plyr.io		104.26.12.19	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:47.174415112 CEST	1.1.1.1	192.168.2.5	0xaa23	No error (0)	cdn.plyr.io		172.67.69.227	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:47.174415112 CEST	1.1.1.1	192.168.2.5	0xaa23	No error (0)	cdn.plyr.io		104.26.13.19	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:47.524475098 CEST	1.1.1.1	192.168.2.5	0x4b40	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:47.524475098 CEST	1.1.1.1	192.168.2.5	0x4b40	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:47.524475098 CEST	1.1.1.1	192.168.2.5	0x4b40	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:47.524475098 CEST	1.1.1.1	192.168.2.5	0x4b40	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:47.524475098 CEST	1.1.1.1	192.168.2.5	0x4b40	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:47.527400017 CEST	1.1.1.1	192.168.2.5	0x9f02	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:49.200397015 CEST	1.1.1.1	192.168.2.5	0xc27b	No error (0)	arclight.vimeo.com		34.120.202.204	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:49.756074905 CEST	1.1.1.1	192.168.2.5	0x3261	No error (0)	vimeo.com		162.159.138.60	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:49.756074905 CEST	1.1.1.1	192.168.2.5	0x3261	No error (0)	vimeo.com		162.159.128.61	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:51.908621073 CEST	1.1.1.1	192.168.2.5	0x717a	No error (0)	vod-adaptive-ak.vimeocdn.com	vod-adaptive.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:51.908621073 CEST	1.1.1.1	192.168.2.5	0x717a	No error (0)	vod-adaptive.akamaized.net	a1792.dscc.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:51.908621073 CEST	1.1.1.1	192.168.2.5	0x717a	No error (0)	a1792.dscc.akamai.net		23.220.73.141	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:51.908621073 CEST	1.1.1.1	192.168.2.5	0x717a	No error (0)	a1792.dscc.akamai.net		23.220.73.203	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:51.909523964 CEST	1.1.1.1	192.168.2.5	0x7c91	No error (0)	vod-adaptive-ak.vimeocdn.com	vod-adaptive.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:51.909523964 CEST	1.1.1.1	192.168.2.5	0x7c91	No error (0)	vod-adaptive.akamaized.net	a1792.dscc.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:52.163367987 CEST	1.1.1.1	192.168.2.5	0x8f6a	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:52.163367987 CEST	1.1.1.1	192.168.2.5	0x8f6a	No error (0)	player.vimeo.com.cdn.cloudflare.net		162.159.138.60	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:52.163367987 CEST	1.1.1.1	192.168.2.5	0x8f6a	No error (0)	player.vimeo.com.cdn.cloudflare.net		162.159.128.61	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:52.163681030 CEST	1.1.1.1	192.168.2.5	0x3e64	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:52.695169926 CEST	1.1.1.1	192.168.2.5	0x374b	No error (0)	vod-adaptive-ak.vimeocdn.com	vod-adaptive.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:52.695169926 CEST	1.1.1.1	192.168.2.5	0x374b	No error (0)	vod-adaptive.akamaized.net	a1792.dscc.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:52.729163885 CEST	1.1.1.1	192.168.2.5	0xb2df	No error (0)	vod-adaptive-ak.vimeocdn.com	vod-adaptive.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:52.729163885 CEST	1.1.1.1	192.168.2.5	0xb2df	No error (0)	vod-adaptive.akamaized.net	a1792.dscc.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:22:52.729163885 CEST	1.1.1.1	192.168.2.5	0xb2df	No error (0)	a1792.dscc.akamai.net		23.220.73.203	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:52.729163885 CEST	1.1.1.1	192.168.2.5	0xb2df	No error (0)	a1792.dscc.akamai.net		23.220.73.141	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:22:55.834676027 CEST	1.1.1.1	192.168.2.5	0x22b0	No error (0)	lensflare.vimeo.com		34.120.15.67	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:23:16.477538109 CEST	1.1.1.1	192.168.2.5	0x7d69	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 22, 2025 16:23:16.477538109 CEST	1.1.1.1	192.168.2.5	0x7d69	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:23:16.477538109 CEST	1.1.1.1	192.168.2.5	0x7d69	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:23:16.477538109 CEST	1.1.1.1	192.168.2.5	0x7d69	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:23:16.477538109 CEST	1.1.1.1	192.168.2.5	0x7d69	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Apr 22, 2025 16:23:16.500375986 CEST	1.1.1.1	192.168.2.5	0xab07	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:21:53 UTC	719	OUT	GET /s/92k3C66qlfr1n3oipf6c5OlXL?domain=oq.com HTTP/1.1 Host: url.uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:21:54 UTC	2115	IN	HTTP/1.1 307 Temporary Redirect Date: Tue, 22 Apr 2025 14:21:54 GMT Content-Length: 0 Connection: close Location: https://url.uk.m.mimecastprotect.com/r/Ejm3fauSfC8Wyfq7JTiNe55Vc0bbC05W7kTSE9ls0uMg-i9l5IpOrSNTDFEN9DIg72obKazsxOy6f8c4PsKOUuaQPFa5rnhTL-MQKFCq_nDkuv6zbxDOnpkhuHId21n9972wbMfmn1E7DPtIj-_xIKv3hV7gbTvOCyysKZuAe0r868PmUxFT1OFCJx0_RkCswuI0x0vCpNcW0PN0JJUTEZBHi7G1AINIMlAZJeQdVZbHpC6MMvWc2BJeOkJe1GRyHODh9zNHjGLTQhIO8n3df2ykOnLX7rR3QVMYzYbaUjEbq5YZkYbfhCSR9my7UhVEj7l1Ni3uYuPJsqdi5kGilMzrlwiYy_R3j9N6MLUMrtuGuSUBVqDnJuOtAkNpZqJPe5aOUgrV5ndD7A3wpU8xMLjL4eaBeOXuxN6RkoV_b2_fey3Lz8yzDBU73FZzQ9cO2_xOfpAg_cxtWf0y9d-fCA4MzdzaoO7BsK8gWGDGR3EJZQenUxAhvwk1JFCLgZAskkD3HbtgnrUYfJucI6Mwvr-WY95l3GPoQbMNP95DGRh6aLek0uPVxODC3Cta1wD-ocbq5lnGElG2FmGRXoEukBPQAnXzpg9p6byMqxke3LnYyCzm7rl3tD911lMgSfvgGtm_sq3zXk04C17_HIZeiA5JVrv5xlfYygBge7nB2ZkEN3QmZGTFVAXQaMz_yFjjJp_6l63e9RrBCXeNGCn049yjMZxnIOuaxQ0y6R2yKzlQuVE3vwZEUGI6VP1WpbE5baYir9VSkzgF3gsFo6h5xXbSD-mLpn1tAZGV1OpYzzmXAqJnIGQYVykwXAC4UkTaUzDYXx6SV2jA0AsGO33ooshIqy6S0Q8BuCN9QB-8cLAetZq0PyYpa_LonCqqCYpbKbM2G79nln-zhVk4ClTql51MD_SklFuXFrxJQhgbwMgp-opI0WZ4Yt_n6TDiuDvA2HCC9GcUxRPyUtU [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:21:54 UTC	2558	OUT	GET /r/Ejm3fauSfC8Wyfq7JTiNe55Vc0bbC05W7kTSE9ls0uMg-i9l5IpOrSNTDFEN9DIg72obKazsxOy6f8c4PsKOUuaQPFa5rnhTL-MQKFCq_nDkuv6zbxDOnpkhuHId21n9972wbMfmn1E7DPtIj-_xIKv3hV7gbTvOCyysKZuAe0r868PmUxFT1OFCJx0_RkCswuI0x0vCpNcW0PN0JJUTEZBHi7G1AINIMlAZJeQdVZbHpC6MMvWc2BJeOkJe1GRyHODh9zNHjGLTQhIO8n3df2ykOnLX7rR3QVMYzYbaUjEbq5YZkYbfhCSR9my7UhVEj7l1Ni3uYuPJsqdi5kGilMzrlwiYy_R3j9N6MLUMrtuGuSUBVqDnJuOtAkNpZqJPe5aOUgrV5ndD7A3wpU8xMLjL4eaBeOXuxN6RkoV_b2_fey3Lz8yzDBU73FZzQ9cO2_xOfpAg_cxtWf0y9d-fCA4MzdzaoO7BsK8gWGDGR3EJZQenUxAhvwk1JFCLgZAskkD3HbtgnrUYfJucI6Mwvr-WY95l3GPoQbMNP95DGRh6aLek0uPVxODC3Cta1wD-ocbq5lnGElG2FmGRXoEukBPQAnXzpg9p6byMqxke3LnYyCzm7rl3tD911lMgSfvgGtm_sq3zXk04C17_HIZeiA5JVrv5xlfYygBge7nB2ZkEN3QmZGTFVAXQaMz_yFjjJp_6l63e9RrBCXeNGCn049yjMZxnIOuaxQ0y6R2yKzlQuVE3vwZEUGI6VP1WpbE5baYir9VSkzgF3gsFo6h5xXbSD-mLpn1tAZGV1OpYzzmXAqJnIGQYVykwXAC4UkTaUzDYXx6SV2jA0AsGO33ooshIqy6S0Q8BuCN9QB-8cLAetZq0PyYpa_LonCqqCYpbKbM2G79nln-zhVk4ClTql51MD_SklFuXFrxJQhgbwMgp-opI0WZ4Yt_n6TDiuDvA2HCC9GcUxRPyUtU7DXOBMjeAOxZ5Wslb23EmlztqcNVKjTFIzwqZ2i2RH [TRUNCATED] Host: url.uk.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:21:57 UTC	434	IN	HTTP/1.1 307 Temporary Redirect Date: Tue, 22 Apr 2025 14:21:57 GMT Content-Length: 0 Connection: close Location: https://security-uk.m.mimecastprotect.com/ttpwp#/ua?key=IGdKd-qRdMjJCsJVikGJF2afZTJ-TxSUD8H34KCMddo775z9DwhRE-8IcASsLIW04Ksj12StlTACS14YZ8EjEZgXHP0jnX7ppxGOcQIEEFM Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:21:58 UTC	688	OUT	GET /ttpwp HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:21:59 UTC	434	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:21:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 3447 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"d77-OHH4JkHPwYh69LhiBPhlW6DaQ28" Vary: Accept-Encoding
2025-04-22 14:21:59 UTC	3447	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1"> <

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:00 UTC	552	OUT	GET /ttpwp/resources/runtime.0ecbe67b2d69cf74a815.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:00 UTC	533	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:00 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1492 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 21 Jan 2025 15:13:30 GMT ETag: W/"5d4-194896d0190" Vary: Accept-Encoding
2025-04-22 14:22:00 UTC	1492	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6c 2c 70 3d 72 5b 30 5d 2c 66 3d 72 5b 31 5d 2c 69 3d 72 5b 32 5d 2c 63 3d 30 2c 73 3d 5b 5d 3b 63 3c 70 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6c 3d 70 5b 63 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 6c 29 26 26 6f 5b 6c 5d 26 26 73 2e 70 75 73 68 28 6f 5b 6c 5d 5b 30 5d 29 2c 6f 5b 6c 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 66 2c 6e 29 26 26 28 65 5b 6e 5d 3d 66 5b 6e 5d 29 3b 66 6f 72 28 61 26 26 61 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 Data Ascii: !function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.sh

