Edit tour

Windows Analysis Report
https://www.bistrainer.com/reset-password

Overview

General Information

Sample URL:	https://www.bistrainer.com/reset-password
Analysis ID:	880041
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains hidden URLs or javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1460 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 4936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1952 --field-trial-handle=1736,i,5265595831349821039,14869088654207509317,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 5596 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.bistrainer.com/reset-password MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

cleanup

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8

Source: classification engine

Classification label: clean0.win@26/25@8/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1952 --field-trial-handle=1736,i,5265595831349821039,14869088654207509317,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.bistrainer.com/reset-password
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1952 --field-trial-handle=1736,i,5265595831349821039,14869088654207509317,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.bistrainer.com/reset-password	0%	Virustotal		Browse
https://www.bistrainer.com/reset-password	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://recaptcha.net	0%	URL Reputation	safe
http://pki-ocsp.symauth.com0	0%	URL Reputation	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	1%	Virustotal		Browse
https://www.gstatic.c..?/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__.	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
accounts.google.com	142.250.203.109	true	false	high
bistrainer.com	52.60.32.235	true	false	high
www.google.com	142.250.203.100	true	false	high
s3-r-w.ca-central-1.amazonaws.com	52.95.145.52	true	false	high
clients.l.google.com	142.250.203.110	true	false	high
clients2.google.com	unknown	unknown	false	high
www.bistrainer.com	unknown	unknown	false	high
bis-branding-cdn.s3.ca-central-1.amazonaws.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
about:blank	false	low
https://www.bistrainer.com/v1/assets/font-awesome-5.6.3/css/all.min.css	false	high
https://www.bistrainer.com/v1/packages/1.bundle.home.min.js?version=20230601060626	false	high
https://bis-branding-cdn.s3.ca-central-1.amazonaws.com/1/uploads/BIS__Logo_Colour_150x1502.png?20230113154450	false	high
https://www.bistrainer.com/v1/packages/bundle.home.min.js?version=20230601060626	false	high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcssJcUAAAAAKse39JzJ2GN10H_kaCt_4Ai0nuH&co=aHR0cHM6Ly93d3cuYmlzdHJhaW5lci5jb206NDQz&hl=en&type=image&v=CDFvp7CXAHw7k3HxO47Gm1O9&theme=light&size=normal&badge=bottomright&cb=jc533ryei1a4	false	high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false	high
https://www.google.com/recaptcha/api2/bframe?hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9&k=6LcssJcUAAAAAKse39JzJ2GN10H_kaCt_4Ai0nuH	false	high
https://www.bistrainer.com/v1/assets/font-awesome/css/font-awesome.min.css	false	high
https://www.bistrainer.com/v1/index.cfm?action=ajaxhome.getPageLanguage	false	high
https://www.bistrainer.com/v1/assets/css/bootstrap.min.css	false	high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcssJcUAAAAAKse39JzJ2GN10H_kaCt_4Ai0nuH&co=aHR0cHM6Ly93d3cuYmlzdHJhaW5lci5jb206NDQz&hl=en&type=image&v=CDFvp7CXAHw7k3HxO47Gm1O9&theme=light&size=normal&badge=bottomright&cb=jc533ryei1a4	false	high
https://www.google.com/recaptcha/api2/bframe?hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9&k=6LcssJcUAAAAAKse39JzJ2GN10H_kaCt_4Ai0nuH	false	high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9	false	high
https://bis-branding-cdn.s3.ca-central-1.amazonaws.com/1/uploads/BIStrainer_Home_Image2.jpg	false	high
https://www.bistrainer.com/reset-password	false	high
https://www.bistrainer.com/v1/assets/js/bootstrap.min.js	false	high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false	high
https://www.bistrainer.com/reset-password	false	high
https://www.bistrainer.com/v1/assets//css/google.fonts.css	false	high
https://www.bistrainer.com/v1/assets/js/jquery.min.js	false	high
https://www.bistrainer.com/v1/assets/font-awesome-5.6.3/css/v4-shims.min.css	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://pki-crl.symauth.com/ca_7a5c3a0c73117406add19312bc1bc23f/LatestCRL.crl07	chromecache_137.1.dr, chromecache_133.1.dr	false		high
http://fontawesome.io	chromecache_146.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_143.1.dr, chromecache_155.1.dr	false		high
https://bis-branding-cdn.s3.ca-central-1.amazonaws.com/1/uploads/CAD_1InHouse-_1024x3073.png	chromecache_136.1.dr	false		high
https://bis-branding-cdn.s3.ca-central-1.amazonaws.com/1/uploads/BIS__Logo_Colour_150x1502.png?20230	chromecache_136.1.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_143.1.dr, chromecache_155.1.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_143.1.dr, chromecache_155.1.dr	false		high
https://recaptcha.net	chromecache_155.1.dr	false	URL Reputation: safe	unknown
https://www.google.com/log?format=json&hasfast=true	chromecache_143.1.dr, chromecache_155.1.dr	false		high
https://schema.org	chromecache_133.1.dr	false		high
https://getbootstrap.com/)	chromecache_149.1.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_143.1.dr, chromecache_155.1.dr	false		high
https://cloud.google.com/contact	chromecache_143.1.dr, chromecache_155.1.dr	false		high
http://fontawesome.io/license	chromecache_146.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_143.1.dr, chromecache_155.1.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_143.1.dr, chromecache_155.1.dr	false		high
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	chromecache_134.1.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_143.1.dr, chromecache_155.1.dr	false		high
http://pki-ocsp.symauth.com0	chromecache_137.1.dr, chromecache_133.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_143.1.dr, chromecache_155.1.dr	false		high
http://getbootstrap.com)	chromecache_141.1.dr	false	Avira URL Cloud: safe	low
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_141.1.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_138.1.dr, chromecache_143.1.dr, chromecache_155.1.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__.	chromecache_143.1.dr, chromecache_155.1.dr	false	Avira URL Cloud: safe	low
https://support.google.com/recaptcha	chromecache_155.1.dr	false		high
http://jedwatson.github.io/classnames	chromecache_134.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.60.32.235	bistrainer.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.203.100	www.google.com	United States	15169	GOOGLEUS	false
142.250.203.110	clients.l.google.com	United States	15169	GOOGLEUS	false
52.95.145.52	s3-r-w.ca-central-1.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.203.109	accounts.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.1
192.168.2.3

General Information

Joe Sandbox Version:	37.1.0 Beryl
Analysis ID:	880041
Start date and time:	2023-06-01 18:25:47 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.bistrainer.com/reset-password
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@26/25@8/8
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): audiodg.exe, WMIADAP.exe
Excluded IPs from analysis (whitelisted): 142.250.203.99, 34.104.35.123, 142.250.203.106, 216.58.215.234, 172.217.168.10, 172.217.168.42, 172.217.168.74
Excluded domains from analysis (whitelisted): edgedl.me.gvt1.com, content-autofill.googleapis.com, fonts.gstatic.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, copyright=Gorodenkoff Productions OU], progressive, precision 8, 1800x1013, components 3
Category:	downloaded
Size (bytes):	445072
Entropy (8bit):	7.9746689211940645
Encrypted:	false
SSDEEP:	12288:+1ejyzCxh5k++ldwbOWi7hFi4N0MnlbRL:+CxjnbP8Znlt
MD5:	81E9766A455A93B4E4E5B321D0D5F61A
SHA1:	0F1082E92BA4775B1DE05E3DBE114875A1AE77C1
SHA-256:	E3D285C88609F5356EFD4FBB2335A11417B768347BD8CA7320E64FA0E9972B23
SHA-512:	886207ED587E62996DE841B0F7BDC351E88B32F539C9DA9E738DA0C22AC7182E8E15E63A27AC434241FA315A0A3234E7B01DF10954DC7E2FEA249230E313600D
Malicious:	false
Reputation:	low
URL:	https://bis-branding-cdn.s3.ca-central-1.amazonaws.com/1/uploads/BIStrainer_Home_Image2.jpg
Preview:	.....AExif..MM.......................Gorodenkoff Productions OU........@Photoshop 3.0.8BIM................8BIM.%..........................JP........i.jumb....jumdc2pa.........8.q.c2pa...i.jumb...Mjumdc2ma.........8.q.adobe:urn:uuid:b6b085a8-a421-4e7c-9c39-5b914264f5e0...@.jumb...)jumdc2as.........8.q.c2pa.assertions...=mjumb...3jumd@..2..H......Ci.c2pa.thumbnail.claim.jpeg.....bfdb.image/jpeg...=.bidb......JFIF................@...............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((.....................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.........................................................

Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcssJcUAAAAAKse39JzJ2GN10H_kaCt_4Ai0nuH&co=aHR0cHM6Ly93d3cuYmlzdHJhaW5lci5jb206NDQz&hl=en&type=image&v=CDFvp7CXAHw7k3HxO47Gm1O9&theme=light&size=normal&badge=bottomright&cb=jc533ryei1a4	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcssJcUAAAAAKse39JzJ2GN10H_kaCt_4Ai0nuH&co=aHR0cHM6Ly93d3cuYmlzdHJhaW5lci5jb206NDQz&hl=en&type=image&v=CDFvp7CXAHw7k3HxO47Gm1O9&theme=light&size=normal&badge=bottomright&cb=jc533ryei1a4	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9&k=6LcssJcUAAAAAKse39JzJ2GN10H_kaCt_4Ai0nuH	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9&k=6LcssJcUAAAAAKse39JzJ2GN10H_kaCt_4Ai0nuH	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /reset-password HTTP/1.1Host: www.bistrainer.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /v1/assets/font-awesome/css/font-awesome.min.css HTTP/1.1Host: www.bistrainer.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bistrainer.com/reset-passwordAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
Source: global traffic	HTTP traffic detected: GET /v1/assets//css/google.fonts.css HTTP/1.1Host: www.bistrainer.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bistrainer.com/reset-passwordAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
Source: global traffic	HTTP traffic detected: GET /v1/assets/css/bootstrap.min.css HTTP/1.1Host: www.bistrainer.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bistrainer.com/reset-passwordAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
Source: global traffic	HTTP traffic detected: GET /v1/assets/font-awesome-5.6.3/css/all.min.css HTTP/1.1Host: www.bistrainer.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bistrainer.com/reset-passwordAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
Source: global traffic	HTTP traffic detected: GET /v1/assets/font-awesome-5.6.3/css/v4-shims.min.css HTTP/1.1Host: www.bistrainer.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bistrainer.com/reset-passwordAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
Source: global traffic	HTTP traffic detected: GET /v1/assets/js/jquery.min.js HTTP/1.1Host: www.bistrainer.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bistrainer.com/reset-passwordAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
Source: global traffic	HTTP traffic detected: GET /v1/assets/js/bootstrap.min.js HTTP/1.1Host: www.bistrainer.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bistrainer.com/reset-passwordAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
Source: global traffic	HTTP traffic detected: GET /v1/packages/1.bundle.home.min.js?version=20230601060626 HTTP/1.1Host: www.bistrainer.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bistrainer.com/reset-passwordAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
Source: global traffic	HTTP traffic detected: GET /v1/packages/bundle.home.min.js?version=20230601060626 HTTP/1.1Host: www.bistrainer.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bistrainer.com/reset-passwordAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?onload=onloadcallback&render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCMa8zAEIssHMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bistrainer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /1/uploads/BIStrainer_Home_Image2.jpg HTTP/1.1Host: bis-branding-cdn.s3.ca-central-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bistrainer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcssJcUAAAAAKse39JzJ2GN10H_kaCt_4Ai0nuH&co=aHR0cHM6Ly93d3cuYmlzdHJhaW5lci5jb206NDQz&hl=en&type=image&v=CDFvp7CXAHw7k3HxO47Gm1O9&theme=light&size=normal&badge=bottomright&cb=jc533ryei1a4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCMa8zAEIssHMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.bistrainer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCMa8zAEIssHMAQjFwcwBCNbBzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcssJcUAAAAAKse39JzJ2GN10H_kaCt_4Ai0nuH&co=aHR0cHM6Ly93d3cuYmlzdHJhaW5lci5jb206NDQz&hl=en&type=image&v=CDFvp7CXAHw7k3HxO47Gm1O9&theme=light&size=normal&badge=bottomright&cb=jc533ryei1a4Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9&k=6LcssJcUAAAAAKse39JzJ2GN10H_kaCt_4Ai0nuH HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCMa8zAEIssHMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.bistrainer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /1/uploads/BIS__Logo_Colour_150x1502.png?20230113154450 HTTP/1.1Host: bis-branding-cdn.s3.ca-central-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bistrainer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /1/uploads/BIStrainer_Home_Image2.jpg HTTP/1.1Host: bis-branding-cdn.s3.ca-central-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /1/uploads/BIS__Logo_Colour_150x1502.png?20230113154450 HTTP/1.1Host: bis-branding-cdn.s3.ca-central-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49686
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49685
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49680
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705

Source: chromecache_137.1.dr, chromecache_133.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: chromecache_137.1.dr, chromecache_133.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: chromecache_137.1.dr, chromecache_133.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: chromecache_137.1.dr, chromecache_133.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: chromecache_146.1.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_146.1.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_141.1.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_134.1.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_137.1.dr, chromecache_133.1.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: chromecache_137.1.dr, chromecache_133.1.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: chromecache_137.1.dr, chromecache_133.1.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_7a5c3a0c73117406add19312bc1bc23f/LatestCRL.crl07
Source: chromecache_137.1.dr, chromecache_133.1.dr	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: chromecache_136.1.dr	String found in binary or memory: https://bis-branding-cdn.s3.ca-central-1.amazonaws.com/1/uploads/BIS__Logo_Colour_150x1502.png?20230
Source: chromecache_136.1.dr	String found in binary or memory: https://bis-branding-cdn.s3.ca-central-1.amazonaws.com/1/uploads/BIStrainer_Home_Image2.jpg
Source: chromecache_136.1.dr	String found in binary or memory: https://bis-branding-cdn.s3.ca-central-1.amazonaws.com/1/uploads/CAD_1InHouse-_1024x3073.png
Source: chromecache_143.1.dr, chromecache_155.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_143.1.dr, chromecache_155.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_143.1.dr, chromecache_155.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_143.1.dr, chromecache_155.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_143.1.dr, chromecache_155.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_142.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFUZ0bbck.woff2)
Source: chromecache_142.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0b.woff2)
Source: chromecache_142.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFVp0bbck.woff2)
Source: chromecache_142.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFW50bbck.woff2)
Source: chromecache_142.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFWJ0bbck.woff2)
Source: chromecache_142.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFWZ0bbck.woff2)
Source: chromecache_142.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFWp0bbck.woff2)
Source: chromecache_149.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_141.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_143.1.dr, chromecache_155.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_134.1.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_155.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_133.1.dr	String found in binary or memory: https://schema.org
Source: chromecache_155.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_143.1.dr, chromecache_155.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_143.1.dr, chromecache_155.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_143.1.dr, chromecache_155.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_143.1.dr, chromecache_155.1.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_138.1.dr, chromecache_143.1.dr, chromecache_155.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_143.1.dr, chromecache_155.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__.
Source: chromecache_157.1.dr, chromecache_138.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 1, 2023 18:26:41.060245991 CEST	57417	53	192.168.2.4	8.8.8.8
Jun 1, 2023 18:26:41.061019897 CEST	50982	53	192.168.2.4	8.8.8.8
Jun 1, 2023 18:26:41.093664885 CEST	53	50982	8.8.8.8	192.168.2.4
Jun 1, 2023 18:26:41.101504087 CEST	53	57417	8.8.8.8	192.168.2.4
Jun 1, 2023 18:26:42.156608105 CEST	56572	53	192.168.2.4	8.8.8.8
Jun 1, 2023 18:26:42.212395906 CEST	53	56572	8.8.8.8	192.168.2.4
Jun 1, 2023 18:26:44.932607889 CEST	58565	53	192.168.2.4	8.8.8.8
Jun 1, 2023 18:26:44.954649925 CEST	53	58565	8.8.8.8	192.168.2.4
Jun 1, 2023 18:26:44.958300114 CEST	52239	53	192.168.2.4	8.8.8.8
Jun 1, 2023 18:26:44.978250980 CEST	53	52239	8.8.8.8	192.168.2.4
Jun 1, 2023 18:26:45.168996096 CEST	56807	53	192.168.2.4	8.8.8.8
Jun 1, 2023 18:26:45.205164909 CEST	53	56807	8.8.8.8	192.168.2.4
Jun 1, 2023 18:27:44.990572929 CEST	53370	53	192.168.2.4	8.8.8.8
Jun 1, 2023 18:27:45.019018888 CEST	53	53370	8.8.8.8	192.168.2.4
Jun 1, 2023 18:27:45.022119999 CEST	63746	53	192.168.2.4	8.8.8.8
Jun 1, 2023 18:27:45.037127018 CEST	53	63746	8.8.8.8	192.168.2.4

