Edit tour

Windows Analysis Report
https://mellifluous-squirrel-aca5c4.netlify.app/

Overview

General Information

Sample URL:	https://mellifluous-squirrel-aca5c4.netlify.app/
Analysis ID:	1500174
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

No HTML title found

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5440 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2044,i,11406627536667275334,7003104820700068253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mellifluous-squirrel-aca5c4.netlify.app/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Suricata Signatures

ET PHISHING Possible Phish - Saved Website Comment Observed - Source IP: 18.192.94.96 - Destination IP: 192.168.2.7

Timestamp:	2024-08-28T00:41:26.988476+0200
SID:	2018334
Severity:	2
Source Port:	443
Destination Port:	49704
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ETPRO PHISHING Possible Netlify Hosted Phishing Landing 2021-08-13 M1 - Source IP: 18.192.94.96 - Destination IP: 192.168.2.7

Timestamp:	2024-08-28T00:41:26.988476+0200
SID:	2849635
Severity:	2
Source Port:	443
Destination Port:	49704
Protocol:	TCP
Classtype:	Possible Social Engineering Attempted

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: https://mellifluous-squirrel-aca5c4.netlify.app/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://mellifluous-squirrel-aca5c4.netlify.app/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://mellifluous-squirrel-aca5c4.netlify.app/	HTTP Parser: Iframe src: javascript:false
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: Iframe src: javascript:false
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: Iframe src: javascript:false
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: Iframe src: javascript:false
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: Iframe src: javascript:false

Source: https://mellifluous-squirrel-aca5c4.netlify.app/	HTTP Parser: Number of links: 0
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: Number of links: 0

Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: HTML title missing
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: HTML title missing
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: HTML title missing
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: HTML title missing

Source: https://mellifluous-squirrel-aca5c4.netlify.app/	HTTP Parser: <input type="password" .../> found
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: <input type="password" .../> found

Source: https://www.networksolutions.com/mail-admin/forgot-password/?user=solomon.chika1@gmail.com	HTTP Parser: No favicon
Source: https://www.networksolutions.com/mail-admin/forgot-password/?user=solomon.chika1@gmail.com	HTTP Parser: No favicon
Source: https://www.networksolutions.com/mail-admin/forgot-password/?user=solomon.chika1@gmail.com	HTTP Parser: No favicon
Source: https://www.networksolutions.com/mail-admin/forgot-password/?user=solomon.chika1@gmail.com	HTTP Parser: No favicon
Source: https://legal.newfold.com/	HTTP Parser: No favicon
Source: https://legal.newfold.com/	HTTP Parser: No favicon
Source: https://www.networksolutions.com/help/article/tls-1-and-tls-1-1-discontinued	HTTP Parser: No favicon
Source: https://www.networksolutions.com/help/article/tls-1-and-tls-1-1-discontinued	HTTP Parser: No favicon
Source: https://www.networksolutions.com/help/article/tls-1-and-tls-1-1-discontinued	HTTP Parser: No favicon
Source: https://www.networksolutions.com/help/article/tls-1-and-tls-1-1-discontinued	HTTP Parser: No favicon
Source: https://www.networksolutions.com/help/article/tls-1-and-tls-1-1-discontinued	HTTP Parser: No favicon

Source: https://mellifluous-squirrel-aca5c4.netlify.app/	HTTP Parser: No <meta name="author".. found
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: No <meta name="author".. found
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: No <meta name="author".. found
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: No <meta name="author".. found
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: No <meta name="author".. found

Source: https://mellifluous-squirrel-aca5c4.netlify.app/	HTTP Parser: No <meta name="copyright".. found
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: No <meta name="copyright".. found
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: No <meta name="copyright".. found
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: No <meta name="copyright".. found
Source: https://webmail-oxcs.networksolutionsemail.com/appsuite/#	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.127.240.158:443 -> 192.168.2.7:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.68:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.68:443 -> 192.168.2.7:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.124.78.146:443 -> 192.168.2.7:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.124.78.146:443 -> 192.168.2.7:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.124.78.146:443 -> 192.168.2.7:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.124.78.146:443 -> 192.168.2.7:49925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.44.239.154:443 -> 192.168.2.7:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.44.239.154:443 -> 192.168.2.7:49933 version: TLS 1.2

Source: Network traffic	Suricata IDS: 2018334 - Severity 2 - ET PHISHING Possible Phish - Saved Website Comment Observed : 18.192.94.96:443 -> 192.168.2.7:49704
Source: Network traffic	Suricata IDS: 2849635 - Severity 2 - ETPRO PHISHING Possible Netlify Hosted Phishing Landing 2021-08-13 M1 : 18.192.94.96:443 -> 192.168.2.7:49704

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.240.158
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.240.158
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.240.158
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.240.158
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.240.158
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.240.158
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.240.158
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.240.158
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.68
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.68
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.68
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.68
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.68
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.68
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.68
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.68
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.68
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.68
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.68
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.68
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.68