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:00 UTC	554	OUT	GET /ttpwp/resources/polyfills.0ecbe67b2d69cf74a815.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:01 UTC	536	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:00 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 95292 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 21 Jan 2025 15:13:30 GMT ETag: W/"1743c-194896d0190" Vary: Accept-Encoding
2025-04-22 14:22:01 UTC	15848	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 30 54 57 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 69 2c 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 21 72 26 26 69 20 69 6e 20 74 7c 7c 28 72 7c 7c 28 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 61 72 20 74 3d 65 26 26 65 2e 72 65 6a 65 63 74 69 6f 6e 3b 74 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 3a 22 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 6d 65 73 73 61 67 65 3a 74 2c 22 3b 20 5a 6f 6e 65 3a 22 2c 65 2e 7a 6f 6e 65 2e 6e 61 6d 65 2c 22 3b 20 54 61 73 6b 3a 22 2c 65 2e 74 61 73 6b 26 26 65 2e 74 61 73 6b 2e 73 6f 75 72 63 65 2c 22 3b 20 56 61 6c 75 65 3a 22 2c 74 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 73 74 61 63 6b 3a 76 6f 69 64 20 30 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 7d 7d 2c 6e 2e 6d 69 63 72 6f 74 61 73 6b 44 72 61 69 6e 44 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 Data Ascii: ar t=e&&e.rejection;t?console.error("Unhandled Promise rejection:",t instanceof Error?t.message:t,"; Zone:",e.zone.name,"; Task:",e.task&&e.task.source,"; Value:",t,t instanceof Error?t.stack:void 0):console.error(e)}},n.microtaskDrainDone=function(){for(
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 69 70 74 2c 53 65 6c 65 63 74 2c 53 6f 75 72 63 65 2c 53 70 61 6e 2c 53 74 79 6c 65 2c 54 61 62 6c 65 43 61 70 74 69 6f 6e 2c 54 61 62 6c 65 43 65 6c 6c 2c 54 61 62 6c 65 43 6f 6c 2c 54 61 62 6c 65 2c 54 61 62 6c 65 52 6f 77 2c 54 61 62 6c 65 53 65 63 74 69 6f 6e 2c 54 65 78 74 41 72 65 61 2c 54 69 74 6c 65 2c 54 72 61 63 6b 2c 55 4c 69 73 74 2c 55 6e 6b 6e 6f 77 6e 2c 56 69 64 65 6f 22 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 3f 6c 3d 68 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 48 54 4d 4c 22 2b 65 2b 22 45 6c 65 6d 65 6e 74 22 7d 29 2e 63 6f 6e 63 61 74 28 75 29 3a 65 2e 45 76 65 6e 74 54 61 72 67 65 74 3f 6c 2e 70 75 73 68 28 22 45 76 65 6e 74 54 61 72 67 65 74 22 29 3a 6c 3d 75 3b 66 6f 72 28 76 61 72 20 70 3d 65 2e 5f 5f Data Ascii: ipt,Select,Source,Span,Style,TableCaption,TableCell,TableCol,Table,TableRow,TableSection,TextArea,Title,Track,UList,Unknown,Video".split(",");f?l=h.map(function(e){return"HTML"+e+"Element"}).concat(u):e.EventTarget?l.push("EventTarget"):l=u;for(var p=e.__
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 73 2e 5f 70 6c 61 79 62 61 63 6b 52 61 74 65 3d 31 2c 74 68 69 73 2e 5f 64 69 72 65 63 74 69 6f 6e 3d 22 6e 6f 72 6d 61 6c 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 3d 22 6c 69 6e 65 61 72 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 44 65 70 72 65 63 61 74 65 64 28 22 49 6e 76 61 6c 69 64 20 74 69 6d 69 6e 67 20 69 6e 70 75 74 73 22 2c 22 32 30 31 36 2d 30 33 2d 30 32 22 2c 22 54 79 70 65 45 72 72 6f 72 20 65 78 63 65 70 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 74 68 72 6f 77 6e 20 69 6e 73 74 65 61 64 2e 22 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 6e 65 77 20 6e 3b 72 65 74 75 72 6e 20 72 26 26 28 6f 2e 66 Data Ascii: s._playbackRate=1,this._direction="normal",this._easing="linear",this._easingFunction=h}function r(){return e.isDeprecated("Invalid timing inputs","2016-03-02","TypeError exceptions will be thrown instead.",!0)}function i(t,r,i){var o=new n;return r&&(o.f
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6e 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 74 2a 28 31 2d 72 29 2b 6e 2a 72 3b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 72 3c 2e 35 3f 74 3a 6e 3b 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 6e 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 2e 70 75 73 68 28 65 28 74 5b 6f 5d 2c 6e 5b 6f 5d 2c 72 29 29 3b 72 65 74 75 72 6e 20 69 7d 74 68 72 6f 77 22 4d 69 73 6d 61 74 63 Data Ascii: ion(r){return n(function e(t,n,r){if("number"==typeof t&&"number"==typeof n)return t(1-r)+nr;if("boolean"==typeof t&&"boolean"==typeof n)return r<.5?t:n;if(t.length==n.length){for(var i=[],o=0;o<t.length;o++)i.push(e(t[o],n[o],r));return i}throw"Mismatc
2025-04-22 14:22:01 UTC	13908	IN	Data Raw: 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 72 65 74 75 72 6e 5b 69 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 6e 28 72 28 65 2c 74 2c 69 29 29 7d 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 72 69 6d 28 29 2e 73 70 6c 69 74 28 2f 5c 73 2a 5b 5c 73 2c 5d 5c 73 2a 2f 29 3b 69 66 28 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 69 28 74 5b 72 5d 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 72 65 74 75 72 6e 3b 6e 2e 70 75 73 68 28 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 7d 65 2e 63 6c 61 6d 70 3d 72 2c 65 2e 61 64 64 50 72 6f 70 65 72 74 69 65 73 48 61 6e Data Ascii: (e,t){return function(i,o){return[i,o,function(i){return n(r(e,t,i))}]}}function a(e){var t=e.trim().split(/\s[\s,]\s/);if(0!==t.length){for(var n=[],r=0;r<t.length;r++){var o=i(t[r]);if(void 0===o)return;n.push(o)}return n}}e.clamp=r,e.addPropertiesHan

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:00 UTC	551	OUT	GET /ttpwp/resources/styles.0ecbe67b2d69cf74a815.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:01 UTC	537	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:00 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 410447 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 21 Jan 2025 15:13:30 GMT ETag: W/"6434f-194896d0190" Vary: Accept-Encoding
2025-04-22 14:22:01 UTC	15847	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 34 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 6f 28 22 6c 45 75 68 22 29 7d 2c 4a 50 73 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 5b 32 5d 3f 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{4:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".conc
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 74 69 63 6c 65 2c 5c 6e 61 73 69 64 65 2c 5c 6e 64 65 74 61 69 6c 73 2c 5c 6e 66 69 67 63 61 70 74 69 6f 6e 2c 5c 6e 66 69 67 75 72 65 2c 5c 6e 66 6f 6f 74 65 72 2c 5c 6e 68 65 61 64 65 72 2c 5c 6e 68 67 72 6f 75 70 2c 5c 6e 6d 61 69 6e 2c 5c 6e 6d 65 6e 75 2c 5c 6e 6e 61 76 2c 5c 6e 73 65 63 74 69 6f 6e 2c 5c 6e 73 75 6d 6d 61 72 79 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 2c 5c 6e 63 61 6e 76 61 73 2c 5c 6e 70 72 6f 67 72 65 73 73 2c 5c 6e 76 69 64 65 6f 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 5c 6e 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 Data Ascii: ticle,\naside,\ndetails,\nfigcaption,\nfigure,\nfooter,\nheader,\nhgroup,\nmain,\nmenu,\nnav,\nsection,\nsummary {\n display: block;\n}\naudio,\ncanvas,\nprogress,\nvideo {\n display: inline-block;\n vertical-align: baseline;\n}\naudio:not([controls])
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 68 3a 20 31 30 30 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 61 75 74 6f 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 33 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 32 35 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 34 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e Data Ascii: h: 100%;\n }\n .col-sm-pull-0 {\n right: auto;\n }\n .col-sm-pull-1 {\n right: 8.33333333%;\n }\n .col-sm-pull-2 {\n right: 16.66666667%;\n }\n .col-sm-pull-3 {\n right: 25%;\n }\n .col-sm-pull-4 {\n right: 33.33333333%;\n }\n .
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 43 43 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 37 35 29 3b 5c 6e 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 3b 5c 6e 7d 5c 6e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 61 39 38 64 38 3b 5c 6e 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 Data Ascii: CC;\n border-radius: 4px;\n box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075);\n transition: border-color ease-in-out 0.15s, box-shadow ease-in-out 0.15s;\n}\n.form-control:focus {\n border-color: #3a98d8;\n outline: 0;\n box-shadow: inset 0 1px 1px
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 61 64 34 31 30 63 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 38 37 33 32 30 61 3b 5c 6e 7d 5c 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 66 Data Ascii: n-primary.dropdown-toggle:hover,\n.open > .btn-primary.dropdown-toggle:focus,\n.open > .btn-primary.dropdown-toggle.focus {\n color: #FFFFFF;\n background-color: #ad410c;\n border-color: #87320a;\n}\n.btn-primary.disabled:hover, .btn-primary.disabled:f
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 69 6e 70 75 74 2d 6c 67 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 62 74 6e 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 36 70 78 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 20 69 6e 70 75 74 5b 74 79 70 65 Data Ascii: border-radius: 3px;\n}\n.input-group-addon.input-lg,\n.input-group-lg > .input-group-addon,\n.input-group-lg > .input-group-btn > .input-group-addon.btn {\n padding: 10px 16px;\n font-size: 17px;\n border-radius: 6px;\n}\n.input-group-addon input[type
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 5c 6e 7d 5c 6e 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 39 35 61 36 39 3b 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 6e 61 76 62 Data Ascii: ckground-color: transparent;\n}\n.navbar-inverse .navbar-nav > .open > a, .navbar-inverse .navbar-nav > .open > a:hover, .navbar-inverse .navbar-nav > .open > a:focus {\n color: #fff;\n background-color: #495a69;\n}\n@media (max-width: 767px) {\n .navb
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 7d 5c 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 42 46 34 46 42 3b 5c 6e 7d 5c 6e 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2c 5c 6e 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 7d 5c 6e 61 2e Data Ascii: uccess.active:focus {\n color: #fff;\n background-color: #409020;\n border-color: #409020;\n}\n.list-group-item-info {\n color: #2E79AC;\n background-color: #EBF4FB;\n}\na.list-group-item-info,\nbutton.list-group-item-info {\n color: #2E79AC;\n}\na.
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 6c 67 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 73 6d 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 63 6c 6f 73 65 20 7b 5c 6e 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a Data Ascii: ba(0, 0, 0, 0.05);\n}\n.well blockquote {\n border-color: #ddd;\n border-color: rgba(0, 0, 0, 0.15);\n}\n.well-lg {\n padding: 24px;\n border-radius: 6px;\n}\n.well-sm {\n padding: 9px;\n border-radius: 3px;\n}\n.close {\n float: right;\n font-siz
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 5c 6e 20 20 2e 76 69 73 69 62 6c 65 2d 6c 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 6e 2d 78 73 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 Data Ascii: n}\n@media (min-width: 1200px) {\n .visible-lg-inline-block {\n display: inline-block !important;\n }\n}\n@media (max-width: 767px) {\n .hidden-xs {\n display: none !important;\n }\n}\n@media (min-width: 768px) and (max-width: 991px) {\n .hidde