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:41 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-01 16:26:41 UTC	0	OUT	Data Raw: 20 Data Ascii:
2023-06-01 16:26:41 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 01 Jun 2023 16:26:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: script-src 'report-sample' 'nonce-HoEm5NzRSBBtZ-LzTsuQjQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-01 16:26:41 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-06-01 16:26:41 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:41 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-104.0.5112.81 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-01 16:26:41 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-Y8BLaje_WgA6IBOI1Gb2Qg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 01 Jun 2023 16:26:41 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 5995 X-Daystart: 34001 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-01 16:26:41 UTC	1	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 35 39 39 35 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 33 34 30 30 31 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="5995" elapsed_seconds="34001"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-06-01 16:26:41 UTC	2	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-06-01 16:26:41 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:44 UTC	403	OUT	GET /v1/packages/bundle.home.min.js?version=20230601060626 HTTP/1.1 Host: www.bistrainer.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bistrainer.com/reset-password Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
2023-06-01 16:26:44 UTC	489	IN	HTTP/1.1 200 OK Date: Thu, 01 Jun 2023 16:26:44 GMT Content-Type: application/javascript Content-Length: 98698 Connection: close Last-Modified: Tue, 30 May 2023 13:01:35 GMT Accept-Ranges: bytes ETag: "c91249ddf692d91:0" Vary: Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2023-06-01 16:26:44 UTC	490	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6f 2c 73 2c 69 3d 74 5b 30 5d 2c 63 3d 74 5b 31 5d 2c 6c 3d 74 5b 32 5d 2c 75 3d 30 2c 64 3d 5b 5d 3b 75 3c 69 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 73 3d 69 5b 75 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 73 29 26 26 72 5b 73 5d 26 26 64 2e 70 75 73 68 28 72 5b 73 5d 5b 30 5d 29 2c 72 5b 73 5d 3d 30 3b 66 6f 72 28 6f 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 6f 29 26 26 28 65 5b 6f 5d 3d 63 5b 6f 5d 29 3b 66 6f 72 28 70 26 26 70 28 74 29 3b 64 2e 6c 65 6e 67 74 68 3b 29 64 2e 73 68 Data Ascii: !function(e){function t(t){for(var o,s,i=t[0],c=t[1],l=t[2],u=0,d=[];u<i.length;u++)s=i[u],Object.prototype.hasOwnProperty.call(r,s)&&r[s]&&d.push(r[s][0]),r[s]=0;for(o in c)Object.prototype.hasOwnProperty.call(c,o)&&(e[o]=c[o]);for(p&&p(t);d.length;)d.sh
2023-06-01 16:26:44 UTC	505	IN	Data Raw: 28 74 68 69 73 2c 6e 28 30 29 29 7d 2c 32 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 6e 28 30 29 2c 72 3d 6e 28 36 29 2c 61 3d 6e 28 31 31 39 29 2c 73 3d 6e 28 32 35 33 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 28 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 Data Ascii: (this,n(0))},252:function(e,t,n){"use strict";(function(e){var o=n(0),r=n(6),a=n(119),s=n(253);function i(e){return(i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&
2023-06-01 16:26:44 UTC	521	IN	Data Raw: 63 63 6f 75 6e 74 4d 6f 64 61 6c 3a 21 30 7d 29 7d 29 29 Data Ascii: ccountModal:!0})}))
2023-06-01 16:26:44 UTC	617	IN	Data Raw: 2c 7a 28 55 28 65 29 2c 22 73 65 74 4c 6f 67 69 6e 46 69 65 6c 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 72 6e 61 6d 65 22 3d 3d 74 2e 74 61 72 67 65 74 2e 6e 61 6d 65 26 26 28 65 2e 70 72 6f 70 73 2e 75 70 64 61 74 65 4c 6f 67 69 6e 52 28 7b 75 73 65 72 6e 61 6d 65 3a 74 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 70 73 2e 76 61 6c 69 64 61 74 65 46 69 65 6c 64 73 28 22 75 73 65 72 6e 61 6d 65 22 29 7d 2e 62 69 6e 64 28 55 28 65 29 29 2c 31 30 30 29 29 2c 22 70 61 73 73 77 6f 72 64 22 3d 3d 74 2e 74 61 72 67 65 74 2e 6e 61 6d 65 26 26 28 65 2e 70 72 6f 70 73 2e 75 70 64 61 74 65 4c 6f 67 69 6e 52 28 7b 70 61 73 73 77 6f 72 64 3a 74 2e 74 61 72 Data Ascii: ,z(U(e),"setLoginField",(function(t){"username"==t.target.name&&(e.props.updateLoginR({username:t.target.value}),setTimeout(function(){this.props.validateFields("username")}.bind(U(e)),100)),"password"==t.target.name&&(e.props.updateLoginR({password:t.tar
2023-06-01 16:26:44 UTC	633	IN	Data Raw: 73 2e 70 72 6f 70 73 2e 75 73 65 72 2e 73 74 61 74 75 73 2e 6c 65 6e 67 74 68 26 26 22 73 75 63 63 65 73 73 22 3d 3d 74 68 69 73 2e 70 72 6f 70 73 2e 75 73 65 72 2e 73 74 61 74 75 73 26 26 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 66 6f 72 67 6f 74 2d 70 61 73 73 77 6f 72 64 2d 61 63 74 69 76 65 22 7d 2c 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 66 6f 72 67 6f 74 2d 70 61 73 73 77 6f 72 64 2d 61 63 74 69 76 65 2d 68 65 61 64 65 72 22 7d 2c 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 6e 75 6c 6c 2c 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 Data Ascii: s.props.user.status.length&&"success"==this.props.user.status&&s.a.createElement("div",{className:"forgot-password-active"},s.a.createElement("div",{className:"forgot-password-active-header"},s.a.createElement("span",null,s.a.createElement("span",{classNa
2023-06-01 16:26:44 UTC	649	IN	Data Raw: 74 68 69 73 2e 73 65 74 43 6f 6e 74 63 61 74 55 73 46 69 65 6c 64 2c 72 65 71 75 69 72 65 64 3a 21 30 7d 29 2c 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 66 6c 6f 61 74 69 6e 67 2d 6c 61 62 65 6c 20 22 2b 28 22 22 21 3d 74 68 69 73 2e 70 72 6f 70 73 2e 63 6f 6e 74 61 63 74 75 73 65 72 72 6f 72 2e 6e 61 6d 65 3f 22 69 6e 76 61 6c 69 64 22 3a 22 22 29 7d 2c 22 22 3d 3d 74 68 69 73 2e 70 72 6f 70 73 2e 63 6f 6e 74 61 63 74 75 73 65 72 72 6f 72 2e 6e 61 6d 65 3f 74 68 69 73 2e 70 72 6f 70 73 2e 70 6c 2e 63 6f 6e 74 61 63 74 75 73 2e 6c 62 6c 59 6f 75 72 4e 61 6d 65 3a 74 68 69 73 2e 70 72 6f 70 73 2e 70 6c 2e 63 6f 6e 74 61 63 74 75 73 2e 6c 62 6c 46 42 4d 69 73 73 69 6e 67 45 6e 74 65 72 59 Data Ascii: this.setContcatUsField,required:!0}),s.a.createElement("span",{className:"floating-label "+(""!=this.props.contactuserror.name?"invalid":"")},""==this.props.contactuserror.name?this.props.pl.contactus.lblYourName:this.props.pl.contactus.lblFBMissingEnterY
2023-06-01 16:26:44 UTC	873	IN	Data Raw: 6b 2e 61 2c 7b 72 65 66 3a 74 2c 73 69 74 65 6b 65 79 3a 72 63 2e 67 6f 6f 67 6c 65 52 65 63 61 70 74 63 68 61 53 69 74 65 4b 65 79 2c 6f 6e 43 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 75 70 64 61 74 65 4c 6f 67 69 6e 52 28 7b 6c 6f 61 64 69 6e 67 3a 31 7d 29 3b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2c 6f 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6e 29 3b 67 2e 61 2e 70 6f 73 74 28 72 63 2e 76 65 72 69 66 79 43 61 70 74 63 68 61 55 72 6c 2c 7b 63 61 70 74 63 68 61 52 65 73 70 6f 6e 73 65 3a 74 2c 69 64 3a 6f 2e 67 65 74 28 22 69 64 22 29 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 2e 75 70 64 61 74 65 4c 6f 67 69 6e 52 28 7b 6c 6f 61 64 69 Data Ascii: k.a,{ref:t,sitekey:rc.googleRecaptchaSiteKey,onChange:function(t){e.updateLoginR({loading:1});var n=window.location.search,o=new URLSearchParams(n);g.a.post(rc.verifyCaptchaUrl,{captchaResponse:t,id:o.get("id")}).then((function(t){if(e.updateLoginR({loadi
2023-06-01 16:26:44 UTC	889	IN	Data Raw: 7d 2c 74 2e 70 61 79 6c 6f 61 64 29 7d 29 3b 63 61 73 65 20 45 2e 55 50 44 41 54 45 5f 43 4f 4e 54 41 43 54 55 53 45 52 52 4f 52 3a 72 65 74 75 72 6e 20 6b 74 28 7b 7d 2c 65 2c 7b 63 6f 6e 74 61 63 74 75 73 65 72 72 6f 72 3a 6b 74 28 7b 7d 2c 65 2e 63 6f 6e 74 61 63 74 75 73 65 72 72 6f 72 2c 7b 7d 2c 74 2e 70 61 79 6c 6f 61 64 29 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 65 7d 7d 2c 74 65 72 6d 73 41 6e 64 43 6f 6e 64 69 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 46 74 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e Data Ascii: },t.payload)});case E.UPDATE_CONTACTUSERROR:return kt({},e,{contactuserror:kt({},e.contactuserror,{},t.payload)});default:return e}},termsAndConditions:function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:Ft,t=arguments.length>1?argumen

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:45 UTC	976	OUT	GET /recaptcha/api.js?onload=onloadcallback&render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCMa8zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bistrainer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-01 16:26:45 UTC	977	IN	HTTP/1.1 200 OK Expires: Thu, 01 Jun 2023 16:26:45 GMT Date: Thu, 01 Jun 2023 16:26:45 GMT Cache-Control: private, max-age=300 Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-01 16:26:45 UTC	977	IN	Data Raw: 33 38 64 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 38d/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2023-06-01 16:26:45 UTC	978	IN	Data Raw: 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d 27 29 2c 6e 3d 65 26 26 28 65 5b 27 6e 6f 6e 63 65 27 5d 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 6e 6f 6e 63 65 27 29 29 3b 69 66 28 6e 29 7b 70 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 6e 6f 6e 63 65 27 2c 6e 29 3b 7d 76 61 72 20 73 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 73 63 72 69 70 74 27 29 5b 30 5d 3b 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 70 6f 2c 20 73 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: d.querySelector('script[nonce]'),n=e&&(e['nonce']\|\|e.getAttribute('nonce'));if(n){po.setAttribute('nonce',n);}var s=d.getElementsByTagName('script')[0];s.parentNode.insertBefore(po, s);})();
2023-06-01 16:26:45 UTC	978	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:45 UTC	978	OUT	POST /v1/index.cfm?action=ajaxhome.getPageLanguage HTTP/1.1 Host: www.bistrainer.com Connection: keep-alive Content-Length: 57 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Accept: application/json, text/plain, / Content-Type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.bistrainer.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bistrainer.com/reset-password Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
2023-06-01 16:26:45 UTC	979	OUT	Data Raw: 7b 22 61 63 74 69 6f 6e 22 3a 22 68 6f 6d 65 2e 6c 6f 67 69 6e 66 6f 72 6d 22 2c 22 63 6f 6d 70 61 6e 79 69 64 22 3a 31 2c 22 6c 61 6e 67 75 61 67 65 69 64 22 3a 22 22 7d Data Ascii: {"action":"home.loginform","companyid":1,"languageid":""}
2023-06-01 16:26:45 UTC	999	IN	HTTP/1.1 200 OK Date: Thu, 01 Jun 2023 16:26:45 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 32109 Connection: close Vary: Accept-Encoding Content-Security-Policy: frame-ancestors 'self' X-Frame-Options: SAMEORIGIN Set-Cookie: LANG=1; Path=/ X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2023-06-01 16:26:45 UTC	999	IN	Data Raw: 7b 22 63 6c 61 6e 67 75 61 67 65 22 3a 7b 22 69 64 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 45 6e 67 6c 69 73 68 22 7d 2c 22 70 61 67 65 6c 61 6e 67 75 61 67 65 22 3a 7b 22 6c 62 6c 44 75 70 6c 69 63 61 74 65 45 76 65 6e 74 57 61 72 6e 69 6e 67 22 3a 22 55 73 65 72 20 68 61 73 20 62 65 65 6e 20 61 6c 72 65 61 64 79 20 72 65 67 69 73 74 65 72 65 64 20 66 6f 72 20 73 69 6d 69 6c 61 72 20 65 76 65 6e 74 22 2c 22 6c 62 6c 43 72 65 61 74 65 41 63 63 6f 75 6e 74 48 65 61 64 65 72 22 3a 22 43 72 65 61 74 65 20 41 63 63 6f 75 6e 74 22 2c 22 6c 62 6c 43 6f 64 65 50 6c 61 63 65 48 6f 6c 64 65 72 22 3a 22 45 6e 74 65 72 20 43 6f 64 65 22 2c 22 6c 62 6c 47 68 6f 73 74 41 6c 6c 6f 77 62 75 74 74 6f 6e 22 3a 22 41 6c 6c 6f 77 22 2c 22 6c 62 6c 4c 6f 67 69 6e 46 62 43 6f 6d Data Ascii: {"clanguage":{"id":1,"name":"English"},"pagelanguage":{"lblDuplicateEventWarning":"User has been already registered for similar event","lblCreateAccountHeader":"Create Account","lblCodePlaceHolder":"Enter Code","lblGhostAllowbutton":"Allow","lblLoginFbCom
2023-06-01 16:26:45 UTC	1085	IN	Data Raw: 6d 65 7d 2c 5c 72 5c 6e 59 6f 75 72 20 75 73 65 72 6e 61 6d 65 20 69 73 3a 20 7b 55 73 65 72 6e 61 6d 65 7d 5c 72 5c 6e 54 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2c 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6c 69 6e 6b 3a 20 7b 50 61 73 73 77 6f 72 64 20 52 65 73 65 74 20 4c 69 6e 6b 7d 22 2c 22 6c 62 6c 52 65 74 75 72 6e 54 6f 42 49 53 22 3a 22 52 65 74 75 72 6e 20 74 6f 20 74 68 65 20 6c 6f 67 69 6e 20 70 61 67 65 2e 22 2c 22 6c 62 6c 4e 6f 74 41 6c 6c 6f 77 65 64 52 65 71 75 65 73 74 48 65 61 64 65 72 22 3a 22 50 61 73 73 77 6f 72 64 20 52 65 73 65 74 20 55 6e 61 76 61 69 6c 61 62 6c 65 22 2c 22 6c 62 6c 55 73 65 72 6e 61 6d 65 22 3a 22 55 73 65 72 6e 61 6d 65 22 2c 22 6c 62 6c 43 68 65 63 6b 59 6f 75 72 45 6d 61 Data Ascii: me},\r\nYour username is: {Username}\r\nTo reset your password, use the following link: {Password Reset Link}","lblReturnToBIS":"Return to the login page.","lblNotAllowedRequestHeader":"Password Reset Unavailable","lblUsername":"Username","lblCheckYourEma
2023-06-01 16:26:45 UTC	1101	IN	Data Raw: 65 72 2e 22 2c 22 6c 62 6c 49 44 6f 6e 74 48 61 76 65 45 6d 61 69 6c 22 3a 22 43 61 6e 63 65 6c 22 2c 22 6c 62 6c 43 61 6e 63 65 6c 22 3a 22 43 61 6e 63 65 6c 22 2c 22 6c 62 6c 46 6c 64 55 73 65 72 4c 61 6e 67 75 61 67 65 22 3a 22 4c 61 6e 67 75 61 67 65 3a 22 2c 22 6c 62 6c 45 6e 74 65 72 56 61 6c 69 64 45 6d 61 69 6c 49 44 22 3a 22 54 68 69 73 20 49 44 20 6e 75 6d 62 65 72 20 61 6c 72 65 61 64 79 20 65 78 69 73 74 73 20 69 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 3c 62 72 2f 3e 3c 62 72 2f 3e 5c 72 5c 6e 5c 72 5c 6e 5c 72 5c 6e 49 66 20 79 6f 75 20 72 65 71 75 69 72 65 20 61 73 73 69 73 74 61 6e 63 65 2c 20 63 6f 6e 74 61 63 74 20 73 75 70 70 6f 72 74 20 61 74 20 3c 61 20 68 72 65 66 3d 27 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 62 69 73 74 72 61 69 6e 65 72 Data Ascii: er.","lblIDontHaveEmail":"Cancel","lblCancel":"Cancel","lblFldUserLanguage":"Language:","lblEnterValidEmailID":"This ID number already exists in the system.<br/><br/>\r\n\r\n\r\nIf you require assistance, contact support at <a href='mailto:help@bistrainer