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mellifluous-squirrel-aca5c4.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/lib/polyfills/text-encode-transform.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/assets/preload-helper-8e8fda77.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/polyfills.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/precore.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/assets/backbone-4a1c3505.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/main.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/network/media/index.html.js.download HTTP/1.1Host: wafsd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mellifluous-squirrel-aca5c4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/network/media/main-781bf877.css HTTP/1.1Host: wafsd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mellifluous-squirrel-aca5c4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/network/media/error-generic.svg HTTP/1.1Host: wafsd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mellifluous-squirrel-aca5c4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/network/media/logo HTTP/1.1Host: wafsd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mellifluous-squirrel-aca5c4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/assets/_commonjsHelpers-f1787057.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/jquery.plugins.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/ox.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/version.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/debug.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/lib/jquery.lazyload.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/underscore-mixins.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/browser.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/url.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/core/boot/main.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/core/extensions.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/core/event.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/core/extPatterns/stage.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/favicon.svg?version=3999779421 HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mellifluous-squirrel-aca5c4.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/core/boot/util.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/lib/polyfills/text-encode-transform.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/core/boot/form.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/assets/index-ee00239c.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/assets/moment-06cb5922.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/polyfills.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/precore.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/core/http.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/core.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/main.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/network/media/error-generic.svg HTTP/1.1Host: wafsd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/jquery.plugins.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/debug.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/network/media/logo HTTP/1.1Host: wafsd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appsuite/io.ox/core/util.js HTTP/1.1Host: webmail-oxcs.networksolutionsemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mellifluous-squirrel-aca5c4.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_966.2.dr, chromecache_1185.2.dr, chromecache_1054.2.dr, chromecache_1147.2.dr, chromecache_1260.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Vj:function(){e=Bb()},md:function(){d()}}};var hc=ja(["data-gtm-yt-inspected-"]),sC=["www.youtube.com","www.youtube-nocookie.com"],tC,uC=!1; equals www.youtube.com (Youtube)
Source: chromecache_1054.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=aA(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Mb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},dA=function(){var a=[],b=function(c){return rb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_966.2.dr, chromecache_1185.2.dr, chromecache_1054.2.dr, chromecache_1147.2.dr, chromecache_1260.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Yg:e,Wg:f,Xg:g,Ih:k,Jh:m,Ee:n,Bb:b},q=E.YT;if(q)return q.ready&&q.ready(d),b;var r=E.onYouTubeIframeAPIReady;E.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var t=F.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(DC(w,"iframe_api")\|\|DC(w,"player_api"))return b}for(var x=F.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!uC&&BC(x[A],p.Ee))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_1075.2.dr, chromecache_1210.2.dr, chromecache_1060.2.dr, chromecache_1146.2.dr	String found in binary or memory: return b}qC.J="internal.enableAutoEventOnTimer";var hc=ja(["data-gtm-yt-inspected-"]),sC=["www.youtube.com","www.youtube-nocookie.com"],tC,uC=!1; equals www.youtube.com (Youtube)
Source: chromecache_1253.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_1253.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_1253.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_1054.2.dr	String found in binary or memory: var FB=function(a,b,c,d,e){var f=yz("fsl",c?"nv.mwt":"mwt",0),g;g=c?yz("fsl","nv.ids",[]):yz("fsl","ids",[]);if(!g.length)return!0;var k=Dz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!my(k,ny(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: mellifluous-squirrel-aca5c4.netlify.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: wafsd.com
Source: global traffic	DNS traffic detected: DNS query: webmail-oxcs.networksolutionsemail.com
Source: global traffic	DNS traffic detected: DNS query: www.networksolutions.com
Source: global traffic	DNS traffic detected: DNS query: update.networksolutions.com
Source: global traffic	DNS traffic detected: DNS query: legal.web.com
Source: global traffic	DNS traffic detected: DNS query: legal.newfold.com
Source: global traffic	DNS traffic detected: DNS query: customerservice.networksolutions.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: static.registration.bluehost.com
Source: global traffic	DNS traffic detected: DNS query: sfbff.newfold.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: enduranceproductionsfmneu4v.org.coveo.com
Source: global traffic	DNS traffic detected: DNS query: registercom.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: registercom.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: newfold.scene7.com
Source: global traffic	DNS traffic detected: DNS query: zn6lg7hrxxxhqmxh4-newfolddigital.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: registercom.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: edge.fullstory.com
Source: global traffic	DNS traffic detected: DNS query: d.impactradius-event.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rs.fullstory.com
Source: global traffic	DNS traffic detected: DNS query: 578176.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.rtb123.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: files1.cybba.solutions
Source: global traffic	DNS traffic detected: DNS query: d2rp1k1dldbai6.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originReferrer-Policy: no-referrerX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINAccess-Control-Allow-Origin: *Version: 1692547111Latest-Version: 1692547111Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Tue, 27 Aug 2024 22:41:28 GMTVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originReferrer-Policy: no-referrerX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINAccess-Control-Allow-Origin: *Version: 1692547111Latest-Version: 1692547111Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Tue, 27 Aug 2024 22:41:28 GMTVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originReferrer-Policy: no-referrerX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINAccess-Control-Allow-Origin: *Version: 1692547111Latest-Version: 1692547111Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Tue, 27 Aug 2024 22:41:28 GMTVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originReferrer-Policy: no-referrerX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINAccess-Control-Allow-Origin: *Version: 1692547111Latest-Version: 1692547111Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Tue, 27 Aug 2024 22:41:31 GMTVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originReferrer-Policy: no-referrerX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINAccess-Control-Allow-Origin: *Version: 1692547111Latest-Version: 1692547111Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Tue, 27 Aug 2024 22:41:31 GMTVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originReferrer-Policy: no-referrerX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINAccess-Control-Allow-Origin: *Version: 1692547111Latest-Version: 1692547111Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Tue, 27 Aug 2024 22:41:32 GMTVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originReferrer-Policy: no-referrerX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINAccess-Control-Allow-Origin: *Version: 1692547111Latest-Version: 1692547111Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Tue, 27 Aug 2024 22:41:32 GMTVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 27 Aug 2024 22:41:32 GMTContent-Type: application/xmlContent-Length: 249X-Amz-Request-Id: tx00000cc1a3d6bed076710-0066ce561c-10857dcb0-msc1X-App-Server: rgw16fra15Vary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originReferrer-Policy: no-referrerX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINAccess-Control-Allow-Origin: *Version: 1692547111Latest-Version: 1692547111Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Tue, 27 Aug 2024 22:41:36 GMTVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originReferrer-Policy: no-referrerX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINAccess-Control-Allow-Origin: *Version: 1692547111Latest-Version: 1692547111Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Tue, 27 Aug 2024 22:41:36 GMTVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCross-Origin-Opener-Policy: same-origin-allow-popupsCross-Origin-Resource-Policy: same-originReferrer-Policy: no-referrerX-Dns-Prefetch-Control: offX-Frame-Options: SAMEORIGINAccess-Control-Allow-Origin: *Version: 1692547111Latest-Version: 1692547111Content-Type: text/html; charset=utf-8Content-Length: 10838Date: Tue, 27 Aug 2024 22:41:36 GMTVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/xmlTransfer-Encoding: chunkedConnection: closeServer: AmazonS3Date: Tue, 27 Aug 2024 22:41:59 GMTX-Cache: Error from cloudfrontVia: 1.1 32301bfd0e3b06c528ccd8abdb13411e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: AMS58-P6X-Amz-Cf-Id: MTMPByWpHXeCxE7eN9Je5alhQJa1qMYizbBgB1GtIU7qc9rv3loL-A==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Tue, 27 Aug 2024 22:42:06 GMTConnection: closeContent-Length: 1245
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 27 Aug 2024 22:42:23 GMTContent-Type: application/xmlContent-Length: 249X-Amz-Request-Id: tx000006584ee9a5e8776e3-0066ce564f-10857dcb0-msc1Accept-Ranges: bytesX-App-Server: rgw16fra15Vary: Accept-EncodingStrict-Transport-Security: max-age=15552000; includeSubDomains; preload;X-Content-Type-Options: nosniffX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 27 Aug 2024 22:42:24 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeContent-Security-Policy: frame-ancestors .networksolutions.com .networksolutionsemail.com *.namesecureemail.netX-Dispatcher: 04X-Vhost: publishStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffCF-Cache-Status: HITServer: cloudflareCF-RAY: 8b9f93147b5241cd-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 27 Aug 2024 22:42:25 GMTContent-Type: text/html; charset=UTF-8Content-Length: 17250Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2044,i,11406627536667275334,7003104820700068253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mellifluous-squirrel-aca5c4.netlify.app/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2044,i,11406627536667275334,7003104820700068253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://mellifluous-squirrel-aca5c4.netlify.app/	100%	Avira URL Cloud	phishing
https://mellifluous-squirrel-aca5c4.netlify.app/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
http://www.typoland.com/http://www.typoland.com/designers/Lukasz_Dziedzic/Copyright	0%	Avira URL Cloud	safe
https://www.networksolutions.com/help/_next/static/chunks/702-309589006fc1eea1.js	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/core/extPatterns/stage.js	0%	Avira URL Cloud	safe
https://caniuse.com/high-resolution-time	0%	Avira URL Cloud	safe
https://assets.adobedtm.com/530368109655/f1f8bc547915/5b24d0bab2dd/RC4b7084eae62647a58e8af0fa32a590d	0%	Avira URL Cloud	safe
https://www.networksolutions.com/help/_next/static/css/e06e3fd5cc99a044.css	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/forEach)	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/bundles/boot.js	0%	Avira URL Cloud	safe
https://angular.io/guide/browser-support	0%	Avira URL Cloud	safe
https://http.webcom.xion.oxcs.net	0%	Avira URL Cloud	safe
https://siteintercept.qualtrics.com	0%	URL Reputation	safe
https://www.google.com/recaptcha/api2/bframe?hl=en&v=i7X0JrnYWy9Y_5EYdoFM79kV&k=6LckPygTAAAAALJth72ssXXtVNA0ntZdql8PiUXM	0%	Avira URL Cloud	safe
https://angular.io/guide/built-in-directives#one-per-element).	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/multipage/input.html#valid-e-mail-address)	0%	Avira URL Cloud	safe
https://github.com/angular/zone.js/issues/525	0%	Avira URL Cloud	safe