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:00 UTC	549	OUT	GET /ttpwp/resources/main.0ecbe67b2d69cf74a815.js HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:01 UTC	539	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:00 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1057448 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 21 Jan 2025 15:13:30 GMT ETag: W/"1022a8-194896d0190" Vary: Accept-Encoding
2025-04-22 14:22:01 UTC	15845	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 62 72 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 65 75 22 2c 7b 6d 6f 6e 74 68 73 3a 22 75 72 74 61 72 72 69 6c 61 5f 6f 74 73 61 69 6c 61 5f 6d 61 72 74 78 6f 61 5f 61 70 69 72 69 6c 61 5f 6d 61 69 61 74 7a 61 5f 65 6b 61 69 6e 61 5f 75 7a 74 61 69 6c 61 5f 61 62 75 7a 74 75 61 5f 69 72 61 69 6c 61 5f 75 72 72 69 61 5f 61 7a 61 72 6f 61 5f 61 62 65 6e 64 75 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+br3":function(e,t,n){!function(e){"use strict";e.defineLocale("eu",{months:"urtarrila_otsaila_martxoa_apirila_maiatza_ekaina_uztaila_abuztua_iraila_urria_azaroa_abendua".split("_"),monthsShort:"ur
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 28 22 62 67 22 2c 7b 6d 6f 6e 74 68 73 3a 22 5c 75 30 34 34 66 5c 75 30 34 33 64 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 34 34 5c 75 30 34 33 35 5c 75 30 34 33 32 5c 75 30 34 34 30 5c 75 30 34 34 33 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 34 32 5f 5c 75 30 34 33 30 5c 75 30 34 33 66 5c 75 30 34 34 30 5c 75 30 34 33 38 5c 75 30 34 33 62 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 39 5f 5c 75 30 34 34 65 5c 75 30 34 33 64 5c 75 30 34 33 38 5f 5c 75 30 34 34 65 5c 75 30 34 33 62 5c 75 30 34 33 38 5f 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 34 32 5f 5c 75 30 34 Data Ascii: ("bg",{months:"\u044f\u043d\u0443\u0430\u0440\u0438_\u0444\u0435\u0432\u0440\u0443\u0430\u0440\u0438_\u043c\u0430\u0440\u0442_\u0430\u043f\u0440\u0438\u043b_\u043c\u0430\u0439_\u044e\u043d\u0438_\u044e\u043b\u0438_\u0430\u0432\u0433\u0443\u0441\u0442_\u04
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 6e 65 3a 22 67 65 6e 69 5c 78 65 38 72 5f 66 65 62 72 69 5c 78 65 38 72 5f 6d 61 72 5c 78 65 37 5f 61 62 72 69 6c 5f 6d 61 69 5f 6a 75 6e 68 5f 6a 75 6c 68 65 74 5f 61 67 6f 73 74 5f 73 65 74 65 6d 62 72 65 5f 6f 63 74 5c 78 66 32 62 72 65 5f 6e 6f 76 65 6d 62 72 65 5f 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 66 6f 72 6d 61 74 3a 22 64 65 20 67 65 6e 69 5c 78 65 38 72 5f 64 65 20 66 65 62 72 69 5c 78 65 38 72 5f 64 65 20 6d 61 72 5c 78 65 37 5f 64 27 61 62 72 69 6c 5f 64 65 20 6d 61 69 5f 64 65 20 6a 75 6e 68 5f 64 65 20 6a 75 6c 68 65 74 5f 64 27 61 67 6f 73 74 5f 64 65 20 73 65 74 65 6d 62 72 65 5f 64 27 6f 63 74 5c 78 66 32 62 72 65 5f 64 65 20 6e 6f 76 65 6d 62 72 65 5f 64 65 20 64 65 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 Data Ascii: ne:"geni\xe8r_febri\xe8r_mar\xe7_abril_mai_junh_julhet_agost_setembre_oct\xf2bre_novembre_decembre".split("_"),format:"de geni\xe8r_de febri\xe8r_de mar\xe7_d'abril_de mai_de junh_de julhet_d'agost_de setembre_d'oct\xf2bre_de novembre_de decembre".split("
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 74 7a 6d 22 2c 7b 6d 6f 6e 74 68 73 3a 22 5c 75 32 64 34 39 5c 75 32 64 34 66 5c 75 32 64 34 66 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 34 5f 5c 75 32 64 33 31 5c 75 32 64 35 35 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 35 35 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 35 35 5c 75 32 64 35 61 5f 5c 75 32 64 34 39 5c 75 32 64 33 31 5c 75 32 64 35 34 5c 75 32 64 34 39 5c 75 32 64 35 34 5f 5c 75 32 64 34 65 5c 75 32 64 33 30 5c 75 32 64 36 32 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 66 5c 75 32 64 36 32 5c 75 32 64 35 33 5f 5c 75 32 64 36 32 5c 75 32 64 35 33 5c 75 32 64 34 64 5c 75 32 64 36 32 Data Ascii: ){"use strict";e.defineLocale("tzm",{months:"\u2d49\u2d4f\u2d4f\u2d30\u2d62\u2d54_\u2d31\u2d55\u2d30\u2d62\u2d55_\u2d4e\u2d30\u2d55\u2d5a_\u2d49\u2d31\u2d54\u2d49\u2d54_\u2d4e\u2d30\u2d62\u2d62\u2d53_\u2d62\u2d53\u2d4f\u2d62\u2d53_\u2d62\u2d53\u2d4d\u2d62
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 29 29 2c 21 31 3d 3d 3d 67 26 26 28 67 3d 21 30 2c 69 2e 75 70 64 61 74 65 4f 66 66 73 65 74 28 74 68 69 73 29 2c 67 3d 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 7c 7c 6e 75 6c 6c 21 3d 65 26 26 6e 75 6c 6c 21 3d 65 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 21 31 3d 3d 3d 69 2e 73 75 70 70 72 65 73 73 44 65 70 72 65 63 61 74 69 6f 6e 57 61 72 6e 69 6e 67 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 44 65 70 72 65 63 61 74 69 6f 6e 20 77 61 72 6e 69 6e 67 3a 20 22 2b 65 29 7d 66 75 6e 63 74 69 6f Data Ascii: )),!1===g&&(g=!0,i.updateOffset(this),g=!1)}function M(e){return e instanceof b\|\|null!=e&&null!=e._isAMomentObject}function w(e){!1===i.suppressDeprecationWarnings&&"undefined"!=typeof console&&console.warn&&console.warn("Deprecation warning: "+e)}functio
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 2f 2c 76 74 3d 7b 55 54 3a 30 2c 47 4d 54 3a 30 2c 45 44 54 3a 2d 32 34 30 2c 45 53 54 3a 2d 33 30 30 2c 43 44 54 3a 2d 33 30 30 2c 43 53 54 3a 2d 33 36 30 2c 4d 44 54 3a 2d 33 36 30 2c 4d 53 54 3a 2d 34 32 30 2c 50 44 54 3a 2d 34 32 30 2c 50 53 54 3a 2d 34 38 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 61 2c 6f 2c 73 3d 65 2e 5f 69 2c 75 3d 63 74 2e 65 78 65 63 28 73 29 7c 7c 64 74 2e 65 78 65 63 28 73 29 2c 6c 3d 66 74 2e 6c 65 6e 67 74 68 2c 63 3d 5f 74 2e 6c 65 6e 67 74 68 3b 69 66 28 75 29 7b 66 6f 72 28 6d 28 65 29 2e 69 73 6f 3d 21 30 2c 74 3d 30 2c 6e 3d 6c 3b 74 3c 6e 3b 74 2b 2b 29 69 66 28 66 74 5b 74 5d 5b 31 5d 2e 65 78 65 63 28 75 5b 31 5d 29 29 7b 69 3d 66 74 5b 74 5d 5b 30 5d 2c 72 3d 21 31 21 Data Ascii: /,vt={UT:0,GMT:0,EDT:-240,EST:-300,CDT:-300,CST:-360,MDT:-360,MST:-420,PDT:-420,PST:-480};function yt(e){var t,n,r,i,a,o,s=e._i,u=ct.exec(s)\|\|dt.exec(s),l=ft.length,c=_t.length;if(u){for(m(e).iso=!0,t=0,n=l;t<n;t++)if(ft[t][1].exec(u[1])){i=ft[t][0],r=!1!
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 54 69 6d 65 28 74 29 2c 69 2e 75 70 64 61 74 65 4f 66 66 73 65 74 28 74 68 69 73 2c 21 30 29 2c 74 68 69 73 7d 2c 70 6e 2e 66 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 7c 7c 28 65 3d 74 68 69 73 2e 69 73 55 74 63 28 29 3f 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 55 74 63 3a 69 2e 64 65 66 61 75 6c 74 46 6f 72 6d 61 74 29 3b 76 61 72 20 74 3d 49 28 74 68 69 73 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 70 6f 73 74 66 6f 72 6d 61 74 28 74 29 7d 2c 70 6e 2e 66 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 26 26 28 4d 28 65 29 26 26 65 2e 69 73 56 61 6c 69 64 28 29 7c 7c 53 74 28 65 29 2e 69 73 56 61 6c 69 64 28 29 29 3f 56 74 Data Ascii: Time(t),i.updateOffset(this,!0),this},pn.format=function(e){e\|\|(e=this.isUtc()?i.defaultFormatUtc:i.defaultFormat);var t=I(this,e);return this.localeData().postformat(t)},pn.from=function(e,t){return this.isValid()&&(M(e)&&e.isValid()\|\|St(e).isValid())?Vt
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 72 6e 20 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 50 61 72 73 65 45 78 61 63 74 3f 28 73 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 52 65 67 65 78 22 29 7c 7c 4b 65 2e 63 61 6c 6c 28 74 68 69 73 29 2c 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 29 3a 28 73 28 74 68 69 73 2c 22 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 22 29 7c 7c 28 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 52 65 67 65 78 3d 47 65 29 2c 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 26 26 65 3f 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 4d 69 6e 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 77 65 65 6b 64 61 Data Ascii: rn this._weekdaysParseExact?(s(this,"_weekdaysRegex")\|\|Ke.call(this),e?this._weekdaysMinStrictRegex:this._weekdaysMinRegex):(s(this,"_weekdaysMinRegex")\|\|(this._weekdaysMinRegex=Ge),this._weekdaysMinStrictRegex&&e?this._weekdaysMinStrictRegex:this._weekda
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 5c 75 30 34 33 64 5c 75 30 34 33 35 5c 75 30 34 33 36 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 7b 66 6f 72 6d 61 74 3a 22 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 65 5f 5c 75 30 34 33 66 5c 75 30 34 33 30 5c 75 30 34 33 64 5c 75 30 34 34 66 5c 75 30 34 33 34 5c 75 30 34 33 37 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 33 30 5c 75 30 34 35 65 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 61 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 33 34 5c 75 30 34 34 33 5f 5c 75 30 34 34 37 5c 75 30 34 33 30 5c 75 30 34 34 36 5c 75 30 34 Data Ascii: \u043d\u0435\u0436".split("_"),weekdays:{format:"\u043d\u044f\u0434\u0437\u0435\u043b\u044e_\u043f\u0430\u043d\u044f\u0434\u0437\u0435\u043b\u0430\u043a_\u0430\u045e\u0442\u043e\u0440\u0430\u043a_\u0441\u0435\u0440\u0430\u0434\u0443_\u0447\u0430\u0446\u04
2025-04-22 14:22:01 UTC	16384	IN	Data Raw: 39 62 5c 75 30 34 33 30 5c 75 30 34 33 37 5c 75 30 34 33 30 5c 75 30 34 33 64 5f 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 30 5c 75 30 34 34 38 5c 75 30 34 33 30 5f 5c 75 30 34 33 36 5c 75 30 34 33 35 5c 75 30 34 33 62 5c 75 30 34 34 32 5c 75 30 34 33 65 5c 75 30 34 39 62 5c 75 30 34 34 31 5c 75 30 34 33 30 5c 75 30 34 33 64 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 5c 75 30 34 39 62 5c 75 30 34 33 30 5c 75 30 34 61 33 5f 5c 75 30 34 33 30 5c 75 30 34 39 62 5c 75 30 34 33 66 5f 5c 75 30 34 33 64 5c 75 30 34 33 30 5c 75 30 34 34 33 5f 5c 75 30 34 34 31 5c 75 30 34 64 39 5c 75 30 34 34 33 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 33 63 5f 5c 75 30 34 33 63 5c 75 30 34 33 30 5c 75 30 34 Data Ascii: 9b\u0430\u0437\u0430\u043d_\u049b\u0430\u0440\u0430\u0448\u0430_\u0436\u0435\u043b\u0442\u043e\u049b\u0441\u0430\u043d".split("_"),monthsShort:"\u049b\u0430\u04a3_\u0430\u049b\u043f_\u043d\u0430\u0443_\u0441\u04d9\u0443_\u043c\u0430\u043c_\u043c\u0430\u04

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:03 UTC	685	OUT	POST /service/get-caps-overrides HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive Content-Length: 15 x-context-route: ttpwp sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://security-uk.m.mimecastprotect.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:03 UTC	15	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 5b 6e 75 6c 6c 5d 7d Data Ascii: {"data":[null]}
2025-04-22 14:22:04 UTC	464	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:04 GMT Content-Type: application/json; charset=utf-8 Content-Length: 422 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: X-HTTP-Method-Override, Accept-Encoding ETag: W/"1a6-JYXDZzL0rOvgcYx9i3PSK7MoKzQ"
2025-04-22 14:22:04 UTC	422	IN	Data Raw: 7b 22 64 61 74 61 22 3a 5b 7b 22 62 72 6f 77 73 65 72 49 73 6f 6c 61 74 69 6f 6e 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 63 63 6f 75 6e 74 43 6f 64 65 73 22 3a 5b 22 43 55 53 41 31 31 41 39 32 22 2c 22 43 34 36 41 37 35 22 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 69 2e 6d 69 6d 65 63 61 73 74 2e 61 70 70 2f 3f 74 61 72 67 65 74 3d 22 2c 22 77 65 62 73 69 74 65 73 22 3a 5b 22 70 6f 72 74 61 6c 2e 78 6e 2d 2d 6d 6d 65 63 61 73 74 2d 37 79 61 2e 63 6f 6d 22 2c 22 70 6f 72 74 61 6c 2e 6d c3 ad 6d 65 63 61 73 74 2e 63 6f 6d 22 2c 22 61 72 6e 65 72 69 63 61 6e 65 78 70 72 65 73 73 2e 63 6f 6d 22 2c 22 6c 6f 67 69 6e 2e 6c 69 76 c3 a8 2e 63 6f 6d 22 2c 22 77 77 77 2e 70 c4 81 79 70 61 Data Ascii: {"data":[{"browserIsolation":{"enabled":true,"accountCodes":["CUSA11A92","C46A75"],"options":{"baseUrl":"https://bi.mimecast.app/?target=","websites":["portal.xn--mmecast-7ya.com","portal.mmecast.com","arnericanexpress.com","login.liv.com","www.pypa

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:03 UTC	620	OUT	GET /ttpwp/resources/languages/en.json HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive x-context-route: ttpwp sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:04 UTC	529	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:03 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 17216 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 21 Jan 2025 15:13:30 GMT ETag: W/"4340-194896d0190" Vary: Accept-Encoding
2025-04-22 14:22:04 UTC	15855	IN	Data Raw: 7b 22 44 45 43 49 53 49 4f 4e 5f 57 49 4c 4c 5f 42 45 5f 4c 4f 47 47 45 44 22 3a 22 59 6f 75 72 20 64 65 63 69 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 66 6f 72 20 74 72 61 63 6b 69 6e 67 20 61 6e 64 20 61 75 64 69 74 20 70 75 72 70 6f 73 65 73 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 42 52 4f 57 53 45 52 5f 4d 4f 44 45 5f 57 41 52 4e 49 4e 47 22 3a 22 50 6c 65 61 73 65 20 6c 65 61 76 65 20 7b 7b 62 72 6f 77 73 65 72 7d 7d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 64 65 76 69 63 65 20 65 6e 72 6f 6c 6c 6d 65 6e 74 2e 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 43 48 52 4f 4d 45 22 3a 22 49 6e 63 6f 67 6e 69 74 6f 20 6d 6f 64 65 22 2c 22 49 4e 5f 50 52 49 56 41 54 45 5f 46 49 52 45 46 4f 58 22 3a 22 50 72 69 76 61 74 65 20 42 72 6f 77 73 Data Ascii: {"DECISION_WILL_BE_LOGGED":"Your decision will be logged for tracking and audit purposes.","IN_PRIVATE_BROWSER_MODE_WARNING":"Please leave {{browser}} to complete device enrollment.","IN_PRIVATE_CHROME":"Incognito mode","IN_PRIVATE_FIREFOX":"Private Brows
2025-04-22 14:22:04 UTC	1361	IN	Data Raw: 54 49 4f 4e 22 3a 22 41 66 74 65 72 20 74 68 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 22 7d 2c 22 46 45 45 44 42 41 43 4b 5f 42 41 44 47 45 5f 52 45 43 41 50 54 43 48 41 22 3a 7b 22 52 45 43 41 50 54 43 48 41 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 22 7d 2c 22 53 41 4e 44 42 4f 58 22 3a 7b 22 54 49 54 4c 45 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 22 2c 22 44 45 53 43 52 49 50 54 49 4f 4e 22 3a 22 44 65 63 72 79 70 74 69 6f 6e 20 50 6f 72 74 61 6c 20 44 45 53 43 52 49 50 54 49 4f 4e 20 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 22 53 45 4e 44 45 52 5f 46 52 4f 4d 22 3a 22 46 72 6f 6d 22 2c 22 52 Data Ascii: TION":"After the verification you will be redirected automatically."},"FEEDBACK_BADGE_RECAPTCHA":{"RECAPTCHA":"Verification required"},"SANDBOX":{"TITLE":"Decryption Portal","DESCRIPTION":"Decryption Portal DESCRIPTION PLACEHOLDER","SENDER_FROM":"From","R