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41415), with CRLF line terminators
Category:	downloaded
Size (bytes):	476293
Entropy (8bit):	5.308070004049805
Encrypted:	false
SSDEEP:	6144:pgjquKf0FE+PRWcEIx6bdD2eeODFm5ZjyirHDn4l:pIIf6tRWOx6Agl
MD5:	30FC1E94B1092FBB8BBF6CFD3F242A55
SHA1:	A92B7ED5687C318926D4873EF4A815835DB8189A
SHA-256:	DEB689E2200F25BEFA122B192384C3FC0999F9F1F022313321C31706FD474738
SHA-512:	3B063986DC3847145BC905202C8A07AC79CCF69D5D4D050989640F5B3EF8C144BB0047314C8AED0087AC739027115E77C8FDA65A574FE3538808214352FBFA25
Malicious:	false
Reputation:	low
URL:	https://www.bistrainer.com/v1/packages/1.bundle.home.min.js?version=20230601060626
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],[function(e,t,n){"use strict";e.exports=n(443)},function(e,t,n){e.exports=n(447)()},function(e,t,n){var r=n(11),o=n(20),i=n(39),a=n(34),u=n(46),s=function(e,t,n){var l,c,f,d,p=e&s.F,h=e&s.G,m=e&s.S,v=e&s.P,y=e&s.B,g=h?r:m?r[t]\|\|(r[t]={}):(r[t]\|\|{}).prototype,b=h?o:o[t]\|\|(o[t]={}),w=b.prototype\|\|(b.prototype={});for(l in h&&(n=t),n)f=((c=!p&&g&&void 0!==g[l])?g:n)[l],d=y&&c?u(f,r):v&&"function"==typeof f?u(Function.call,f):f,g&&a(g,l,f,e&s.U),b[l]!=f&&i(b,l,d),v&&w[l]!=f&&(w[l]=f)};r.core=o,s.F=1,s.G=2,s.S=4,s.P=8,s.B=16,s.W=32,s.U=64,s.R=128,e.exports=s},function(e,t,n){"use strict";function r(){return(r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e}).apply(this,arguments)}n.d(t,"a",(function(){return r}))},function(e,t,n){"use strict";function r(e,t){if(null==e)return{};var n,r,o={},i=Object.keys(

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	98698
Entropy (8bit):	5.189634214076995
Encrypted:	false
SSDEEP:	1536:pfM5IkERM54bZqfJ0A0fz9DYyGq4DsuCGvLVL7YxL5izjPmSOp:XRxYyGq4lHXPA
MD5:	60579E8F5E518D79773EFEF9D2D13FE2
SHA1:	93379DEA23E205589A64EB736E5992CE8ECDEEB5
SHA-256:	A7E617B7C7D1F1A93ABDD2B3B98A3E64BBCDF352C9AEE7536B1C938FD7C7EFD4
SHA-512:	B862EA28C5C9277D7D8BF22941D50D3CDD2DA1DE7633A944ED4FD41CE341E1320629FED2736DE49478404F768A02B08B9737A3D03C661B03E96FCC3F75E4C727
Malicious:	false
Reputation:	low
URL:	https://www.bistrainer.com/v1/packages/bundle.home.min.js?version=20230601060626
Preview:	!function(e){function t(t){for(var o,s,i=t[0],c=t[1],l=t[2],u=0,d=[];u<i.length;u++)s=i[u],Object.prototype.hasOwnProperty.call(r,s)&&r[s]&&d.push(r[s][0]),r[s]=0;for(o in c)Object.prototype.hasOwnProperty.call(c,o)&&(e[o]=c[o]);for(p&&p(t);d.length;)d.shift()();return a.push.apply(a,l\|\|[]),n()}function n(){for(var e,t=0;t<a.length;t++){for(var n=a[t],o=!0,i=1;i<n.length;i++){var c=n[i];0!==r[c]&&(o=!1)}o&&(a.splice(t--,1),e=s(s.s=n[0]))}return e}var o={},r={0:0},a=[];function s(t){if(o[t])return o[t].exports;var n=o[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,s),n.l=!0,n.exports}s.m=e,s.c=o,s.d=function(e,t,n){s.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},s.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},s.t=function(e,t){if(1&t&&(e=s(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null)

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1072), with CRLF line terminators
Category:	downloaded
Size (bytes):	21041
Entropy (8bit):	5.03344680225391
Encrypted:	false
SSDEEP:	384:llQKleAq1Nemde8nhSq29ZyKDLz/MBHBhMcn:llQKleAq1Nemde8nhzwZyKDLz/MBhhMs
MD5:	79765EF57D6CE62FD21303A72BE7CE70
SHA1:	E44D9F55501BFE724BCB09A075AC0116B84794D8
SHA-256:	80D9D07396C3C7B54EBF423E5446750A50AE9B75E51FFDF66562123D61689BF5
SHA-512:	44D26DAFC108285C5AADB5E2B79E2620241C5F7513B50C301E778B1EFBA5E2860D2E0E9020C7E0605C674F7A9373F524B280BE036224187C429A14097BD65A3B
Malicious:	false
Reputation:	low
URL:	https://www.bistrainer.com/reset-password
Preview:	..<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">...<head>...... <meta http-equiv="Expires" content="Sat, 01 Jul 2023 10:07:42 GMT">..<meta http-equiv="cache-control" content="max-age=290304000, public" />..<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0">..<meta http-equiv="content-language" content="en">..<meta name="google-site-verification" content="AE2pSopuBQVnLlx-2Li-2aB_eej_De8lQz0gb0UGUqo" />..<title>eLearning System</title> <link rel="stylesheet" href="/v1/assets/font-awesome/css/font-awesome.min.css" type="text/css">..<link href="/v1/assets//css/google.fonts.css" rel="stylesheet">..<link id="link" rel="stylesheet" type="text/css" href="/v1/assets/css/bootstrap.min.css">...... <link rel="stylesheet" href="/v1/assets/font-awesome-5.6.3/css/all.min.css" type="text/css">.. <link rel="stylesheet" href="/v1/assets/font-awesome-5.6.3/css/v4-shim