https://github.com/angular/angular/issues/38795	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/service-worker.js	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/multifactor/login/error_handler.js	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/core/api/tab.js	0%	Avira URL Cloud	safe
https://legal.newfold.com/bundles/jquery?v=MRjVrMuK9DXe6nW0tFmw9cj1pT5oo4Jf-eJQmGfwEF01	0%	Avira URL Cloud	safe
https://static.registration.bluehost.com/genesys/messaging/LATEST/main.js	0%	Avira URL Cloud	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/browser.js	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=358590757843992&ev=PageView&dl=https%3A%2F%2Fwww.networksolutions.com%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&rl=&if=false&ts=1724798552325&sw=1280&sh=1024&v=2.9.166&r=stable&a=adobe_launch&ec=0&o=4126&fbp=fb.1.1724798552318.292413790723587885&ler=empty&cdl=API_unavailable&it=1724798545458&coo=false&tm=1&rqm=GET	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/#the-indicated-part-of-the-document	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/loginproxy/form-9f0fa600.js	0%	Avira URL Cloud	safe
https://www.networksolutions.com/favicon.ico	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/API/HTMLElement/input_event#browser_compatibility	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/externalcontentpopup.js	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS)	0%	Avira URL Cloud	safe
https://www.networksolutions.com/help/_next/static/chunks/pages/article/%5BarticleName%5D-da5a6a2230e1c281.js	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/multipage/syntax.html#comments	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/assets/preload-helper-8e8fda77.js	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/#focusable-area	0%	Avira URL Cloud	safe
https://wafsd.com/app/network/media/logo	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=i7X0JrnYWy9Y_5EYdoFM79kV	0%	Avira URL Cloud	safe
https://rs.fullstory.com/rec/integrations?OrgId=o-19W3ZC-na1&isInFrame=false&isNative=false	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox.blackwhitelist/io.ox.blackwhitelist-df4f5308.js	0%	Avira URL Cloud	safe
https://github.com/angular/angular/issues/7916	0%	Avira URL Cloud	safe
https://edge.fullstory.com/datalayer/v4/latest.js	0%	Avira URL Cloud	safe
https://jsperf.com/fast-array-splice	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/core/session.js	0%	Avira URL Cloud	safe
https://registercom.sc.omtrdc.net/b/ss/registerweb.com-parent-production/1/JS-2.25.0-LDQM/s37673771447638?AQB=1&ndh=1&pf=1&t=27%2F7%2F2024%2018%3A42%3A28%202%20240&sdid=32145A85C4A71885-58A50513B45D131F&mid=48147797641663739712677741124780420990&aamlh=6&ce=UTF-8&pageName=networksolutions.com%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&g=https%3A%2F%2Fwww.networksolutions.com%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&cc=USD&ch=help&server=www.networksolutions.com&events=event4&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=D%3Dv1&v1=https%3A%2F%2Fwww.networksolutions.com%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&v2=%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&c3=D%3Dv3&v3=www.networksolutions.com&c6=https%3A%2F%2Fwww.networksolutions.com%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&v8=networksolutions.com%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&c12=year%3D2024%20%7C%20month%3DAugust%20%7C%20date%3D27%20%7C%20day%3DTuesday%20%7C%20time%3D6%3A42%20PM&c13=production&v32=false&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=A8B5776A5245B4360A490D44%40AdobeOrg&AQE=1	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/some)	0%	Avira URL Cloud	safe
https://web.com/legal/privacy-policy.aspx	0%	Avira URL Cloud	safe
https://d.impactradius-event.com/A12279-f447-4934-9eb3-5c51b6199b4e1.js	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/gettext.js	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/#get-the-focusable-area	0%	Avira URL Cloud	safe
https://www.networksolutions.com/help/_next/static/css/35cbff6742b74bf6.css	0%	Avira URL Cloud	safe
https://tools.ietf.org/html/rfc3986#section-5.2.2).	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/core/boot/rampup.js	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/switchboard/settings.js	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/core/boot/fixes.js	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/favicon.ico	0%	Avira URL Cloud	safe
https://html.spec.whatwg.org/#scroll-to-fragid	0%	Avira URL Cloud	safe
https://app.cybba.solutions/event/2920/pageview?data=%7B%22userId%22%3A%223204486039095285%22%2C%22type%22%3A%22pageview%22%2C%22url%22%3A%22https%253A%252F%252Fwww.networksolutions.com%252Fhelp%252Farticle%252Ftls-1-and-tls-1-1-discontinued%22%2C%22generic%22%3A%7B%22itemId%22%3A%22n%2Fa%22%7D%2C%22device%22%3A%22desktop%22%7D&callback=_vtsdk.eventApi.callbackEvent&_ts=98354644	0%	Avira URL Cloud	safe
https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19W3ZC-na1&UserId=eb912e11-5876-4375-aa6b-a38b76ec84af&SessionId=cc9aa52e-c1d7-4049-b622-4fdc9f8cb8ec&PageId=71291466-5c2d-4681-ab36-b00bcc30f950&Seq=2&ClientTime=1724798561285&PageStart=1724798553856&PrevBundleTime=1724798556831&IsNewSession=true&ContentEncoding=gzip	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/reduce)	0%	Avira URL Cloud	safe
https://http.register.xion.oxcs.net	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/find)	0%	Avira URL Cloud	safe
https://github.com/angular/zone.js/issues/778	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox.gdpr/io.ox.gdpr-c98277dd.js	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/ox.js	0%	Avira URL Cloud	safe
https://www.rtb123.com/tags/610C6992-0AC5-A4E3-8013-CFB52ECE0F43/btp.js	0%	Avira URL Cloud	safe
https://github.com/angular/zone.js/issues/836	0%	Avira URL Cloud	safe
https://github.com/angular/tsickle/issues/497	0%	Avira URL Cloud	safe
http://cldr.unicode.org/translation/number-patterns)	0%	Avira URL Cloud	safe
https://wafsd.com/app/network/media/saved_resource.html	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/map)	0%	Avira URL Cloud	safe
https://www.networksolutions.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/6790c32b9fc9/main.js?	0%	Avira URL Cloud	safe
https://www.networksolutions.com/help/_next/static/chunks/494.731e2709d4bb499b.js	0%	Avira URL Cloud	safe
https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19W3ZC-na1&UserId=eb912e11-5876-4375-aa6b-a38b76ec84af&SessionId=cc9aa52e-c1d7-4049-b622-4fdc9f8cb8ec&PageId=71291466-5c2d-4681-ab36-b00bcc30f950&Seq=5&ClientTime=1724798567501&PageStart=1724798553856&PrevBundleTime=1724798568019&IsNewSession=true&DeltaT=2887&ContentEncoding=gzip	0%	Avira URL Cloud	safe
https://www.networksolutions.com/help/_next/static/chunks/664-339c0d1773136295.js	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/ox-metrics.js	0%	Avira URL Cloud	safe
https://legal.web.com/Document/Get/TermsOfUse	0%	Avira URL Cloud	safe
https://www.networksolutions.com/help/article/KC-2049	0%	Avira URL Cloud	safe
https://g.co/ng/security).	0%	Avira URL Cloud	safe
https://www.networksolutions.com/help/_next/static/chunks/webpack-71988fd6c61a5e4a.js	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-user-list/1072341499/?random	0%	Avira URL Cloud	safe
https://dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=A8B5776A5245B4360A490D44%40AdobeOrg&d_nsid=0&ts=1724798544056	0%	Avira URL Cloud	safe
https://github.com/w3c/webappsec-trusted-types/wiki/Trusted-Types-for-function-constructor	0%	Avira URL Cloud	safe
https://angular.io/errors	0%	Avira URL Cloud	safe
https://http.netsol.xion.oxcs.net	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/favicon.svg?version=3999779421	0%	Avira URL Cloud	safe
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/guidedtours/preload-helper-a4192956.js	0%	Avira URL Cloud	safe
https://submit-form.com/UHa2jok2U	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_shadow_DOM)	0%	Avira URL Cloud	safe
https://github.com/angular/angular/pull/33072	0%	Avira URL Cloud	safe
https://angular.io/guide/i18n)	0%	Avira URL Cloud	safe
https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19W3ZC-na1&UserId=eb912e11-5876-4375-aa6b-a38b76ec84af&SessionId=cc9aa52e-c1d7-4049-b622-4fdc9f8cb8ec&PageId=71291466-5c2d-4681-ab36-b00bcc30f950&Seq=2&ClientTime=1724798559216&PageStart=1724798553856&PrevBundleTime=1724798556831&IsNewSession=true&SkipResponseBody=true	0%	Avira URL Cloud	safe
https://legal.newfold.com/favicon.ico	0%	Avira URL Cloud	safe
https://ib.adnxs.com/getuidj	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	unknown
dart.l.doubleclick.net	216.58.212.166	true	false	unknown
d1z2zdb8i01dyw.cloudfront.net	18.239.18.8	true	false	unknown
registercom.sc.omtrdc.net	63.140.62.27	true	false	unknown
static.registration.bluehost.com	172.64.146.48	true	false	unknown
legal.newfold.com	207.204.41.21	true	false	unknown
adservice.google.com	216.58.212.130	true	false	unknown
platform.twitter.map.fastly.net	146.75.120.157	true	false	unknown
customerservice.web.com	205.178.187.43	true	false	unknown
stats.g.doubleclick.net	74.125.206.157	true	false	unknown
adobetarget.data.adobedc.net	66.235.152.225	true	false	unknown
scontent.xx.fbcdn.net	157.240.253.1	true	false	unknown
sfbff.newfold.com	104.18.42.77	true	false	unknown
t.co	93.184.221.165	true	false	unknown
script.hotjar.com	13.227.219.3	true	false	unknown
legal.web.com	207.204.41.21	true	false	unknown
rtb123.com	67.225.220.126	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
d.impactradius-event.com	35.186.249.72	true	false	unknown
cybfiles.b-cdn.net	169.150.236.105	true	false	unknown
files2.cybba.solutions	138.197.61.175	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	108.128.60.40	true	false	unknown
app.cybba.solutions	138.197.61.175	true	false	unknown
www.networksolutions.com	162.159.133.53	true	false	unknown
static-cdn.hotjar.com	18.239.94.85	true	false	unknown
star-mini.c10r.facebook.com	157.240.252.35	true	false	unknown
mellifluous-squirrel-aca5c4.netlify.app	18.192.94.96	true	false	unknown
s.twitter.com	104.244.42.67	true	false	unknown
ad.doubleclick.net	142.250.185.102	true	false	unknown
http.netsol.xion.oxcs.net	23.81.68.43	true	false	unknown
edge.fullstory.com	35.201.112.186	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	unknown
rs.fullstory.com	35.186.194.58	true	false	unknown
wafsd.com	195.35.33.215	true	false	unknown
analytics-alv.google.com	216.239.32.181	true	false	unknown
googleads.g.doubleclick.net	172.217.23.98	true	false	unknown
enduranceproductionsfmneu4v.org.coveo.com	75.2.21.6	true	false	unknown
td.doubleclick.net	142.250.185.130	true	false	unknown
ib.anycast.adnxs.com	37.252.172.123	true	false	unknown
d2rp1k1dldbai6.cloudfront.net	13.32.118.170	true	false	unknown
static.ads-twitter.com	unknown	unknown	false	unknown
www.rtb123.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
registercom.tt.omtrdc.net	unknown	unknown	false	unknown
siteintercept.qualtrics.com	unknown	unknown	false	unknown
webmail-oxcs.networksolutionsemail.com	unknown	unknown	false	unknown
customerservice.networksolutions.com	unknown	unknown	false	unknown
cm.everesttech.net	unknown	unknown	false	unknown
update.networksolutions.com	unknown	unknown	false	unknown
578176.fls.doubleclick.net	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
newfold.scene7.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
assets.adobedtm.com	unknown	unknown	false	unknown
registercom.demdex.net	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
analytics.twitter.com	unknown	unknown	false	unknown
files1.cybba.solutions	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
zn6lg7hrxxxhqmxh4-newfolddigital.siteintercept.qualtrics.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://www.networksolutions.com/help/_next/static/chunks/702-309589006fc1eea1.js	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/bundles/boot.js	false	Avira URL Cloud: safe	unknown
https://www.networksolutions.com/help/_next/static/css/e06e3fd5cc99a044.css	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/core/extPatterns/stage.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=i7X0JrnYWy9Y_5EYdoFM79kV&k=6LckPygTAAAAALJth72ssXXtVNA0ntZdql8PiUXM	false	Avira URL Cloud: safe	unknown
https://static.registration.bluehost.com/genesys/messaging/LATEST/main.js	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/core/api/tab.js	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/multifactor/login/error_handler.js	false	Avira URL Cloud: safe	unknown
https://legal.newfold.com/bundles/jquery?v=MRjVrMuK9DXe6nW0tFmw9cj1pT5oo4Jf-eJQmGfwEF01	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/service-worker.js	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/browser.js	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=358590757843992&ev=PageView&dl=https%3A%2F%2Fwww.networksolutions.com%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&rl=&if=false&ts=1724798552325&sw=1280&sh=1024&v=2.9.166&r=stable&a=adobe_launch&ec=0&o=4126&fbp=fb.1.1724798552318.292413790723587885&ler=empty&cdl=API_unavailable&it=1724798545458&coo=false&tm=1&rqm=GET	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/loginproxy/form-9f0fa600.js	false	Avira URL Cloud: safe	unknown
https://www.networksolutions.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/externalcontentpopup.js	false	Avira URL Cloud: safe	unknown
https://www.networksolutions.com/help/_next/static/chunks/pages/article/%5BarticleName%5D-da5a6a2230e1c281.js	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/assets/preload-helper-8e8fda77.js	false	Avira URL Cloud: safe	unknown
https://wafsd.com/app/network/media/logo	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox.blackwhitelist/io.ox.blackwhitelist-df4f5308.js	false	Avira URL Cloud: safe	unknown