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:03 UTC	605	OUT	GET /ttpwp/resources/images/mimecast-logo.png HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:03 UTC	483	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:03 GMT Content-Type: image/png Content-Length: 4228 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 21 Jan 2025 15:13:31 GMT ETag: W/"1084-194896d0578"
2025-04-22 14:22:03 UTC	4228	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fe 00 00 00 78 08 06 00 00 00 d2 7f 4f 94 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 9c 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRxOpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RD

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:04 UTC	664	OUT	GET /ttpwp/resources/fa-solid-900.54dfc8f551be346014e4.woff2 HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive Origin: https://security-uk.m.mimecastprotect.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://security-uk.m.mimecastprotect.com/ttpwp Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:05 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:04 GMT Content-Type: font/woff2 Content-Length: 137104 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 21 Jan 2025 15:13:30 GMT ETag: W/"21790-194896d0190"
2025-04-22 14:22:05 UTC	15897	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 17 90 00 0d 00 00 00 05 db 50 00 02 17 34 01 4b 86 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 91 16 11 08 0a 94 e3 68 90 b6 39 01 36 02 24 03 b9 7c 0b ba 00 00 04 20 05 8a 16 07 81 bf 3d 5b b9 a6 94 44 c1 c9 fe 36 36 55 09 91 6e 32 00 aa 73 b5 4f 37 fb b3 2d 98 6e ee 94 9d a3 ed 1d 1d a1 5e ec 03 ca b6 4f 0a cb dd aa 52 0a 82 27 40 f6 ff ff ff ff ff b6 64 22 e6 94 ce c9 49 76 22 e7 6b 5a 0a fd a0 1f db d8 d8 a6 28 14 a3 41 f7 ac 8b 62 d7 87 54 65 8e 86 21 64 94 49 aa cf 88 a1 b8 88 c9 66 dd 2a db 0d b2 7b 91 7d 29 32 94 57 f7 6c 6f 87 c3 d1 bc 14 61 5e 97 b1 a8 97 a2 fa 53 16 8a 4b 97 b3 5e 41 97 74 86 fd 7a 96 37 90 5b 73 81 db f7 be 9b 26 39 48 c1 7d 6b c6 0f a9 72 55 34 Data Ascii: wOF2P4K$?FFTM`h96$\| =[D66Un2sO7-n^OR'@d"Iv"kZ(AbTe!dIf*{})2Wloa^SK^Atz7[s&9H}krU4
2025-04-22 14:22:05 UTC	16384	IN	Data Raw: 0f cc 4f 6c d2 1a 86 c3 e9 8b 88 99 f3 d5 a1 91 67 4c b2 13 7d 63 a8 9b fe c9 ae f3 d5 a9 a7 a7 09 39 b1 36 9f 9e a3 1f a0 90 ed 3a 9a 44 0d 5c 8d 8d 7b 81 1e 8a ae 3d 1b e9 ef 78 68 a7 d2 d5 cc 4b 22 83 b2 53 fb 67 03 b5 43 80 31 6b 6e ea 0b 64 9e 5d 91 43 ab 53 e6 59 13 e2 65 23 13 4e a3 13 df ad 58 23 54 ad 67 ae 58 f6 17 b3 09 75 e2 b6 66 07 58 34 68 96 e2 6f eb 86 2c 9f 25 ed e0 16 6b 9d 16 2e 94 d8 e0 3e 0a 07 e2 b6 59 1c bb 22 ec 90 46 04 ba b2 e9 b8 07 e6 13 6c a8 8e 18 57 fb cf 2d 26 80 6a f1 0b c9 b4 76 9e b1 48 c1 b1 36 31 27 0c 29 55 f7 b1 37 65 8d 37 ab d5 cd 2c ca 86 65 bf cf 8e 2b 4f 7c 6a e2 d3 8c 1b 3d 66 6c 63 4c 3b 5d dd 62 40 41 37 42 38 4f e5 fb b1 65 53 54 1c e7 3e f9 08 40 0c fb 47 77 8c 0f da 6a 5b 2f cf 18 be e8 53 2d ac a8 ae 00 Data Ascii: OlgL}c96:D\{=xhK"SgC1knd]CSYe#NX#TgXufX4ho,%k.>Y"FlW-&jvH61')U7e7,e+O\|j=flcL;]b@A7B8OeST>@Gwj[/S-
2025-04-22 14:22:05 UTC	16384	IN	Data Raw: b6 a3 dc 1f d7 6d 94 a2 70 41 3f 30 2b e9 4d 9c 50 fe 51 07 81 e2 46 1d 88 9a e1 20 91 d8 c3 84 a0 6f ff fa 8f d8 09 d6 ac da 1f b0 13 ac d8 d5 ef 7d 10 ac 9a e5 29 b1 96 ef 48 1f 0a 57 49 85 a1 54 60 01 b0 36 f5 e9 44 9f 11 ed f1 46 d9 0b 9a d1 0f 72 d8 42 eb 3e fa 6d b2 04 91 8a 6c 6d 92 ce cd 74 c0 6c b8 ba 93 46 15 45 1e 42 ca 91 be 7f 40 60 c3 89 82 3f a2 a1 04 7b ac 57 5f 34 f5 f9 08 4c 29 ff 61 12 8f 7c 76 78 b5 a8 5c 8d 64 a1 af 05 cd 2a 12 3e 6f 3a a0 09 ea 41 ab 5d a6 2c 37 8d b0 de 10 80 0d e2 a2 e5 30 4d 4e ee d7 d2 a8 cb dd d5 ab f1 66 1e 02 e1 ef 30 96 58 aa 1a fe 63 9e c5 03 c6 b7 7d cb e7 35 b8 92 84 fd 7d 65 21 6a 1c 2d 1b c1 d3 d1 73 56 1e 2c 9e 17 d6 14 ef 7f 0e 22 c4 bd ec f0 aa c8 83 3e 49 99 cc 25 7c 2c 49 8c fc 46 fe d1 3d 45 71 e4 Data Ascii: mpA?0+MPQF o})HWIT`6DFrB>mlmtlFEB@`?{W_4L)a\|vx\d*>o:A],70MNf0Xc}5}e!j-sV,">I%\|,IF=Eq
2025-04-22 14:22:05 UTC	16384	IN	Data Raw: f7 a6 35 f3 4e af be ab 74 f9 38 66 2e 2b 08 49 48 2b e6 97 ae 58 68 87 8e 4f e3 42 6a c0 27 3e 24 94 ce 22 13 79 aa 3a 0e 61 58 29 5a 0c 8c 27 55 08 51 55 0f b5 92 a0 35 71 8c 71 d8 dd a3 76 fc 9b 25 e1 0c 5c ed 4a 50 04 d2 1a c8 c2 d2 16 74 39 ba da 75 d5 e2 f2 4c b6 50 ff e6 e8 14 99 6e c4 82 a4 52 2e 1e 64 97 eb 59 d1 08 b3 17 f6 88 c1 2e 19 b9 73 69 a4 27 77 c5 f3 ae eb 36 78 8c ac da 87 cb 33 d8 42 c5 c1 d8 9a 0b 95 7e 97 e4 d0 60 a1 6d b0 c9 79 9b d1 1b bc cb fb e1 00 3c d3 b3 c3 16 ba ba 10 ae 36 82 bb 3e 6b b0 65 ae d7 17 eb e6 60 3d d9 29 42 ad 68 bb 78 6a 1c 5f 9d 92 d1 a4 60 b1 f8 da 1e f6 b8 32 8b 48 55 64 89 77 3d 21 50 a4 22 8c d6 4b bc da 22 64 e5 da 9e 85 5c cc 0d 4a 32 33 0e af e9 cd 4c 0a 22 d7 9e 46 6f 20 9e ec 23 96 0f 85 a9 7c 4b 96 Data Ascii: 5Nt8f.+IH+XhOBj'>$"y:aX)Z'UQU5qqv%\JPt9uLPnR.dY.si'w6x3B~`my<6>ke`=)Bhxj_`2HUdw=!P"K"d\J23L"Fo #\|K
2025-04-22 14:22:05 UTC	16384	IN	Data Raw: 90 b7 1a 1b e1 08 5c ce 9e f7 d5 75 13 c1 24 81 e6 f5 1b 23 93 da 05 1c 7b ca 40 8c 57 57 c7 e0 35 42 9c ff af 7f 69 a3 8e 47 45 2f 7b e3 93 e2 ed 73 fa a2 86 1a 8f 48 31 13 ae 0d 76 b6 37 50 c6 6f 25 d0 73 ca a1 f8 f1 f2 1e d8 24 c7 2f d2 8c cc 5b f8 5c 23 81 6a 28 39 68 6e 8c 60 33 f8 5a 97 4b bf 58 bd d3 14 cd b1 4e c5 ce 04 45 27 3b 8e ff 06 14 f5 cf 9f df d8 18 28 be be 13 2f d1 e9 40 a1 55 4f 23 92 db fa 8b da 7e 5a ff 3d 10 1d b8 82 b5 fd 21 27 b9 ca 44 d2 b8 43 1d ec 30 1c 0f 62 06 49 39 4f c4 b5 45 da e6 e8 e2 98 3b e5 99 2e 43 f1 db 54 44 d1 c3 0f cb 61 4e f6 d4 60 54 8f 88 b6 ec d7 a5 a6 c8 51 f3 ef cb 03 7c 68 25 87 c0 50 82 99 92 89 9e ed 68 af 2b ba 8a b0 fc b0 14 ed ac b0 1f 97 95 9d b7 2d bd 13 46 60 c8 7b 8b 83 9e f9 12 fb cf 0d 9a ee 9c Data Ascii: \u$#{@WW5BiGE/{sH1v7Po%s$/[\#j(9hn`3ZKXNE';(/@UO#~Z=!'DC0bI9OE;.CTDaN`TQ\|h%Ph+-F`{
2025-04-22 14:22:05 UTC	16384	IN	Data Raw: a1 35 53 99 88 9c 1a ca c1 40 cc f3 bf 63 39 53 a2 6e 0c 10 b4 c5 46 3f 6e ea 80 77 a4 72 5d 0b 8b eb 07 36 70 43 80 9c c2 fb fd bc 33 84 2b 42 91 53 f3 13 33 ab 48 ba aa 67 d7 0e 48 2f 6d fb bb b0 fe c1 fc b5 ed 92 c7 81 a7 cf aa 58 47 56 91 58 ea c4 79 1d 7b 13 81 7a 15 58 fb ae 24 f1 08 44 55 2b a1 ca 7c f6 4f ca 31 f7 50 ec d4 b0 4f e7 0e b2 72 5c 78 53 4a e4 a9 6e b6 70 76 bb 79 12 dd 98 27 2e db 12 cd a3 01 13 b3 dc e7 d2 ca 0d 75 ee 86 11 aa 7b 1d 75 b6 be 8e 53 b0 3b a9 7a 31 f1 1e be 07 f0 57 c3 6a 7a 75 9f b7 97 8c c9 32 b1 78 87 5d 67 9b f1 fe f1 cf 1e 5a 86 d7 4d 7a c1 9b 1a 5a d4 d4 92 8f 7d a2 82 27 05 d8 5e 32 2b f1 88 23 a4 ff 19 d5 7e 0e a0 9b 7c 5f c4 ba d5 70 c1 24 76 a0 91 6e dc db 52 cf bb 1a 9e b5 52 54 c2 11 5d 3e 88 43 7f 11 93 2a Data Ascii: 5S@c9SnF?nwr]6pC3+BS3HgH/mXGVXy{zX$DU+\|O1POr\xSJnpvy'.u{uS;z1Wjzu2x]gZMzZ}'^2+#~\|_p$vnRRT]>C*
2025-04-22 14:22:05 UTC	16384	IN	Data Raw: 52 67 87 e5 4d ba f3 da 59 cf a6 a6 6e 97 66 ca f7 51 80 90 a8 bf a4 19 d5 44 d8 32 61 d8 c6 e4 e3 61 62 b1 d7 b0 48 bc 72 d1 b9 de ce 30 91 18 24 be 93 62 b4 93 09 f6 1f 51 4d f3 6d a8 9f bc 84 6c e9 0a fe 8c 71 ef 74 4b c9 49 fc 62 bb c5 ed d2 bd a2 fb 8c 3c cb 3c fc 19 4f 89 2c 76 0e 7a 13 50 8f 01 9d 72 15 8c ab bc 2e d6 32 0a 87 2a fe 1e 0c 6a ae f7 80 fd a7 4f 86 f8 82 33 9f e2 17 74 7d fc c2 ea 10 da 75 1b 5c dd de 96 5d 0f e7 be fb 97 70 da b7 bc 1b ff 8e ee 9a fb 65 5c f8 58 02 a4 c7 16 4d cc ab fc 51 2e b9 22 51 3b c3 7c e3 72 ca ea 7a 22 a9 b0 29 c6 1a 50 4d ca f2 52 0c 4d b5 00 a7 86 45 5b e9 88 e4 19 9f a9 8e f1 fc bc 63 c3 9f 1e df 47 47 24 2f 4d 8e 50 6e ef f7 f6 e7 06 45 73 a3 fd fe 68 18 3d c7 c9 f5 4f c2 f1 49 fe 5c 7c 72 34 1b fe c5 80 Data Ascii: RgMYnfQD2aabHr0$bQMmlqtKIb<<O,vzPr.2*jO3t}u\]pe\XMQ."Q;\|rz")PMRME[cGG$/MPnEsh=OI\\|r4
2025-04-22 14:22:05 UTC	16384	IN	Data Raw: 6a a2 29 33 2b 25 81 17 2a 72 1f 4b 88 26 3a 33 95 0e 95 c8 52 ee 3a 12 0a 3e 89 30 a9 71 46 57 17 ad 23 d2 47 7e 60 f3 81 86 4d ac 50 d5 f2 90 ea eb df 41 be dc b1 7f 23 63 de 4d 96 d2 6c 90 2c 98 0f bb 44 a1 23 dd 10 e9 be 15 ae d2 d7 00 e7 b1 37 dd b0 42 aa ce c8 08 ef 10 bc d1 c8 da c8 52 c3 cb 19 af db aa ab 07 59 ae de ce dd 1b 95 ef 3d 3f 6a 5f b1 76 cc a5 8f f1 1d dc 8f 8f 75 42 d7 0f ee 5f e1 fc 30 7e 56 40 f5 12 c8 de 7e e7 95 8b 4b b9 4e 70 1f cc 80 e6 95 a0 72 54 d3 86 e6 cd 13 1e 43 70 71 58 1c da cb 35 ef 31 84 a1 b8 a6 d9 cb cf 61 ee 5e 2c 80 f3 0f cc 0c 71 f9 cf 02 c0 1e 2f 64 c6 c5 d7 e8 f3 eb 66 c7 a2 b1 cc 3c 45 ac d1 d7 83 c5 c1 3c c4 15 21 2d c8 c8 9e 19 14 34 53 e2 3f ee 02 98 1f 0c 4b b1 9d 6a 02 93 5a 74 5c 5b 65 e4 db 80 e6 01 c3 Data Ascii: j)3+%*rK&:3R:>0qFW#G~`MPA#cMl,D#7BRY=?j_vuB_0~V@~KNprTCpqX51a^,q/df<E<!-4S?KjZt\[e
2025-04-22 14:22:05 UTC	6519	IN	Data Raw: e4 c4 03 48 1e bf ea 31 f2 fe 38 48 f5 29 00 bd 8a e3 0d 8a d9 e1 40 97 92 dd 9c 15 0e b5 1b 6f 44 60 77 29 6e 51 16 34 b3 5e 38 d1 f3 ef 50 35 40 32 63 52 d1 27 62 e7 5d 1f e4 86 13 19 f3 d5 b7 b8 ae b0 da a1 8b d1 7c a3 66 17 a4 e4 e8 f0 50 2d 39 23 87 3b d5 08 3b 65 ff 1f 89 99 99 7b 22 11 6f a0 e6 a6 98 12 fe 9d 6e 8d 6a f1 0d 39 de 04 db 4e d0 38 5b ff 83 e8 be 4a 3d 8d e6 68 23 77 85 14 dd 05 06 ce 58 28 e9 35 86 9d b7 eb fe b8 25 8d 99 5b 3c 46 1f 69 30 82 4d 78 a0 33 08 54 5d b3 5b f2 45 04 82 16 91 6b 6f d0 9c a7 63 84 19 35 8b 35 5e 76 ab 50 37 7e 16 2a 6f c5 bf 6d 95 a9 c0 a5 d1 70 a4 a9 f8 72 68 84 8a fb 02 2a 73 aa 42 e4 4f 65 79 51 d8 52 a7 83 27 b5 2b fc 75 40 e0 3b 6e f1 07 c1 17 89 b7 4c 43 06 d5 b2 48 c0 84 92 12 84 f6 42 7e 89 7b 8b ca Data Ascii: H18H)@oD`w)nQ4^8P5@2cR'b]\|fP-9#;;e{"onj9N8[J=h#wX(5%[<Fi0Mx3T][Ekoc55^vP7~omprhsBOeyQR'+u@;nLCHB~{