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65367), with CRLF line terminators
Category:	downloaded
Size (bytes):	123102
Entropy (8bit):	5.092901445040047
Encrypted:	false
SSDEEP:	768:tqGxw//uHgfsA6zWqr6x/9Gd2Fesgat0YSYOab9cYjL3Mgfn+lAfPQ:Rw/2TTr6x/9Gd2eeka7cOn+6PQ
MD5:	7D691CBBEDDFCCA48EE634923120E419
SHA1:	E91AE9CC13191B8D09932CF9818D2166AD833955
SHA-256:	2989B8C951987FD82102D8228E883B9AC93A3348508E289F68DF937E0DB82ECD
SHA-512:	90D52B7934007DC879DC1417AE55DBDFE998325C3B39A83E09255F2E15F45EC7B53C0647A0565A0D775569135BD88685A574D0395E946AFEE8CC0B6DB694B22F
Malicious:	false
Reputation:	low
URL:	https://www.bistrainer.com/v1/assets/css/bootstrap.min.css
Preview:	/!.. Bootstrap v3.3.6 (http://getbootstrap.com).. * Copyright 2011-2015 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:46 UTC	1500	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCMa8zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcssJcUAAAAAKse39JzJ2GN10H_kaCt_4Ai0nuH&co=aHR0cHM6Ly93d3cuYmlzdHJhaW5lci5jb206NDQz&hl=en&type=image&v=CDFvp7CXAHw7k3HxO47Gm1O9&theme=light&size=normal&badge=bottomright&cb=jc533ryei1a4 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-01 16:26:46 UTC	1500	IN	HTTP/1.1 200 OK Expires: Thu, 01 Jun 2023 16:26:46 GMT Date: Thu, 01 Jun 2023 16:26:46 GMT Cache-Control: private, max-age=300 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-01 16:26:46 UTC	1501	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 43 44 46 76 70 37 43 58 41 48 77 37 6b 33 48 78 4f 34 37 47 6d 31 4f 39 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js');
2023-06-01 16:26:46 UTC	1501	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:46 UTC	1501	OUT	GET /recaptcha/api2/bframe?hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9&k=6LcssJcUAAAAAKse39JzJ2GN10H_kaCt_4Ai0nuH HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIkqHLAQiQvMwBCMa8zAEIssHMAQjFwcwBCNbBzAE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.bistrainer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-01 16:26:46 UTC	1502	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 01 Jun 2023 16:26:46 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-Xgj3d3OuWBLh64AbbgVn1A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-01 16:26:46 UTC	1503	IN	Data Raw: 31 63 34 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1c48<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2023-06-01 16:26:46 UTC	1503	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f Data Ascii: to/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//
2023-06-01 16:26:46 UTC	1504	IN	Data Raw: 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c Data Ascii: oboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2023-06-01 16:26:46 UTC	1506	IN	Data Raw: 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-st
2023-06-01 16:26:46 UTC	1507	IN	Data Raw: 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d Data Ascii: oto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2023-06-01 16:26:46 UTC	1508	IN	Data Raw: 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 Data Ascii: /* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168
2023-06-01 16:26:46 UTC	1509	IN	Data Raw: 64 33 4f 75 57 42 4c 68 36 34 41 62 62 67 56 6e 31 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 43 44 46 76 70 37 43 58 41 48 77 37 6b 33 48 78 4f 34 37 47 6d 31 4f 39 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 58 67 6a 33 Data Ascii: d3OuWBLh64AbbgVn1A" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js" nonce="Xgj3
2023-06-01 16:26:46 UTC	1510	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:47 UTC	1510	OUT	GET /1/uploads/BIS__Logo_Colour_150x1502.png?20230113154450 HTTP/1.1 Host: bis-branding-cdn.s3.ca-central-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bistrainer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-01 16:26:47 UTC	1511	IN	HTTP/1.1 200 OK x-amz-id-2: QZv6o2ACehIV5LvMJjebfWgHYcWmzUQB+JzNpGZuMkDt8B25+ke5gXL+gRSrXKawLiwTqUti8NM= x-amz-request-id: NJQ3XEXC7RMHFYDC Date: Thu, 01 Jun 2023 16:26:48 GMT Last-Modified: Fri, 13 Jan 2023 22:44:50 GMT ETag: "44f590501a99b13537a533da5d6bb5aa" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 7867 Connection: close
2023-06-01 16:26:47 UTC	1511	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 9f 08 06 00 00 00 1b 0e 20 2a 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 1e 6d 49 44 41 54 78 9c ed 9d 77 74 1d d5 bd ef 3f 7b 66 4e 55 6f 96 e5 82 6d c0 06 63 b0 0d 36 60 62 5a 28 a1 84 4b 20 a1 a5 dd 24 eb 91 10 b2 de cd a3 24 e4 dd 9b bc 75 53 b9 dc 04 b8 e1 5d 42 e0 01 2b 1d 08 21 01 42 6f a1 06 62 aa c1 36 2e d8 b8 60 b9 49 b2 da e9 67 66 ef f7 c7 96 6c 75 e9 94 39 33 92 f5 59 eb ac 25 1d cd ec fd d3 d1 57 7b 76 f9 15 a1 94 62 92 49 8a 8d d5 fb 45 e8 92 5b bc b4 c3 d7 64 52 41 ca ca 93 5c fb cf cf 72 cc fc 8f d8 d1 52 45 3c 19 9a 65 1a f2 32 60 21 b0 03 78 13 d8 05 74 02 6d 40 0b 90 f2 ce 6a 6f b8 7a f9 f3 40 1f 61 4d 32 3c 66 c0 26 9e 0c f1 b7 d7 0f a3 a9 Data Ascii: PNGIHDR *pHYs.#.#x?vmIDATxwt?{fNUomc6`bZ(K $$uS]B+!Bob6.`Igflu93Y%W{vbIE[dRA\rRE<e2`!xtm@joz@aM2<f&

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:42 UTC	4	OUT	GET /reset-password HTTP/1.1 Host: www.bistrainer.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-01 16:26:43 UTC	4	IN	HTTP/1.1 200 OK Date: Thu, 01 Jun 2023 16:26:43 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Set-Cookie: CFID=2168501; Expires=Sat, 24-May-2053 16:26:41 GMT; Path=/; Secure; HttpOnly;SameSite=none Set-Cookie: CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; Expires=Sat, 24-May-2053 16:26:41 GMT; Path=/; Secure; HttpOnly;SameSite=none Content-Security-Policy: frame-ancestors 'self' X-Frame-Options: SAMEORIGIN Set-Cookie: PRIVATESITECOMPANYNUMBER=1; Path=/ Set-Cookie: PRIVATESITECURRENCYTYPE=1; Path=/ X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2023-06-01 16:26:43 UTC	5	IN	Data Raw: 62 36 32 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 09 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 53 61 74 2c 20 30 31 20 4a 75 6c 20 32 30 32 33 20 31 30 3a 30 37 3a 34 32 20 47 4d 54 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6d 61 78 2d 61 67 65 3d 32 39 30 33 30 34 30 30 30 2c 20 70 75 62 6c 69 63 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 Data Ascii: b62<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head> <meta http-equiv="Expires" content="Sat, 01 Jul 2023 10:07:42 GMT"><meta http-equiv="cache-control" content="max-age=290304000, public" /><meta http-equiv="Content-T
2023-06-01 16:26:43 UTC	8	IN	Data Raw: 34 36 63 66 0d 0a 20 7d 0d 0a 20 20 2e 6c 6f 67 69 6e 2d 6c 6f 67 6f 7b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6c 6f 67 69 6e 2d 6c 6f 67 6f 20 69 6d 67 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6c 6f 67 69 6e 2d 6c 65 66 74 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 6c 6f 67 69 6e 2d Data Ascii: 46cf } .login-logo{ text-align: center; } .login-logo img{ max-width: 100%; max-height: 100px; } .login-left{ background-repeat: no-repeat; background-size: cover; background-position: center; } .login-
2023-06-01 16:26:43 UTC	24	IN	Data Raw: 66 6d 3f 61 63 74 69 6f 6e 3d 61 6a 61 78 68 6f 6d 65 2e 76 65 72 69 66 79 52 61 74 65 4c 69 6d 69 74 43 61 74 70 63 68 61 22 2c 22 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 2f 2f 62 69 73 2d 62 72 61 6e 64 69 6e 67 2d 63 64 6e 2e 73 33 2e 63 61 2d 63 65 6e 74 72 61 6c 2d 31 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 31 2f 75 70 6c 6f 61 64 73 2f 43 41 44 5f 31 49 6e 48 6f 75 73 65 2d 5f 31 30 32 34 78 33 30 37 33 2e 70 6e 67 22 2c 22 73 75 62 6d 69 74 4c 6f 67 69 6e 22 3a 22 2f 76 31 2f 69 6e 64 65 78 2e 63 66 6d 3f 61 63 74 69 6f 6e 3d 61 6a 61 78 68 6f 6d 65 2e 69 6e 69 74 6c 6f 67 69 6e 22 2c 22 6c 69 6d 69 74 22 3a 30 2c 22 63 75 73 74 6f 6d 48 65 6c 70 50 68 6f 6e 65 22 3a 22 22 2c 22 6c 61 6e 67 75 61 67 65 73 22 3a 22 5b 7b 5c 22 69 64 5c 22 3a 31 Data Ascii: fm?action=ajaxhome.verifyRateLimitCatpcha","logo":"https://bis-branding-cdn.s3.ca-central-1.amazonaws.com/1/uploads/CAD_1InHouse-_1024x3073.png","submitLogin":"/v1/index.cfm?action=ajaxhome.initlogin","limit":0,"customHelpPhone":"","languages":"[{\"id\":1
2023-06-01 16:26:43 UTC	26	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:48 UTC	1773	OUT	GET /1/uploads/BIS__Logo_Colour_150x1502.png?20230113154450 HTTP/1.1 Host: bis-branding-cdn.s3.ca-central-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2023-06-01 16:26:48 UTC	1926	IN	HTTP/1.1 200 OK x-amz-id-2: Mlxbz2WL2GL/tfSp+XO9EUbpAwRfohyqbdlSLjRwWzrBoyv75zYyCt1L97JlbDOwi3Op1bZBVj0= x-amz-request-id: CMXHG27JH9NFFBFT Date: Thu, 01 Jun 2023 16:26:49 GMT Last-Modified: Fri, 13 Jan 2023 22:44:50 GMT ETag: "44f590501a99b13537a533da5d6bb5aa" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 7867 Connection: close
2023-06-01 16:26:48 UTC	1927	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 9f 08 06 00 00 00 1b 0e 20 2a 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 1e 6d 49 44 41 54 78 9c ed 9d 77 74 1d d5 bd ef 3f 7b 66 4e 55 6f 96 e5 82 6d c0 06 63 b0 0d 36 60 62 5a 28 a1 84 4b 20 a1 a5 dd 24 eb 91 10 b2 de cd a3 24 e4 dd 9b bc 75 53 b9 dc 04 b8 e1 5d 42 e0 01 2b 1d 08 21 01 42 6f a1 06 62 aa c1 36 2e d8 b8 60 b9 49 b2 da e9 67 66 ef f7 c7 96 6c 75 e9 94 39 33 92 f5 59 eb ac 25 1d cd ec fd d3 d1 57 7b 76 f9 15 a1 94 62 92 49 8a 8d d5 fb 45 e8 92 5b bc b4 c3 d7 64 52 41 ca ca 93 5c fb cf cf 72 cc fc 8f d8 d1 52 45 3c 19 9a 65 1a f2 32 60 21 b0 03 78 13 d8 05 74 02 6d 40 0b 90 f2 ce 6a 6f b8 7a f9 f3 40 1f 61 4d 32 3c 66 c0 26 9e 0c f1 b7 d7 0f a3 a9 Data Ascii: PNGIHDR *pHYs.#.#x?vmIDATxwt?{fNUomc6`bZ(K $$uS]B+!Bob6.`Igflu93Y%W{vbIE[dRA\rRE<e2`!xtm@joz@aM2<f&