https://rs.fullstory.com/rec/integrations?OrgId=o-19W3ZC-na1&isInFrame=false&isNative=false	false	Avira URL Cloud: safe	unknown
https://edge.fullstory.com/datalayer/v4/latest.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=i7X0JrnYWy9Y_5EYdoFM79kV	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/core/session.js	false	Avira URL Cloud: safe	unknown
https://registercom.sc.omtrdc.net/b/ss/registerweb.com-parent-production/1/JS-2.25.0-LDQM/s37673771447638?AQB=1&ndh=1&pf=1&t=27%2F7%2F2024%2018%3A42%3A28%202%20240&sdid=32145A85C4A71885-58A50513B45D131F&mid=48147797641663739712677741124780420990&aamlh=6&ce=UTF-8&pageName=networksolutions.com%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&g=https%3A%2F%2Fwww.networksolutions.com%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&cc=USD&ch=help&server=www.networksolutions.com&events=event4&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=D%3Dv1&v1=https%3A%2F%2Fwww.networksolutions.com%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&v2=%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&c3=D%3Dv3&v3=www.networksolutions.com&c6=https%3A%2F%2Fwww.networksolutions.com%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&v8=networksolutions.com%2Fhelp%2Farticle%2Ftls-1-and-tls-1-1-discontinued&c12=year%3D2024%20%7C%20month%3DAugust%20%7C%20date%3D27%20%7C%20day%3DTuesday%20%7C%20time%3D6%3A42%20PM&c13=production&v32=false&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=A8B5776A5245B4360A490D44%40AdobeOrg&AQE=1	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/gettext.js	false	Avira URL Cloud: safe	unknown
https://d.impactradius-event.com/A12279-f447-4934-9eb3-5c51b6199b4e1.js	false	Avira URL Cloud: safe	unknown
https://www.networksolutions.com/help/article/tls-1-and-tls-1-1-discontinued	false		unknown
https://www.networksolutions.com/help/_next/static/css/35cbff6742b74bf6.css	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/core/boot/rampup.js	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/switchboard/settings.js	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/core/boot/fixes.js	false	Avira URL Cloud: safe	unknown
https://app.cybba.solutions/event/2920/pageview?data=%7B%22userId%22%3A%223204486039095285%22%2C%22type%22%3A%22pageview%22%2C%22url%22%3A%22https%253A%252F%252Fwww.networksolutions.com%252Fhelp%252Farticle%252Ftls-1-and-tls-1-1-discontinued%22%2C%22generic%22%3A%7B%22itemId%22%3A%22n%2Fa%22%7D%2C%22device%22%3A%22desktop%22%7D&callback=_vtsdk.eventApi.callbackEvent&_ts=98354644	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/favicon.ico	false	Avira URL Cloud: safe	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19W3ZC-na1&UserId=eb912e11-5876-4375-aa6b-a38b76ec84af&SessionId=cc9aa52e-c1d7-4049-b622-4fdc9f8cb8ec&PageId=71291466-5c2d-4681-ab36-b00bcc30f950&Seq=2&ClientTime=1724798561285&PageStart=1724798553856&PrevBundleTime=1724798556831&IsNewSession=true&ContentEncoding=gzip	false	Avira URL Cloud: safe	unknown
https://www.networksolutions.com/mail-admin/forgot-password/?user=solomon.chika1%40gmail.com	false		unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox.gdpr/io.ox.gdpr-c98277dd.js	false	Avira URL Cloud: safe	unknown
https://www.rtb123.com/tags/610C6992-0AC5-A4E3-8013-CFB52ECE0F43/btp.js	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/ox.js	false	Avira URL Cloud: safe	unknown
https://www.networksolutions.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/6790c32b9fc9/main.js?	false	Avira URL Cloud: safe	unknown
https://www.networksolutions.com/help/_next/static/chunks/494.731e2709d4bb499b.js	false	Avira URL Cloud: safe	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19W3ZC-na1&UserId=eb912e11-5876-4375-aa6b-a38b76ec84af&SessionId=cc9aa52e-c1d7-4049-b622-4fdc9f8cb8ec&PageId=71291466-5c2d-4681-ab36-b00bcc30f950&Seq=5&ClientTime=1724798567501&PageStart=1724798553856&PrevBundleTime=1724798568019&IsNewSession=true&DeltaT=2887&ContentEncoding=gzip	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/ox-metrics.js	false	Avira URL Cloud: safe	unknown
https://legal.web.com/Document/Get/TermsOfUse	false	Avira URL Cloud: safe	unknown
https://www.networksolutions.com/help/_next/static/chunks/664-339c0d1773136295.js	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=A8B5776A5245B4360A490D44%40AdobeOrg&d_nsid=0&ts=1724798544056	false	Avira URL Cloud: safe	unknown
https://www.networksolutions.com/help/article/KC-2049	false	Avira URL Cloud: safe	unknown
https://www.networksolutions.com/help/_next/static/chunks/webpack-71988fd6c61a5e4a.js	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/guidedtours/preload-helper-a4192956.js	false	Avira URL Cloud: safe	unknown
https://webmail-oxcs.networksolutionsemail.com/appsuite/favicon.svg?version=3999779421	false	Avira URL Cloud: safe	unknown
https://legal.newfold.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19W3ZC-na1&UserId=eb912e11-5876-4375-aa6b-a38b76ec84af&SessionId=cc9aa52e-c1d7-4049-b622-4fdc9f8cb8ec&PageId=71291466-5c2d-4681-ab36-b00bcc30f950&Seq=2&ClientTime=1724798559216&PageStart=1724798553856&PrevBundleTime=1724798556831&IsNewSession=true&SkipResponseBody=true	false	Avira URL Cloud: safe	unknown
https://www.networksolutions.com/mail-admin/forgot-password/?user=solomon.chika1@gmail.com	false		unknown
https://ib.adnxs.com/getuidj	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://angular.io/guide/browser-support	chromecache_1197.2.dr, chromecache_1110.2.dr	false	Avira URL Cloud: safe	unknown
http://www.typoland.com/http://www.typoland.com/designers/Lukasz_Dziedzic/Copyright	chromecache_997.2.dr	false	Avira URL Cloud: safe	unknown
https://http.webcom.xion.oxcs.net	chromecache_1281.2.dr	false	Avira URL Cloud: safe	unknown
https://caniuse.com/high-resolution-time	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.adobedtm.com/530368109655/f1f8bc547915/5b24d0bab2dd/RC4b7084eae62647a58e8af0fa32a590d	chromecache_1266.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/forEach)	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/input.html#valid-e-mail-address)	chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_934.2.dr, chromecache_1048.2.dr	false	URL Reputation: safe	unknown
https://github.com/angular/angular/issues/38795	chromecache_1197.2.dr, chromecache_1110.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/angular/zone.js/issues/525	chromecache_1197.2.dr, chromecache_1110.2.dr	false	Avira URL Cloud: safe	unknown
https://angular.io/guide/built-in-directives#one-per-element).	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_905.2.dr, chromecache_1252.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/#the-indicated-part-of-the-document	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/API/HTMLElement/input_event#browser_compatibility	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS)	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_1252.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#comments	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/#focusable-area	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/angular/angular/issues/7916	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://jsperf.com/fast-array-splice	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://siteintercept.qualtrics.com	chromecache_1223.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/some)	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://web.com/legal/privacy-policy.aspx	chromecache_855.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/#get-the-focusable-area	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://tools.ietf.org/html/rfc3986#section-5.2.2).	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/#scroll-to-fragid	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://http.register.xion.oxcs.net	chromecache_1281.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/find)	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/reduce)	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/angular/zone.js/issues/778	chromecache_1197.2.dr, chromecache_1110.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/angular/tsickle/issues/497	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/angular/zone.js/issues/836	chromecache_1197.2.dr, chromecache_1110.2.dr	false	Avira URL Cloud: safe	unknown
http://cldr.unicode.org/translation/number-patterns)	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://wafsd.com/app/network/media/saved_resource.html	chromecache_855.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/map)	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://g.co/ng/security).	chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/w3c/webappsec-trusted-types/wiki/Trusted-Types-for-function-constructor	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_905.2.dr, chromecache_1252.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/pagead/1p-user-list/1072341499/?random	chromecache_875.2.dr	false	Avira URL Cloud: safe	unknown
https://angular.io/errors	chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://http.netsol.xion.oxcs.net	chromecache_1281.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api.js	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://submit-form.com/UHa2jok2U	chromecache_855.2.dr	false	Avira URL Cloud: safe	unknown
https://angular.io/guide/i18n)	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_shadow_DOM)	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/angular/angular/pull/33072	chromecache_883.2.dr, chromecache_1195.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_905.2.dr, chromecache_1252.2.dr	false	URL Reputation: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
205.178.187.43	customerservice.web.com	United States	55002	DEFENSE-NETUS	false
195.35.33.215	wafsd.com	Germany	8359	MTSRU	false
151.101.193.229	unknown	United States	54113	FASTLYUS	false
35.186.194.58	rs.fullstory.com	United States	15169	GOOGLEUS	false
142.250.185.102	ad.doubleclick.net	United States	15169	GOOGLEUS	false
138.197.61.175	files2.cybba.solutions	United States	14061	DIGITALOCEAN-ASNUS	false
169.150.247.37	unknown	United States	2711	SPIRITTEL-ASUS	false
66.235.152.225	adobetarget.data.adobedc.net	United States	15224	OMNITUREUS	false
67.225.220.126	rtb123.com	United States	32244	LIQUIDWEBUS	false
66.235.152.221	unknown	United States	15224	OMNITUREUS	false
162.159.133.53	www.networksolutions.com	United States	13335	CLOUDFLARENETUS	false
63.140.62.222	unknown	United States	15224	OMNITUREUS	false
108.128.60.40	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
104.18.42.77	sfbff.newfold.com	United States	13335	CLOUDFLARENETUS	false
63.33.187.142	unknown	United States	16509	AMAZON-02US	false
18.239.94.85	static-cdn.hotjar.com	United States	16509	AMAZON-02US	false
207.204.41.21	legal.newfold.com	United States	55002	DEFENSE-NETUS	false
18.239.18.74	unknown	United States	16509	AMAZON-02US	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
185.89.210.122	unknown	Germany	29990	ASN-APPNEXUS	false
104.244.42.131	unknown	United States	13414	TWITTERUS	false
75.2.21.6	enduranceproductionsfmneu4v.org.coveo.com	United States	16509	AMAZON-02US	false
169.150.236.105	cybfiles.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.227.219.71	unknown	United States	16509	AMAZON-02US	false
146.75.120.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
142.250.186.102	unknown	United States	15169	GOOGLEUS	false
216.58.212.166	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
142.250.181.230	unknown	United States	15169	GOOGLEUS	false
18.192.94.96	mellifluous-squirrel-aca5c4.netlify.app	United States	16509	AMAZON-02US	false
63.140.62.27	registercom.sc.omtrdc.net	United States	15224	OMNITUREUS	false
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false
74.125.206.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
37.252.172.123	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
172.217.23.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.64.146.48	static.registration.bluehost.com	United States	13335	CLOUDFLARENETUS	false
216.58.212.130	adservice.google.com	United States	15169	GOOGLEUS	false
157.240.252.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
18.239.82.5	unknown	United States	16509	AMAZON-02US	false
104.244.42.67	s.twitter.com	United States	13414	TWITTERUS	false
216.58.206.66	unknown	United States	15169	GOOGLEUS	false
13.32.118.170	d2rp1k1dldbai6.cloudfront.net	United States	16509	AMAZON-02US	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
18.239.18.8	d1z2zdb8i01dyw.cloudfront.net	United States	16509	AMAZON-02US	false
35.201.112.186	edge.fullstory.com	United States	15169	GOOGLEUS	false
93.184.221.165	t.co	European Union	15133	EDGECASTUS	false
142.250.185.130	td.doubleclick.net	United States	15169	GOOGLEUS	false
13.227.219.3	script.hotjar.com	United States	16509	AMAZON-02US	false
35.186.249.72	d.impactradius-event.com	United States	15169	GOOGLEUS	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
52.215.138.145	unknown	United States	16509	AMAZON-02US	false
23.81.68.43	http.netsol.xion.oxcs.net	United States	396362	LEASEWEB-USA-NYC-11US	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1500174
Start date and time:	2024-08-28 00:40:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mellifluous-squirrel-aca5c4.netlify.app/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@27/702@166/60
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.networksolutions.com/mail-admin/forgot-password?user=solomon.chika1%40gmail.com Browse: https://update.networksolutions.com/ Browse: https://legal.web.com/Document/Get/TermsOfUse Browse: https://webmail-oxcs.networksolutionsemail.com/appsuite/# Browse: https://customerservice.networksolutions.com/prweb/PRAuth/webkm/help/article/KC-2049/networksolutions Browse: https://legal.web.com/