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:04 UTC	423	OUT	GET /service/get-caps-overrides HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:05 UTC	439	IN	HTTP/1.1 404 Not Found Date: Tue, 22 Apr 2025 14:22:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 180 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U" Vary: Accept-Encoding
2025-04-22 14:22:05 UTC	180	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 3e 53 6f 72 72 79 2c 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0a 3c 70 3e 57 65 20 63 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <title></title></head><body><h1>Error 404</h1><h2>Sorry, page not found.</h2><p>We could not find the page you requested.</p></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:04 UTC	685	OUT	POST /api/ttp/url/get-page-data HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive Content-Length: 161 x-context-route: ttpwp sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://security-uk.m.mimecastprotect.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:04 UTC	161	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 5b 7b 22 63 61 63 68 65 4b 65 79 22 3a 22 49 47 64 4b 64 2d 71 52 64 4d 6a 4a 43 73 4a 56 69 6b 47 4a 46 32 61 66 5a 54 4a 2d 54 78 53 55 44 38 48 33 34 4b 43 4d 64 64 6f 37 37 35 7a 39 44 77 68 52 45 2d 38 49 63 41 53 73 4c 49 57 30 34 4b 73 6a 31 32 53 74 6c 54 41 43 53 31 34 59 5a 38 45 6a 45 5a 67 58 48 50 30 6a 6e 58 37 70 70 78 47 4f 63 51 49 45 45 46 4d 22 2c 22 70 61 67 65 54 79 70 65 22 3a 22 75 73 65 72 5f 63 68 61 6c 6c 65 6e 67 65 22 7d 5d 7d Data Ascii: {"data":[{"cacheKey":"IGdKd-qRdMjJCsJVikGJF2afZTJ-TxSUD8H34KCMddo775z9DwhRE-8IcASsLIW04Ksj12StlTACS14YZ8EjEZgXHP0jnX7ppxGOcQIEEFM","pageType":"user_challenge"}]}
2025-04-22 14:22:05 UTC	511	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:05 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 521 Connection: close cache-control: no-store pragma: no-cache X-Robots-Tag: noindex, nofollow x-mc-req-id: 4ae52067-5236-482b-814e-699b287e3de4 x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"209-uheiQh9NNscw7VBmlC/dNfJE2N8"
2025-04-22 14:22:05 UTC	521	IN	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 64 61 74 61 22 3a 5b 7b 22 70 61 67 65 54 79 70 65 22 3a 22 75 73 65 72 5f 63 68 61 6c 6c 65 6e 67 65 22 2c 22 70 61 67 65 43 6f 6e 74 65 6e 74 22 3a 7b 22 63 75 73 74 6f 6d 22 3a 66 61 6c 73 65 2c 22 74 69 74 6c 65 22 3a 22 44 6f 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 73 61 66 65 3f 22 2c 22 73 75 62 74 69 74 6c 65 22 3a 22 57 65 e2 80 99 76 65 20 72 61 6e 64 6f 6d 6c 79 20 73 65 6c 65 63 74 65 64 20 74 68 69 73 20 6c 69 6e 6b 20 66 6f 72 20 74 72 61 69 6e 69 6e 67 20 70 75 72 70 6f 73 65 73 2e 20 52 65 76 69 65 77 20 74 68 65 20 64 65 74 61 69 6c 73 20 62 65 66 6f 72 65 20 64 65 63 69 64 69 6e 67 20 77 68 65 74 68 65 72 20 69 74 e2 80 99 73 20 73 61 66 Data Ascii: {"meta":{"status":200},"data":[{"pageType":"user_challenge","pageContent":{"custom":false,"title":"Do you think the link is safe?","subtitle":"Weve randomly selected this link for training purposes. Review the details before deciding whether its saf

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:04 UTC	675	OUT	GET /ttpwp/resources/mimecast-icons.bb1a2cd16db9345fc437.woff2?25417273 HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive Origin: https://security-uk.m.mimecastprotect.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://security-uk.m.mimecastprotect.com/ttpwp Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:05 UTC	485	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:05 GMT Content-Type: font/woff2 Content-Length: 37608 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 21 Jan 2025 15:13:30 GMT ETag: W/"92e8-194896d0190"
2025-04-22 14:22:05 UTC	15899	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 92 e8 00 0b 00 00 00 01 2f b0 00 00 92 95 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 56 00 91 4e 0a 84 ad 78 83 b8 53 0b 81 7e 00 01 36 02 24 03 83 78 04 20 05 85 32 07 90 55 1b 43 f3 07 54 27 ca 61 d0 df b9 21 00 c4 2a b7 7b b5 31 b3 11 15 6c 1c 24 1e 0c ec 0b a6 db 7c 10 e8 ad 8a f4 28 18 55 f6 ff ff 3d 41 8d 31 84 a7 0e 50 6b 59 d3 10 4e 14 95 2a 93 14 74 97 2b 50 60 8c d9 4b 70 c9 3a 6e 1e 7f 8b cb a3 da 88 d7 70 1d fb b5 c2 1e 9b 7e 8b e1 b0 a6 fd 93 2e 03 ef a1 2d 2e 87 98 8e 60 3b 44 f9 76 75 cc bd 70 d8 4e 91 74 a6 02 90 10 05 95 5d 75 e3 f6 1b dc 6d 19 19 b8 cf 48 6c 6e b7 de 61 d3 af 78 07 d6 4e d5 67 6c fd 97 1f 27 5b 60 db f0 56 92 9c 4c 7b 8f e7 cd ed 7f 66 ce 39 b7 6c c9 de Data Ascii: wOF2/TVNxS~6$x 2UCT'a!{1l$\|(U=A1PkYNt+P`Kp:np~.-.`;DvupNt]umHlnaxNgl'[`VL{f9l
2025-04-22 14:22:05 UTC	16384	IN	Data Raw: 30 ff 97 55 a3 dd 4a 98 74 fc 1d 83 f0 9e ff fc 77 93 f0 07 4c c4 e3 ba a4 82 18 61 e5 f4 8a e3 d4 f8 ff 6c 4b 8a 92 a2 a0 cc e5 a8 30 d2 08 4c 00 9b 9b 95 da d4 30 64 74 f0 d2 a0 cb 76 ee 3e 11 83 e3 6a ad 5b 0e 85 17 bb 23 bb 40 81 27 f3 97 b7 2c 40 a1 3c f7 32 13 ed f0 02 da 35 87 bd 38 c0 0f 39 3d b4 aa 24 b4 ae c3 56 ec df 36 36 59 5a 77 c4 2d 65 d8 ee bb 1d 03 24 fc a3 73 36 eb 6e 1c 69 dd 7a 75 f5 de e1 6c e8 1a 8a 49 59 09 83 71 90 44 08 46 54 f8 ab 50 28 2f 84 22 a8 40 a4 ab 55 0a db b9 a7 a6 5c 31 13 8d dd fd 30 47 21 e4 f8 52 e2 28 c1 30 18 09 2e 22 18 30 ee 2e 68 13 08 6a 1e 38 77 a9 17 da 19 ad ec 02 1c e2 97 92 f5 ce 4d f6 55 ef 29 de 3d fe 05 7d 95 bf 17 80 30 ad 4b 65 a3 ad ef 83 31 6f 52 df 48 6f 58 d8 f1 bc 80 7e 75 3f 93 17 c7 c5 f1 71 Data Ascii: 0UJtwLalK0L0dtv>j[#@',@<2589=$V66YZw-e$s6nizulIYqDFTP(/"@U\10G!R(0."0.hj8wMU)=}0Ke1oRHoX~u?q
2025-04-22 14:22:05 UTC	5325	IN	Data Raw: 05 e0 1d 01 df a5 f3 b4 96 e6 75 df 45 19 80 a8 d0 ad ff 46 55 eb 3f b6 9e d6 a6 66 06 05 dd 07 11 f4 9f 2f da 16 52 b3 0b af 46 23 d1 d4 20 51 c1 85 31 3b d4 26 f3 c8 bb 09 79 39 76 76 e6 a9 24 e7 46 43 53 55 07 39 68 b4 be 94 95 d7 d1 ca e9 cd ac 1e ff c5 a4 7d 51 a9 8a 13 7f 34 74 c9 ba 12 ba 14 aa ae 33 6a 18 5e c9 4d 1f eb db 36 f1 b5 b1 03 34 1c 93 31 66 aa 3b 36 e9 27 87 2b 2b 0e 85 7f 6e f1 2d 59 b5 49 d7 26 d1 d6 dc 00 39 70 ed 30 bb 9b 61 c9 3c 28 6a a0 25 a0 6a 67 d0 27 f8 98 ab 5b 86 cb 52 e3 e8 92 ec 68 7f 34 6a 30 34 c9 69 95 22 3e 1d eb 2f b9 0d b8 8b 2f 25 4a 7e 40 35 b8 c8 9b d1 d4 cf 3f 15 7c a8 f1 40 b6 e7 aa 3a 3d 3c d9 9a e4 10 90 c2 c7 23 54 58 ab 29 51 93 7b c8 a0 b5 e0 1c ed 7f da 53 da 24 8d 90 c6 4c 7b cc 94 b0 d3 a7 e7 9f e6 8c Data Ascii: uEFU?f/RF# Q1;&y9vv$FCSU9h}Q4t3j^M641f;6'++n-YI&9p0a<(j%jg'[Rh4j04i">//%J~@5?\|@:=<#TX)Q{S$L{