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:43 UTC	26	OUT	GET /v1/assets/font-awesome/css/font-awesome.min.css HTTP/1.1 Host: www.bistrainer.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bistrainer.com/reset-password Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
2023-06-01 16:26:43 UTC	26	IN	HTTP/1.1 200 OK Date: Thu, 01 Jun 2023 16:26:43 GMT Content-Type: text/css Content-Length: 23742 Connection: close Last-Modified: Tue, 17 Mar 2020 21:47:31 GMT Accept-Ranges: bytes ETag: "844522a9a5fcd51:0" Vary: Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2023-06-01 16:26:43 UTC	27	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 33 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0d 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0d 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 33 2e 30 27 Data Ascii: /! Font Awesome 4.3.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.3.0'
2023-06-01 16:26:43 UTC	41	IN	Data Raw: 2e 66 61 2d 75 6e 6c 6f 63 6b 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 65 22 7d 2e 66 61 2d 62 75 6c 6c 73 65 79 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 30 22 7d 2e 66 61 2d 65 6c 6c 69 70 73 69 73 2d 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 31 22 7d 2e 66 61 2d 65 6c 6c 69 70 73 69 73 2d 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 32 22 7d 2e 66 61 2d 72 73 73 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 33 22 7d 2e 66 61 2d 70 6c 61 79 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 34 22 7d 2e 66 61 2d 74 69 63 6b 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: .fa-unlock-alt:before{content:"\f13e"}.fa-bullseye:before{content:"\f140"}.fa-ellipsis-h:before{content:"\f141"}.fa-ellipsis-v:before{content:"\f142"}.fa-rss-square:before{content:"\f143"}.fa-play-circle:before{content:"\f144"}.fa-ticket:before{content:"\

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:43 UTC	50	OUT	GET /v1/assets//css/google.fonts.css HTTP/1.1 Host: www.bistrainer.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bistrainer.com/reset-password Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
2023-06-01 16:26:44 UTC	53	IN	HTTP/1.1 200 OK Date: Thu, 01 Jun 2023 16:26:43 GMT Content-Type: text/css Content-Length: 2488 Connection: close Last-Modified: Mon, 13 Jul 2020 15:12:32 GMT Accept-Ranges: bytes ETag: "61935a82859d61:0" Vary: Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2023-06-01 16:26:44 UTC	54	IN	Data Raw: 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0d 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 4f 70 65 6e 20 53 61 6e 73 20 52 65 67 75 6c 61 72 27 29 2c 20 6c 6f 63 61 6c 28 27 4f 70 65 6e 53 61 6e 73 2d 52 65 67 75 6c 61 72 27 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6f 70 65 6e 73 61 6e 73 2f 76 31 37 2f 6d 65 6d 38 59 61 47 73 31 32 36 4d 69 5a 70 42 41 2d 55 46 57 4a 30 62 62 63 6b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 Data Ascii: /* cyrillic-ext */@font-face { font-family: 'Open Sans'; font-style: normal; font-weight: 400; src: local('Open Sans Regular'), local('OpenSans-Regular'), url(https://fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFWJ0bbck.woff2) format

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:43 UTC	51	OUT	GET /v1/assets/css/bootstrap.min.css HTTP/1.1 Host: www.bistrainer.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bistrainer.com/reset-password Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
2023-06-01 16:26:44 UTC	56	IN	HTTP/1.1 200 OK Date: Thu, 01 Jun 2023 16:26:43 GMT Content-Type: text/css Content-Length: 123102 Connection: close Last-Modified: Tue, 17 Mar 2020 21:47:31 GMT Accept-Ranges: bytes ETag: "e56214a9a5fcd51:0" Vary: Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2023-06-01 16:26:44 UTC	57	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 36 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 66 6f Data Ascii: /! Bootstrap v3.3.6 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{fo
2023-06-01 16:26:44 UTC	80	IN	Data Raw: 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 30 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: "}.glyphicon-calendar:before{content:"\e109"}.glyphicon-random:before{content:"\e110"}.glyphicon-comment:before{content:"\e111"}.glyphicon-magnet:before{content:"\e112"}.glyphicon-chevron-up:before{content:"\e113"}.glyphicon-chevron-down:before{content:"\
2023-06-01 16:26:44 UTC	167	IN	Data Raw: 64 74 68 3a 31 30 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 7b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 7b 72 69 67 68 74 3a 38 2e 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 7b 72 69 67 68 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 33 7b 72 69 67 68 74 3a 32 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 34 7b 72 69 67 68 74 3a 33 33 2e 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 35 7b 72 69 67 68 74 3a 34 31 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 36 7b 72 69 67 68 74 3a 35 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 37 7b 72 69 67 68 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 38 7b 72 Data Ascii: dth:100%}.col-sm-pull-0{right:auto}.col-sm-pull-1{right:8.33333%}.col-sm-pull-2{right:16.66667%}.col-sm-pull-3{right:25%}.col-sm-pull-4{right:33.33333%}.col-sm-pull-5{right:41.66667%}.col-sm-pull-6{right:50%}.col-sm-pull-7{right:58.33333%}.col-sm-pull-8{r
2023-06-01 16:26:44 UTC	183	IN	Data Raw: 67 68 74 3a 33 30 70 78 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 73 65 6c 65 63 74 2e 69 6e 70 75 74 2d 73 6d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 73 65 6c 65 63 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 73 65 6c 65 63 74 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 73 6d 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 3e 73 65 6c 65 63 74 2e 62 74 6e 7b 68 65 69 67 68 74 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 7d 74 65 78 74 61 72 65 61 2e 69 6e 70 75 74 Data Ascii: ght:30px;padding:5px 10px;font-size:12px;line-height:1.5;border-radius:3px}select.input-sm,.input-group-sm>select.form-control,.input-group-sm>select.input-group-addon,.input-group-sm>.input-group-btn>select.btn{height:30px;line-height:30px}textarea.input
2023-06-01 16:26:44 UTC	187	IN	Data Raw: 73 2d 77 61 72 6e 69 6e 67 20 2e 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 20 2e 72 61 64 69 6f 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 20 2e 63 68 65 63 6b 62 6f 78 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 2e 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 20 6c 61 62 65 6c 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 20 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 38 61 36 Data Ascii: s-warning .control-label,.has-warning .radio,.has-warning .checkbox,.has-warning .radio-inline,.has-warning .checkbox-inline,.has-warning.radio label,.has-warning.checkbox label,.has-warning.radio-inline label,.has-warning.checkbox-inline label{color:#8a6
2023-06-01 16:26:44 UTC	203	IN	Data Raw: 66 74 2d 72 61 64 69 75 73 3a 30 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 3e 2e 62 74 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 3e 2e 62 74 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 Data Ascii: ft-radius:0}.btn-group>.btn-group{float:left}.btn-group>.btn-group:not(:first-child):not(:last-child)>.btn{border-radius:0}.btn-group>.btn-group:first-child:not(:last-child)>.btn:last-child,.btn-group>.btn-group:first-child:not(:last-child)>.dropdown-togg
2023-06-01 16:26:44 UTC	341	IN	Data Raw: 3a 23 30 39 30 39 30 39 7d 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 7b 63 6f 6c 6f 72 3a 23 39 64 39 64 39 64 7d 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 3a 68 6f 76 65 72 2c 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 23 39 64 39 64 39 64 7d 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 6c 69 3e 61 7b 63 6f 6c 6f 72 3a 23 39 64 39 64 39 64 7d Data Ascii: :#090909}.navbar-inverse .navbar-brand{color:#9d9d9d}.navbar-inverse .navbar-brand:hover,.navbar-inverse .navbar-brand:focus{color:#fff;background-color:transparent}.navbar-inverse .navbar-text{color:#9d9d9d}.navbar-inverse .navbar-nav>li>a{color:#9d9d9d}
2023-06-01 16:26:44 UTC	357	IN	Data Raw: 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 63 37 36 33 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 63 37 36 33 64 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 7b 63 6f 6c 6f 72 3a 23 33 31 37 30 38 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 39 65 64 66 37 7d 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2c 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 7b 63 6f 6c 6f 72 3a 23 33 31 37 30 38 66 7d 61 2e 6c 69 73 74 2d Data Ascii: success.active:hover,button.list-group-item-success.active:focus{color:#fff;background-color:#3c763d;border-color:#3c763d}.list-group-item-info{color:#31708f;background-color:#d9edf7}a.list-group-item-info,button.list-group-item-info{color:#31708f}a.list-
2023-06-01 16:26:44 UTC	373	IN	Data Raw: 74 68 3a 20 37 36 38 70 78 29 7b 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 7b 77 69 64 74 68 3a 36 30 30 70 78 3b 6d 61 72 67 69 6e 3a 33 30 70 78 20 61 75 74 6f 7d 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 31 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 31 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 29 7d 2e 6d 6f 64 61 6c 2d 73 6d 7b 77 69 64 74 68 3a 33 30 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 7b 2e 6d 6f 64 61 6c 2d 6c 67 7b 77 69 64 74 68 3a 39 30 30 70 78 7d 7d 2e 74 6f 6f 6c 74 69 70 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 Data Ascii: th: 768px){.modal-dialog{width:600px;margin:30px auto}.modal-content{-webkit-box-shadow:0 5px 15px rgba(0,0,0,0.5);box-shadow:0 5px 15px rgba(0,0,0,0.5)}.modal-sm{width:300px}}@media (min-width: 992px){.modal-lg{width:900px}}.tooltip{position:absolute;z-i