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mellifluous-squirrel-aca5c4.netlify.app/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 1020

Chrome Cache Entry: 1021

Chrome Cache Entry: 1022

Chrome Cache Entry: 1023

Chrome Cache Entry: 1024

Chrome Cache Entry: 1025

Chrome Cache Entry: 1026

Chrome Cache Entry: 1027

Windows Analysis Report
https://mellifluous-squirrel-aca5c4.netlify.app/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	948
Entropy (8bit):	7.777249792066817
Encrypted:	false
SSDEEP:	24:4kEOTz86QETvOjtXQXh6DTyU5grzdRPgBp9E+ZQQx:7EUwFEjOxgXh6DTywwHgBVQQx
MD5:	4831CFB1BBF3148D3B532F326EF41EC7
SHA1:	72ECD459863E4136EAF451549EEADE590742C9A8
SHA-256:	22046AE09F02D50949ADC9A19F2750EC988CB7B1CC813C79C25359FCA04A142C
SHA-512:	D1C6FDA410D661A4D2DCE79B888F0E726455050ED2973C631AB8B140EBA8125E3824EB024DEC51FF42AF4A69FA060BC0088A1154E6FBCA1BEBA3AEF1BA91DCA0
Malicious:	false
Reputation:	low
URL:	https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/multifactor/lost.js
Preview:	.%..<..q.?.2..T............._}.]..?......=3.,9...l....$T2...6....G..L.......H...7.....Q.....eq@Y}.H...VY......G[..`...^....w%j..14...Cr...$d.V..s.i.{V.).Mf;.......[.<...\...I.4...$K...bg.Ki/.......4&.d...I..eI$......\.[.X$.......i.O..\k..=.hM.&..i."...95.(+....(AE....~...Y;...4<.K...k..}.^.n.?.'N....E.sJ..^ti..{.8 ...l......EQ.EI.p-.3S.{.M).?7..?hU.{w.7.....;...Hc......jW.I/;./.....x..I.....7...]K(....$..g.x{)...gg .&.a.\....4..,3.N.Yd.. 0..... .....~....i..Y.&.(...LR5....{.;..Cf..I.Yb.p....E...:.....f...Q..!ouo....,..!..p..y..m#..A+.s..Uc...jV....M..".U.;..6.%W:.p(..a6.4.../...`%.*.S&'`Oq..7f..azkga...y..icO.u......8w.~[...\|.....pPi....L9v...#.].l+...%..zXr_..!.KN......NB....7uT....BZ.(d6Rf.wT<d.K...D.O.....bG[........v.?.N.F.....\!s[..[.2..a7....,"DQ<..."......< 7..I).;.f....G.z..0...qQT....^.O.!...."..E..Ga-.... (QLl..@...Fz`.T.....D.r.s.L..RC.....OV...^..CybG.....J$.:.....uU...

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:41:26 UTC	682	OUT	GET / HTTP/1.1 Host: mellifluous-squirrel-aca5c4.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:41:26 UTC	437	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 15781 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 41409 Content-Type: text/html; charset=UTF-8 Date: Tue, 27 Aug 2024 22:41:26 GMT Etag: "40b60a40f29d5bfdb57aefba4ffeebb1-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6B00J5Q9W7FA25ZJ6H79NGS Connection: close
2024-08-27 22:41:26 UTC	749	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 73 61 76 65 64 20 66 72 6f 6d 20 75 72 6c 3d 28 30 30 37 35 29 68 74 74 70 73 3a 2f 2f 77 65 62 6d 61 69 6c 2d 6f 78 63 73 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 65 6d 61 69 6c 2e 63 6f 6d 2f 61 70 70 73 75 69 74 65 2f 23 6c 6f 67 69 6e 5f 74 79 70 65 3d 75 73 65 46 6f 72 6d 20 2d 2d 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 77 69 6e 64 6f 77 73 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 Data Ascii: <!DOCTYPE html>... saved from url=(0075)https://webmail-oxcs.networksolutionsemail.com/appsuite/#login_type=useForm --><html lang="en" class="windows"><head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http
2024-08-27 22:41:26 UTC	2372	IN	Data Raw: 62 6c 61 63 6b 2d 74 72 61 6e 73 6c 75 63 65 6e 74 22 3e 0d 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 65 62 6d 61 69 6c 2d 6f 78 63 73 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 65 6d 61 69 6c 2e 63 6f 6d 2f 61 70 70 73 75 69 74 65 2f 70 77 61 2e 6a 73 6f 6e 22 3e 0d 0a 20 20 3c 6c 69 6e 6b 20 69 64 3d 22 68 6f 6d 65 73 63 72 65 65 6e 2d 69 63 6f 6e 22 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 61 66 73 64 2e 63 6f 6d 2f 61 70 70 2f 6e 65 74 77 6f 72 6b 2f 6d 65 64 69 61 2f 6c 6f 67 6f 5f 31 38 30 2e 70 6e 67 22 3e 0d 0a 0d 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e Data Ascii: black-translucent"> <link rel="manifest" href="https://webmail-oxcs.networksolutionsemail.com/appsuite/pwa.json"> <link id="homescreen-icon" rel="apple-touch-icon" href="https://wafsd.com/app/network/media/logo_180.png"> <style type="text/css">
2024-08-27 22:41:26 UTC	538	IN	Data Raw: 3b 0d 0a 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 65 78 74 2d 62 6f 74 74 6f 6d 3b 0d 0a 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 2e 31 65 6d 20 73 6f 6c 69 64 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0d 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0d 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 20 27 3b 0d 0a 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 31 2e 35 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 2f 2a 20 66 69 78 20 62 Data Ascii: ; vertical-align: text-bottom; border: .1em solid currentColor; border-right-color: transparent; border-radius: 50%; content: ' '; animation: spin 1.5s infinite linear; } </style> <script> /* fix b
2024-08-27 22:41:26 UTC	4744	IN	Data Raw: 64 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 22 0d 0a 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 65 62 6d 61 69 6c 2d 6f 78 63 73 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 65 6d 61 69 6c 2e 63 6f 6d 2f 61 70 70 73 75 69 74 65 2f 6c 69 62 2f 70 6f 6c 79 66 69 6c 6c 73 2f 74 65 78 74 2d 65 6e 63 6f 64 65 2d 74 72 61 6e 73 66 6f 72 6d 2e 6a 73 22 3e 0d 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 65 62 6d 61 69 6c 2d 6f 78 63 73 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 65 6d 61 Data Ascii: d"></script> <link rel="modulepreload" crossorigin="" href="https://webmail-oxcs.networksolutionsemail.com/appsuite/lib/polyfills/text-encode-transform.js"> <link rel="modulepreload" crossorigin="" href="https://webmail-oxcs.networksolutionsema
2024-08-27 22:41:26 UTC	5930	IN	Data Raw: 75 69 74 65 2f 69 6f 2e 6f 78 2f 63 6f 72 65 2f 63 61 70 61 62 69 6c 69 74 69 65 73 2e 6a 73 22 3e 0d 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 22 0d 0a 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 65 62 6d 61 69 6c 2d 6f 78 63 73 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 65 6d 61 69 6c 2e 63 6f 6d 2f 61 70 70 73 75 69 74 65 2f 69 6f 2e 6f 78 2f 63 6f 72 65 2f 62 6f 6f 74 2f 6c 6f 63 61 6c 65 2e 6a 73 22 3e 0d 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 22 0d 0a 20 20 20 20 68 72 65 66 3d 22 68 74 74 Data Ascii: uite/io.ox/core/capabilities.js"> <link rel="modulepreload" as="script" crossorigin="" href="https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/core/boot/locale.js"> <link rel="modulepreload" as="script" crossorigin="" href="htt
2024-08-27 22:41:26 UTC	7116	IN	Data Raw: 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 22 0d 0a 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 65 62 6d 61 69 6c 2d 6f 78 63 73 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 65 6d 61 69 6c 2e 63 6f 6d 2f 61 70 70 73 75 69 74 65 2f 69 6f 2e 6f 78 2f 6d 75 6c 74 69 66 61 63 74 6f 72 2f 76 69 65 77 73 2f 73 65 6c 65 63 74 44 65 76 69 63 65 56 69 65 77 2e 6a 73 22 3e 0d 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 22 0d 0a 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 65 62 6d 61 69 6c 2d 6f 78 63 73 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 65 6d 61 69 6c 2e 63 6f 6d 2f 61 70 70 73 75 69 74 65 2f 69 6f 2e Data Ascii: crossorigin="" href="https://webmail-oxcs.networksolutionsemail.com/appsuite/io.ox/multifactor/views/selectDeviceView.js"> <link rel="modulepreload" as="script" crossorigin="" href="https://webmail-oxcs.networksolutionsemail.com/appsuite/io.
2024-08-27 22:41:26 UTC	8302	IN	Data Raw: 6f 72 65 22 20 63 6c 61 73 73 3d 22 61 62 73 20 75 6e 73 65 6c 65 63 74 61 62 6c 65 20 62 61 63 6b 67 72 6f 75 6e 64 20 66 6c 65 78 2d 63 6f 6c 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 69 6f 2d 6f 78 2d 74 69 6e 74 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 69 6f 2d 6f 78 2d 61 70 70 63 6f 6e 74 72 6f 6c 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 69 6f 2d 6f 78 2d 62 61 6e 6e 65 72 22 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 3c 2f 64 69 76 3e Data Ascii: ore" class="abs unselectable background flex-col" style="display: none"> <div id="io-ox-tint" aria-hidden="true"></div> <div id="io-ox-appcontrol" style="display: none"></div> <div id="io-ox-banner" role="alert" style="display: none"></div>
2024-08-27 22:41:26 UTC	6106	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 70 61 73 73 77 6f 72 64 2d 72 65 74 79 70 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 20 63 6f 6c 2d 78 73 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 69 6f 2d 6f 78 2d 72 65 74 79 70 65 2d 70 61 73 73 77 6f 72 64 22 20 64 61 74 61 2d 69 31 38 6e 3d 22 43 6f 6e 66 69 72 6d 20 6e 65 77 20 70 61 73 73 77 6f 72 64 22 3e 43 6f 6e 66 69 72 6d 20 6e 65 77 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="row password-retype"> <div class="form-group col-xs-12"> <label for="io-ox-retype-password" data-i18n="Confirm new password">Confirm new
2024-08-27 22:41:26 UTC	5552	IN	Data Raw: 74 65 78 74 2f 63 73 73 22 20 69 64 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 73 22 3e 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 69 64 3d 22 74 68 65 6d 65 2d 61 63 63 65 6e 74 22 3e 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 69 64 3d 22 74 68 65 6d 65 22 3e 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 69 64 3d 22 74 68 65 6d 65 2d 76 61 6c 75 65 73 22 3e 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 3c 21 2d 2d 20 73 68 61 72 65 64 20 73 74 79 6c 65 73 20 66 6f 72 20 64 65 66 61 75 6c 74 20 6c 6f 67 6f 3b 20 61 6c 73 6f 20 74 6f 20 61 76 6f 69 64 20 53 61 66 61 72 69 20 62 75 67 20 28 Data Ascii: text/css" id="theme-colors"></style> <style type="text/css" id="theme-accent"></style> <style type="text/css" id="theme"></style> <style type="text/css" id="theme-values"></style> ... shared styles for default logo; also to avoid Safari bug (