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://url.uk.m.mimecastprotect.com/s/92k3C66qlfr1n3oipf6c5OlXL?domain=oq.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Windows Analysis Report
https://url.uk.m.mimecastprotect.com/s/92k3C66qlfr1n3oipf6c5OlXL?domain=oq.com

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:06 UTC	599	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:06 UTC	508	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:06 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 21 Jan 2025 15:13:31 GMT ETag: W/"47e-194896d0578" Vary: Accept-Encoding
2025-04-22 14:22:06 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:06 UTC	422	OUT	GET /api/ttp/url/get-page-data HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:06 UTC	439	IN	HTTP/1.1 404 Not Found Date: Tue, 22 Apr 2025 14:22:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 180 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U" Vary: Accept-Encoding
2025-04-22 14:22:06 UTC	180	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 3e 53 6f 72 72 79 2c 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0a 3c 70 3e 57 65 20 63 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <title></title></head><body><h1>Error 404</h1><h2>Sorry, page not found.</h2><p>We could not find the page you requested.</p></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:07 UTC	431	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:07 UTC	508	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:07 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 21 Jan 2025 15:13:31 GMT ETag: W/"47e-194896d0578" Vary: Accept-Encoding
2025-04-22 14:22:07 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:18 UTC	698	OUT	POST /api/ttp/userawareness/report-judgement HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive Content-Length: 151 x-context-route: ttpwp sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://security-uk.m.mimecastprotect.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:18 UTC	151	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 5b 7b 22 63 61 63 68 65 4b 65 79 22 3a 22 49 47 64 4b 64 2d 71 52 64 4d 6a 4a 43 73 4a 56 69 6b 47 4a 46 32 61 66 5a 54 4a 2d 54 78 53 55 44 38 48 33 34 4b 43 4d 64 64 6f 37 37 35 7a 39 44 77 68 52 45 2d 38 49 63 41 53 73 4c 49 57 30 34 4b 73 6a 31 32 53 74 6c 54 41 43 53 31 34 59 5a 38 45 6a 45 5a 67 58 48 50 30 6a 6e 58 37 70 70 78 47 4f 63 51 49 45 45 46 4d 22 2c 22 6a 75 64 67 65 64 53 61 66 65 22 3a 74 72 75 65 7d 5d 7d Data Ascii: {"data":[{"cacheKey":"IGdKd-qRdMjJCsJVikGJF2afZTJ-TxSUD8H34KCMddo775z9DwhRE-8IcASsLIW04Ksj12StlTACS14YZ8EjEZgXHP0jnX7ppxGOcQIEEFM","judgedSafe":true}]}
2025-04-22 14:22:18 UTC	514	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:18 GMT Content-Type: application/json; charset=utf-8 Content-Length: 10289 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload cache-control: no-store pragma: no-cache X-Robots-Tag: noindex, nofollow x-mc-req-id: a6befa02-bd38-44d0-84ae-cdac31814194 x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer ETag: W/"2831-Coc9H8746ak31QOIPQAWq/AJkck"
2025-04-22 14:22:18 UTC	10289	IN	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 64 61 74 61 22 3a 5b 7b 22 70 61 67 65 54 79 70 65 22 3a 22 73 61 66 65 5f 6a 75 64 67 65 64 5f 73 61 66 65 22 2c 22 70 61 67 65 43 6f 6e 74 65 6e 74 22 3a 7b 22 63 75 73 74 6f 6d 22 3a 66 61 6c 73 65 2c 22 74 69 74 6c 65 22 3a 22 57 65 6c 6c 20 64 6f 6e 65 2c 20 74 68 69 73 20 6c 69 6e 6b 20 69 73 20 73 61 66 65 22 2c 22 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 20 63 61 6e 20 63 6f 6e 74 69 6e 75 65 20 74 6f 20 74 68 65 20 70 61 67 65 2e 22 7d 2c 22 73 61 66 65 74 79 54 69 70 73 22 3a 5b 7b 22 69 63 6f 6e 22 3a 22 6d 63 2d 69 63 6f 6e 2d 70 61 6e 69 63 22 2c 22 74 69 74 6c 65 22 3a 22 49 6d 70 65 72 73 6f 6e 61 74 69 6f 6e 20 70 68 69 73 68 69 6e 67 22 2c 22 6f 70 65 6e 69 6e 67 53 Data Ascii: {"meta":{"status":200},"data":[{"pageType":"safe_judged_safe","pageContent":{"custom":false,"title":"Well done, this link is safe","subtitle":"You can continue to the page."},"safetyTips":[{"icon":"mc-icon-panic","title":"Impersonation phishing","openingS

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:19 UTC	435	OUT	GET /api/ttp/userawareness/report-judgement HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:19 UTC	439	IN	HTTP/1.1 404 Not Found Date: Tue, 22 Apr 2025 14:22:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 180 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"b4-Rx6/Sa3RjWBf0k8YjdRg8WXd70U" Vary: Accept-Encoding
2025-04-22 14:22:19 UTC	180	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 3e 53 6f 72 72 79 2c 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0a 3c 70 3e 57 65 20 63 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head> <title></title></head><body><h1>Error 404</h1><h2>Sorry, page not found.</h2><p>We could not find the page you requested.</p></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:19 UTC	666	OUT	GET /ttpwp/resources/fa-regular-400.33904a1b964c9b363ce7.woff2 HTTP/1.1 Host: security-uk.m.mimecastprotect.com Connection: keep-alive Origin: https://security-uk.m.mimecastprotect.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://security-uk.m.mimecastprotect.com/ttpwp Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:20 UTC	487	IN	HTTP/1.1 200 OK Date: Tue, 22 Apr 2025 14:22:19 GMT Content-Type: font/woff2 Content-Length: 168824 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Tue, 21 Jan 2025 15:13:30 GMT ETag: W/"29378-194896d0190"
2025-04-22 14:22:20 UTC	15897	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 93 78 00 0d 00 00 00 06 dd 8c 00 02 93 1c 01 4b 86 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 91 16 11 08 0a 98 e7 74 93 d8 4a 01 36 02 24 03 b9 7c 0b ba 00 00 04 20 05 8a 46 07 81 bf 3d 5b fa 77 95 43 e1 ed 6f 18 94 72 4e 06 c4 81 f7 f6 4c f5 a3 b5 15 6c 9b 85 b7 ce b1 cd c4 c0 1f 54 89 a5 7f 82 b9 a9 d4 a2 ce dd 0e c6 ff 70 57 39 d9 ff ff ff ff ff c2 64 22 ea d2 c9 f1 49 4e e4 41 80 96 51 68 cb 2e 3c fd 0d 24 d0 dc 14 b2 c8 bc c4 02 e1 b5 49 85 d6 65 c1 4e 93 b0 2e 65 50 e3 05 ac 40 b9 bc 40 5e 35 cd 4c 25 55 52 a8 cc 26 ed 7a 23 5b 29 72 23 b7 d2 ef 5a c2 80 7b 7d 68 1b d6 3b d9 c6 2d ec a6 ab 89 0f f2 a8 f6 de fb ba 0e 88 ec f6 70 79 40 9a d2 4d 82 d9 b9 ba f6 6c f7 78 Data Ascii: wOF2xK$?FFTM`tJ6$\| F=[wCorNLlTpW9d"INAQh.<$IeN.eP@@^5L%UR&z#[)r#Z{}h;-py@Mlx
2025-04-22 14:22:20 UTC	16384	IN	Data Raw: 73 51 27 5b e9 30 69 02 31 6e b1 0f bd 92 be 02 f9 4d 5e ad f4 42 06 48 0e 08 70 26 8c 24 1e 70 44 fd 91 89 65 5a c7 77 32 c6 0e 11 27 65 ca 0c 0a 85 b0 95 51 d8 e6 cd b5 09 53 8f 32 f1 d1 5d 5d 5f 2f f2 4c 3f 17 9e fb 85 bc 53 0e 62 88 d1 1a fb b0 db 42 b8 34 f1 72 de f8 91 c9 46 08 08 14 f6 5f 12 5d ec 49 75 ad 34 ab 39 ad 59 8a ea 4b a3 fe 65 55 b1 19 11 b6 d5 35 c5 e9 37 64 df bd c6 e7 f4 7d 2f db 16 f0 3a 93 0c a8 6c c3 f0 f2 58 f4 51 a0 9e 70 b5 34 0a 46 31 26 34 c6 25 8f 4c 95 d3 a8 60 75 2b d7 39 f3 0d 8d 46 39 d6 02 14 ca 64 09 94 66 77 f7 95 cd 67 b1 68 07 01 a3 75 c2 b1 3a 21 1d 72 fc 9b cb ae c1 3b f9 42 ad 44 0f b6 93 b5 ed e1 a3 0a cb 79 0a 37 ee 27 50 d3 e7 33 8c 76 c5 b6 d5 2f ed 19 48 89 f6 3b 19 c6 83 25 22 c1 e6 e9 42 75 cd ce 0b fe 5a Data Ascii: sQ'[0i1nM^BHp&$pDeZw2'eQS2]]_/L?SbB4rF_]Iu49YKeU57d}/:lXQp4F1&4%L`u+9F9dfwghu:!r;BDy7'P3v/H;%"BuZ
2025-04-22 14:22:20 UTC	16384	IN	Data Raw: aa 26 55 5b 32 f5 29 c1 af 51 48 4d 58 84 4e 6a 87 c0 a4 ce 07 e2 18 0a 66 36 69 6d 8b cc db 86 5b be c6 8b ad 8e 6c 14 f1 a1 08 ec 1e aa 54 0b 19 7d cd de 53 36 4e bb 47 cb 12 02 8f 99 70 9a 81 85 75 70 85 20 e3 c8 49 33 3c ba 4c dd 2c b4 91 84 fd 39 dd 20 69 5e 45 96 6b 57 16 66 46 c0 96 0c 19 d8 7d 94 9d 18 fb dc a8 d7 61 81 a8 86 f7 09 d8 64 61 c2 de 41 c0 ef d2 40 39 30 8a d7 9b 6c ed f0 4d 1e 7b a6 94 88 48 80 4d 7d fd 3f ff 9f 64 51 6e 13 ef cb d4 4c db dc 2a a5 b6 b8 e3 91 3a 4f 71 08 0d 78 31 a2 93 9e 1f 7b b7 29 cb d9 3e 5e 18 53 45 e5 f9 a2 75 08 e2 dd 1a 16 46 7d 00 5d 7e 9b d9 1c 1c f6 b9 29 a6 25 a7 63 cc 27 43 c3 b5 94 d0 25 55 84 3e b1 e2 e5 6c 75 d7 3d 57 79 bb 0a 16 6f 89 9b 85 61 b3 be ab 87 c9 30 90 c9 ab ac a3 fc ee c0 5e 6f ae d2 8b Data Ascii: &U[2)QHMXNjf6im[lT}S6NGpup I3<L,9 i^EkWfF}adaA@90lM{HM}?dQnL*:Oqx1{)>^SEuF}]~)%c'C%U>lu=Wyoa0^o
2025-04-22 14:22:20 UTC	16384	IN	Data Raw: 2b cd 01 63 c6 d7 ee 8c 5c 5c 7c 26 ab 83 db 63 34 58 45 be 4c df ac a9 0c 88 3d a0 ca e9 90 23 b0 55 a0 9e e0 c2 7a 8b b3 15 c9 5c 03 92 fb d3 cc 08 a2 00 22 2a ba be 1b 2d 89 f7 c2 d2 f6 f1 82 76 3b 72 20 75 84 30 30 80 d8 a8 68 1f 05 16 c0 37 fa 33 68 c0 12 fe 29 ae 41 ce 77 6b b5 c1 28 3b d8 33 d5 a6 fd 58 c3 7c b3 1c fe 58 98 4a bf 6d dc 71 53 31 b8 d0 75 99 f1 e6 9e bf 9a 6f 64 08 ba ff cb d5 b9 4b 38 64 d8 f9 0d 0e c2 9e 63 ae 2a 6d da 7c 65 e7 01 3a 0f f6 ea 55 24 48 cf 20 3e c7 e9 54 73 e4 bd a3 cb a6 a9 43 67 d6 d1 50 ee 16 9a 6a d3 29 9a 91 98 97 a5 d7 32 5e 66 d1 eb e6 84 b0 7b 2d 8b 6c ab dc ac 00 21 16 ed ac 90 a2 e0 11 21 be 03 30 2c 15 93 f0 15 55 6b 71 91 65 c2 1f 0d 86 9d 0f b3 b8 10 4b 30 1f 94 08 03 bc b6 b0 3a a3 94 6c d6 ef 27 0d 11 Data Ascii: +c\\\|&c4XEL=#Uz\"-v;r u00h73h)Awk(;3X\|XJmqS1uodK8dcm\|e:U$H >TsCgPj)2^f{-l!!0,UkqeK0:l'
2025-04-22 14:22:20 UTC	16384	IN	Data Raw: 64 e1 03 8f 2c aa 70 1f 8a dc c1 ba 20 ba 34 2b 6d 76 74 bb 36 02 14 6d 80 3d a9 43 76 dc 21 d2 c5 8a 43 46 1f 66 ed 14 39 75 4f e7 8e 07 8c 02 cf 8f b2 fd d6 6c 7e a0 b2 d9 7b 2c 5e 18 7f b5 ae ea 51 a0 c4 15 83 c6 2a 72 32 94 8e 40 82 d6 59 4f 88 8c c2 01 85 14 e7 22 d7 d9 84 cb 9d 21 79 71 5e 98 d8 bd 52 3f 17 c2 bd f0 96 38 c9 12 76 85 05 28 dc cf 6e bd 0c 02 81 ce 32 41 48 9f 29 30 56 f9 02 00 bd d3 53 c4 81 09 0e 7a ae 66 be 96 44 b2 d0 8f 67 89 50 98 27 87 60 3d 40 38 6a 08 40 e9 37 d0 92 18 05 32 bd c4 a9 59 9f bc 96 b6 33 4d 48 c1 58 2d c6 db 3b 6e 64 7f 0b 00 90 30 e0 1d e3 ab 03 3d fa 23 47 2c 82 b2 75 eb ca 3a e7 f3 2c 02 d2 08 a9 53 53 57 a7 11 3c 00 64 5a 0f 4b ac f9 69 f1 a1 ef 9b e4 01 6e 49 3b 12 26 39 b9 ce 75 f2 79 86 a0 fe bb b4 b4 dd Data Ascii: d,p 4+mvt6m=Cv!CFf9uOl~{,^Q*r2@YO"!yq^R?8v(n2AH)0VSzfDgP'`=@8j@72Y3MHX-;nd0=#G,u:,SSW<dZKinI;&9uy
2025-04-22 14:22:20 UTC	16384	IN	Data Raw: 5e c1 80 db 34 f2 a1 de 7f 6d a4 17 dd de 4e df 4e a4 4f 8e 48 68 6c cc 2c 1f 37 39 4e ca 4d 44 af 4a 71 d2 32 46 00 cb b5 0e 37 01 f6 e2 f6 ed bb f7 f9 a3 5c 1b 29 cb 62 59 da 6a 17 cd 07 95 65 24 bb 86 9b 52 9b a6 8e eb f6 0a e6 05 ea 9d 20 36 9f 54 74 e5 eb 91 05 c8 d0 de b8 27 95 dd 19 ee 0c f6 99 ed eb f0 ed f4 7e 30 97 eb 8d d6 ff b5 d9 a8 65 16 67 0a 99 62 27 be 24 fa 63 1e 5f 0c 07 ff fc aa 56 f7 7c 19 12 5e b8 cf 08 f6 0e a7 ae f2 f1 21 72 e8 aa f4 59 c4 71 fc a1 9b b8 94 aa 24 dc 22 63 42 96 a7 e0 2d 98 ec 49 5b 3d 01 2d bc a8 99 cf f5 e5 8a 5d 33 cf 6d 94 6b 37 6b 01 d7 1f 64 3c 4e 81 e8 e3 b3 8a 1a ee 1d cc b8 7f 5c d8 f7 a5 0f d1 27 73 3e 94 25 db 85 92 7b 49 c4 e0 4d f7 b0 2c 43 55 d8 fe df 52 b4 de 97 b3 c4 0b 97 e3 26 7e 08 3f 4e 3c 6a df Data Ascii: ^4mNNOHhl,79NMDJq2F7\)bYje$R 6Tt'~0egb'$c_V\|^!rYq$"cB-I[=-]3mk7kd<N\'s>%{IM,CUR&~?N<j
2025-04-22 14:22:20 UTC	16384	IN	Data Raw: fa e1 0c 1f c7 5d c5 48 50 e7 80 cd 6c 33 24 8e e9 58 60 c3 72 f2 c4 67 3d 47 c4 fe ec 4f d5 f4 a8 bf 59 3e 11 fb 78 66 2d fe 4e 12 c3 ea 59 7c f6 4f 54 ac 9e f0 6e d3 9b 20 41 7d 8c d8 13 c2 23 b2 03 e8 f4 37 e9 79 8b c1 09 a7 ad ef 00 f3 14 11 3d 09 c1 93 b2 9e 01 f5 82 a0 f7 9b 5e 12 38 f9 1b 55 99 ab 54 a3 fe 76 0c 67 93 f9 8f fe f9 ca 14 a3 20 c7 66 56 23 7a 31 32 07 ad a3 44 88 de 08 52 24 a4 5c ba 94 a0 3a 8a 5c 74 c2 56 e1 14 d6 8e 11 6a ad 2b 3e 9a 37 85 af c2 24 d5 6b a2 e4 89 43 b7 f0 f6 7b 43 99 c1 e8 38 6b ea 0a ac 94 2b b1 c0 d3 cc 3c e0 d2 f3 d1 e3 37 d6 36 fd 94 63 aa f0 7b e8 9e 87 8f de 80 b0 8d e4 82 cc af 93 69 50 2b ec 12 fe 22 8b 0a c5 46 21 32 9f 39 b2 6b 26 0f dd 8b 94 3f 1e c5 25 3f e5 66 9d a3 a4 1f 49 c1 7e ef 6b 4b ef 16 2a 26 Data Ascii: ]HPl3$X`rg=GOY>xf-NY\|OTn A}#7y=^8UTvg fV#z12DR$\:\tVj+>7$kC{C8k+<76c{iP+"F!29k&?%?fI~kK*&
2025-04-22 14:22:20 UTC	16384	IN	Data Raw: 19 e9 e3 26 8a 7f 7f 92 d7 37 c2 eb 21 bf fa 7d 74 a8 6c 52 95 92 db 37 22 48 84 4f 67 76 bb 67 21 c5 b8 8e 6a 47 8a a0 07 60 ea e6 30 1e 7f ae 7a 98 80 4f 47 dd c1 a8 41 4c 90 70 9f c3 9f 0c 4e 41 45 89 e1 9f fe 1f 2f fe 43 0b a8 bb df 44 45 a9 d5 51 11 e9 29 5c 0e 97 54 84 a2 bb f9 3d 73 49 ee 6d 6f b7 77 e1 0a 14 8e 41 21 bf 45 3e 50 7a 36 93 7c fd 25 81 ce 16 64 d6 fb fb 92 3a 97 f8 a0 3f 38 2f 4c 83 2c 10 78 db 2d ec dd d4 e3 69 35 2f c5 32 21 b7 17 c0 9d ee 7b 8c 93 11 8f b5 f7 c9 b4 c2 00 24 bf 1a 5a e5 74 a9 37 e3 39 7b 9f 9e 60 ef a9 ab eb b5 e0 9b 86 8f ad 4c da 2d 52 a0 4f 3f d6 a5 a2 c2 01 f3 b8 3b e6 b5 d6 d2 d2 fe 2b 28 23 0b 9d b7 28 94 05 50 59 66 cc 93 f9 4f fa ae 76 2a 5c bb 6a 41 18 11 02 64 41 19 7c ef d4 5a 2c 58 46 e4 d5 25 f5 c8 bd Data Ascii: &7!}tlR7"HOgvg!jG`0zOGALpNAE/CDEQ)\T=sImowA!E>Pz6\|%d:?8/L,x-i5/2!{$Zt79{`L-RO?;+(#(PYfOv*\jAdA\|Z,XF%
2025-04-22 14:22:20 UTC	16384	IN	Data Raw: 7d ff 90 8d 38 dc 2b ee 57 46 80 3f 2d 37 0b 74 9d 15 0d 29 94 00 f2 a2 ef f1 52 57 0e 02 8b ec 0c aa aa 80 1e 89 dc 1f 25 39 17 5b dc d4 3f 94 8b 30 b7 c9 d1 e4 bc 2f 54 b7 84 90 bd 6e ae 04 17 8f 74 b6 9b 5b 42 63 33 01 7d 9c 1b 81 bf 88 e5 cd 14 ee 14 8f af 11 bd c6 c5 99 7b 88 c5 89 0c 81 34 86 76 82 8c 50 a2 c8 20 84 30 e8 de 35 4c 40 e3 58 3d 76 96 88 d3 8f e2 85 72 3e ae c2 e2 3a 1a 22 60 c6 31 43 46 54 7e ea 24 72 fa bd 44 50 ad dc c8 6c 54 b6 5c 61 f5 24 80 4b b1 88 bd 36 b0 bd 4e 20 4c f3 45 9b de a7 84 6f 20 c8 9a 2b 6b 72 10 7b 8d 95 2e de 22 30 2c 4b da 7a 72 84 83 7a f1 cd a0 24 12 18 96 fc d5 83 2e 3b 73 00 0c 5d 3e dc 87 f9 e6 4b 8b 60 e0 6d d9 19 e2 62 b7 40 3e 52 59 b3 23 fa 9e 8e b7 a6 a4 1f 35 bf 2d 87 4b b6 fe 90 b0 8c 27 2b c3 21 86 Data Ascii: }8+WF?-7t)RW%9[?0/Tnt[Bc3}{4vP 05L@X=vr>:"`1CFT~$rDPlT\a$K6N LEo +kr{."0,Kzrz$.;s]>K`mb@>RY#5-K'+!
2025-04-22 14:22:20 UTC	16384	IN	Data Raw: 8a 6f ff 57 1b 14 4e 78 8e 15 13 ad 49 ea 24 96 5e 84 27 a7 6b 3c b5 f2 4f 73 e0 1e 2f 67 66 bb 84 68 cf b5 87 ef 73 55 6d 03 d7 1a 45 c3 01 cd 3d 2d 09 bc f9 62 d6 33 4f fe 36 59 9a 8a 6f e8 2c de 67 4c 78 10 75 87 85 83 a9 e9 67 12 16 fd 9b a2 c9 fb 8d 9c 34 4e e3 7d c2 da d9 f9 f0 96 c6 3f c8 69 c4 3f aa 1b e1 ba fe bd 80 ab de b9 dd 4e 66 6d e9 e6 1e ce 8c 3d 19 b7 90 9c 46 06 71 25 02 f1 7b c9 c3 59 71 22 3d a7 f3 f0 b2 32 2b bf 71 37 fb fd ee df 14 4f 6b d6 dc 54 a7 d1 e9 c5 82 c9 a9 e9 fa 82 3a 35 f0 0e ac 01 eb c0 8d 0f 11 44 07 4e d0 8c 51 4a 34 a1 92 a8 be 15 dc 37 e3 8d 50 b8 2f e0 db aa 62 c8 d9 9e d6 61 27 33 6f ae a3 e3 b0 26 2a 6c ed 40 0e 67 5f 07 c3 7b d6 97 3d 00 ca 77 77 13 f6 8d 98 2b d2 49 7c 05 d2 fb e1 60 4e 6e fd 33 5f 97 c7 31 f9 Data Ascii: oWNxI$^'k<Os/gfhsUmE=-b3O6Yo,gLxug4N}?i?Nfm=Fq%{Yq"=2+q7OkT:5DNQJ47P/ba'3o&*l@g_{=ww+I\|`Nn3_1

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:29 UTC	5464	OUT	GET /r/j3PTyMQc1Q04VpU9d3AKHHmHj7sype6NYAxqusnf7sjvs8AQXNxLaNFxB4DdHBYzkDYNfOXNthVKyIba8ftnPneLhAII5imnWzp1wxqG6L2NMr9QSeHfp7wJ2w7u4FtDHZfM-OST6IhCiL1zm6D7Lp7pld_IOLESedYwoKP9r0706CGpLRFGjDoyXPDc_Ag48JgYVE_fj89rjtGXBUxAbK48WHWDzYFYQTr5o1BgKVqUixO8XvNhpxoCvU6NvLwki_XEbB-xaENmjHybzvjzw_NBBYjV8Kdi7IkKoyfjz_VMPwP08J4Fp-x6lzlTgDSIhH3BLgABs0zT4iik9MdU9DJod8RDUNF2UEdvAz_gqYYjkHQ7PqTOl2ehtekhmtc7IRmx8kmep9yAZu-MCzLZ2TiZSnyEkQp2Vm6BMxxIRhZEIeU35GrBx2UwdfmGXwpfwKoIo-q_jCtgzn54etdYe5KZqhGb_bemf8QMov9jiGfg_E3FuCdCrZbBjPs-v0cw_YJwlfD49nXknNIAMIWQCyhjYnp8NC96ZUJw6lZrG9D0X8n4KntIhwW7rYe_rSP5Rw_-CTOVctOc5bxv4wGB_rfJTKyhUxGkdttuXH5Q_br-7aS5Y4D5UOBTWMc433AyqMN1_RJrPNfhn3FS2NF_iRODLQgU58SmiSS1JjlTMktLDNuaxuttzr2yYJ8WPt8a1KO71gv_GSSaVrlqLvkQR8cxL5nlqhAERdfe_TfB81_qU2t8mwxz7Qj6w2xlRkU5OXHPYxfVoSnIjQMyRXIMUB1uHb8O4gXerHCL6VNvhDvQSDUDW_7kIqZbhomb6vTsac5lQ5uFpW1Xj6HIa21zwukGv9Kvx-bGrBFsa5jerX6od6D9y66ZOAneRnp8SgU7w28zlj5SR2Zhy1nDyA1n_W6vl02j1q17hr4wp2fOSDBpOSbJkRI6f5vwnUmwtxEkimp8cuygt0EgN3bfwtZ8VdamFjIyX2OPcWHfbQZR8lmCSI0ONcRWZBt26 [TRUNCATED] Host: url.uk.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:30 UTC	288	IN	HTTP/1.1 307 Temporary Redirect Date: Tue, 22 Apr 2025 14:22:30 GMT Content-Length: 0 Connection: close Location: https://oq.com/en Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:31 UTC	664	OUT	GET /en HTTP/1.1 Host: oq.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:32 UTC	923	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Set-Cookie: oq#lang=en; path=/; secure Set-Cookie: shell#lang=en; path=/; secure Set-Cookie: ASP.NET_SessionId=aaxogalxyx3lqkcwp5rfyxp1; path=/; secure; HttpOnly; SameSite=Lax Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=5e70f1e3791f483ab9b4eaf8b337e4e0\|False; expires=Fri, 20-Apr-2035 14:22:31 GMT; path=/; secure; HttpOnly X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Tue, 22 Apr 2025 14:22:31 GMT Connection: close Content-Length: 81126 Set-Cookie: TS01e0cee9=0176664667876a67c2fd777ec73527e6cf97b061b762f7d8539f9e92424e8ea086542d868c081601dee2334e16c6518069e7223f9958f18fa2b2c58b6052a379e338dc1423773100dd5e8097b4ff8331e2e0c84da4035becc512613bf452425a98cf36c370c49a3047d5830d077020dfcf33e3b065; Path=/;
2025-04-22 14:22:32 UTC	15461	IN	Data Raw: 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 0d 0a 20 20 20 20 20 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 0d 0a 20 20 20 20 20 20 20 20 64 69 72 3d 22 6c 74 72 22 20 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 Data Ascii: <!DOCTYPE html><html lang="en" prefix="og: https://ogp.me/ns#" dir="ltr" ><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, init
2025-04-22 14:22:32 UTC	16384	IN	Data Raw: 20 74 61 62 69 6e 64 65 78 3d 22 30 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 2f 65 6e 2f 6f 75 72 2d 62 75 73 69 6e 65 73 73 2f 6f 75 72 2d 70 6f 72 74 66 6f 6c 69 6f 22 20 74 61 72 67 65 74 3d 22 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 67 61 63 6c 69 63 6b 2d 65 63 3d 22 22 20 64 61 74 61 2d 67 61 63 6c 69 63 6b 2d 65 61 3d 22 22 20 64 61 74 61 2d 67 61 63 6c 69 63 6b 2d 65 6c 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4f 75 72 20 50 6f 72 74 66 6f 6c 69 6f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e Data Ascii: tabindex="0" href="/en/our-business/our-portfolio" target="" data-gaclick-ec="" data-gaclick-ea="" data-gaclick-el=""> Our Portfolio </a> </li>
2025-04-22 14:22:32 UTC	241	IN	Data Raw: 71 2f 69 6d 61 67 65 73 2f 68 6f 6d 65 2f 69 6e 6e 6f 76 61 74 69 6f 6e 2d 2d 2d 68 6f 6d 65 2d 68 65 72 6f 2d 31 39 32 30 78 31 31 33 33 2e 6a 70 67 3f 6d 68 3d 38 39 32 26 61 6d 70 3b 72 65 76 3d 31 64 37 33 65 39 34 37 62 64 34 61 34 62 34 37 62 66 35 34 36 62 31 36 37 34 31 34 35 37 63 61 26 61 6d 70 3b 63 72 6f 70 3d 63 72 6f 70 26 61 6d 70 3b 63 72 6f 70 77 3d 37 35 37 26 61 6d 70 3b 63 72 6f 70 68 3d 30 26 61 6d 70 3b 68 61 73 68 3d 33 45 37 34 37 44 37 42 34 31 42 31 38 34 44 35 37 37 36 41 45 31 35 41 33 36 35 42 31 35 36 37 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6f 71 Data Ascii: q/images/home/innovation---home-hero-1920x1133.jpg?mh=892&rev=1d73e947bd4a4b47bf546b16741457ca&crop=crop&cropw=757&croph=0&hash=3E747D7B41B184D5776AE15A365B1567"> <img src="https://assets.oq
2025-04-22 14:22:32 UTC	16384	IN	Data Raw: 2e 63 6f 6d 2f 2d 2f 6d 65 64 69 61 2f 6f 71 2f 69 6d 61 67 65 73 2f 68 6f 6d 65 2f 69 6e 6e 6f 76 61 74 69 6f 6e 2d 2d 2d 68 6f 6d 65 2d 68 65 72 6f 2d 31 39 32 30 78 31 31 33 33 2e 6a 70 67 3f 6d 68 3d 38 39 32 26 61 6d 70 3b 6d 77 3d 31 39 30 30 26 61 6d 70 3b 72 65 76 3d 31 64 37 33 65 39 34 37 62 64 34 61 34 62 34 37 62 66 35 34 36 62 31 36 37 34 31 34 35 37 63 61 26 61 6d 70 3b 68 61 73 68 3d 34 30 45 32 30 37 35 30 39 36 30 42 46 43 44 31 39 36 31 41 32 39 37 46 31 41 39 34 45 43 36 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 69 63 74 75 72 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: .com/-/media/oq/images/home/innovation---home-hero-1920x1133.jpg?mh=892&mw=1900&rev=1d73e947bd4a4b47bf546b16741457ca&hash=40E20750960BFCD1961A297F1A94EC60" /> </picture> </div>
2025-04-22 14:22:32 UTC	16384	IN	Data Raw: 35 38 34 78 37 38 30 2e 6a 70 67 3f 6d 68 3d 37 38 30 26 61 6d 70 3b 6d 77 3d 35 38 34 26 61 6d 70 3b 72 65 76 3d 30 36 39 32 63 33 31 63 37 33 66 38 34 34 34 33 62 62 62 61 34 31 39 34 61 39 37 63 33 34 39 66 26 61 6d 70 3b 68 61 73 68 3d 45 44 36 43 42 41 39 44 35 33 39 31 34 38 30 41 44 36 43 46 34 35 35 30 43 36 37 34 45 37 35 33 27 29 22 20 20 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 6c 65 73 63 72 6f 6c 6c 65 72 5f 5f 6c 69 73 74 5f 5f 69 74 65 6d 5f 5f 74 69 74 6c 65 22 3e 53 75 73 74 61 69 6e 61 62 6c 79 20 45 66 66 69 63 69 65 6e 74 20 69 6e 20 45 78 70 6c 6f 72 61 74 69 6f 6e 20 61 6e 64 20 50 72 6f 64 75 63 74 69 6f 6e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 Data Ascii: 584x780.jpg?mh=780&mw=584&rev=0692c31c73f84443bbba4194a97c349f&hash=ED6CBA9D5391480AD6CF4550C674E753')" > <div class="tilescroller__list__item__title">Sustainably Efficient in Exploration and Production</div>
2025-04-22 14:22:32 UTC	16272	IN	Data Raw: 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 2f 65 6e 2f 61 62 6f 75 74 2d 75 73 2f 61 77 61 72 64 73 2d 61 6e 64 2d 72 65 63 6f 67 6e 69 74 69 6f 6e 22 20 74 61 72 67 65 74 3d 22 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 67 61 63 6c 69 63 6b 2d 65 63 3d 22 22 20 64 61 74 61 2d 67 61 63 6c 69 63 6b 2d 65 61 3d 22 22 20 64 61 74 61 2d 67 61 63 6c 69 63 6b 2d 65 6c 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 41 77 61 72 64 73 20 61 6e 64 20 52 65 63 6f 67 6e 69 74 69 6f 6e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0d 0a Data Ascii: href="/en/about-us/awards-and-recognition" target="" data-gaclick-ec="" data-gaclick-ea="" data-gaclick-el=""> Awards and Recognition </a> </li> </ul>

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:32 UTC	571	OUT	GET /ciq7kwj.css HTTP/1.1 Host: use.typekit.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://oq.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-22 14:22:33 UTC	426	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; Cache-Control: private, max-age=600, stale-while-revalidate=604800 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 22 Apr 2025 14:22:33 GMT Content-Length: 4039 Connection: close Akamai-GRN: 0.9ccfdb17.1745331753.54133fa
2025-04-22 14:22:33 UTC	4039	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 65 20 54 79 70 65 6b 69 74 20 73 65 72 76 69 63 65 20 75 73 65 64 20 74 6f 20 64 65 6c 69 76 65 72 20 74 68 69 73 20 66 6f 6e 74 20 6f 72 20 66 6f 6e 74 73 20 66 6f 72 20 75 73 65 20 6f 6e 20 77 65 62 73 69 74 65 73 0a 20 2a 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 41 64 6f 62 65 20 61 6e 64 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 73 65 20 54 65 72 6d 73 20 6f 66 20 55 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 65 75 6c 61 73 2f 74 6f 75 5f 74 79 70 65 6b 69 74 2e 20 46 6f 72 20 66 6f 6e 74 20 6c 69 63 65 6e 73 65 0a 20 2a 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 74 68 65 20 6c 69 73 74 20 62 65 6c 6f 77 2e 0a 20 2a 0a 20 2a 20 61 6b Data Ascii: /* * The Typekit service used to deliver this font or fonts for use on websites * is provided by Adobe and is subject to these Terms of Use * http://www.adobe.com/products/eulas/tou_typekit. For font license * information, see the list below. * * ak

Timestamp	Bytes transferred	Direction	Data
2025-04-22 14:22:33 UTC	938	OUT	GET /layouts/system/VisitorIdentification.js HTTP/1.1 Host: oq.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oq.com/en Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: oq#lang=en; shell#lang=en; ASP.NET_SessionId=aaxogalxyx3lqkcwp5rfyxp1; SC_ANALYTICS_GLOBAL_COOKIE=5e70f1e3791f483ab9b4eaf8b337e4e0\|False; TS01e0cee9=0176664667876a67c2fd777ec73527e6cf97b061b762f7d8539f9e92424e8ea086542d868c081601dee2334e16c6518069e7223f9958f18fa2b2c58b6052a379e338dc1423773100dd5e8097b4ff8331e2e0c84da4035becc512613bf452425a98cf36c370c49a3047d5830d077020dfcf33e3b065
2025-04-22 14:22:33 UTC	356	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Wed, 13 Nov 2019 17:14:30 GMT Accept-Ranges: bytes ETag: "09f61cf459ad51:0" X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Tue, 22 Apr 2025 14:22:33 GMT Connection: close Content-Length: 2203
2025-04-22 14:22:33 UTC	2203	IN	Data Raw: ef bb bf 66 75 6e 63 74 69 6f 6e 20 73 75 62 73 63 72 69 62 65 45 76 65 6e 74 28 65 76 65 6e 74 2c 20 6c 69 73 74 65 6e 65 72 2c 20 75 73 65 43 61 70 74 75 72 65 29 20 7b 0d 0a 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 20 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 76 65 6e 74 2c 20 6c 69 73 74 65 6e 65 72 2c 20 75 73 65 43 61 70 74 75 72 65 29 3b 0d 0a 20 20 7d 20 65 6c 73 65 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 65 76 65 6e 74 2c 20 6c 69 73 74 65 6e 65 72 2c 20 75 73 65 43 61 70 74 75 72 65 29 3b 0d 0a 20 20 7d 0d 0a Data Ascii: function subscribeEvent(event, listener, useCapture) { if (document.addEventListener) { document.addEventListener(event, listener, useCapture); } else if (document.attachEvent) { document.attachEvent(event, listener, useCapture); }