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:43 UTC	51	OUT	GET /v1/assets/font-awesome-5.6.3/css/all.min.css HTTP/1.1 Host: www.bistrainer.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bistrainer.com/reset-password Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
2023-06-01 16:26:44 UTC	65	IN	HTTP/1.1 200 OK Date: Thu, 01 Jun 2023 16:26:43 GMT Content-Type: text/css Content-Length: 76169 Connection: close Last-Modified: Tue, 17 Mar 2020 21:47:31 GMT Accept-Ranges: bytes ETag: "958516a9a5fcd51:0" Vary: Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2023-06-01 16:26:44 UTC	66	IN	Data Raw: 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 61 2d 6c 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 33 33 33 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 37 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 30 36 36 37 65 6d 7d Data Ascii: .fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}
2023-06-01 16:26:44 UTC	96	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 31 22 7d 2e 66 61 2d 62 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 36 22 7d 2e 66 61 2d 62 65 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 63 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 34 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 35 22 7d 2e 66 61 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 33 22 7d 2e 66 61 2d 62 65 6c 6c 2d 73 63 68 6f 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 35 22 7d 2e 66 61 2d 62 65 6c 6c 2d 73 63 68 6f 6f 6c 2d 73 6c 61 73 68 Data Ascii: before{content:"\f241"}.fa-bed:before{content:"\f236"}.fa-beer:before{content:"\f0fc"}.fa-behance:before{content:"\f1b4"}.fa-behance-square:before{content:"\f1b5"}.fa-bell:before{content:"\f0f3"}.fa-bell-school:before{content:"\f5d5"}.fa-bell-school-slash
2023-06-01 16:26:44 UTC	219	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 34 39 22 7d 2e 66 61 2d 65 63 6c 69 70 73 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 34 61 22 7d 2e 66 61 2d 65 64 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 32 22 7d 2e 66 61 2d 65 64 69 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 34 22 7d 2e 66 61 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 32 22 7d 2e 66 61 2d 65 6c 65 6d 65 6e 74 6f 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 33 30 22 7d 2e 66 61 2d 65 6c 65 70 68 61 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 64 61 22 7d 2e 66 61 2d 65 6c 6c 69 70 73 69 73 2d 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: ore{content:"\f749"}.fa-eclipse-alt:before{content:"\f74a"}.fa-edge:before{content:"\f282"}.fa-edit:before{content:"\f044"}.fa-eject:before{content:"\f052"}.fa-elementor:before{content:"\f430"}.fa-elephant:before{content:"\f6da"}.fa-ellipsis-h:before{cont
2023-06-01 16:26:44 UTC	235	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 37 31 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 37 32 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 37 33 22 7d 2e 66 61 2d 6c 69 67 68 74 73 2d 68 6f 6c 69 64 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 62 32 22 7d 2e 66 61 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 63 30 22 7d 2e 66 61 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 31 22 7d 2e 66 61 2d 6c 69 6e 6b 65 64 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 63 22 7d 2e 66 61 2d 6c 69 6e 6b 65 64 Data Ascii: ore{content:"\f671"}.fa-lightbulb-on:before{content:"\f672"}.fa-lightbulb-slash:before{content:"\f673"}.fa-lights-holiday:before{content:"\f7b2"}.fa-line:before{content:"\f3c0"}.fa-link:before{content:"\f0c1"}.fa-linkedin:before{content:"\f08c"}.fa-linked
2023-06-01 16:26:44 UTC	251	IN	Data Raw: 62 37 22 7d 2e 66 61 2d 73 69 6d 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 63 34 22 7d 2e 66 61 2d 73 69 6d 70 6c 79 62 75 69 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 35 22 7d 2e 66 61 2d 73 69 73 74 72 69 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 65 22 7d 2e 66 61 2d 73 69 74 65 6d 61 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 38 22 7d 2e 66 61 2d 73 69 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 32 22 7d 2e 66 61 2d 73 6b 61 74 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 63 35 22 7d 2e 66 61 2d 73 6b 65 6c 65 74 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 32 30 22 7d 2e 66 61 Data Ascii: b7"}.fa-sim-card:before{content:"\f7c4"}.fa-simplybuilt:before{content:"\f215"}.fa-sistrix:before{content:"\f3ee"}.fa-sitemap:before{content:"\f0e8"}.fa-sith:before{content:"\f512"}.fa-skating:before{content:"\f7c5"}.fa-skeleton:before{content:"\f620"}.fa
2023-06-01 16:26:44 UTC	267	IN	Data Raw: 61 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 37 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 33 31 22 7d 2e 66 61 2d 7a 68 69 68 75 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 33 66 22 7d 2e 73 72 2d 6f 6e 6c 79 7b 62 6f 72 64 65 72 3a 30 3b 63 6c 69 70 3a 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 7d 2e 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 61 63 74 69 76 65 2c 2e 73 72 2d 6f 6e 6c Data Ascii: a-youtube:before{content:"\f167"}.fa-youtube-square:before{content:"\f431"}.fa-zhihu:before{content:"\f63f"}.sr-only{border:0;clip:rect(0,0,0,0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.sr-only-focusable:active,.sr-onl

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:43 UTC	52	OUT	GET /v1/assets/font-awesome-5.6.3/css/v4-shims.min.css HTTP/1.1 Host: www.bistrainer.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bistrainer.com/reset-password Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
2023-06-01 16:26:44 UTC	77	IN	HTTP/1.1 200 OK Date: Thu, 01 Jun 2023 16:26:43 GMT Content-Type: text/css Content-Length: 26306 Connection: close Last-Modified: Tue, 17 Mar 2020 21:47:31 GMT Accept-Ranges: bytes ETag: "958516a9a5fcd51:0" Vary: Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2023-06-01 16:26:44 UTC	77	IN	Data Raw: 2e 66 61 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2e 66 61 2d 6d 65 65 74 75 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 73 74 61 72 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 73 74 61 72 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 35 22 7d 2e 66 61 2e 66 61 2d 63 6c 6f 73 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2e 66 61 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 Data Ascii: .fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Pro";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f0
2023-06-01 16:26:44 UTC	144	IN	Data Raw: 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 50 72 6f 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 62 61 72 2d 63 68 61 72 74 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 30 22 7d 2e 66 61 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 73 71 75 61 72 65 2c 2e 66 61 2e 66 61 2d 74 77 69 74 74 65 72 2d 73 71 75 61 72 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 67 65 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 35 22 7d 2e 66 61 2e 66 61 2d 74 68 75 6d 62 73 2d 6f 2d 75 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 Data Ascii: nt Awesome 5 Pro";font-weight:400}.fa.fa-bar-chart-o:before{content:"\f080"}.fa.fa-facebook-square,.fa.fa-twitter-square{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-gears:before{content:"\f085"}.fa.fa-thumbs-o-up{font-family:"Font Awesome 5
2023-06-01 16:26:44 UTC	160	IN	Data Raw: 2e 66 61 2d 79 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 62 22 7d 2e 66 61 2e 66 61 2d 65 78 70 65 64 69 74 65 64 73 73 6c 2c 2e 66 61 2e 66 61 2d 6f 70 65 6e 63 61 72 74 2c 2e 66 61 2e 66 61 2d 6f 70 74 69 6e 2d 6d 6f 6e 73 74 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 62 61 74 74 65 72 79 2d 34 3a 62 65 66 6f 72 65 2c 2e 66 61 2e 66 61 2d 62 61 74 74 65 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 30 22 7d 2e 66 61 2e 66 61 2d 62 61 74 74 65 72 79 2d 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 31 22 7d 2e 66 61 2e 66 61 2d 62 61 74 74 65 72 79 Data Ascii: .fa-yc:before{content:"\f23b"}.fa.fa-expeditedssl,.fa.fa-opencart,.fa.fa-optin-monster{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-battery-4:before,.fa.fa-battery:before{content:"\f240"}.fa.fa-battery-3:before{content:"\f241"}.fa.fa-battery

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.bistrainer.com/reset-password

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
https://www.bistrainer.com/reset-password