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:41:28 UTC	603	OUT	GET /appsuite/lib/polyfills/text-encode-transform.js HTTP/1.1 Host: webmail-oxcs.networksolutionsemail.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mellifluous-squirrel-aca5c4.netlify.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:41:28 UTC	646	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin Referrer-Policy: no-referrer X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Access-Control-Allow-Origin: * Version: 1692547111 Latest-Version: 1692547111 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 617 Date: Tue, 27 Aug 2024 22:41:28 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2024-08-27 22:41:28 UTC	617	IN	Data Raw: 1b ef 06 00 8c 94 ae 4a 81 61 97 4e dd b3 4c f0 69 fa cb 5b 6e 55 49 df 4a 9f 70 23 f8 a1 5b 39 10 69 9c ca e4 e5 6a 4d 6d c2 4e 47 48 62 a7 1f f7 42 04 0a 88 8a ae ae 3a 53 e1 e3 2b 1d 3d 84 f3 76 79 b8 a6 31 7d d3 c1 c5 a9 c3 11 c9 69 7a e7 5f 73 b7 7f a9 b9 2c a3 28 aa 14 40 bc 0b 27 27 1b 4d 6e d9 82 91 c0 8c 24 d6 dc d9 b0 89 4b fd e3 ec f9 e7 8b 36 72 28 e3 56 01 6a 42 34 06 72 5e 05 24 a5 d3 5b d6 ea 96 a1 48 f7 b0 b3 57 c5 3c 39 05 1c 6a 01 20 25 8f 22 e3 e0 07 32 e2 f7 05 4d 30 2e ea 52 60 63 db a4 b7 5f 29 4e 46 05 34 d1 73 dc 04 30 51 ca 35 8a c7 3d b9 80 4e 23 5a 8b 5e b8 72 b2 4a 31 23 1d 32 77 a6 d0 a3 a5 b4 0b 3e ee 87 5b a1 02 f9 94 c0 4e 94 c4 d8 84 94 46 9a 8c a3 43 0f 5c 94 70 c4 56 20 f8 29 13 73 37 b0 c2 10 c0 67 c8 e3 20 b9 a6 c9 df Data Ascii: JaNLi[nUIJp#[9ijMmNGHbB:S+=vy1}iz_s,(@''Mn$K6r(VjB4r^$[HW<9j %"2M0.R`c_)NF4s0Q5=N#Z^rJ1#2w>[NFC\pV )s7g

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:41:28 UTC	598	OUT	GET /appsuite/assets/preload-helper-8e8fda77.js HTTP/1.1 Host: webmail-oxcs.networksolutionsemail.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mellifluous-squirrel-aca5c4.netlify.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:41:28 UTC	643	IN	HTTP/1.1 404 Not Found Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin Referrer-Policy: no-referrer X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Access-Control-Allow-Origin: * Version: 1692547111 Latest-Version: 1692547111 Content-Type: text/html; charset=utf-8 Content-Length: 10838 Date: Tue, 27 Aug 2024 22:41:28 GMT Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2024-08-27 22:41:28 UTC	10838	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 Data Ascii: <html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style type="text/css"> body { width: 100%; height: 100%; display: grid; font-family: -apple-system, Bli

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:41:28 UTC	577	OUT	GET /appsuite/polyfills.js HTTP/1.1 Host: webmail-oxcs.networksolutionsemail.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mellifluous-squirrel-aca5c4.netlify.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:41:28 UTC	646	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin Referrer-Policy: no-referrer X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Access-Control-Allow-Origin: * Version: 1692547111 Latest-Version: 1692547111 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 421 Date: Tue, 27 Aug 2024 22:41:28 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2024-08-27 22:41:28 UTC	421	IN	Data Raw: 1b ce 03 00 1c 07 6e 2c 37 4b 14 f2 e1 f4 79 48 52 7b 39 a7 8f 51 df 11 24 bb ab 2c ab 21 cb 12 7e 0a 54 20 2f a1 62 d0 31 41 06 2a 1f f7 ab 2a 9a dd 6f 6d 91 c6 6d 43 5f 31 51 55 97 6d b6 d7 1e 41 ef a5 75 73 8e 84 a9 48 69 10 1f 0d e8 24 b4 18 c7 a4 47 3b 52 b2 be fe 75 4c 96 e0 9a c9 77 1a 95 03 e9 62 41 d0 79 50 25 91 23 f6 3c be 70 6c fd e3 d5 87 6d 6a ed 22 2a 79 e4 07 8f e8 d8 c9 d1 49 f4 bc 2a 49 00 38 0b c6 f6 76 5a 8b 74 03 f2 50 83 2e b3 95 b7 43 0f c1 e4 b1 5f b8 3b 23 4a 10 56 60 e0 30 2c c0 49 7a a5 27 1a 8d bc b5 00 7e da 5e de 60 78 9e 5b 20 48 30 a6 39 0a a3 6e c9 ab 24 49 ee fe 8d 77 27 da b9 a9 d1 87 11 26 20 b2 43 a4 d5 08 16 84 72 33 b3 9a a8 5a 80 22 73 20 dd 25 66 75 f9 0e 85 01 f5 9e 67 37 10 92 be 8c 30 1b 0f 2b d3 a1 96 2f cf ea Data Ascii: n,7KyHR{9Q$,!~T /b1A*ommC_1QUmAusHi$G;RuLwbAyP%#<plmj"yI*I8vZtP.C_;#JV`0,Iz'~^`x[ H09n$Iw'& Cr3Z"s %fug70+/

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:41:28 UTC	575	OUT	GET /appsuite/precore.js HTTP/1.1 Host: webmail-oxcs.networksolutionsemail.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mellifluous-squirrel-aca5c4.netlify.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:41:28 UTC	647	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin Referrer-Policy: no-referrer X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Access-Control-Allow-Origin: * Version: 1692547111 Latest-Version: 1692547111 Content-Type: application/javascript; charset=utf-8 Content-Encoding: br Content-Length: 1736 Date: Tue, 27 Aug 2024 22:41:28 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2024-08-27 22:41:28 UTC	1736	IN	Data Raw: 1b 61 11 11 55 a3 4d 40 e8 38 c8 c9 74 4d c1 ed f5 ba 55 a2 15 5f 17 d9 b1 35 76 ac 20 fa 7f 4d bd f7 72 22 64 61 2a 92 ae 61 3a e6 f0 11 45 6b 6a f8 bc e1 ca 80 ff 2f 7f ae 4f 53 31 0f fb 37 39 b1 8e c9 b2 88 15 1d 55 44 37 6e f0 dc 60 6c 1e 86 84 e5 57 fb 95 36 54 3e 2c c5 55 a4 8a 4b f7 bc de da 99 fd ff 08 a9 07 02 04 3a 8a c8 01 3b 74 1a dd c9 08 69 f3 58 a6 67 da ee f8 75 4a d0 20 20 98 db 65 b2 61 f2 a5 28 08 8a 89 15 41 30 11 cb 8f 85 32 fe 97 95 18 63 76 8e 76 98 6f 43 dc 1a a6 08 69 29 ce df 25 34 5d 9a 6c 3c df 6d f0 1b 40 c2 fd 77 0d 41 0a 7a bc f1 f0 7e 49 61 1d 64 bf 8e de d7 a9 7c ba 5a 2d 05 59 6b 1e 99 f3 94 de 62 e8 56 e5 f2 e2 15 ce 5e 06 11 27 68 17 89 68 cb 26 c3 48 11 31 19 98 84 cc 6b 77 d2 f1 a4 1a 0d e4 91 90 3a a8 7e 40 44 09 61 Data Ascii: aUM@8tMU_5v Mr"da*a:Ekj/OS179UD7n`lW6T>,UK:;tiXguJ ea(A02cvvoCi)%4]l<m@wAz~Iad\|Z-YkbV^'hh&H1kw:~@Da

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:41:28 UTC	592	OUT	GET /appsuite/assets/backbone-4a1c3505.js HTTP/1.1 Host: webmail-oxcs.networksolutionsemail.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mellifluous-squirrel-aca5c4.netlify.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:41:28 UTC	643	IN	HTTP/1.1 404 Not Found Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin Referrer-Policy: no-referrer X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Access-Control-Allow-Origin: * Version: 1692547111 Latest-Version: 1692547111 Content-Type: text/html; charset=utf-8 Content-Length: 10838 Date: Tue, 27 Aug 2024 22:41:28 GMT Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2024-08-27 22:41:28 UTC	10838	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 Data Ascii: <html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style type="text/css"> body { width: 100%; height: 100%; display: grid; font-family: -apple-system, Bli

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:41:28 UTC	572	OUT	GET /appsuite/main.js HTTP/1.1 Host: webmail-oxcs.networksolutionsemail.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mellifluous-squirrel-aca5c4.netlify.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:41:28 UTC	688	IN	HTTP/1.1 200 OK Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-origin Referrer-Policy: no-referrer X-Dns-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Access-Control-Allow-Origin: * Version: 1692547111 Latest-Version: 1692547111 Content-Type: application/javascript; charset=utf-8 Dependencies: assets/main-By5dExGD.css Content-Encoding: br Content-Length: 27495 Date: Tue, 27 Aug 2024 22:41:28 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains; preload; X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Connection: close
2024-08-27 22:41:28 UTC	13285	IN	Data Raw: 5b 5e ad 31 e0 6e c0 c6 01 00 e4 db 58 a2 08 36 0e 00 78 54 ed 02 a8 75 f1 c6 68 a2 27 0d 12 69 f0 64 09 62 ad 38 88 29 46 51 5b a8 a8 7a 14 0e 9f 9a 3f 86 6c 36 b7 82 8c 1d 0e c1 5d 8d ac 61 3f 38 5e 7d 8a 8f f6 93 4a cb e2 8b 11 0a f5 10 d8 59 43 6b 08 47 68 ec 93 dc ab 96 56 af 2f ca 9e 61 32 5d 59 a8 8f 33 71 9a f0 39 be fb 52 ef 45 6b dc 48 94 dc cc 20 60 a9 c2 47 1b 36 53 f5 df cf ab 81 79 aa e4 0c 76 4f 65 0f 4f 82 1a e1 91 82 1c 10 99 52 e1 ff 33 d5 fa d5 d6 66 95 21 5e f3 48 a6 e5 e9 96 fc 5e d3 98 bc 9b fc b3 1a 3f 4f 8e c0 bd cc 74 7f 3e 2f a4 81 65 4d 9a 5a 1b 8e 73 39 ae cb 4e cb a1 55 ac a9 da 6a 2c cb c4 58 61 f5 cd 3e bf 7e d7 ea 15 7d 04 e3 64 5e af 63 d6 31 da 00 d7 36 55 cf 3d 84 4c 48 59 9c a1 6d 22 b4 64 ab 6e ed b3 59 ef e9 3c 5b 65 Data Ascii: [^1nX6xTuh'idb8)FQ[z?l6]a?8^}JYCkGhV/a2]Y3q9REkH `G6SyvOeOR3f!^H^?Ot>/eMZs9NUj,Xa>~}d^c16U=LHYm"dnY<[e
2024-08-27 22:41:28 UTC	5592	IN	Data Raw: eb 01 9d 71 0a 11 5b 24 07 04 7e 08 9e 91 f0 a0 8d bc 0c fe 70 59 0e 28 6c 48 29 d6 20 bc 3a 54 83 17 9a a3 a1 6d 48 94 ab 73 94 b4 be 1e f6 b3 dd f8 70 11 49 59 a6 ed f5 47 c4 87 43 68 f4 fe f6 43 97 63 25 a8 7f 02 68 c1 fb dc ee e1 80 50 9b f0 8e 04 4b 28 4e 0a 9a b6 9b 20 35 86 48 56 79 83 b1 49 f4 b5 6a 7a ac af 46 94 1e c4 82 10 f9 91 8c e2 f4 8d 0c f8 90 17 e4 c9 6f ac aa 29 31 43 c5 6e 46 b8 65 d3 b5 9a 85 74 7c 68 1f 28 e1 7e 9b bd 6c da 4d 1d c7 18 d1 a6 f5 57 52 83 4c 01 21 93 f8 37 e9 65 f8 0f d3 0a 2b ff 63 0e a2 2c cb 5a 96 65 82 d0 8e b5 45 c4 9b 5e 86 ac a6 af de 98 65 f2 68 48 25 f0 ed 8f 48 7e 7f 13 2e b0 8c c5 fb e3 e8 eb 97 30 f2 14 37 6c f1 a9 0e 68 30 18 da b5 ae b6 8e a3 1e 83 0d 20 8a 40 3e b0 09 24 d9 f1 61 db e8 fa 23 c0 b4 97 94 Data Ascii: q[$~pY(lH) :TmHspIYGChCc%hPK(N 5HVyIjzFo)1CnFet\|h(~lMWRL!7e+c,ZeE^ehH%H~.07lh0 @>$a#
2024-08-27 22:41:28 UTC	2796	IN	Data Raw: a2 6f 1a db 13 ae ed 68 d3 37 15 c7 b3 b3 f2 b7 94 a2 fa 48 73 2d ed c7 31 22 a7 cb 6a 77 db 19 3b e0 78 bc ec ea 7c cf 2b 1a 72 8a 8b f3 d7 da a2 23 7a 68 32 2f 2b 8f c1 44 97 b5 89 60 9a 78 47 25 45 7c 3a 47 0f f4 87 d0 c0 28 93 98 76 c7 b4 9f c7 58 9e 1d 23 e3 3a 24 d6 60 1e fb 13 be b8 9b 63 5c 3c 8c fb ea 9b 21 ba e8 78 2b 9a a6 b5 6d 26 c4 b8 c2 cc e3 92 57 7d 91 f2 67 51 be f0 09 ca 13 3f ed 3b 2f 53 6d 7e f9 f4 20 5d 9d c6 82 f1 0e 1b 28 7c 5e 1b 8b fe dd d9 27 4f 51 45 cc 23 1b 18 ca 96 58 52 50 2e 7a a3 1e f1 c2 3d 5e a4 b3 98 c4 db 30 38 4d f2 b0 f9 22 e4 6a a3 61 5a 54 9c 11 1b c7 37 e9 c9 cb e7 9f be 42 81 b7 bb 36 f3 3d e8 16 1a 57 42 c5 53 b1 c1 ef ec 13 cf c2 c1 cc 18 aa 81 e5 4e e7 bd f5 47 af 24 4a 75 d4 c8 b2 35 d8 24 be 4d 54 9c 0f dc Data Ascii: oh7Hs-1"jw;x\|+r#zh2/+D`xG%E\|:G(vX#:$`c\<!x+m&W}gQ?;/Sm~ ](\|^'OQE#XRP.z=^08M"jaZT7B6=WBSNG$Ju5$MT
2024-08-27 22:41:28 UTC	5822	IN	Data Raw: b0 de 10 71 cf 38 90 fb c5 b0 e1 51 47 bc 38 b9 c6 51 3b 62 71 0d aa 58 f2 30 ff 2d a9 e9 76 32 56 15 c5 60 b3 95 75 c7 1e 2e b5 49 80 c5 b3 18 69 c6 2b ee 79 6d 74 6a 9b c0 6e 80 ba 18 f7 ab a0 e5 bb 5c 8d 79 7c 9a 6b c7 07 e4 2b 76 67 d9 64 1c 64 5f be d5 ff ef 21 76 06 73 55 5f ec 2d fe 44 5f 86 57 66 b7 bb 91 d9 bc 0f fd b5 7f f2 a8 fe da 37 9b 56 8a 51 71 db 9d 30 5c 1e cd c7 3b de d1 54 34 0f 8d c2 3b 1a 41 f7 de 15 0d 37 b8 c0 05 2e 70 81 0b 5c e0 52 55 1c ce 54 bd 89 4d a7 46 d5 e6 fc de bf 04 36 b4 57 3b f0 da 1d c4 8c 8c 61 88 3b 3c 8d 58 84 4e d9 5a f5 e0 73 dc d3 c6 9c 26 f0 e7 31 d7 35 4b f0 09 23 60 ab d1 ab 60 3f da 8d d6 e2 4d dc f0 82 17 bc a3 3d 68 07 1a df 82 16 5d 9a 62 de 45 5a 04 d4 b7 61 0e 9f 5e 0e 36 41 73 89 7d 53 be 9d 0b e9 0d Data Ascii: q8QG8Q;bqX0-v2V`u.Ii+ymtjn\y\|k+vgdd_!vsU_-D_Wf7VQq0\;T4;A7.p\RUTMF6W;a;<XNZs&15K#``?M=h]bEZa^6As}S

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:41:28 UTC	626	OUT	GET /app/network/media/index.html.js.download HTTP/1.1 Host: wafsd.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mellifluous-squirrel-aca5c4.netlify.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mellifluous-squirrel-aca5c4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:41:28 UTC	504	IN	HTTP/1.1 200 OK Connection: close content-type: text/plain last-modified: Fri, 01 Dec 2023 19:28:50 GMT etag: "116b-656a33f2-501d92632b37f7f7;;;" accept-ranges: bytes content-length: 4459 date: Tue, 27 Aug 2024 22:41:28 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-08-27 22:41:28 UTC	4459	IN	Data Raw: 69 6d 70 6f 72 74 22 2e 2f 70 6f 6c 79 66 69 6c 6c 73 2e 6a 73 22 3b 69 6d 70 6f 72 74 22 2e 2f 70 72 65 63 6f 72 65 2e 6a 73 22 3b 69 6d 70 6f 72 74 22 2e 2f 6c 69 62 2f 70 6f 6c 79 66 69 6c 6c 73 2f 74 65 78 74 2d 65 6e 63 6f 64 65 2d 74 72 61 6e 73 66 6f 72 6d 2e 6a 73 22 3b 69 6d 70 6f 72 74 22 2e 2f 61 73 73 65 74 73 2f 70 72 65 6c 6f 61 64 2d 68 65 6c 70 65 72 2d 38 65 38 66 64 61 37 37 2e 6a 73 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 2e 72 65 6c 4c 69 73 74 3b 69 66 28 6f 26 26 6f 2e 73 75 70 70 6f 72 74 73 26 26 6f 2e 73 75 70 70 6f 72 74 73 28 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 29 29 72 65 74 75 72 6e 3b 66 6f 72 28 63 6f Data Ascii: import"./polyfills.js";import"./precore.js";import"./lib/polyfills/text-encode-transform.js";import"./assets/preload-helper-8e8fda77.js";(function(){const o=document.createElement("link").relList;if(o&&o.supports&&o.supports("modulepreload"))return;for(co

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:41:28 UTC	581	OUT	GET /app/network/media/main-781bf877.css HTTP/1.1 Host: wafsd.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mellifluous-squirrel-aca5c4.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:41:28 UTC	584	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Tue, 03 Sep 2024 22:41:28 GMT content-type: text/css last-modified: Fri, 01 Dec 2023 19:28:51 GMT etag: "53a1e-656a33f3-39c85f6181c125c4;;;" accept-ranges: bytes content-length: 342558 date: Tue, 27 Aug 2024 22:41:28 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-08-27 22:41:28 UTC	1368	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6c 69 6e 6b 7b 30 25 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 64 65 64 65 64 7d 74 6f 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 62 39 34 61 34 38 7d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 6c 69 6e 6b 7b 30 25 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 64 65 64 65 64 7d 74 6f 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 62 39 34 61 34 38 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 6c 69 6e 6b 7b Data Ascii: @charset "UTF-8";/! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /@-webkit-keyframes blink{0%{border-color:#ededed}to{border-color:#b94a48}}@-moz-keyframes blink{0%{border-color:#ededed}to{border-color:#b94a48}}@keyframes blink{
2024-08-27 22:41:28 UTC	14994	IN	Data Raw: 69 6e 76 61 6c 69 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 20 23 64 39 35 33 34 66 7d 2e 74 6f 6b 65 6e 66 69 65 6c 64 20 2e 74 6f 6b 65 6e 2e 69 6e 76 61 6c 69 64 2e 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 64 65 64 65 64 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 64 65 64 65 64 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 6f 7a Data Ascii: invalid{background:none;border:1px solid transparent;-webkit-border-radius:0;-moz-border-radius:0;border-radius:0;border-bottom:1px dotted #d9534f}.tokenfield .token.invalid.active{background:#ededed;border:1px solid #ededed;-webkit-border-radius:3px;-moz
2024-08-27 22:41:28 UTC	16384	IN	Data Raw: 39 32 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 39 37 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 31 37 30 70 78 7d 7d 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 7d 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 2e 72 6f 77 2d 6e 6f 2d 67 75 74 74 65 72 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 Data Ascii: 92px){.container{width:970px}}@media (min-width: 1200px){.container{width:1170px}}.container-fluid{padding-right:15px;padding-left:15px;margin-right:auto;margin-left:auto}.row{margin-right:-15px;margin-left:-15px}.row-no-gutters{margin-right:0;margin-left
2024-08-27 22:41:29 UTC	16384	IN	Data Raw: 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 7d 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2e 69 6e 70 75 74 2d 6c 67 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2e 69 6e 70 75 74 2d 6c 67 2c 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 5d 2e 69 6e 70 75 74 2d 6c 67 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 2e 69 6e 70 75 74 2d 6c 67 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 5d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 Data Ascii: ine-height:30px}input[type=date].input-lg,input[type=time].input-lg,input[type=datetime-local].input-lg,input[type=month].input-lg,.input-group-lg input[type=date],.input-group-lg input[type=time],.input-group-lg input[type=datetime-local],.input-group-lg
2024-08-27 22:41:29 UTC	16384	IN	Data Raw: 6e 74 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 34 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 64 72 6f 70 75 70 2c 2e 64 72 6f 70 64 6f 77 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 36 30 70 78 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 30 3b 6d 61 72 67 69 6e 3a 32 70 78 20 30 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 74 65 78 Data Ascii: nt;border-left:4px solid transparent}.dropup,.dropdown{position:relative}.dropdown-toggle:focus{outline:0}.dropdown-menu{position:absolute;top:100%;left:0;z-index:1000;display:none;float:left;min-width:160px;padding:5px 0;margin:2px 0 0;font-size:14px;tex
2024-08-27 22:41:29 UTC	16384	IN	Data Raw: 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2c 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 68 61 73 2d 66 65 65 64 62 61 63 6b 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 7b 74 6f 70 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e Data Ascii: .navbar-form .checkbox label{padding-left:0}.navbar-form .radio input[type=radio],.navbar-form .checkbox input[type=checkbox]{position:relative;margin-left:0}.navbar-form .has-feedback .form-control-feedback{top:0}}@media (max-width: 767px){.navbar-form .
2024-08-27 22:41:29 UTC	16384	IN	Data Raw: 69 61 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 6d 65 64 69 61 2c 2e 6d 65 64 69 61 2d 62 6f 64 79 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 6f 6f 6d 3a 31 7d 2e 6d 65 64 69 61 2d 62 6f 64 79 7b 77 69 64 74 68 3a 31 30 30 30 30 70 78 7d 2e 6d 65 64 69 61 2d 6f 62 6a 65 63 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6d 65 64 69 61 2d 6f 62 6a 65 63 74 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 2e 6d 65 64 69 61 2d 72 69 67 68 74 2c 2e 6d 65 64 69 61 3e 2e 70 75 6c 6c 2d 72 69 67 68 74 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 7d 2e 6d 65 64 69 61 2d 6c 65 66 74 2c 2e 6d 65 64 69 61 3e 2e 70 75 6c 6c 2d 6c 65 66 74 7b 70 61 64 64 69 6e 67 2d Data Ascii: ia:first-child{margin-top:0}.media,.media-body{overflow:hidden;zoom:1}.media-body{width:10000px}.media-object{display:block}.media-object.img-thumbnail{max-width:none}.media-right,.media>.pull-right{padding-left:10px}.media-left,.media>.pull-left{padding-
2024-08-27 22:41:29 UTC	16384	IN	Data Raw: 2e 70 61 6e 65 6c 2d 66 6f 6f 74 65 72 2b 2e 70 61 6e 65 6c 2d 63 6f 6c 6c 61 70 73 65 3e 2e 70 61 6e 65 6c 2d 62 6f 64 79 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 23 65 62 63 63 64 31 7d 2e 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 20 2e 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 2d 69 74 65 6d 2c 2e 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 20 69 66 72 61 6d 65 2c 2e 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 20 65 6d 62 65 64 2c 2e 65 6d 62 65 64 2d 72 65 73 Data Ascii: .panel-footer+.panel-collapse>.panel-body{border-bottom-color:#ebccd1}.embed-responsive{position:relative;display:block;height:0;padding:0;overflow:hidden}.embed-responsive .embed-responsive-item,.embed-responsive iframe,.embed-responsive embed,.embed-res
2024-08-27 22:41:29 UTC	16384	IN	Data Raw: 62 6c 65 20 74 72 20 74 64 2e 74 6f 64 61 79 3a 66 6f 63 75 73 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 74 6f 64 61 79 3a 68 6f 76 65 72 3a 66 6f 63 75 73 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 74 6f 64 61 79 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 74 6f 64 61 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 3a 66 6f 63 75 73 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 74 6f 64 61 79 2e 66 6f 63 75 73 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 74 6f 64 61 79 3a 68 6f 76 65 72 2e 66 6f 63 75 73 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 Data Ascii: ble tr td.today:focus,.datepicker table tr td.today:hover:focus,.datepicker table tr td.today.disabled:focus,.datepicker table tr td.today.disabled:hover:focus,.datepicker table tr td.today.focus,.datepicker table tr td.today:hover.focus,.datepicker table
2024-08-27 22:41:29 UTC	16384	IN	Data Raw: 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 73 65 6c 65 63 74 65 64 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 73 65 6c 65 63 74 65 64 2e 64 69 73 61 62 6c 65 64 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 73 65 6c 65 63 74 65 64 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 73 65 6c 65 63 74 65 64 5b 64 69 Data Ascii: atepicker table tr td.selected.disabled:focus,.datepicker table tr td.selected:hover.disabled:focus,.datepicker table tr td.selected.disabled.disabled:focus,.datepicker table tr td.selected.disabled:hover.disabled:focus,.datepicker table tr td.selected[di