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:43 UTC	53	OUT	GET /v1/assets/js/jquery.min.js HTTP/1.1 Host: www.bistrainer.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bistrainer.com/reset-password Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
2023-06-01 16:26:44 UTC	74	IN	HTTP/1.1 200 OK Date: Thu, 01 Jun 2023 16:26:43 GMT Content-Type: application/javascript Content-Length: 97166 Connection: close Last-Modified: Tue, 17 Mar 2020 21:47:31 GMT Accept-Ranges: bytes ETag: "31b6ea9a5fcd51:0" Vary: Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2023-06-01 16:26:44 UTC	74	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d Data Ascii: /! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a docum
2023-06-01 16:26:44 UTC	112	IN	Data Raw: 65 6f 66 20 61 3f 69 5b 6a 2e 63 61 6c 6c 28 61 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 61 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 26 26 6e 2e 74 72 69 6d 28 62 29 26 26 28 61 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 2e 65 76 61 6c 2e 63 61 6c 6c 28 61 2c 62 29 7d 29 28 62 29 7d 2c 63 61 6d 65 6c 43 61 73 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 72 65 70 6c 61 63 65 28 70 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 71 2c 72 29 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d Data Ascii: eof a?i[j.call(a)]\|\|"object":typeof a},globalEval:function(b){b&&n.trim(b)&&(a.execScript\|\|function(b){a.eval.call(a,b)})(b)},camelCase:function(a){return a.replace(p,"ms-").replace(q,r)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()=
2023-06-01 16:26:44 UTC	128	IN	Data Raw: 72 65 6e 74 4e 6f 64 65 22 3d 3d 3d 64 2c 66 3d 78 2b 2b 3b 72 65 74 75 72 6e 20 62 2e 66 69 72 73 74 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 66 29 7b 77 68 69 6c 65 28 62 3d 62 5b 64 5d 29 69 66 28 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 7c 7c 65 29 72 65 74 75 72 6e 20 61 28 62 2c 63 2c 66 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 67 29 7b 76 61 72 20 68 2c 69 2c 6a 2c 6b 3d 5b 77 2c 66 5d 3b 69 66 28 67 29 7b 77 68 69 6c 65 28 62 3d 62 5b 64 5d 29 69 66 28 28 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 7c 7c 65 29 26 26 61 28 62 2c 63 2c 67 29 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 77 68 69 6c 65 28 62 3d 62 5b 64 5d 29 69 66 28 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 7c 7c 65 29 7b 69 66 28 6a 3d 62 5b 75 5d 7c 7c 28 62 5b 75 5d 3d 7b Data Ascii: rentNode"===d,f=x++;return b.first?function(b,c,f){while(b=b[d])if(1===b.nodeType\|\|e)return a(b,c,f)}:function(b,c,g){var h,i,j,k=[w,f];if(g){while(b=b[d])if((1===b.nodeType\|\|e)&&a(b,c,g))return!0}else while(b=b[d])if(1===b.nodeType\|\|e){if(j=b[u]\|\|(b[u]={
2023-06-01 16:26:44 UTC	269	IN	Data Raw: 22 29 2c 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 72 64 65 72 3a 30 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 2d 39 39 39 39 70 78 22 2c 63 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 73 74 79 6c 65 2e 7a 6f 6f 6d 26 26 28 62 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 64 69 73 70 6c Data Ascii: "),e.style.cssText="position:absolute;border:0;width:0;height:0;top:0;left:-9999px",c.appendChild(e).appendChild(b),"undefined"!=typeof b.style.zoom&&(b.style.cssText="-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;displ
2023-06-01 16:26:44 UTC	279	IN	Data Raw: 7c 7c 76 6f 69 64 20 30 3d 3d 3d 67 7c 7c 28 61 2e 77 68 69 63 68 3d 31 26 67 3f 31 3a 32 26 67 3f 33 3a 34 26 67 3f 32 3a 30 29 2c 61 7d 7d 2c 73 70 65 63 69 61 6c 3a 7b 6c 6f 61 64 3a 7b 6e 6f 42 75 62 62 6c 65 3a 21 30 7d 2c 66 6f 63 75 73 3a 7b 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 21 3d 3d 72 61 28 29 26 26 74 68 69 73 2e 66 6f 63 75 73 29 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 63 75 73 28 29 2c 21 31 7d 63 61 74 63 68 28 61 29 7b 7d 7d 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 66 6f 63 75 73 69 6e 22 7d 2c 62 6c 75 72 3a 7b 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 3d 3d 3d 72 61 28 29 26 26 74 68 69 73 2e 62 6c 75 72 3f 28 74 68 69 73 2e 62 6c Data Ascii: \|\|void 0===g\|\|(a.which=1&g?1:2&g?3:4&g?2:0),a}},special:{load:{noBubble:!0},focus:{trigger:function(){if(this!==ra()&&this.focus)try{return this.focus(),!1}catch(a){}},delegateType:"focusin"},blur:{trigger:function(){return this===ra()&&this.blur?(this.bl
2023-06-01 16:26:44 UTC	295	IN	Data Raw: 29 7b 7d 7d 7d 2c 63 73 73 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 2c 66 2c 67 2c 68 3d 6e 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 3b 72 65 74 75 72 6e 20 62 3d 6e 2e 63 73 73 50 72 6f 70 73 5b 68 5d 7c 7c 28 6e 2e 63 73 73 50 72 6f 70 73 5b 68 5d 3d 62 62 28 68 29 7c 7c 68 29 2c 67 3d 6e 2e 63 73 73 48 6f 6f 6b 73 5b 62 5d 7c 7c 6e 2e 63 73 73 48 6f 6f 6b 73 5b 68 5d 2c 67 26 26 22 67 65 74 22 69 6e 20 67 26 26 28 66 3d 67 2e 67 65 74 28 61 2c 21 30 2c 63 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 66 26 26 28 66 3d 53 61 28 61 2c 62 2c 64 29 29 2c 22 6e 6f 72 6d 61 6c 22 3d 3d 3d 66 26 26 62 20 69 6e 20 24 61 26 26 28 66 3d 24 61 5b 62 5d 29 2c 22 22 3d 3d 3d 63 7c 7c 63 3f 28 65 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 29 2c 63 3d Data Ascii: ){}}},css:function(a,b,c,d){var e,f,g,h=n.camelCase(b);return b=n.cssProps[h]\|\|(n.cssProps[h]=bb(h)\|\|h),g=n.cssHooks[b]\|\|n.cssHooks[h],g&&"get"in g&&(f=g.get(a,!0,c)),void 0===f&&(f=Sa(a,b,d)),"normal"===f&&b in $a&&(f=$a[b]),""===c\|\|c?(e=parseFloat(f),c=
2023-06-01 16:26:44 UTC	385	IN	Data Raw: 6e 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 2c 43 62 28 74 68 69 73 29 29 29 7d 29 3b 69 66 28 21 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 68 69 73 2e 61 74 74 72 28 22 63 6c 61 73 73 22 2c 22 22 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 61 29 7b 62 3d 61 2e 6d 61 74 63 68 28 47 29 7c 7c 5b 5d 3b 77 68 69 6c 65 28 63 3d 74 68 69 73 5b 69 2b 2b 5d 29 69 66 28 65 3d 43 62 28 63 29 2c 64 3d 31 3d 3d 3d 63 2e 6e 6f 64 65 54 79 70 65 26 26 28 22 20 22 2b 65 2b 22 20 22 29 2e 72 65 70 6c 61 63 65 28 42 62 2c 22 20 22 29 29 7b 67 3d 30 3b 77 68 69 6c 65 28 66 3d 62 5b 67 2b 2b 5d 29 77 68 69 6c 65 28 64 2e 69 6e 64 65 78 4f 66 28 22 20 22 2b Data Ascii: n(this).removeClass(a.call(this,b,Cb(this)))});if(!arguments.length)return this.attr("class","");if("string"==typeof a&&a){b=a.match(G)\|\|[];while(c=this[i++])if(e=Cb(c),d=1===c.nodeType&&(" "+e+" ").replace(Bb," ")){g=0;while(f=b[g++])while(d.indexOf(" "+
2023-06-01 16:26:44 UTC	401	IN	Data Raw: 29 26 26 22 73 74 61 74 69 63 22 3d 3d 3d 6e 2e 63 73 73 28 61 2c 22 70 6f 73 69 74 69 6f 6e 22 29 29 61 3d 61 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 3b 72 65 74 75 72 6e 20 61 7c 7c 51 61 7d 29 7d 7d 29 2c 6e 2e 65 61 63 68 28 7b 73 63 72 6f 6c 6c 4c 65 66 74 3a 22 70 61 67 65 58 4f 66 66 73 65 74 22 2c 73 63 72 6f 6c 6c 54 6f 70 3a 22 70 61 67 65 59 4f 66 66 73 65 74 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 2f 59 2f 2e 74 65 73 74 28 62 29 3b 6e 2e 66 6e 5b 61 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 59 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 2c 65 29 7b 76 61 72 20 66 3d 6d 63 28 61 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 3f 66 3f 62 20 69 6e 20 66 3f 66 5b 62 5d 3a 66 2e Data Ascii: )&&"static"===n.css(a,"position"))a=a.offsetParent;return a\|\|Qa})}}),n.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(a,b){var c=/Y/.test(b);n.fn[a]=function(d){return Y(this,function(a,d,e){var f=mc(a);return void 0===e?f?b in f?f[b]:f.

Timestamp	kBytes transferred	Direction	Data
2023-06-01 16:26:44 UTC	65	OUT	GET /v1/assets/js/bootstrap.min.js HTTP/1.1 Host: www.bistrainer.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bistrainer.com/reset-password Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8 Cookie: CFID=2168501; CFTOKEN=53ce368450d2b6c-ADD3F266-F85B-3C22-F2B4C3152B3D483D; PRIVATESITECOMPANYNUMBER=1; PRIVATESITECURRENCYTYPE=1
2023-06-01 16:26:44 UTC	312	IN	HTTP/1.1 200 OK Date: Thu, 01 Jun 2023 16:26:44 GMT Content-Type: application/javascript Content-Length: 39685 Connection: close Last-Modified: Tue, 17 Mar 2020 21:47:31 GMT Accept-Ranges: bytes ETag: "8da962a9a5fcd51:0" Vary: Accept-Encoding X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2023-06-01 16:26:44 UTC	313	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0d 0a 20 2a 2f 0d 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 6a 51 75 Data Ascii: /! Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");!function(t){"use strict";var e=jQu
2023-06-01 16:26:44 UTC	325	IN	Data Raw: 74 75 72 6e 21 31 7d 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 2f 28 33 38 7c 34 30 7c 32 37 7c 33 32 29 2f 2e 74 65 73 74 28 74 2e 77 68 69 63 68 29 26 26 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 7b 76 61 72 20 65 3d 61 28 74 68 69 73 29 3b 69 66 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 21 65 2e 69 73 28 22 2e 64 69 73 61 62 6c 65 64 2c 20 3a 64 69 73 61 62 6c 65 64 22 29 29 7b 76 61 72 20 69 3d 6c 28 65 29 2c 6f 3d 69 2e 68 61 73 43 6c 61 73 73 28 22 6f 70 65 6e 22 29 3b 69 66 28 21 6f 26 26 32 37 21 3d 74 2e 77 68 69 63 68 Data Ascii: turn!1}},o.prototype.keydown=function(t){if(/(38\|40\|27\|32)/.test(t.which)&&!/input\|textarea/i.test(t.target.tagName)){var e=a(this);if(t.preventDefault(),t.stopPropagation(),!e.is(".disabled, :disabled")){var i=l(e),o=i.hasClass("open");if(!o&&27!=t.which
2023-06-01 16:26:44 UTC	404	IN	Data Raw: 68 69 73 2e 67 65 74 50 6f 73 69 74 69 6f 6e 28 74 68 69 73 2e 24 76 69 65 77 70 6f 72 74 29 3b 69 66 28 2f 72 69 67 68 74 7c 6c 65 66 74 2f 2e 74 65 73 74 28 74 29 29 7b 76 61 72 20 72 3d 65 2e 74 6f 70 2d 73 2d 61 2e 73 63 72 6f 6c 6c 2c 6c 3d 65 2e 74 6f 70 2b 73 2d 61 2e 73 63 72 6f 6c 6c 2b 6f 3b 72 3c 61 2e 74 6f 70 3f 6e 2e 74 6f 70 3d 61 2e 74 6f 70 2d 72 3a 6c 3e 61 2e 74 6f 70 2b 61 2e 68 65 69 67 68 74 26 26 28 6e 2e 74 6f 70 3d 61 2e 74 6f 70 2b 61 2e 68 65 69 67 68 74 2d 6c 29 7d 65 6c 73 65 7b 76 61 72 20 68 3d 65 2e 6c 65 66 74 2d 73 2c 64 3d 65 2e 6c 65 66 74 2b 73 2b 69 3b 68 3c 61 2e 6c 65 66 74 3f 6e 2e 6c 65 66 74 3d 61 2e 6c 65 66 74 2d 68 3a 64 3e 61 2e 72 69 67 68 74 26 26 28 6e 2e 6c 65 66 74 3d 61 2e 6c 65 66 74 2b 61 2e 77 69 64 Data Ascii: his.getPosition(this.$viewport);if(/right\|left/.test(t)){var r=e.top-s-a.scroll,l=e.top+s-a.scroll+o;r<a.top?n.top=a.top-r:l>a.top+a.height&&(n.top=a.top+a.height-l)}else{var h=e.left-s,d=e.left+s+i;h<a.left?n.left=a.left-h:d>a.right&&(n.left=a.left+a.wid

Target ID:	0
Start time:	18:26:38
Start date:	01/06/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff683680000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	1
Start time:	18:26:39
Start date:	01/06/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1952 --field-trial-handle=1736,i,5265595831349821039,14869088654207509317,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff683680000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	2
Start time:	18:26:41
Start date:	01/06/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.bistrainer.com/reset-password
Imagebase:	0x7ff683680000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre