Edit tour

Windows Analysis Report
https://sgsconsulting.com/

Overview

General Information

Sample URL:	https://sgsconsulting.com/
Analysis ID:	1501319
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Suricata IDS alerts for network traffic

Detected non-DNS traffic on DNS port

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2200,i,10863905206694822637,4089068454418326470,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6488 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sgsconsulting.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT ZPHP Domain in TLS SNI (boylegmfg .com) - Source IP: 192.168.2.4 - Destination IP: 38.180.141.42

Timestamp:	2024-08-29T18:34:36.548327+0200
SID:	2055345
Severity:	1
Source Port:	49765
Destination Port:	443
Protocol:	TCP
Classtype:	Exploit Kit Activity Detected

ET EXPLOIT_KIT ZPHP Domain in TLS SNI (boylegmfg .com) - Source IP: 192.168.2.4 - Destination IP: 38.180.141.42

Timestamp:	2024-08-29T18:34:41.380088+0200
SID:	2055345
Severity:	1
Source Port:	49824
Destination Port:	443
Protocol:	TCP
Classtype:	Exploit Kit Activity Detected

ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (boylegmfg .com) - Source IP: 192.168.2.4 - Destination IP: 1.1.1.1

Timestamp:	2024-08-29T18:34:34.731325+0200
SID:	2055342
Severity:	1
Source Port:	50693
Destination Port:	53
Protocol:	UDP
Classtype:	Exploit Kit Activity Detected

ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (boylegmfg .com) - Source IP: 192.168.2.4 - Destination IP: 1.1.1.1

Timestamp:	2024-08-29T18:34:35.885348+0200
SID:	2055342
Severity:	1
Source Port:	61035
Destination Port:	53
Protocol:	UDP
Classtype:	Exploit Kit Activity Detected

ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (boylegmfg .com) - Source IP: 192.168.2.4 - Destination IP: 1.1.1.1

Timestamp:	2024-08-29T18:34:35.884947+0200
SID:	2055342
Severity:	1
Source Port:	50378
Destination Port:	53
Protocol:	UDP
Classtype:	Exploit Kit Activity Detected

ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (boylegmfg .com) - Source IP: 192.168.2.4 - Destination IP: 1.1.1.1

Timestamp:	2024-08-29T18:34:40.705888+0200
SID:	2055342
Severity:	1
Source Port:	62191
Destination Port:	53
Protocol:	UDP
Classtype:	Exploit Kit Activity Detected

ET EXPLOIT_KIT ZPHP Domain in TLS SNI (boylegmfg .com) - Source IP: 192.168.2.4 - Destination IP: 38.180.141.42

Timestamp:	2024-08-29T18:34:42.911185+0200
SID:	2055345
Severity:	1
Source Port:	49844
Destination Port:	443
Protocol:	TCP
Classtype:	Exploit Kit Activity Detected

ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (boylegmfg .com) - Source IP: 192.168.2.4 - Destination IP: 1.1.1.1

Timestamp:	2024-08-29T18:34:34.731665+0200
SID:	2055342
Severity:	1
Source Port:	54341
Destination Port:	53
Protocol:	UDP
Classtype:	Exploit Kit Activity Detected

ET EXPLOIT_KIT ZPHP Domain in TLS SNI (boylegmfg .com) - Source IP: 192.168.2.4 - Destination IP: 38.180.141.42

Timestamp:	2024-08-29T18:34:41.740048+0200
SID:	2055345
Severity:	1
Source Port:	49827
Destination Port:	443
Protocol:	TCP
Classtype:	Exploit Kit Activity Detected

ET EXPLOIT_KIT ZPHP Domain in TLS SNI (boylegmfg .com) - Source IP: 192.168.2.4 - Destination IP: 38.180.141.42

Timestamp:	2024-08-29T18:34:35.288324+0200
SID:	2055345
Severity:	1
Source Port:	49756
Destination Port:	443
Protocol:	TCP
Classtype:	Exploit Kit Activity Detected

ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (boylegmfg .com) - Source IP: 192.168.2.4 - Destination IP: 1.1.1.1

Timestamp:	2024-08-29T18:34:40.706316+0200
SID:	2055342
Severity:	1
Source Port:	58811
Destination Port:	53
Protocol:	UDP
Classtype:	Exploit Kit Activity Detected

HTTP traffic detected: POST /report/v4?s=T6uX4V3evKZ26HhWikKydP9WbPN2yO1pIVqZW31VoOVUlndSqu0bwT9IaJBryUALzU%2FZbBcJlZurm%2FSJPseWwj4nsMKEMsHiGTkf7mUMrD3TNgCftjoo1bUi9P3qhXVTbWibtiaS HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 474Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://sgsconsulting.com/contact.php	HTTP Parser: Form action: cntmail.php
Source: https://sgsconsulting.com/contact.php	HTTP Parser: Form action: cntmail.php
Source: https://sgsconsulting.com/contact.php	HTTP Parser: Form action: cntmail.php
Source: https://sgsconsulting.com/contact.php	HTTP Parser: Form action: cntmail.php

Source: https://sgsconsulting.com/	HTTP Parser: No favicon
Source: https://sgsconsulting.com/	HTTP Parser: No favicon
Source: https://sgsconsulting.com/	HTTP Parser: No favicon
Source: https://sgsconsulting.com/	HTTP Parser: No favicon
Source: https://sgsconsulting.com/	HTTP Parser: No favicon
Source: https://sgsconsulting.com/	HTTP Parser: No favicon
Source: https://sgsconsulting.com/	HTTP Parser: No favicon

Source: https://www.facebook.com/sgsconsultingllc/	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/sgsconsultingllc/	HTTP Parser: No <meta name="author".. found

Source: https://sgsconsulting.com/contact.php	HTTP Parser: No <meta name="copyright".. found
Source: https://sgsconsulting.com/contact.php	HTTP Parser: No <meta name="copyright".. found
Source: https://sgsconsulting.com/contact.php	HTTP Parser: No <meta name="copyright".. found
Source: https://sgsconsulting.com/contact.php	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/sgsconsultingllc/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/sgsconsultingllc/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49778 version: TLS 1.2

Source: Network traffic	Suricata IDS: 2055342 - Severity 1 - ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (boylegmfg .com) : 192.168.2.4:54341 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055342 - Severity 1 - ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (boylegmfg .com) : 192.168.2.4:61035 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055342 - Severity 1 - ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (boylegmfg .com) : 192.168.2.4:50378 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055342 - Severity 1 - ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (boylegmfg .com) : 192.168.2.4:50693 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055345 - Severity 1 - ET EXPLOIT_KIT ZPHP Domain in TLS SNI (boylegmfg .com) : 192.168.2.4:49756 -> 38.180.141.42:443
Source: Network traffic	Suricata IDS: 2055345 - Severity 1 - ET EXPLOIT_KIT ZPHP Domain in TLS SNI (boylegmfg .com) : 192.168.2.4:49765 -> 38.180.141.42:443
Source: Network traffic	Suricata IDS: 2055342 - Severity 1 - ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (boylegmfg .com) : 192.168.2.4:62191 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055342 - Severity 1 - ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (boylegmfg .com) : 192.168.2.4:58811 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055345 - Severity 1 - ET EXPLOIT_KIT ZPHP Domain in TLS SNI (boylegmfg .com) : 192.168.2.4:49824 -> 38.180.141.42:443
Source: Network traffic	Suricata IDS: 2055345 - Severity 1 - ET EXPLOIT_KIT ZPHP Domain in TLS SNI (boylegmfg .com) : 192.168.2.4:49827 -> 38.180.141.42:443
Source: Network traffic	Suricata IDS: 2055345 - Severity 1 - ET EXPLOIT_KIT ZPHP Domain in TLS SNI (boylegmfg .com) : 192.168.2.4:49844 -> 38.180.141.42:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: sgsconsulting.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: boylegmfg.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: embed.tawk.to
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: wp.alithemes.com
Source: global traffic	DNS traffic detected: DNS query: t.commonsupport.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: va.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa8.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa119.tawk.to
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: vsa22.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa26.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa63.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa76.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa104.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa45.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa106.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa109.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa36.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa61.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa96.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa101.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa37.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa1.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa47.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa20.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa59.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa90.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa81.tawk.to
Source: global traffic	DNS traffic detected: DNS query: scontent.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: video.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: vsa99.tawk.to
Source: global traffic	DNS traffic detected: DNS query: vsa51.tawk.to
Source: global traffic	DNS traffic detected: DNS query: scontent-hou1-1.xx.fbcdn.net

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 29 Aug 2024 16:34:35 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *Vary: Accept-Encodingcf-cdnjs-via: cfworker/origin0Cross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffCF-Cache-Status: MISSExpires: Thu, 29 Aug 2024 20:34:35 GMTCache-Control: public, max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T6uX4V3evKZ26HhWikKydP9WbPN2yO1pIVqZW31VoOVUlndSqu0bwT9IaJBryUALzU%2FZbBcJlZurm%2FSJPseWwj4nsMKEMsHiGTkf7mUMrD3TNgCftjoo1bUi9P3qhXVTbWibtiaS"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Strict-Transport-Security: max-age=15780000Server: cloudflareCF-RAY: 8badf30a9e4c0f67-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETX-Powered-By-Plesk: PleskWinDate: Thu, 29 Aug 2024 16:35:10 GMTConnection: closeContent-Length: 1245
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETX-Powered-By-Plesk: PleskWinDate: Thu, 29 Aug 2024 16:35:29 GMTConnection: closeContent-Length: 1245
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETX-Powered-By-Plesk: PleskWinDate: Thu, 29 Aug 2024 16:35:29 GMTConnection: closeContent-Length: 1245
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: qz9Tc3SiI62KVvrKBO5FIsy6I0SGfvvaxdYCiH3YQMNOpNVexTc/EVm3P360Z2iQy8++zq7nb2joLnHgvcgQng==x-fb-server-load: 42Date: Thu, 29 Aug 2024 16:35:50 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: BBQv3IraHYwr9pReFRG5A7NDNWnnXE52/nDBw1bgnHRxWTkxzS6wYqFme8Arm1SPlyqKRFT8Ax2lckBJ28pxrg==x-fb-server-load: 56Date: Thu, 29 Aug 2024 16:35:51 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: 2sMEs4w5g8cWsjZHdBqv1Ee6E3yaZ7sgyI5acmlGil9hsmV1U5guYdZmtPpmMAy852ABjHqlWCKwgBL8M/Gdwg==x-fb-server-load: 40Date: Thu, 29 Aug 2024 16:35:53 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: uj9DE4LjMiP5D8xt1WlrQnT/9xSRRIOClcbUslNSSRTOY/sh6GIPOUi7sR0muzuQLYKxfTDjzBsKrQPUo79mtQ==x-fb-server-load: 64Date: Thu, 29 Aug 2024 16:35:54 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1724949354; path=/; domain=.facebook.com; httponlySet-Cookie: datr=YaPQZj7OqSCuo2SYh70lDiO5; expires=Fri, 03-Oct-2025 16:35:55 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: gQFzHxSMQqjH2p/kSgmQmpo+OrZ3M5/AVrZI67AzXTAQz0JM83LWDLMsEUZX22PJ2JNu4YuiOY6qE1F0fc6EbA==x-fb-server-load: 50Date: Thu, 29 Aug 2024 16:35:55 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1724949356; path=/; domain=.facebook.com; httponlySet-Cookie: datr=YaPQZj7OqSCuo2SYh70lDiO5; expires=Fri, 03-Oct-2025 16:35:57 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: Tgzrfk0ngMzmr7Cgx+PeRNeDhniphkk6ep5ZFZbK9SHj2grB1k7ToHMbG6QcFda0ukPE45WYlrSxWLWOXXj4sg==x-fb-server-load: 51Date: Thu, 29 Aug 2024 16:35:57 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: JANJAIPL1iJD2Xt316gPAGa9DWp+rPR/4cOBZ3Vr6WvqUBWrHrxGujrVbjN/MNX042Y/yn6JXh13NKXjPdWScg==x-fb-server-load: 44Date: Thu, 29 Aug 2024 16:36:05 GMTTransfer-Encoding: chunked

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2200,i,10863905206694822637,4089068454418326470,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sgsconsulting.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2200,i,10863905206694822637,4089068454418326470,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/construction-superintendent-kru-tar-sm1010" class="icon-socials icon-linkedin"></a> equals www.linkedin.com (Linkedin)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/customer-service-representative-hybrid-utr-0012" class="icon-socials icon-linkedin"></a> equals www.linkedin.com (Linkedin)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/hr-generalist-kru-shu-395" class="icon-socials icon-linkedin"></a> equals www.linkedin.com (Linkedin)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/is-project-manager-iii-kru-tar-sm1009" class="icon-socials icon-linkedin"></a> equals www.linkedin.com (Linkedin)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/marketing-manager-front-store-shopper-experience-strategy-contractor-spa-aja-208" class="icon-socials icon-linkedin"></a> equals www.linkedin.com (Linkedin)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/pharmacy-technician-spa-aja-209" class="icon-socials icon-linkedin"></a> equals www.linkedin.com (Linkedin)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/software-developer-san-shu-1519" class="icon-socials icon-linkedin"></a> equals www.linkedin.com (Linkedin)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/supply-chain-analyst-iv-suc-sha-56292" class="icon-socials icon-linkedin"></a> equals www.linkedin.com (Linkedin)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/test-engineer-san-ind--1524" class="icon-socials icon-linkedin"></a> equals www.linkedin.com (Linkedin)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/training-administration-and-lms-coordinator-tar114389" class="icon-socials icon-linkedin"></a> equals www.linkedin.com (Linkedin)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer.php?u=https://sgsconsulting.com/job/construction-superintendent-kru-tar-sm1010" class="icon-socials icon-facebook"></a> equals www.facebook.com (Facebook)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer.php?u=https://sgsconsulting.com/job/customer-service-representative-hybrid-utr-0012" class="icon-socials icon-facebook"></a> equals www.facebook.com (Facebook)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer.php?u=https://sgsconsulting.com/job/hr-generalist-kru-shu-395" class="icon-socials icon-facebook"></a> equals www.facebook.com (Facebook)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer.php?u=https://sgsconsulting.com/job/is-project-manager-iii-kru-tar-sm1009" class="icon-socials icon-facebook"></a> equals www.facebook.com (Facebook)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer.php?u=https://sgsconsulting.com/job/marketing-manager-front-store-shopper-experience-strategy-contractor-spa-aja-208" class="icon-socials icon-facebook"></a> equals www.facebook.com (Facebook)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer.php?u=https://sgsconsulting.com/job/pharmacy-technician-spa-aja-209" class="icon-socials icon-facebook"></a> equals www.facebook.com (Facebook)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer.php?u=https://sgsconsulting.com/job/software-developer-san-shu-1519" class="icon-socials icon-facebook"></a> equals www.facebook.com (Facebook)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer.php?u=https://sgsconsulting.com/job/supply-chain-analyst-iv-suc-sha-56292" class="icon-socials icon-facebook"></a> equals www.facebook.com (Facebook)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer.php?u=https://sgsconsulting.com/job/test-engineer-san-ind--1524" class="icon-socials icon-facebook"></a> equals www.facebook.com (Facebook)
Source: chromecache_490.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sharer.php?u=https://sgsconsulting.com/job/training-administration-and-lms-coordinator-tar114389" class="icon-socials icon-facebook"></a> equals www.facebook.com (Facebook)
Source: chromecache_490.2.dr, chromecache_744.2.dr, chromecache_619.2.dr, chromecache_614.2.dr	String found in binary or memory: <a style="background: #3a5897; color: #fff; display: inline-block; width: 35px; height: 35px; line-height: 35px; text-align: center; border-radius: 100%; margin-right: 15px;" href="https://www.facebook.com/sgsconsultingllc/"><i class="icon-facebook"></i></a><a style="background: #0e76a8; color: #fff; display: inline-block; width: 35px; height: 35px; line-height: 35px; text-align: center; border-radius: 100%; margin-right: 15px;" href="https://www.linkedin.com/company/sgs-consulting"><i class="icon-linkedin"></i></a><a style="background: radial-gradient(circle at 30% 107%, #fdf497 0%, #fdf497 5%, #fd5949 45%, #d6249f 60%, #285AEB 90%); color: #fff; display: inline-block; width: 35px; height: 35px; line-height: 35px; text-align: center; border-radius: 100%; margin-right: 15px;" href="https://www.instagram.com/sgsconsulting/"><i class="icon-instagram"></i></a><br> equals www.facebook.com (Facebook)
Source: chromecache_490.2.dr, chromecache_744.2.dr, chromecache_619.2.dr, chromecache_614.2.dr	String found in binary or memory: <a style="background: #3a5897; color: #fff; display: inline-block; width: 35px; height: 35px; line-height: 35px; text-align: center; border-radius: 100%; margin-right: 15px;" href="https://www.facebook.com/sgsconsultingllc/"><i class="icon-facebook"></i></a><a style="background: #0e76a8; color: #fff; display: inline-block; width: 35px; height: 35px; line-height: 35px; text-align: center; border-radius: 100%; margin-right: 15px;" href="https://www.linkedin.com/company/sgs-consulting"><i class="icon-linkedin"></i></a><a style="background: radial-gradient(circle at 30% 107%, #fdf497 0%, #fdf497 5%, #fd5949 45%, #d6249f 60%, #285AEB 90%); color: #fff; display: inline-block; width: 35px; height: 35px; line-height: 35px; text-align: center; border-radius: 100%; margin-right: 15px;" href="https://www.instagram.com/sgsconsulting/"><i class="icon-instagram"></i></a><br> equals www.linkedin.com (Linkedin)
Source: chromecache_490.2.dr, chromecache_744.2.dr, chromecache_619.2.dr, chromecache_614.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/sgsconsultingllc/" /> equals www.facebook.com (Facebook)
Source: chromecache_402.2.dr, chromecache_529.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_671.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/CCT5pM3qiNk/ equals www.facebook.com (Facebook)
Source: chromecache_402.2.dr, chromecache_529.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_351.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/HAC-_9WTKIm/ equals www.facebook.com (Facebook)
Source: chromecache_671.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: chromecache_671.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_671.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V9vdYColc4k/ equals www.facebook.com (Facebook)
Source: chromecache_671.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_671.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/aJoeSHn7XcN/ equals www.facebook.com (Facebook)
Source: chromecache_671.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_756.2.dr, chromecache_498.2.dr	String found in binary or memory: </span><a href="https://www.facebook.com/" data-gt="{"target":"home","marketing_page_click":"1","conversion":"1"}">Go to Feed</a><span role="presentation" aria-hidden="true"> equals www.facebook.com (Facebook)
Source: chromecache_498.2.dr	String found in binary or memory: <i class="_3jii img sp_PgxXaYfcOet sx_841c22" id="u_0_1_7F"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_rk"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1" onsubmit=""><input type="hidden" name="jazoest" value="2929" autocomplete="off" /><input type="hidden" name="lsd" value="AVoSnSp-Nl0" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgot account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log In</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_39" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_hT" /><input type="hidden" name="lgnrnd" value="093605_WoxF" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_US" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI0OTQ5MzY1LCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_US">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><img class="mvl img" src="https://static.xx.fbcdn.net/rsrc.php/v3/yh/r/jb
Source: chromecache_756.2.dr	String found in binary or memory: <i class="_3jii img sp_PgxXaYfcOet sx_841c22" id="u_0_1_TA"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_Bu"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1" onsubmit=""><input type="hidden" name="jazoest" value="2953" autocomplete="off" /><input type="hidden" name="lsd" value="AVoSnSp-qa0" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgot account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log In</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_MF" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_53" /><input type="hidden" name="lgnrnd" value="093557_0Hpm" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_US" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI0OTQ5MzU3LCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_US">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><img class="mvl img" src="https://static.xx.fbcdn.net/rsrc.php/v3/yh/r/jb
Source: chromecache_756.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fajax%2Fbulk-route-definitions%2F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_PgxXaYfcOet sx_7e14f6"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign Up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log into Facebook">Log In</a></li><li><a href="https://messenger.com/" title="Check out Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Check out popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Check out Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Meta Ray-Ban" target="_blank">Meta Ray-Ban</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT376-QTz774LjLR2ibLR4gpf_E71kPnYuGhF18hsMwgZSo0ISuqosYgCD3XOXsDD3sR1O-oXEkxFopAL4AU9eBnpK8-vXSfcBUm-QpPpg9ByEhvDTNKdVMDbmBSBVryNaminNQw0mkTRUp4roXDmQ" title="Check out Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Center</a></li><li><a href="/groups/discover/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource center, and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&campaign_id=4020
Source: chromecache_498.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fshared%2Fuser_preferences%2F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_PgxXaYfcOet sx_7e14f6"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign Up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log into Facebook">Log In</a></li><li><a href="https://messenger.com/" title="Check out Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Check out popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Check out Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Meta Ray-Ban" target="_blank">Meta Ray-Ban</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT2teu_XRJYxx2G2HxxsfxgYTJyfhm_Zf7EKHFWjHBVMwilU4DoYjhPPVqYoHjxsA04x6lDSMvzx4-Klt5r8uHO_Dgc4RkM0K6R2axKhd_1vTrXmLAvdKibKbYuLaTLHWBp-Sqn6xGc2ZMERokkpqg" title="Check out Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Center</a></li><li><a href="/groups/discover/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource center, and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&campaign_id=40204744
Source: chromecache_756.2.dr	String found in binary or memory: <script>requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"define":[["cr:7736",["FBLynxLogging"],{"__rc":["FBLynxLogging",null]},-1],["LinkshimHandlerConfig",[],{"supports_meta_referrer":true,"default_meta_referrer_policy":"origin-when-crossorigin","switched_meta_referrer_policy":"origin","non_linkshim_lnfb_mode":null,"link_react_default_hash":"AT1yt41uxE9pkefdsBJK3bJz005nWTtJbVKzsECAZM5bXbpgFPyky6zwxrcK3whze7RjWrlj_esavKEmDUrsOuKgqp62uGlTnK3exDWzcF--Vi0kNdrFJE4vXhQh1F1vJ5tOlMSC-UqM672G1RS1LA","untrusted_link_default_hash":"AT10QZyGrFbUd3ebyDmZ6NsuN7xhj8YEBGk9dnDjsTv3lxRU9ZV5OguW2pXTjiFpqcLzVWHwl0bwPw1aVlIlOLcNhII54313czaEnEY4oO9wgUAxdhEWs4VK77e6py2IfOfQTyO6PLEErueV8YAwWg","linkshim_host":"l.facebook.com","linkshim_path":"\/l.php","linkshim_enc_param":"h","linkshim_url_param":"u","use_rel_no_opener":true,"use_rel_no_referrer":true,"always_use_https":true,"onion_always_shim":true,"middle_click_requires_event":true,"www_safe_js_mode":"asynclazy","m_safe_js_mode":"MLynx_asynclazy","ghl_param_link_shim":false,"click_ids":[],"is_linkshim_supported":true,"current_domain":"facebook.com","blocklisted_domains":["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"elements":[["__elem_072b8e64_0_0_KL","u_0_0_vK",1],["__elem_94c15385_0_0_I4","u_0_1_TA",1],["__elem_a588f507_0_3_9w","u_0_2_Bu",1],["__elem_835c633a_0_0_8I","login_form",1],["__elem_efa9dffa_0_0_2h","email",1],["__elem_45d73b5d_0_0_7U","loginbutton",1],["__elem_f46f4946_0_0_Z2","u_0_3_MF",1],["__elem_f46f4946_0_1_vO","u_0_4_53",1],["__elem_a588f507_0_1_Pb","u_0_5_bO",1],["__elem_9f5fac15_0_0_\/u","pagelet_bluebar",1],["__elem_a588f507_0_0_sp","globalContainer",1],["__elem_a588f507_0_2_5B","content",1]],"require":[["WebPixelRatioDetector","startDetecting",[],[false]],["ScriptPath","set",[],["X4oh4Controller","a1f3c513",{"imp_id":"083fCvmx6ayeCyKB8","ef_page":null,"uri":"https:\/\/www.facebook.com\/ajax\/bulk-route-definitions\/"}]],["UITinyViewportAction","init",[],[]],["ResetScrollOnUnload","init",["__elem_a588f507_0_0_sp"],[{"__m":"__elem_a588f507_0_0_sp"}]],["KeyboardActivityLogger","init",[],[]],["FocusRing","init",[],[]],["ErrorMessageConsole","listenForUncaughtErrors",[],[]],["HardwareCSS","init",[],[]],["AsyncRequestNectarLogging"],["FourOhFourJSLogger","log",[],[]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["LoginbarPopover","init",["__elem_94c15385_0_0_I4","__elem_072b8e64_0_0_KL","__elem_a588f507_0_3_9w"],[{"__m":"__elem_94c15385_0_0_I4"},{"__m":"__elem_072b8e64_0_0_KL"},{"__m":"__elem_a588f507_0_3_9w"}]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_Z2"],[{"__m":"__elem_f46f4946_0_0_Z2"},1724949357]],["ScreenDimensionsAutoSet","setInputValue",["__elem_f46f4946_0_1_vO"],[{"__m":"__elem_f46f4946_0_1_vO"}]],["LoginFormController","init",["__elem_835c633a_0_0_8I","__elem_4
Source: chromecache_498.2.dr	String found in binary or memory: <script>requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"define":[["cr:7736",["FBLynxLogging"],{"__rc":["FBLynxLogging",null]},-1],["LinkshimHandlerConfig",[],{"supports_meta_referrer":true,"default_meta_referrer_policy":"origin-when-crossorigin","switched_meta_referrer_policy":"origin","non_linkshim_lnfb_mode":null,"link_react_default_hash":"AT2PgwV_FKCuOSINndGlvmYdxFTyOUP4NZBCDBfPQ_R-1IiajioWpBKMWYFQ8O2xn41qGzeqZCei9KP7VmWsi9kMVWwDnPLLoDV7eKGZxYzSwweYK5E76yQN3PZEND3chP5Crw0MUDkMfb0WTW2GSg","untrusted_link_default_hash":"AT1Pe1iMGpZTi0RP0HQWMHHpLiFMiQEVfdv7O5w6RaJ7kRUdXwuAUHxKmQRwNb7btp_jq0EHuWodqxT3lHRUpAXUdvCGkJleardDhdSDVqO_L2cYq0KKzOaVs2eHjYP9O7XhRqV3G6tBi9yhIVafzg","linkshim_host":"l.facebook.com","linkshim_path":"\/l.php","linkshim_enc_param":"h","linkshim_url_param":"u","use_rel_no_opener":true,"use_rel_no_referrer":true,"always_use_https":true,"onion_always_shim":true,"middle_click_requires_event":true,"www_safe_js_mode":"asynclazy","m_safe_js_mode":"MLynx_asynclazy","ghl_param_link_shim":false,"click_ids":[],"is_linkshim_supported":true,"current_domain":"facebook.com","blocklisted_domains":["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"elements":[["__elem_072b8e64_0_0_Mu","u_0_0_FQ",1],["__elem_94c15385_0_0_Ww","u_0_1_7F",1],["__elem_a588f507_0_3_j5","u_0_2_rk",1],["__elem_835c633a_0_0_6j","login_form",1],["__elem_efa9dffa_0_0_\/G","email",1],["__elem_45d73b5d_0_0_ks","loginbutton",1],["__elem_f46f4946_0_0_Zz","u_0_3_39",1],["__elem_f46f4946_0_1_yL","u_0_4_hT",1],["__elem_a588f507_0_1_qp","u_0_5_We",1],["__elem_9f5fac15_0_0_cW","pagelet_bluebar",1],["__elem_a588f507_0_0_BW","globalContainer",1],["__elem_a588f507_0_2_+F","content",1]],"require":[["WebPixelRatioDetector","startDetecting",[],[false]],["ScriptPath","set",[],["X4oh4Controller","a1f3c513",{"imp_id":"03xH2IQmLCYn81gPt","ef_page":null,"uri":"https:\/\/www.facebook.com\/shared\/user_preferences\/"}]],["UITinyViewportAction","init",[],[]],["ResetScrollOnUnload","init",["__elem_a588f507_0_0_BW"],[{"__m":"__elem_a588f507_0_0_BW"}]],["KeyboardActivityLogger","init",[],[]],["FocusRing","init",[],[]],["ErrorMessageConsole","listenForUncaughtErrors",[],[]],["HardwareCSS","init",[],[]],["AsyncRequestNectarLogging"],["FourOhFourJSLogger","log",[],[]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["LoginbarPopover","init",["__elem_94c15385_0_0_Ww","__elem_072b8e64_0_0_Mu","__elem_a588f507_0_3_j5"],[{"__m":"__elem_94c15385_0_0_Ww"},{"__m":"__elem_072b8e64_0_0_Mu"},{"__m":"__elem_a588f507_0_3_j5"}]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_Zz"],[{"__m":"__elem_f46f4946_0_0_Zz"},1724949365]],["ScreenDimensionsAutoSet","setInputValue",["__elem_f46f4946_0_1_yL"],[{"__m":"__elem_f46f4946_0_1_yL"}]],["LoginFormController","init",["__elem_835c633a_0_0_6j","__elem_45d73

Source: chromecache_781.2.dr, chromecache_783.2.dr	String found in binary or memory: http://BeantownThemes.com
Source: chromecache_514.2.dr	String found in binary or memory: http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia
Source: chromecache_730.2.dr, chromecache_517.2.dr, chromecache_616.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_781.2.dr	String found in binary or memory: http://docs.jquery.com/UI/Theming
Source: chromecache_539.2.dr	String found in binary or memory: http://greensock.com
Source: chromecache_539.2.dr	String found in binary or memory: http://greensock.com/club/
Source: chromecache_539.2.dr	String found in binary or memory: http://greensock.com/standard-license
Source: chromecache_473.2.dr, chromecache_777.2.dr, chromecache_435.2.dr	String found in binary or memory: http://imagesloaded.desandro.com/
Source: chromecache_514.2.dr	String found in binary or memory: http://iptc.org/std/Iptc4xmpExt/2008-02-29/
Source: chromecache_473.2.dr, chromecache_607.2.dr, chromecache_777.2.dr, chromecache_435.2.dr	String found in binary or memory: http://isotope.metafizzy.co
Source: chromecache_781.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_781.2.dr	String found in binary or memory: http://jqueryui.com/about)
Source: chromecache_473.2.dr, chromecache_777.2.dr, chromecache_435.2.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_539.2.dr	String found in binary or memory: http://labs.skinkers.com/touchSwipe/
Source: chromecache_473.2.dr, chromecache_777.2.dr, chromecache_435.2.dr	String found in binary or memory: http://markdalgleish.com/projects/stellar.js
Source: chromecache_473.2.dr, chromecache_777.2.dr, chromecache_435.2.dr	String found in binary or memory: http://markdalgleish.mit-license.org
Source: chromecache_596.2.dr	String found in binary or memory: http://markgoodyear.com/labs/scrollup/
Source: chromecache_473.2.dr, chromecache_777.2.dr, chromecache_435.2.dr	String found in binary or memory: http://nicescroll.areaaperta.com
Source: chromecache_381.2.dr, chromecache_721.2.dr, chromecache_755.2.dr, chromecache_357.2.dr, chromecache_736.2.dr, chromecache_713.2.dr, chromecache_723.2.dr, chromecache_511.2.dr, chromecache_709.2.dr, chromecache_349.2.dr, chromecache_546.2.dr, chromecache_798.2.dr, chromecache_363.2.dr, chromecache_612.2.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/
Source: chromecache_350.2.dr, chromecache_567.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_539.2.dr	String found in binary or memory: http://plugins.jquery.com/project/touchSwipe
Source: chromecache_473.2.dr, chromecache_777.2.dr, chromecache_435.2.dr	String found in binary or memory: http://robert-fleischmann.de)
Source: chromecache_583.2.dr, chromecache_646.2.dr, chromecache_496.2.dr	String found in binary or memory: http://swiperjs.com
Source: chromecache_744.2.dr	String found in binary or memory: http://t.commonsupport.com/adro/images/resource/thumb-1.jpg
Source: chromecache_781.2.dr, chromecache_783.2.dr	String found in binary or memory: http://themeforest.net/user/BeantownThemes
Source: chromecache_473.2.dr, chromecache_777.2.dr, chromecache_435.2.dr	String found in binary or memory: http://www.gianlucaguarini.com/
Source: chromecache_473.2.dr, chromecache_777.2.dr, chromecache_435.2.dr, chromecache_539.2.dr	String found in binary or memory: http://www.github.com/mattbryson
Source: chromecache_350.2.dr, chromecache_567.2.dr	String found in binary or memory: http://www.jplayer.org
Source: chromecache_473.2.dr, chromecache_777.2.dr, chromecache_435.2.dr	String found in binary or memory: http://www.no-margin-for-errors.com
Source: chromecache_514.2.dr	String found in binary or memory: http://www.ononesoftware.com/vcb/1.0/
Source: chromecache_624.2.dr	String found in binary or memory: http://youmightnotneedjquery.com/#add_class
Source: chromecache_624.2.dr	String found in binary or memory: http://youmightnotneedjquery.com/#remove_class
Source: chromecache_473.2.dr, chromecache_777.2.dr, chromecache_435.2.dr	String found in binary or memory: http://zurb.com/playground/twentytwenty
Source: chromecache_742.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_490.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js
Source: chromecache_744.2.dr	String found in binary or memory: https://boylegmfg.com/cdn-vs/original.js
Source: chromecache_742.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_744.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.1.1/assets/owl.carousel.min.css
Source: chromecache_744.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.1.1/assets/owl.theme.default.css
Source: chromecache_744.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.1.1/owl.carousel.min.js

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://swiperjs.com	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://youradchoices.ca/	0%	URL Reputation	safe
https://fburl.com/wiki/xrzohrqb	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AYDke_DD9b66b45wDZpOUSKeM1-3VevyBXCtyJjsrnHlZw&oe=66F80BB0&_nc_sid=7da55a	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/y3/r/BQdeC67wT9z.png	0%	Avira URL Cloud	safe
https://wp.alithemes.com/html/jobhub/frontend/assets/fonts/uicons/uicons-regular-rounded.eot#iefix	0%	Avira URL Cloud	safe
https://embed.tawk.to/_s/v4/app/66cbd978a7b/js/twk-main.js	0%	Avira URL Cloud	safe
https://refreshless.com/nouislider/	0%	Avira URL Cloud	safe
https://sgsconsulting.com/admin/images/clients/Untitled%20design.png	0%	Avira URL Cloud	safe
https://sgsconsulting.com/admin/images/about/5.png	0%	Avira URL Cloud	safe
https://sgsconsulting.com/css/fonts/mfn-icons.woff	0%	Avira URL Cloud	safe
http://greensock.com/club/	0%	Avira URL Cloud	safe
https://sgsconsulting.com/job/supply-chain-analyst-iv-suc-sha-56292	0%	Avira URL Cloud	safe
http://www.ononesoftware.com/vcb/1.0/	0%	Avira URL Cloud	safe
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=812583380600283&ev=PageView&dl=https%3A%2F%2Fsgsconsulting.com&rl=&if=false&ts=1724949319880&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4124&fbp=fb.1.1724949282851.351002700239736486&pm=1&hrl=3d9e87&ler=empty&cdl=API_unavailable&it=1724949319635&coo=false&cs_cc=1&cas=7975830242471902&rqm=FGET	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3iDEh4/yN/l/en_US/l7n1CdQRfdSzjMEMMGVEHkfVDpqfyDEoRIPTehBIz7WIERz6pNGhHp8kjkIst4-kx1rd3Ao0gelUv.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19964.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408601025610239393&__req=d&__rev=1016073387&__s=dkvl5r%3Aozyzs1%3A7d1ao7&__spin_b=trunk&__spin_r=1016073387&__spin_t=1724949345&__user=0&dpr=1&jazoest=2908&lsd=AVoSnSp-1_E&ph=C3	0%	Avira URL Cloud	safe
https://wp.alithemes.com/html/jobhub/frontend/assets/imgs/theme/icons/play.svg)	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/API/Window/scrollY#Notes	0%	Avira URL Cloud	safe
https://embed.tawk.to/_s/v4/app/66cbd978a7b/	0%	Avira URL Cloud	safe
https://sgsconsulting.com/1.jpg	0%	Avira URL Cloud	safe
https://sgsconsulting.com/admin/images/services/agency5-services-pic4.jpg	0%	Avira URL Cloud	safe
https://refreshless.com/wnumb/	0%	Avira URL Cloud	safe
https://vsa8.tawk.to/s/?k=66d0a327a3c8d40bf9530b1b&cver=0&pop=false&asver=10&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjciLCJ2aWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjctUG1nZlY4OVNnOGExdjJPQ1pyRjAwIiwic2lkIjoiNjZkMGEzMjdhM2M4ZDQwYmY5NTMwYjFiIiwiaWF0IjoxNzI0OTQ5Mjg4LCJleHAiOjE3MjQ5NTEwODgsImp0aSI6IkxrTWZEZGVBbWNzRzF5dGtaenhfdSJ9.bliJnQigz7JJGX4S7ktAwNF4_eVpBPFwA9pNIIduq7XKH-loSc85TGr6_c8HtJylxY0Wkc3adYu17cGt6v5L-Q&EIO=3&transport=websocket&__t=P6U_LJc	0%	Avira URL Cloud	safe
https://sgsconsulting.com/images/salary.png	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=812583380600283&ev=PageView&dl=https%3A%2F%2Fsgsconsulting.com&rl=&if=false&ts=1724949324879&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4124&fbp=fb.1.1724949282851.351002700239736486&pm=1&hrl=d23df1&ler=empty&cdl=API_unavailable&it=1724949324853&coo=false&cs_cc=1&cas=7975830242471902&rqm=GET	0%	Avira URL Cloud	safe
https://vsa96.tawk.to/s/?k=66d0a327a3c8d40bf9530b1b&cver=0&pop=false&asver=10&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjciLCJ2aWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjctUG1nZlY4OVNnOGExdjJPQ1pyRjAwIiwic2lkIjoiNjZkMGEzMjdhM2M4ZDQwYmY5NTMwYjFiIiwiaWF0IjoxNzI0OTQ5Mjg4LCJleHAiOjE3MjQ5NTEwODgsImp0aSI6IkxrTWZEZGVBbWNzRzF5dGtaenhfdSJ9.bliJnQigz7JJGX4S7ktAwNF4_eVpBPFwA9pNIIduq7XKH-loSc85TGr6_c8HtJylxY0Wkc3adYu17cGt6v5L-Q&EIO=3&transport=websocket&__t=P6U_Tk2	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/yt/r/EUNHXg17Vg2.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/375651901_786038853527714_6724045822002211945_n.jpg?stp=c504.0.592.592a_dst-jpg_s160x160&_nc_cat=106&ccb=1-7&_nc_sid=30a509&_nc_ohc=90bsoIXUOqwQ7kNvgFx2-hl&_nc_ht=scontent-hou1-1.xx&oh=00_AYCOw_kXUOCypVkWtvTI6hNt8AMc35NLZWaPpokcXBSumQ&oe=66D67B33	0%	Avira URL Cloud	safe
https://twitter.com/share?text=&url=https://sgsconsulting.com/job/training-administration-and-lms-co	0%	Avira URL Cloud	safe
https://www.tawk.to/?utm_source=tawk-messenger&utm_medium=link&utm_campaign=referral&utm_term=63e879	0%	Avira URL Cloud	safe
https://sgsconsulting.com/js1/jquery.plugins.js	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3i1or4/yS/l/en_US/mKVkbqHPePDLd9-eGXovN2VZ1lFH_i73e4S0X6zSVWUBy6f94jNFAQB6VA-pMUzw-ttL7_YCvCakwm8S5O_eT4VGeDafdSj-VhpcxaRcaaK6W_8Kk3l6oQ-XB.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://sgsconsulting.com/job/pharmacy-technician-spa-aja-209	0%	Avira URL Cloud	safe
https://vsa47.tawk.to/s/?k=66d0a327a3c8d40bf9530b1b&cver=0&pop=false&asver=10&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjciLCJ2aWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjctUG1nZlY4OVNnOGExdjJPQ1pyRjAwIiwic2lkIjoiNjZkMGEzMjdhM2M4ZDQwYmY5NTMwYjFiIiwiaWF0IjoxNzI0OTQ5Mjg4LCJleHAiOjE3MjQ5NTEwODgsImp0aSI6IkxrTWZEZGVBbWNzRzF5dGtaenhfdSJ9.bliJnQigz7JJGX4S7ktAwNF4_eVpBPFwA9pNIIduq7XKH-loSc85TGr6_c8HtJylxY0Wkc3adYu17cGt6v5L-Q&EIO=3&transport=websocket&__t=P6U_Vpb	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/yx/l/0	0%	Avira URL Cloud	safe
https://sgsconsulting.com/images/Canada.jpg	0%	Avira URL Cloud	safe
https://sgsconsulting.com/images/corporation2-home-pic1.jpg	0%	Avira URL Cloud	safe
https://sgsconsulting.com/images/pharmaceutical.png	0%	Avira URL Cloud	safe
https://sgsconsulting.com/images/Logo4.png	0%	Avira URL Cloud	safe
https://embed.tawk.to/_s/v4/app/66cbd978a7b/js/twk-iterator-polyfill.js	0%	Avira URL Cloud	safe
https://sgsconsulting.com/jobjs/jquery-migrate-3.3.0.min.js	0%	Avira URL Cloud	safe
https://embed.tawk.to/_s/v4/app/66cbd978a7b/css/message-preview.css	0%	Avira URL Cloud	safe
https://sgsconsulting.com/images/home_employment_pic9.png	0%	Avira URL Cloud	safe
https://sgsconsulting.com/js1/scripts.js	0%	Avira URL Cloud	safe
https://sgsconsulting.com/admin/images/about/Awards28.png	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-1/454422511_1018446680286929_1855155180857422474_n.jpg?stp=c23.23.1034.1034a_cp0_dst-jpg_s40x40&_nc_cat=111&ccb=1-7&_nc_sid=f4b9fd&_nc_ohc=pDkrWRIzD3IQ7kNvgFzwT5z&_nc_ht=scontent-hou1-1.xx&_nc_gid=A82E_6AOEZJqw143vL-NcX9&oh=00_AYDe4zSISDP3Jc8dlNdLKRDFRZFaPxTiurmMP7eUuvSNXw&oe=66D68B35	0%	Avira URL Cloud	safe
http://markgoodyear.com/labs/scrollup/	0%	Avira URL Cloud	safe
https://sgsconsulting.com/images/healthcare.png	0%	Avira URL Cloud	safe
https://sgsconsulting.com/images/san_diego_ca.jpg	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3i7KW4/yN/l/en_US/k-kkTmYn12wH0zuioh0VRF6G_0LeVZpiDMYcCTl0Nkqd81i2yjJsIhI.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://embed.tawk.to/_s/v4/app/66cbd978a7b/js/twk-arr-find-polyfill.js	0%	Avira URL Cloud	safe
https://sgsconsulting.com/jobjs/main.js?v=1.0	0%	Avira URL Cloud	safe
https://sgsconsulting.com/admin/images/blog/blog20.jpeg	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3i7M54/yq/l/en_US/OcgJMmetGCj.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3iYKq4/yw/l/en_US/d7bGKONu1W6.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://twitter.com/share?text=&url=https://sgsconsulting.com/job/test-engineer-san-ind--1524	0%	Avira URL Cloud	safe
https://sgsconsulting.com/images/agency5-contact-pic1.png	0%	Avira URL Cloud	safe
https://sgsconsulting.com/jobjs/wow.js	0%	Avira URL Cloud	safe
https://sgsconsulting.com/admin/images/blog/blog18.jpeg	0%	Avira URL Cloud	safe
https://embed.tawk.to/_s/v4/app/66cbd978a7b/js/twk-app.js	0%	Avira URL Cloud	safe
https://embed.tawk.to/_s/v4/app/66cbd978a7b/js/twk-chunk-4fe9d5dd.js	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/403800625_836785868453012_8602990503526441655_n.jpg?stp=c230.0.360.360a_dst-jpg_s160x160&_nc_cat=106&ccb=1-7&_nc_sid=30a509&_nc_ohc=_ii21OcHIUsQ7kNvgFS5OZC&_nc_ht=scontent-hou1-1.xx&oh=00_AYALWZHqyhytkDp7-cAgJSFCn2q2W7MpsbHjlFJr0a19ZQ&oe=66D67188	0%	Avira URL Cloud	safe
https://sgsconsulting.com/jobcss/plugins/swiper-bundle.min.css	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AYA1-faYHIR1wKcBYYjxIufMAh5yqevSB47mvP-FrGXLcQ&oe=66F82307&_nc_sid=7da55a	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/yT/r/Dc7-7AgwkwS.png	0%	Avira URL Cloud	safe
https://sgsconsulting.com/admin/images/about/4.png	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/yb/r/hLRJ1GG_y0J.ico	0%	Avira URL Cloud	safe
https://wp.alithemes.com/html/jobhub/frontend/assets/imgs/theme/icons/icon-send-letter.svg);backgrou	0%	Avira URL Cloud	safe
https://va.tawk.to/v1/session/start	0%	Avira URL Cloud	safe
https://github.com/teamdf/jquery-visible/	0%	Avira URL Cloud	safe
https://sgsconsulting.com/2.jpg	0%	Avira URL Cloud	safe
https://vsa81.tawk.to/s/?k=66d0a327a3c8d40bf9530b1b&cver=0&pop=false&asver=10&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjciLCJ2aWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjctUG1nZlY4OVNnOGExdjJPQ1pyRjAwIiwic2lkIjoiNjZkMGEzMjdhM2M4ZDQwYmY5NTMwYjFiIiwiaWF0IjoxNzI0OTQ5Mjg4LCJleHAiOjE3MjQ5NTEwODgsImp0aSI6IkxrTWZEZGVBbWNzRzF5dGtaenhfdSJ9.bliJnQigz7JJGX4S7ktAwNF4_eVpBPFwA9pNIIduq7XKH-loSc85TGr6_c8HtJylxY0Wkc3adYu17cGt6v5L-Q&EIO=3&transport=websocket&__t=P6U_Yp2	0%	Avira URL Cloud	safe
https://embed.tawk.to/_s/v4/app/66cbd978a7b/css/bubble-widget.css	0%	Avira URL Cloud	safe
https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/marketing-manager-	0%	Avira URL Cloud	safe
https://sgsconsulting.com/images/finance4-home-column-bg3.png	0%	Avira URL Cloud	safe
https://sgsconsulting.com/jobcss/plugins/perfect-scrollbar.css	0%	Avira URL Cloud	safe
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AYAgXlZphB0OkqnL4_VYdaLN_4oiwIJD5nLN-3hgXjg7dw&oe=66F80E17&_nc_sid=7da55a	0%	Avira URL Cloud	safe
https://boylegmfg.com/cdn-vs/original.js?_=1724949277150	100%	Avira URL Cloud	malware
https://sgsconsulting.com/admin/images/about/Awards23.png	0%	Avira URL Cloud	safe
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19964.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408601025610239393&__req=b&__rev=1016073387&__s=dkvl5r%3Aozyzs1%3A7d1ao7&__spin_b=trunk&__spin_r=1016073387&__spin_t=1724949345&__user=0&dpr=1&jazoest=2908&lsd=AVoSnSp-1_E&ph=C3	0%	Avira URL Cloud	safe
https://sgsconsulting.com/admin/images/clients/sgsicon2.png	0%	Avira URL Cloud	safe
http://imagesloaded.desandro.com/	0%	Avira URL Cloud	safe
https://vsa36.tawk.to/s/?k=66d0a327a3c8d40bf9530b1b&cver=0&pop=false&asver=10&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjciLCJ2aWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjctUG1nZlY4OVNnOGExdjJPQ1pyRjAwIiwic2lkIjoiNjZkMGEzMjdhM2M4ZDQwYmY5NTMwYjFiIiwiaWF0IjoxNzI0OTQ5Mjg4LCJleHAiOjE3MjQ5NTEwODgsImp0aSI6IkxrTWZEZGVBbWNzRzF5dGtaenhfdSJ9.bliJnQigz7JJGX4S7ktAwNF4_eVpBPFwA9pNIIduq7XKH-loSc85TGr6_c8HtJylxY0Wkc3adYu17cGt6v5L-Q&EIO=3&transport=websocket&__t=P6U_SQr	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.1.1/owl.carousel.min.js	0%	Avira URL Cloud	safe
https://sgsconsulting.com/css/style-demo.css	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3ienF4/yL/l/en_US/-dGFJMe3v8WJPZCgm01O0LT2zcKaeBdGzgjyrWW1wQ5BYT7n1sgH1lvR8I9oqRJx-mDYvatkvPhoOVUK0F-jX-aMrkL5Y9UO0A-MqSphEGX5Dio3euJ7wuKvOkLVzvoX3Y5E1Rdzuzi16ygn6kxhtsKYnvau-LZbAjemup4XA8wPzcukhV_-BvmtDG86vVhLfGuByFPCr8NdBUvY3lh6jit1ncqcayAbGTV5Okhp55HfXW__mMzi95_wmB-512pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
http://www.jplayer.org	0%	Avira URL Cloud	safe
https://sgsconsulting.com/admin/images/blog/Untitled%20design%20(1).png	0%	Avira URL Cloud	safe
https://sgsconsulting.com/admin/images/blog/9%20Interview%20Questions%20That%20Could%20Save%20Your%20Spot.jpeg	0%	Avira URL Cloud	safe
https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/software-developer	0%	Avira URL Cloud	safe
https://static.xx.fbcdn.net/rsrc.php/v3/y9/r/cBfAkP0T1tP.js?_nc_x=Ij3Wp8lg5Kz	0%	Avira URL Cloud	safe
https://sgsconsulting.com/images/employment.png	0%	Avira URL Cloud	safe
https://sgsconsulting.com/jobjs/noUISlider.js	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	unknown
vsa99.tawk.to	104.22.45.142	true	false	unknown
vsa22.tawk.to	172.67.15.14	true	false	unknown
vsa81.tawk.to	172.67.15.14	true	false	unknown
vsa20.tawk.to	172.67.15.14	true	false	unknown
vsa96.tawk.to	104.22.45.142	true	false	unknown
boylegmfg.com	38.180.141.42	true	true	unknown
vsa26.tawk.to	104.22.44.142	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
vsa51.tawk.to	172.67.15.14	true	false	unknown
embed.tawk.to	172.67.15.14	true	false	unknown
va.tawk.to	104.22.45.142	true	false	unknown
vsa101.tawk.to	104.22.45.142	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
scontent-hou1-1.xx.fbcdn.net	157.240.24.13	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
vsa59.tawk.to	104.22.44.142	true	false	unknown
vsa63.tawk.to	104.22.45.142	true	false	unknown
vsa1.tawk.to	104.22.44.142	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
vsa45.tawk.to	172.67.15.14	true	false	unknown
vsa76.tawk.to	172.67.15.14	true	false	unknown
vsa106.tawk.to	104.22.45.142	true	false	unknown
vsa90.tawk.to	104.22.44.142	true	false	unknown
wp.alithemes.com	172.67.177.252	true	false	unknown
video.xx.fbcdn.net	157.240.253.2	true	false	unknown
vsa61.tawk.to	104.22.45.142	true	false	unknown
vsa47.tawk.to	104.22.44.142	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	unknown
vsa119.tawk.to	104.22.45.142	true	false	unknown
vsa109.tawk.to	104.22.45.142	true	false	unknown
t.commonsupport.com	192.250.227.23	true	false	unknown
vsa104.tawk.to	104.22.44.142	true	false	unknown
vsa8.tawk.to	104.22.44.142	true	false	unknown
vsa36.tawk.to	104.22.44.142	true	false	unknown
sgsconsulting.com	50.63.8.53	true	false	unknown
vsa37.tawk.to	104.22.45.142	true	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
static.xx.fbcdn.net	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://static.xx.fbcdn.net/rsrc.php/v3/y3/r/BQdeC67wT9z.png	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/admin/images/about/5.png	false	Avira URL Cloud: safe	unknown
https://embed.tawk.to/_s/v4/app/66cbd978a7b/js/twk-main.js	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An8UpDtYTxwRfyFUAQkYpPLVzCcFZAyT58b4mM9QRn-9IZWdHfcWsX1lOuHAsupZu8HCFEX8uobe6VdR6H9B8v2Z_FzSMfB8MYN36w.kf?ccb=10-5&oh=00_AYDke_DD9b66b45wDZpOUSKeM1-3VevyBXCtyJjsrnHlZw&oe=66F80BB0&_nc_sid=7da55a	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/admin/images/clients/Untitled%20design.png	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/css/fonts/mfn-icons.woff	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=812583380600283&ev=PageView&dl=https%3A%2F%2Fsgsconsulting.com&rl=&if=false&ts=1724949319880&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4124&fbp=fb.1.1724949282851.351002700239736486&pm=1&hrl=3d9e87&ler=empty&cdl=API_unavailable&it=1724949319635&coo=false&cs_cc=1&cas=7975830242471902&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/admin/images/services/agency5-services-pic4.jpg	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3iDEh4/yN/l/en_US/l7n1CdQRfdSzjMEMMGVEHkfVDpqfyDEoRIPTehBIz7WIERz6pNGhHp8kjkIst4-kx1rd3Ao0gelUv.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19964.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408601025610239393&__req=d&__rev=1016073387&__s=dkvl5r%3Aozyzs1%3A7d1ao7&__spin_b=trunk&__spin_r=1016073387&__spin_t=1724949345&__user=0&dpr=1&jazoest=2908&lsd=AVoSnSp-1_E&ph=C3	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/1.jpg	false	Avira URL Cloud: safe	unknown
https://vsa8.tawk.to/s/?k=66d0a327a3c8d40bf9530b1b&cver=0&pop=false&asver=10&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjciLCJ2aWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjctUG1nZlY4OVNnOGExdjJPQ1pyRjAwIiwic2lkIjoiNjZkMGEzMjdhM2M4ZDQwYmY5NTMwYjFiIiwiaWF0IjoxNzI0OTQ5Mjg4LCJleHAiOjE3MjQ5NTEwODgsImp0aSI6IkxrTWZEZGVBbWNzRzF5dGtaenhfdSJ9.bliJnQigz7JJGX4S7ktAwNF4_eVpBPFwA9pNIIduq7XKH-loSc85TGr6_c8HtJylxY0Wkc3adYu17cGt6v5L-Q&EIO=3&transport=websocket&__t=P6U_LJc	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/images/salary.png	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/js1/jquery.plugins.js	false	Avira URL Cloud: safe	unknown
https://vsa96.tawk.to/s/?k=66d0a327a3c8d40bf9530b1b&cver=0&pop=false&asver=10&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjciLCJ2aWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjctUG1nZlY4OVNnOGExdjJPQ1pyRjAwIiwic2lkIjoiNjZkMGEzMjdhM2M4ZDQwYmY5NTMwYjFiIiwiaWF0IjoxNzI0OTQ5Mjg4LCJleHAiOjE3MjQ5NTEwODgsImp0aSI6IkxrTWZEZGVBbWNzRzF5dGtaenhfdSJ9.bliJnQigz7JJGX4S7ktAwNF4_eVpBPFwA9pNIIduq7XKH-loSc85TGr6_c8HtJylxY0Wkc3adYu17cGt6v5L-Q&EIO=3&transport=websocket&__t=P6U_Tk2	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=812583380600283&ev=PageView&dl=https%3A%2F%2Fsgsconsulting.com&rl=&if=false&ts=1724949324879&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4124&fbp=fb.1.1724949282851.351002700239736486&pm=1&hrl=d23df1&ler=empty&cdl=API_unavailable&it=1724949324853&coo=false&cs_cc=1&cas=7975830242471902&rqm=GET	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/375651901_786038853527714_6724045822002211945_n.jpg?stp=c504.0.592.592a_dst-jpg_s160x160&_nc_cat=106&ccb=1-7&_nc_sid=30a509&_nc_ohc=90bsoIXUOqwQ7kNvgFx2-hl&_nc_ht=scontent-hou1-1.xx&oh=00_AYCOw_kXUOCypVkWtvTI6hNt8AMc35NLZWaPpokcXBSumQ&oe=66D67B33	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yt/r/EUNHXg17Vg2.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3i1or4/yS/l/en_US/mKVkbqHPePDLd9-eGXovN2VZ1lFH_i73e4S0X6zSVWUBy6f94jNFAQB6VA-pMUzw-ttL7_YCvCakwm8S5O_eT4VGeDafdSj-VhpcxaRcaaK6W_8Kk3l6oQ-XB.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/images/pharmaceutical.png	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/images/corporation2-home-pic1.jpg	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/career.php	false		unknown
https://sgsconsulting.com/images/Canada.jpg	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/contact.php	false		unknown
https://vsa47.tawk.to/s/?k=66d0a327a3c8d40bf9530b1b&cver=0&pop=false&asver=10&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjciLCJ2aWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjctUG1nZlY4OVNnOGExdjJPQ1pyRjAwIiwic2lkIjoiNjZkMGEzMjdhM2M4ZDQwYmY5NTMwYjFiIiwiaWF0IjoxNzI0OTQ5Mjg4LCJleHAiOjE3MjQ5NTEwODgsImp0aSI6IkxrTWZEZGVBbWNzRzF5dGtaenhfdSJ9.bliJnQigz7JJGX4S7ktAwNF4_eVpBPFwA9pNIIduq7XKH-loSc85TGr6_c8HtJylxY0Wkc3adYu17cGt6v5L-Q&EIO=3&transport=websocket&__t=P6U_Vpb	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/images/Logo4.png	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/jobjs/jquery-migrate-3.3.0.min.js	false	Avira URL Cloud: safe	unknown
https://embed.tawk.to/_s/v4/app/66cbd978a7b/css/message-preview.css	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/images/home_employment_pic9.png	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/js1/scripts.js	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/admin/images/about/Awards28.png	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/images/healthcare.png	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-1/454422511_1018446680286929_1855155180857422474_n.jpg?stp=c23.23.1034.1034a_cp0_dst-jpg_s40x40&_nc_cat=111&ccb=1-7&_nc_sid=f4b9fd&_nc_ohc=pDkrWRIzD3IQ7kNvgFzwT5z&_nc_ht=scontent-hou1-1.xx&_nc_gid=A82E_6AOEZJqw143vL-NcX9&oh=00_AYDe4zSISDP3Jc8dlNdLKRDFRZFaPxTiurmMP7eUuvSNXw&oe=66D68B35	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/images/san_diego_ca.jpg	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3i7KW4/yN/l/en_US/k-kkTmYn12wH0zuioh0VRF6G_0LeVZpiDMYcCTl0Nkqd81i2yjJsIhI.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/jobjs/main.js?v=1.0	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3i7M54/yq/l/en_US/OcgJMmetGCj.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/admin/images/blog/blog20.jpeg	false	Avira URL Cloud: safe	unknown
https://embed.tawk.to/_s/v4/app/66cbd978a7b/js/twk-app.js	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/images/agency5-contact-pic1.png	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3iYKq4/yw/l/en_US/d7bGKONu1W6.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/jobjs/wow.js	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/admin/images/blog/blog18.jpeg	false	Avira URL Cloud: safe	unknown
https://embed.tawk.to/_s/v4/app/66cbd978a7b/js/twk-chunk-4fe9d5dd.js	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-6/403800625_836785868453012_8602990503526441655_n.jpg?stp=c230.0.360.360a_dst-jpg_s160x160&_nc_cat=106&ccb=1-7&_nc_sid=30a509&_nc_ohc=_ii21OcHIUsQ7kNvgFS5OZC&_nc_ht=scontent-hou1-1.xx&oh=00_AYALWZHqyhytkDp7-cAgJSFCn2q2W7MpsbHjlFJr0a19ZQ&oe=66D67188	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/jobcss/plugins/swiper-bundle.min.css	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-epsBkaSJ4n9oYH6L6fSPKlfyvVNR_J7OfeV9-jqOZVx9-Fg73T8WyLTa1e_4iyoSboul40f-XChEvL3RtR-jyPuVfx7Umn4RlQyMS.kf?ccb=10-5&oh=00_AYA1-faYHIR1wKcBYYjxIufMAh5yqevSB47mvP-FrGXLcQ&oe=66F82307&_nc_sid=7da55a	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/admin/images/about/4.png	false	Avira URL Cloud: safe	unknown
https://va.tawk.to/v1/session/start	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yT/r/Dc7-7AgwkwS.png	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/2.jpg	false	Avira URL Cloud: safe	unknown
https://vsa81.tawk.to/s/?k=66d0a327a3c8d40bf9530b1b&cver=0&pop=false&asver=10&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjciLCJ2aWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjctUG1nZlY4OVNnOGExdjJPQ1pyRjAwIiwic2lkIjoiNjZkMGEzMjdhM2M4ZDQwYmY5NTMwYjFiIiwiaWF0IjoxNzI0OTQ5Mjg4LCJleHAiOjE3MjQ5NTEwODgsImp0aSI6IkxrTWZEZGVBbWNzRzF5dGtaenhfdSJ9.bliJnQigz7JJGX4S7ktAwNF4_eVpBPFwA9pNIIduq7XKH-loSc85TGr6_c8HtJylxY0Wkc3adYu17cGt6v5L-Q&EIO=3&transport=websocket&__t=P6U_Yp2	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/sgsconsultingllc/	false		unknown
https://embed.tawk.to/_s/v4/app/66cbd978a7b/css/bubble-widget.css	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/images/finance4-home-column-bg3.png	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/admin/images/about/Awards23.png	false	Avira URL Cloud: safe	unknown
https://boylegmfg.com/cdn-vs/original.js?_=1724949277150	true	Avira URL Cloud: malware	unknown
https://sgsconsulting.com/jobcss/plugins/perfect-scrollbar.css	false	Avira URL Cloud: safe	unknown
https://scontent-hou1-1.xx.fbcdn.net/m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AYAgXlZphB0OkqnL4_VYdaLN_4oiwIJD5nLN-3hgXjg7dw&oe=66F80E17&_nc_sid=7da55a	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/admin/images/clients/sgsicon2.png	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19964.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7408601025610239393&__req=b&__rev=1016073387&__s=dkvl5r%3Aozyzs1%3A7d1ao7&__spin_b=trunk&__spin_r=1016073387&__spin_t=1724949345&__user=0&dpr=1&jazoest=2908&lsd=AVoSnSp-1_E&ph=C3	false	Avira URL Cloud: safe	unknown
https://vsa36.tawk.to/s/?k=66d0a327a3c8d40bf9530b1b&cver=0&pop=false&asver=10&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjciLCJ2aWQiOiI2M2U4Nzk4ODQ3NDI1MTI4NzkxMmQ4NjctUG1nZlY4OVNnOGExdjJPQ1pyRjAwIiwic2lkIjoiNjZkMGEzMjdhM2M4ZDQwYmY5NTMwYjFiIiwiaWF0IjoxNzI0OTQ5Mjg4LCJleHAiOjE3MjQ5NTEwODgsImp0aSI6IkxrTWZEZGVBbWNzRzF5dGtaenhfdSJ9.bliJnQigz7JJGX4S7ktAwNF4_eVpBPFwA9pNIIduq7XKH-loSc85TGr6_c8HtJylxY0Wkc3adYu17cGt6v5L-Q&EIO=3&transport=websocket&__t=P6U_SQr	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.1.1/owl.carousel.min.js	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/css/style-demo.css	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/admin/images/blog/Untitled%20design%20(1).png	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/images/employment.png	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/admin/images/blog/9%20Interview%20Questions%20That%20Could%20Save%20Your%20Spot.jpeg	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3ienF4/yL/l/en_US/-dGFJMe3v8WJPZCgm01O0LT2zcKaeBdGzgjyrWW1wQ5BYT7n1sgH1lvR8I9oqRJx-mDYvatkvPhoOVUK0F-jX-aMrkL5Y9UO0A-MqSphEGX5Dio3euJ7wuKvOkLVzvoX3Y5E1Rdzuzi16ygn6kxhtsKYnvau-LZbAjemup4XA8wPzcukhV_-BvmtDG86vVhLfGuByFPCr8NdBUvY3lh6jit1ncqcayAbGTV5Okhp55HfXW__mMzi95_wmB-512pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/jobjs/noUISlider.js	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
http://greensock.com/club/	chromecache_539.2.dr	false	Avira URL Cloud: safe	unknown
https://refreshless.com/nouislider/	chromecache_624.2.dr	false	Avira URL Cloud: safe	unknown
https://wp.alithemes.com/html/jobhub/frontend/assets/fonts/uicons/uicons-regular-rounded.eot#iefix	chromecache_744.2.dr	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/job/supply-chain-analyst-iv-suc-sha-56292	chromecache_490.2.dr	false	Avira URL Cloud: safe	unknown
https://swiperjs.com	chromecache_356.2.dr	false	URL Reputation: safe	unknown
http://www.ononesoftware.com/vcb/1.0/	chromecache_514.2.dr	false	Avira URL Cloud: safe	unknown
https://www.internalfb.com/intern/invariant/	chromecache_402.2.dr, chromecache_529.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_653.2.dr, chromecache_486.2.dr	false	Avira URL Cloud: safe	unknown
https://embed.tawk.to/_s/v4/app/66cbd978a7b/	chromecache_802.2.dr	false	Avira URL Cloud: safe	unknown
https://wp.alithemes.com/html/jobhub/frontend/assets/imgs/theme/icons/play.svg)	chromecache_744.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/API/Window/scrollY#Notes	chromecache_624.2.dr	false	Avira URL Cloud: safe	unknown
https://youradchoices.ca/	chromecache_671.2.dr	false	URL Reputation: safe	unknown
https://refreshless.com/wnumb/	chromecache_624.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/share?text=&url=https://sgsconsulting.com/job/training-administration-and-lms-co	chromecache_490.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tawk.to/?utm_source=tawk-messenger&utm_medium=link&utm_campaign=referral&utm_term=63e879	chromecache_719.2.dr, chromecache_447.2.dr	false	Avira URL Cloud: safe	unknown
https://sgsconsulting.com/job/pharmacy-technician-spa-aja-209	chromecache_490.2.dr	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yx/l/0	chromecache_498.2.dr	false	Avira URL Cloud: safe	unknown
https://embed.tawk.to/_s/v4/app/66cbd978a7b/js/twk-iterator-polyfill.js	chromecache_355.2.dr	false	Avira URL Cloud: safe	unknown
https://fburl.com/wiki/xrzohrqb	chromecache_524.2.dr, chromecache_787.2.dr	false	URL Reputation: safe	unknown
http://markgoodyear.com/labs/scrollup/	chromecache_596.2.dr	false	Avira URL Cloud: safe	unknown
https://embed.tawk.to/_s/v4/app/66cbd978a7b/js/twk-arr-find-polyfill.js	chromecache_355.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/share?text=&url=https://sgsconsulting.com/job/test-engineer-san-ind--1524	chromecache_490.2.dr	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/yb/r/hLRJ1GG_y0J.ico	chromecache_756.2.dr, chromecache_498.2.dr	false	Avira URL Cloud: safe	unknown
https://wp.alithemes.com/html/jobhub/frontend/assets/imgs/theme/icons/icon-send-letter.svg);backgrou	chromecache_744.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/teamdf/jquery-visible/	chromecache_473.2.dr, chromecache_777.2.dr, chromecache_435.2.dr	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/marketing-manager-	chromecache_490.2.dr	false	Avira URL Cloud: safe	unknown
http://imagesloaded.desandro.com/	chromecache_473.2.dr, chromecache_777.2.dr, chromecache_435.2.dr	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/y9/r/cBfAkP0T1tP.js?_nc_x=Ij3Wp8lg5Kz	chromecache_756.2.dr, chromecache_498.2.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_653.2.dr, chromecache_332.2.dr, chromecache_486.2.dr	false	URL Reputation: safe	unknown
http://www.jplayer.org	chromecache_350.2.dr, chromecache_567.2.dr	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/shareArticle?mini=true&url=https://sgsconsulting.com/job/software-developer	chromecache_490.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.22.45.142	vsa99.tawk.to	United States	13335	CLOUDFLARENETUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
192.250.227.23	t.commonsupport.com	United States	36454	CNSV-LLCUS	false
104.22.44.142	vsa26.tawk.to	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.15.14	vsa22.tawk.to	United States	13335	CLOUDFLARENETUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
50.63.8.53	sgsconsulting.com	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
157.240.251.9	unknown	United States	32934	FACEBOOKUS	false
38.180.141.42	boylegmfg.com	United States	174	COGENT-174US	true
172.67.177.252	wp.alithemes.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.51.90	unknown	United States	13335	CLOUDFLARENETUS	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false
157.240.24.13	scontent-hou1-1.xx.fbcdn.net	United States	32934	FACEBOOKUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1501319
Start date and time:	2024-08-29 18:33:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sgsconsulting.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@24/751@112/23
Cookbook Comments:	Browse: https://sgsconsulting.com/service.php Browse: https://sgsconsulting.com/career.php Browse: https://sgsconsulting.com/news.php Browse: https://sgsconsulting.com/contact.php Browse: https://sgsconsulting.com/healthcare.php Browse: https://sgsconsulting.com/about.php Browse: https://www.facebook.com/sgsconsultingllc/

Input	Output
URL: https://sgsconsulting.com/ Model: jbxai	{ "brand":["SGS"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://sgsconsulting.com/ Model: jbxai	{ "brand":["SGS Consulting"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://sgsconsulting.com/career.php Model: jbxai	{ "brand":["SGS Healthcare"], "contains_trigger_text":false, "prominent_button_name":"Find Now", "text_input_field_labels":["Job Title or Keywords", "Location"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://sgsconsulting.com/contact.php Model: jbxai	{ "brand":["SGS Healthcare"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["Your name", "Your e-mail", "Phone", "Message"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://sgsconsulting.com/about.php Model: jbxai	{ "brand":["SGS"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://sgsconsulting.com/healthcare.php Model: jbxai	{ "brand":["SGS Healthcare"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://sgsconsulting.com/contact.php Model: jbxai	{ "phishing_score":2, "brand_name":"SGS", "reasons":"The domain name'sgsconsulting.com' seems appropriate for the identified brand, and the top-level domain '.com' is a common and trusted domain extension. However, I would like to verify the legitimacy of the brand association and domain ownership to further confirm the legitimacy of the site."}

URL: https://www.facebook.com/sgsconsultingllc/ Model: jbxai	{ "brand":["facebook"], "contains_trigger_text":false, "prominent_button_name":"log in", "text_input_field_labels":["email or phone number", "password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.facebook.com/sgsconsultingllc/ Model: jbxai	{ "brand":["facebook"], "contains_trigger_text":false, "prominent_button_name":"Log In", "text_input_field_labels":["Email or phone number", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.facebook.com/sgsconsultingllc/ Model: jbxai	{ "phishing_score":0, "brand_name":"Facebook", "reasons":"The domain 'www.facebook.com' matches the legitimate domain associated with the identified brand, and the design and layout of the webpage are consistent with Facebook's typical login page. There are no suspicious elements in the URL, and the brand name is commonly associated with the given URL and domain."}

URL: https://www.facebook.com/sgsconsultingllc/ Model: jbxai	{ "phishing_score":1, "brand_name":"Facebook", "reasons":"The domain and brand association are legitimate, and the webpage elements are consistent with the official Facebook login page. The URL matches the legitimate domain associated with the identified brand, and there are no suspicious elements in the URL. The visual description and analysis provided by the visual LLM are consistent with the official Facebook login page, and there is no indication of phishing activity."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], progressive, precision 8, 3556x2000, components 3
Category:	dropped
Size (bytes):	189994
Entropy (8bit):	7.733044508862464
Encrypted:	false
SSDEEP:	3072:TsZpW+awnaGa8LoBGWe4DJxrG6Kc6pHfq5e5OX3KoJ3e3WD:g/Wbma64DJoT085NI
MD5:	996B899CDEFA6F6EC032E52D96BFF77E
SHA1:	B9DC5A226E459AA7FDB0FFED36FC2159809E3C6C
SHA-256:	961A4698771245C1C92876781A7ED96367ECF3DBFC8F48A8EDF54A600372EEBF
SHA-512:	130B3895F5108C24758745F493A823021B39D0E369AF40E4A9FC778FD329A90D45B1C67FFAF4E9CEE50362CCC8EE43DE705F1CF7D5A922D5CF027BD0541D42EF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....VExif..MM..................>...........F.(.............................,.......,.....................................$......$ &...& 9-''-9B747BOGGOd_d................................$......$ &...& 9-''-9B747BOGGOd_d.............."...........................................................................................$..Ba....Pu....................................................0.@....L.......................................................R.....J.L.L#....................................................3.!.....V"&l...x;.W....!2.............................................sq.........m....O.r?V.....Lx.$.L...............................................3...D.$.BH!....<V../.{.?.~.....O5......gb@...............................................1...(D....S_.../.yv.................$..............................................h.I........BE\|g..~\|.{........?.\|..g........`H.wv...........................................i... ...._.....g.........8..<..g.M._[..=.T

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 29, 2024 18:34:31.770773888 CEST	192.168.2.4	1.1.1.1	0x389	Standard query (0)	sgsconsulting.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:31.772264957 CEST	192.168.2.4	1.1.1.1	0x5236	Standard query (0)	sgsconsulting.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:34.227257967 CEST	192.168.2.4	1.1.1.1	0x61c5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:34.227257967 CEST	192.168.2.4	1.1.1.1	0x1f8f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:34.728442907 CEST	192.168.2.4	1.1.1.1	0x841	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:34.728444099 CEST	192.168.2.4	1.1.1.1	0xff26	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:34.729358912 CEST	192.168.2.4	1.1.1.1	0x4c7b	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:34.730222940 CEST	192.168.2.4	1.1.1.1	0xbd32	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:34.731324911 CEST	192.168.2.4	1.1.1.1	0xcfeb	Standard query (0)	boylegmfg.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:34.731664896 CEST	192.168.2.4	1.1.1.1	0x630a	Standard query (0)	boylegmfg.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:35.860897064 CEST	192.168.2.4	1.1.1.1	0x252e	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:35.860897064 CEST	192.168.2.4	1.1.1.1	0x55d6	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:35.876214027 CEST	192.168.2.4	1.1.1.1	0x7c9	Standard query (0)	sgsconsulting.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:35.880131960 CEST	192.168.2.4	1.1.1.1	0x6d78	Standard query (0)	sgsconsulting.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:35.884947062 CEST	192.168.2.4	1.1.1.1	0x5aeb	Standard query (0)	boylegmfg.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:35.885348082 CEST	192.168.2.4	1.1.1.1	0x441d	Standard query (0)	boylegmfg.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:37.234841108 CEST	192.168.2.4	1.1.1.1	0x9d7	Standard query (0)	embed.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:37.235125065 CEST	192.168.2.4	1.1.1.1	0x999	Standard query (0)	embed.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:34:37.235857010 CEST	192.168.2.4	1.1.1.1	0xd993	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:37.236169100 CEST	192.168.2.4	1.1.1.1	0x9f0	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Aug 29, 2024 18:34:37.236779928 CEST	192.168.2.4	1.1.1.1	0x6131	Standard query (0)	wp.alithemes.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:37.237202883 CEST	192.168.2.4	1.1.1.1	0x9e89	Standard query (0)	wp.alithemes.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:38.161736965 CEST	192.168.2.4	1.1.1.1	0x3b32	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:38.164760113 CEST	192.168.2.4	1.1.1.1	0xf618	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:38.238600016 CEST	192.168.2.4	1.1.1.1	0xb9f1	Standard query (0)	t.commonsupport.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:38.238600016 CEST	192.168.2.4	1.1.1.1	0xecdd	Standard query (0)	t.commonsupport.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:38.279443026 CEST	192.168.2.4	1.1.1.1	0xfc47	Standard query (0)	embed.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:34:38.279443026 CEST	192.168.2.4	1.1.1.1	0x9808	Standard query (0)	embed.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:38.280706882 CEST	192.168.2.4	1.1.1.1	0xd3e5	Standard query (0)	wp.alithemes.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:38.280843019 CEST	192.168.2.4	1.1.1.1	0x6131	Standard query (0)	wp.alithemes.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:38.772011042 CEST	192.168.2.4	1.1.1.1	0x4b9f	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:38.772468090 CEST	192.168.2.4	1.1.1.1	0x3d07	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Aug 29, 2024 18:34:39.834356070 CEST	192.168.2.4	1.1.1.1	0xe3fd	Standard query (0)	t.commonsupport.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:39.834532022 CEST	192.168.2.4	1.1.1.1	0x12bb	Standard query (0)	t.commonsupport.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:40.705888033 CEST	192.168.2.4	1.1.1.1	0xe335	Standard query (0)	boylegmfg.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:40.706315994 CEST	192.168.2.4	1.1.1.1	0xe90c	Standard query (0)	boylegmfg.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:43.324542999 CEST	192.168.2.4	1.1.1.1	0xe02	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:43.325007915 CEST	192.168.2.4	1.1.1.1	0x5682	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:45.286026001 CEST	192.168.2.4	1.1.1.1	0xb53c	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:45.286397934 CEST	192.168.2.4	1.1.1.1	0x786b	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Aug 29, 2024 18:34:46.102575064 CEST	192.168.2.4	1.1.1.1	0x48fe	Standard query (0)	va.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:46.118202925 CEST	192.168.2.4	1.1.1.1	0xd75e	Standard query (0)	va.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:34:47.917124987 CEST	192.168.2.4	1.1.1.1	0xddd3	Standard query (0)	va.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:47.917263031 CEST	192.168.2.4	1.1.1.1	0x6c48	Standard query (0)	va.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:34:48.614262104 CEST	192.168.2.4	1.1.1.1	0xaf06	Standard query (0)	vsa8.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:48.614691973 CEST	192.168.2.4	1.1.1.1	0x737d	Standard query (0)	vsa8.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:34:50.105580091 CEST	192.168.2.4	1.1.1.1	0xeaad	Standard query (0)	vsa119.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:34:50.105580091 CEST	192.168.2.4	1.1.1.1	0x7165	Standard query (0)	vsa119.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:50.111937046 CEST	192.168.2.4	1.1.1.1	0xdff6	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:50.112061977 CEST	192.168.2.4	1.1.1.1	0x7564	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Aug 29, 2024 18:34:51.617692947 CEST	192.168.2.4	1.1.1.1	0x5aa4	Standard query (0)	vsa22.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:51.618071079 CEST	192.168.2.4	1.1.1.1	0xc940	Standard query (0)	vsa22.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:34:53.012012959 CEST	192.168.2.4	1.1.1.1	0x569a	Standard query (0)	vsa26.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:53.014554024 CEST	192.168.2.4	1.1.1.1	0xb872	Standard query (0)	vsa26.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:34:57.401576996 CEST	192.168.2.4	1.1.1.1	0xe7a5	Standard query (0)	vsa63.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:57.401797056 CEST	192.168.2.4	1.1.1.1	0x276b	Standard query (0)	vsa63.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:34:59.759358883 CEST	192.168.2.4	1.1.1.1	0x1967	Standard query (0)	vsa76.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:34:59.759829044 CEST	192.168.2.4	1.1.1.1	0xe3af	Standard query (0)	vsa76.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:04.151061058 CEST	192.168.2.4	1.1.1.1	0x5f01	Standard query (0)	vsa104.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:04.151452065 CEST	192.168.2.4	1.1.1.1	0x5a58	Standard query (0)	vsa104.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:05.931602001 CEST	192.168.2.4	1.1.1.1	0xf860	Standard query (0)	vsa45.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:05.931766033 CEST	192.168.2.4	1.1.1.1	0x390e	Standard query (0)	vsa45.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:12.198844910 CEST	192.168.2.4	1.1.1.1	0x3836	Standard query (0)	vsa106.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:12.199070930 CEST	192.168.2.4	1.1.1.1	0x5190	Standard query (0)	vsa106.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:13.285689116 CEST	192.168.2.4	1.1.1.1	0xd62	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:13.285821915 CEST	192.168.2.4	1.1.1.1	0xfd0b	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Aug 29, 2024 18:35:15.032011032 CEST	192.168.2.4	1.1.1.1	0x5b41	Standard query (0)	vsa109.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:15.032545090 CEST	192.168.2.4	1.1.1.1	0xc342	Standard query (0)	vsa109.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:17.746643066 CEST	192.168.2.4	1.1.1.1	0x84eb	Standard query (0)	vsa36.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:17.747490883 CEST	192.168.2.4	1.1.1.1	0xc167	Standard query (0)	vsa36.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:21.472217083 CEST	192.168.2.4	1.1.1.1	0x6027	Standard query (0)	vsa61.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:21.472562075 CEST	192.168.2.4	1.1.1.1	0xf57f	Standard query (0)	vsa61.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:23.071849108 CEST	192.168.2.4	1.1.1.1	0x3c6e	Standard query (0)	vsa96.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:23.071970940 CEST	192.168.2.4	1.1.1.1	0xbccd	Standard query (0)	vsa96.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:23.252388000 CEST	192.168.2.4	1.1.1.1	0x5575	Standard query (0)	vsa101.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:23.252692938 CEST	192.168.2.4	1.1.1.1	0xc7bc	Standard query (0)	vsa101.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:24.528554916 CEST	192.168.2.4	1.1.1.1	0xd608	Standard query (0)	vsa37.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:24.528800964 CEST	192.168.2.4	1.1.1.1	0xac54	Standard query (0)	vsa37.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:29.323092937 CEST	192.168.2.4	1.1.1.1	0xe3b6	Standard query (0)	vsa1.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:29.323337078 CEST	192.168.2.4	1.1.1.1	0xbc43	Standard query (0)	vsa1.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:31.618300915 CEST	192.168.2.4	1.1.1.1	0xa684	Standard query (0)	vsa47.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:31.618601084 CEST	192.168.2.4	1.1.1.1	0xaee6	Standard query (0)	vsa47.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:34.242831945 CEST	192.168.2.4	1.1.1.1	0x4831	Standard query (0)	vsa20.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:34.242831945 CEST	192.168.2.4	1.1.1.1	0x6c01	Standard query (0)	vsa20.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:37.317621946 CEST	192.168.2.4	1.1.1.1	0xf035	Standard query (0)	vsa59.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:37.318186998 CEST	192.168.2.4	1.1.1.1	0x177f	Standard query (0)	vsa59.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:40.709722996 CEST	192.168.2.4	1.1.1.1	0x75ef	Standard query (0)	vsa90.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:40.710541010 CEST	192.168.2.4	1.1.1.1	0x19	Standard query (0)	vsa90.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:41.776349068 CEST	192.168.2.4	1.1.1.1	0xb5a8	Standard query (0)	vsa81.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:41.777007103 CEST	192.168.2.4	1.1.1.1	0x92c1	Standard query (0)	vsa81.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:44.085457087 CEST	192.168.2.4	1.1.1.1	0xa36b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:44.085913897 CEST	192.168.2.4	1.1.1.1	0xddf	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Aug 29, 2024 18:35:45.544692993 CEST	192.168.2.4	1.1.1.1	0x44d	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:45.545193911 CEST	192.168.2.4	1.1.1.1	0x86b7	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
Aug 29, 2024 18:35:45.545667887 CEST	192.168.2.4	1.1.1.1	0xcdfa	Standard query (0)	video.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:45.545944929 CEST	192.168.2.4	1.1.1.1	0x92df	Standard query (0)	video.xx.fbcdn.net	65	IN (0x0001)	false
Aug 29, 2024 18:35:45.564548016 CEST	192.168.2.4	1.1.1.1	0x3ee6	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:45.565135002 CEST	192.168.2.4	1.1.1.1	0xd00f	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Aug 29, 2024 18:35:46.082834005 CEST	192.168.2.4	1.1.1.1	0x7bee	Standard query (0)	vsa99.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:46.083070993 CEST	192.168.2.4	1.1.1.1	0x1479	Standard query (0)	vsa99.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:46.742396116 CEST	192.168.2.4	1.1.1.1	0x6f92	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:46.742564917 CEST	192.168.2.4	1.1.1.1	0x2cce	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Aug 29, 2024 18:35:49.018726110 CEST	192.168.2.4	1.1.1.1	0x2def	Standard query (0)	vsa51.tawk.to	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:49.018990993 CEST	192.168.2.4	1.1.1.1	0x6421	Standard query (0)	vsa51.tawk.to	65	IN (0x0001)	false
Aug 29, 2024 18:35:49.740535021 CEST	192.168.2.4	1.1.1.1	0x71c6	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:49.740725994 CEST	192.168.2.4	1.1.1.1	0xf67b	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Aug 29, 2024 18:35:50.414036036 CEST	192.168.2.4	1.1.1.1	0xbbbc	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:50.414275885 CEST	192.168.2.4	1.1.1.1	0x627	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
Aug 29, 2024 18:35:51.795947075 CEST	192.168.2.4	1.1.1.1	0x667e	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:51.796257973 CEST	192.168.2.4	1.1.1.1	0xb2d6	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
Aug 29, 2024 18:35:56.491816044 CEST	192.168.2.4	1.1.1.1	0xafa2	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 18:35:56.491965055 CEST	192.168.2.4	1.1.1.1	0x3fdf	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-08-29 16:34:32 UTC	660	OUT	GET / HTTP/1.1 Host: sgsconsulting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 16:34:32 UTC	220	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Thu, 29 Aug 2024 16:34:32 GMT Connection: close Content-Length: 174792
2024-08-29 16:34:32 UTC	16164	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 65 6e 2d 6a 73 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 42 61 73 69 63 20 50 61 67 65 20 4e 65 65 64 73 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 47 53 20 43 6f 6e 73 75 6c 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 59 6f 75 72 20 50 61 72 74 6e 65 72 20 69 6e 20 42 75 73 69 6e 65 73 73 20 47 72 6f 77 74 68 20 61 6e 64 20 54 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 2e 20 57 65 20 70 72 6f 76 69 64 65 20 69 6e 6e 6f 76 61 74 69 76 65 20 Data Ascii: <!DOCTYPE html><html class="en-js"> <head> ... Basic Page Needs --> <meta charset="utf-8"> <title>SGS Consulting</title> <meta name="description" content="Your Partner in Business Growth and Transformation. We provide innovative
2024-08-29 16:34:32 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 5f 77 72 61 70 70 65 72 20 6d 63 62 2d 73 65 63 74 69 6f 6e 2d 69 6e 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 72 61 70 20 6d 63 62 2d 77 72 61 70 20 6f 6e 65 20 65 6d 70 6c 6f 79 6d 65 6e 74 2d 73 68 61 64 6f 77 20 63 6f 6c 75 6d 6e 2d 6d 61 72 67 69 6e 2d 32 30 70 78 20 76 61 6c 69 67 6e 2d 74 6f 70 20 63 6c 65 61 72 66 69 78 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 3a 34 30 70 78 20 35 30 70 78 20 33 35 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="section_wrapper mcb-section-inner"> <div class="wrap mcb-wrap one employment-shadow column-margin-20px valign-top clearfix" style="padding:40px 50px 35px; background-color:#fff; margin-top:0px">
2024-08-29 16:34:32 UTC	16384	IN	Data Raw: 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2f 76 32 35 2f 4a 54 55 53 6a 49 67 31 5f 69 36 74 38 6b 43 48 4b 6d 34 35 39 57 31 68 79 7a 62 69 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4d 6f 6e 74 73 65 72 72 61 74 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 Data Ascii: :url(https://fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');unicode-range:U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}@font-face{font-family:'Montserrat';font-style:normal;font-weight:600;font-display:s
2024-08-29 16:34:32 UTC	16384	IN	Data Raw: 73 73 3d 22 68 6f 76 65 72 5f 63 6f 6c 6f 72 20 61 6c 69 67 6e 5f 6c 65 66 74 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 61 33 33 36 65 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 69 6d 61 67 65 73 2f 66 69 6e 61 6e 63 65 34 2d 68 6f 6d 65 2d 63 6f 6c 75 6d 6e 2d 62 67 33 2e 70 6e 67 29 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 62 6f 74 74 6f 6d 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 34 35 70 78 20 39 25 20 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b Data Ascii: ss="hover_color align_left" style="background-color: #2a336e; background-image: url(images/finance4-home-column-bg3.png); background-repeat: no-repeat; background-position: center bottom; padding: 45px 9% 0px; border-radius: 10px;
2024-08-29 16:34:32 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 72 69 67 68 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 70 78 20 30 70 78 20 31 70 78 20 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 44 33 44 36 44 44 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a Data Ascii: background-position: center right; background-repeat: no-repeat; border-style: solid; border-width: 0px 0px 1px 0px; border-color: #D3D6DD; }
2024-08-29 16:34:32 UTC	16384	IN	Data Raw: 2d 41 37 46 46 3b 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4d 6f 6e 74 73 65 72 72 61 74 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2f 76 32 35 2f 4a 54 55 53 6a 49 67 31 5f 69 36 74 38 6b 43 48 4b 6d 34 35 39 57 6c 68 79 77 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 Data Ascii: -A7FF;}@font-face{font-family:'Montserrat';font-style:normal;font-weight:600;font-display:swap;src:url(https://fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2) format('woff2');unicode-range:U+0000-00FF, U+0131, U+0152-0153, U+02BB-02
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 36 20 63 6f 6c 2d 6d 64 2d 31 32 20 63 6f 6c 2d 73 6d 2d 31 32 20 63 6f 6c 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 49 74 65 6d 20 6a 6f 62 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 2d 6a 6f 62 20 68 6f 76 65 72 2d 75 70 20 77 6f 77 20 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 20 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 49 6e 55 70 22 3e 0d 0a 20 20 20 20 20 Data Ascii: </div> <div class="col-lg-6 col-md-12 col-sm-12 col-12"> ... Item job --> <div class="card-job hover-up wow animate__animated animate__fadeInUp">
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 70 61 6e 2d 79 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 70 61 6e 2d 79 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 6c 69 63 6b 2d 6c 69 73 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 Data Ascii: -ms-touch-action: pan-y; touch-action: pan-y; -webkit-tap-highlight-color: transparent; } .slick-list { position: relative; d
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 20 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 62 6c 6f 63 6b 20 2e 69 6e 6e 65 72 2d 62 6f 78 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 38 30 70 78 20 31 30 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: .testimonial-block { position: relative; padding: 50px; } .testimonial-block .inner-box { padding: 80px 105px;
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 69 6e 67 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4d 6f 6e 74 73 65 72 72 61 74 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 7d 0d 0a 2e 62 6f 78 2d 6e 65 77 73 6c 65 74 74 65 72 20 2e 69 63 6f 6e 2d 73 65 6e 64 2d 6c 65 74 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 70 2e 61 6c 69 74 68 65 6d 65 73 2e 63 6f 6d 2f 68 74 6d 6c 2f 6a 6f 62 68 75 62 2f 66 72 6f 6e 74 65 6e 64 2f 61 73 73 65 74 73 2f 69 6d 67 73 2f 74 68 65 6d 65 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 73 65 6e 64 2d 6c 65 74 74 65 72 2e 73 76 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a Data Ascii: ing{font-family:"Montserrat", sans-serif;font-weight:500;}.box-newsletter .icon-send-letter{background-image:url(https://wp.alithemes.com/html/jobhub/frontend/assets/imgs/theme/icons/icon-send-letter.svg);background-repeat:no-repeat;background-position:

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sgsconsulting.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 326

Chrome Cache Entry: 327

Chrome Cache Entry: 328

Chrome Cache Entry: 329

Chrome Cache Entry: 330

Chrome Cache Entry: 331

Chrome Cache Entry: 332

Chrome Cache Entry: 333

Chrome Cache Entry: 334

Chrome Cache Entry: 335

Chrome Cache Entry: 336

Chrome Cache Entry: 337

Chrome Cache Entry: 338

Chrome Cache Entry: 339

Chrome Cache Entry: 340

Chrome Cache Entry: 341

Chrome Cache Entry: 342

Chrome Cache Entry: 343

Chrome Cache Entry: 344

Chrome Cache Entry: 345

Chrome Cache Entry: 346

Chrome Cache Entry: 347

Chrome Cache Entry: 348

Chrome Cache Entry: 349

Chrome Cache Entry: 350

Chrome Cache Entry: 351

Chrome Cache Entry: 352

Windows Analysis Report
https://sgsconsulting.com/

Timestamp	Bytes transferred	Direction	Data
2024-08-29 16:34:32 UTC	547	OUT	GET /css/global.css HTTP/1.1 Host: sgsconsulting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sgsconsulting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 16:34:33 UTC	299	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 22 Sep 2022 08:03:19 GMT Accept-Ranges: bytes ETag: "53f6dcc659ced81:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Thu, 29 Aug 2024 16:34:32 GMT Connection: close Content-Length: 435969
2024-08-29 16:34:33 UTC	16085	IN	Data Raw: 2f 2a 0a 7c 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 7c 20 42 65 0a 7c 20 47 6c 6f 62 61 6c 20 73 74 79 6c 65 0a 7c 20 76 65 72 73 69 6f 6e 20 35 2e 35 0a 7c 20 68 74 74 70 3a 2f 2f 42 65 61 6e 74 6f 77 6e 54 68 65 6d 65 73 2e 63 6f 6d 0a 7c 20 68 74 74 70 3a 2f 2f 74 68 65 6d 65 66 6f 72 65 73 74 2e 6e 65 74 2f 75 73 65 72 2f 42 65 61 6e 74 6f 77 6e 54 68 65 6d 65 73 0a 7c 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: /*\|-------------------------------------------------------------------------\| Be\| Global style\| version 5.5\| http://BeantownThemes.com\| http://themeforest.net/user/BeantownThemes\|---------------------------------------------------------------------
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 20 4f 53 2d 65 73 20 66 6f 6e 74 20 77 69 6c 6c 20 62 65 20 6e 6f 74 20 61 73 20 73 68 61 72 70 20 61 73 20 69 74 20 63 6f 75 6c 64 20 62 65 20 2a 2f 0a 0a 2f 2a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 30 29 20 7b 0a 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6d 66 6e 2d 69 63 6f 6e 73 27 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 66 6f 6e 74 73 2f 2e 2e 2f 66 6f 6e 74 2f 6d 66 6e 2d 69 63 6f 6e 73 2e 73 76 67 3f 33 34 31 36 31 37 31 23 6d 66 6e 2d 69 63 6f 6e 73 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 0a 20 20 7d 0a 7d 0a 2a 2f 0a 0a 5b 63 6c 61 73 73 5e 3d 22 69 63 6f 6e Data Ascii: OS-es font will be not as sharp as it could be //@media screen and (-webkit-min-device-pixel-ratio:0) { @font-face { font-family: 'mfn-icons'; src: url('fonts/../font/mfn-icons.svg?3416171#mfn-icons') format('svg'); }}*/[class^="icon
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 39 36 30 27 0a 7d 0a 2e 69 63 6f 6e 2d 62 61 67 2d 66 69 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 39 36 31 27 0a 7d 0a 2e 69 63 6f 6e 2d 73 65 61 72 63 68 2d 66 69 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 39 36 32 27 0a 7d 0a 2e 69 63 6f 6e 2d 63 61 6e 63 65 6c 2d 66 69 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 39 36 33 27 0a 7d 0a 2e 69 63 6f 6e 2d 70 6c 75 73 2d 66 69 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 39 36 34 27 0a 7d 0a 2e 69 63 6f 6e 2d 6d 69 6e 75 73 2d 66 69 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 39 36 35 27 0a 7d 0a 2e 69 63 6f Data Ascii: {content: '\e960'}.icon-bag-fine:before {content: '\e961'}.icon-search-fine:before {content: '\e962'}.icon-cancel-fine:before {content: '\e963'}.icon-plus-fine:before {content: '\e964'}.icon-minus-fine:before {content: '\e965'}.ico
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 62 6f 74 74 6f 6d 20 74 6f 20 37 35 25 2e 20 2a 2f 0a 0a 2e 63 6f 6e 74 65 6e 74 5f 76 69 64 65 6f 2e 69 66 72 61 6d 65 2e 61 75 74 6f 2d 77 68 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 35 36 2e 32 35 25 3b 0a 09 68 65 69 67 68 74 3a 20 30 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 0a 7d 0a 2e 63 6f 6e 74 65 6e 74 5f 76 69 64 65 6f 2e 69 66 72 61 6d 65 2e 61 75 74 6f 2d 77 68 20 69 66 72 61 6d 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 0a 7d 0a 2e 70 6f 73 74 2d 70 68 6f 74 6f 2d 77 72 61 70 70 Data Ascii: bottom to 75%. */.content_video.iframe.auto-wh {position: relative;padding-bottom: 56.25%;height: 0;overflow: hidden}.content_video.iframe.auto-wh iframe {position: absolute;top: 0;left: 0;width: 100%;height: 100%}.post-photo-wrapp
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 58 28 30 25 29 3b 0a 09 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 25 29 0a 7d 0a 2f 2a 20 45 66 66 65 63 74 20 36 3a 20 74 65 78 74 20 66 69 6c 6c 2a 2f 0a 0a 61 2e 6d 66 6e 2d 6c 69 6e 6b 2d 36 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 3b 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 0a 7d 0a 61 2e 6d 66 6e 2d 6c 69 6e 6b 2d 36 3a 62 65 66 6f 72 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 30 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 Data Ascii: X(0%);transform: translateX(0%)}/* Effect 6: text fill*/a.mfn-link-6 {padding: 10px 0;text-shadow: none}a.mfn-link-6:before {position: absolute;top: 0;left: 0;overflow: hidden;padding: 10px 0;max-width: 0;border-bottom: 2px solid
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 5f 75 6c 20 6c 69 20 61 20 7b 0a 09 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 63 6f 6e 74 65 6e 74 5f 73 6c 69 64 65 72 2e 63 61 72 6f 75 73 65 6c 20 2e 63 6f 6e 74 65 6e 74 5f 73 6c 69 64 65 72 5f 75 6c 20 6c 69 20 2e 74 69 74 6c 65 20 7b 0a 09 6f 70 61 63 69 74 79 3a 20 2e 33 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 35 25 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 69 74 69 61 6c 3b 0a 7d 0a 2e 63 6f 6e 74 65 6e 74 5f 73 6c 69 64 65 72 2e 63 61 72 6f 75 73 65 6c 20 2e 63 6f 6e 74 65 6e 74 5f 73 6c 69 64 65 72 5f 75 6c 20 6c 69 3a 68 6f 76 65 72 20 69 6d 67 20 7b 0a 09 6f 70 61 63 69 74 79 3a 20 31 3b 0a 09 74 6f 70 3a 20 2d 35 70 78 0a 7d 0a 2e 63 6f Data Ascii: _ul li a {color: inherit;text-decoration: none;}.content_slider.carousel .content_slider_ul li .title {opacity: .3;font-size: 115%;line-height: initial;}.content_slider.carousel .content_slider_ul li:hover img {opacity: 1;top: -5px}.co
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 64 74 68 3a 20 30 20 31 70 78 20 30 20 30 3b 0a 09 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 72 69 67 68 74 3a 20 2d 32 2e 34 25 3b 0a 09 74 6f 70 3a 20 30 0a 7d 0a 2e 69 63 6f 6e 5f 62 6f 78 20 61 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0a 7d 0a 2e 69 63 6f 6e 5f 62 6f 78 20 61 3a 68 6f 76 65 72 20 7b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 0a 7d 0a 2e 69 63 6f 6e 5f 62 6f 78 20 2e 69 63 6f 6e 5f 77 72 61 70 70 65 72 20 7b 0a 09 77 69 64 74 68 3a 20 31 31 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 31 30 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 31 Data Ascii: dth: 0 1px 0 0;border-style: solid;position: absolute;right: -2.4%;top: 0}.icon_box a {display: block}.icon_box a:hover {text-decoration: none}.icon_box .icon_wrapper {width: 110px;height: 110px;text-align: center;line-height: 11
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 09 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 0a 7d 0a 2e 66 6c 61 74 5f 62 6f 78 20 2e 64 65 73 63 5f 77 72 61 70 70 65 72 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 39 30 70 78 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 36 30 70 78 29 20 7b 0a 09 2e 6f 6e 65 2d 66 6f 75 72 74 68 20 2e 66 6c 61 74 5f 62 6f 78 20 2e 70 68 6f 74 6f 5f 77 72 61 70 70 65 72 20 2e 69 63 6f 6e 20 7b 0a 09 09 77 69 64 74 68 3a 20 36 30 70 78 0a 09 7d 0a 09 2e 6f 6e 65 2d 66 6f 75 72 74 68 20 2e 66 6c 61 74 5f 62 6f 78 20 2e 70 68 6f 74 6f 5f 77 72 61 70 70 65 72 20 2e 69 63 6f 6e 20 69 20 7b 0a 09 09 68 65 69 67 68 74 Data Ascii: anslateX(0px);transform: translateX(0px)}.flat_box .desc_wrapper {margin-left: 90px}@media only screen and (min-width: 960px) {.one-fourth .flat_box .photo_wrapper .icon {width: 60px}.one-fourth .flat_box .photo_wrapper .icon i {height
2024-08-29 16:34:33 UTC	299	IN	Data Raw: 74 61 62 6c 65 3b 0a 09 70 61 64 64 69 6e 67 3a 20 34 30 70 78 20 30 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 0a 7d 0a 2e 63 61 6c 6c 5f 74 6f 5f 61 63 74 69 6f 6e 20 2e 63 61 6c 6c 5f 74 6f 5f 61 63 74 69 6f 6e 5f 77 72 61 70 70 65 72 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 0a 7d 0a 2e 63 61 6c 6c 5f 74 6f 5f 61 63 74 69 6f 6e 20 2e 63 61 6c 6c 5f 6c 65 66 74 2c 20 2e 63 61 6c 6c 5f 74 6f 5f 61 63 74 69 6f 6e 20 2e 63 61 6c 6c 5f 63 65 6e 74 65 72 2c 20 2e 63 61 6c 6c 5f 74 6f 5f 61 63 74 69 6f 6e 20 2e 63 61 6c 6c 5f 72 69 67 68 74 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 2d 63 65 6c 6c 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 09 2d 77 65 62 6b Data Ascii: table;padding: 40px 0;width: 100%}.call_to_action .call_to_action_wrapper {display: table;width: 100%}.call_to_action .call_left, .call_to_action .call_center, .call_to_action .call_right {display: table-cell;vertical-align: middle;-webk
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 0a 7d 0a 2e 63 61 6c 6c 5f 74 6f 5f 61 63 74 69 6f 6e 20 2e 63 61 6c 6c 5f 6c 65 66 74 20 7b 0a 09 77 69 64 74 68 3a 20 34 30 25 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 32 30 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 0a 7d 0a 2e 63 61 6c 6c 5f 74 6f 5f 61 63 74 69 6f 6e 20 2e 63 61 6c 6c 5f 6c 65 66 74 20 68 33 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 0a 7d 0a 2e 63 61 6c 6c 5f 74 6f 5f 61 63 74 69 6f 6e 20 2e 63 61 6c 6c 5f 63 65 6e 74 65 72 20 7b 0a 09 77 69 64 74 68 3a 20 32 30 25 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 0a 7d 0a 2e 63 61 6c 6c 5f 74 6f 5f 61 63 74 69 6f 6e 20 Data Ascii: border-box;box-sizing: border-box}.call_to_action .call_left {width: 40%;padding: 0 20px;text-align: center}.call_to_action .call_left h3 {margin-bottom: 0}.call_to_action .call_center {width: 20%;text-align: center}.call_to_action

Timestamp	Bytes transferred	Direction	Data
2024-08-29 16:34:33 UTC	550	OUT	GET /css/structure.css HTTP/1.1 Host: sgsconsulting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sgsconsulting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 16:34:33 UTC	298	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Mon, 08 Nov 2021 16:47:54 GMT Accept-Ranges: bytes ETag: "0d9fd5fc0d4d71:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Thu, 29 Aug 2024 16:34:33 GMT Connection: close Content-Length: 169941
2024-08-29 16:34:33 UTC	16086	IN	Data Raw: 2f 2a 0a 7c 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 7c 20 42 65 0a 7c 20 53 74 72 75 63 74 75 72 65 20 73 74 79 6c 65 73 0a 7c 20 68 74 74 70 3a 2f 2f 42 65 61 6e 74 6f 77 6e 54 68 65 6d 65 73 2e 63 6f 6d 0a 7c 20 68 74 74 70 3a 2f 2f 74 68 65 6d 65 66 6f 72 65 73 74 2e 6e 65 74 2f 75 73 65 72 2f 42 65 61 6e 74 6f 77 6e 54 68 65 6d 65 73 0a 7c 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 7c 20 31 Data Ascii: /*\|--------------------------------------------------------------------------\| Be\| Structure styles\| http://BeantownThemes.com\| http://themeforest.net/user/BeantownThemes\|--------------------------------------------------------------------------\| 1
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 6c 65 66 74 3a 20 30 70 78 3b 0a 7d 0a 2e 66 69 78 65 64 2d 6e 61 76 2d 6e 65 78 74 20 2e 61 72 72 6f 77 2c 20 2e 66 69 78 65 64 2d 6e 61 76 2d 6e 65 78 74 20 2e 70 68 6f 74 6f 2c 20 2e 66 69 78 65 64 2d 6e 61 76 2d 6e 65 78 74 20 2e 64 65 73 63 20 7b 0a 09 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 66 69 78 65 64 2d 6e 61 76 2d 6e 65 78 74 20 2e 64 65 73 63 20 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 33 33 35 70 78 3b 0a 7d 0a 2e 66 69 78 65 64 2d 6e 61 76 2d 6e 65 78 74 3a 68 6f 76 65 72 20 2e 64 65 73 63 20 7b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 70 78 3b 0a 7d 0a 2f 2a 20 41 6e 69 6d 61 74 69 6f 6e 20 2a 2f 0a 0a 2e 66 69 78 65 64 2d 6e 61 76 20 2e 70 68 6f 74 6f 2c 20 2e 66 69 78 65 64 2d 6e 61 76 20 2e 64 65 73 63 Data Ascii: left: 0px;}.fixed-nav-next .arrow, .fixed-nav-next .photo, .fixed-nav-next .desc {float: right;}.fixed-nav-next .desc {margin-right: -335px;}.fixed-nav-next:hover .desc {margin-right: 0px;}/* Animation */.fixed-nav .photo, .fixed-nav .desc
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 20 75 6c 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6c 65 66 74 3a 20 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 37 70 78 3b 0a 09 74 6f 70 3a 20 31 30 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 32 32 33 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 70 78 20 34 70 78 20 34 70 78 20 34 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 20 34 70 78 20 34 70 78 20 34 70 78 3b 0a 7d 0a 23 48 65 61 64 65 72 20 2e 73 65 63 6f 6e 64 61 72 79 2d 6d 65 6e 75 20 6c 69 20 75 6c 20 6c 69 20 7b 7d 0a 23 48 65 61 64 65 72 20 2e 73 65 63 6f 6e 64 61 72 79 2d 6d 65 6e 75 20 6c 69 20 75 6c 20 6c 69 3a 6c 61 73 Data Ascii: ul {position: absolute;left: 0px;padding: 7px;top: 100%;z-index: 223;margin: 0;display: none;-webkit-border-radius: 0px 4px 4px 4px;border-radius: 0 4px 4px 4px;}#Header .secondary-menu li ul li {}#Header .secondary-menu li ul li:las
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 20 2e 61 75 74 68 6f 72 2d 64 61 74 65 20 2e 64 61 74 65 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2f 2a 20 50 6f 73 74 20 74 79 70 65 73 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 0a 2e 66 6f 72 6d 61 74 2d 71 75 6f 74 65 20 2e 70 6f 73 74 2d 70 68 6f 74 6f 2d 77 72 61 70 70 65 72 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 66 6f 72 6d 61 74 2d 71 75 6f 74 65 20 2e 70 6f 73 74 2d 64 65 73 63 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 2e 66 6f 72 6d 61 74 2d 71 75 6f 74 65 20 2e 70 6f 73 74 2d 64 65 73 63 2d 77 72 61 70 70 65 72 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 66 6c 6f 61 74 3a 20 Data Ascii: .author-date .date {display: none;}/* Post types =========================================== */.format-quote .post-photo-wrapper {display: none;}.format-quote .post-desc {padding: 0;}.format-quote .post-desc-wrapper {width: 100%;float:
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 7d 0a 2e 77 69 64 67 65 74 5f 6d 66 6e 5f 74 61 67 5f 63 6c 6f 75 64 20 75 6c 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 77 69 64 67 65 74 5f 6d 66 6e 5f 74 61 67 5f 63 6c 6f 75 64 20 75 6c 20 6c 69 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 35 70 78 20 32 70 78 20 30 3b 0a 7d 0a 2e 77 69 64 67 65 74 5f 6d 66 6e 5f 74 61 67 5f 63 6c 6f 75 64 20 61 20 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 68 Data Ascii: }.widget_mfn_tag_cloud ul {margin-bottom: 0;overflow: hidden;}.widget_mfn_tag_cloud ul li {margin: 0;padding: 0;float: left;margin: 0 5px 2px 0;}.widget_mfn_tag_cloud a {overflow: hidden;white-space: nowrap;display: inline-block;h
2024-08-29 16:34:34 UTC	16384	IN	Data Raw: 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 7d 0a 2e 77 70 63 66 37 2d 73 75 62 6d 69 74 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 23 70 6f 70 75 70 5f 63 6f 6e 74 61 63 74 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 09 72 69 67 68 74 3a 20 32 30 70 78 3b 0a 09 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 39 30 30 31 3b 0a 7d 0a 2e 6e 69 63 65 2d 73 63 72 6f 6c 6c 20 23 70 6f 70 75 70 5f 63 6f 6e 74 61 63 74 20 7b 0a 09 72 69 67 68 74 3a 20 33 30 70 78 3b 0a 7d 0a Data Ascii: x;-moz-box-sizing: border-box;box-sizing: border-box;margin-bottom: 0;}.wpcf7-submit {margin-bottom: 0 !important;}#popup_contact {position: fixed;right: 20px;bottom: 15px;z-index: 9001;}.nice-scroll #popup_contact {right: 30px;}
2024-08-29 16:34:34 UTC	16384	IN	Data Raw: 61 20 73 70 61 6e 20 7b 0a 09 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 34 38 70 78 3b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 09 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 7d 0a 09 2e 68 65 61 64 65 72 2d 73 69 6d 70 6c 65 20 23 54 6f 70 5f 62 61 72 20 23 6d 65 6e 75 20 75 6c 20 6c 69 2e 73 75 62 6d 65 6e 75 20 2e 6d 65 6e 75 2d 74 6f 67 67 6c 65 20 7b 0a 09 09 77 69 64 74 68 3a 20 34 38 70 78 3b 0a 09 09 68 65 69 67 68 74 3a 20 34 38 70 78 3b 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 09 72 69 67 68 74 3a 20 30 3b 0a 09 09 74 6f 70 3a 20 30 3b 0a 09 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 Data Ascii: a span {border: none;line-height: 48px;display: inline;padding: 0;}.header-simple #Top_bar #menu ul li.submenu .menu-toggle {width: 48px;height: 48px;display: block;position: absolute;right: 0;top: 0;border-left: 1px s
2024-08-29 16:34:34 UTC	16384	IN	Data Raw: 6f 70 65 6e 20 2e 73 65 63 74 69 6f 6e 5f 77 72 61 70 70 65 72 2c 20 2e 68 65 61 64 65 72 2d 6f 70 65 6e 20 2e 63 6f 6e 74 61 69 6e 65 72 2c 20 2e 68 65 61 64 65 72 2d 6f 70 65 6e 2e 77 69 74 68 5f 61 73 69 64 65 20 2e 63 6f 6e 74 65 6e 74 5f 77 72 61 70 70 65 72 20 7b 0a 09 09 6d 61 78 2d 77 69 64 74 68 3a 20 39 34 30 70 78 3b 0a 09 7d 0a 09 2e 68 65 61 64 65 72 2d 6f 70 65 6e 2e 77 69 74 68 5f 61 73 69 64 65 20 2e 73 65 63 74 69 6f 6e 5f 77 72 61 70 70 65 72 20 7b 0a 09 09 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 7d 0a 09 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 09 2f 2a 20 45 72 72 6f 72 20 34 30 34 20 2a 2f 0a 09 2e 68 65 61 64 65 72 2d 6f 70 65 6e 20 23 45 72 72 6f 72 5f 34 30 34 20 2e 65 72 72 6f Data Ascii: open .section_wrapper, .header-open .container, .header-open.with_aside .content_wrapper {max-width: 940px;}.header-open.with_aside .section_wrapper {max-width: 100%;}/* -------------------- // Error 404 */.header-open #Error_404 .erro
2024-08-29 16:34:34 UTC	298	IN	Data Raw: 6f 61 64 73 5f 6c 69 73 74 20 2e 65 64 64 5f 64 6f 77 6e 6c 6f 61 64 20 2e 65 64 64 5f 64 6f 77 6e 6c 6f 61 64 5f 69 6e 6e 65 72 20 7b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 20 35 25 20 32 30 70 78 0a 09 7d 0a 7d 0a 2f 2a 20 23 44 65 73 6b 74 6f 70 20 26 20 54 61 62 6c 65 74 20 28 4c 61 6e 64 73 63 61 70 65 29 20 3e 20 37 36 38 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 23 44 65 73 6b 74 6f 70 20 26 20 54 61 62 6c 65 74 20 28 4c 61 6e 64 73 63 61 70 65 29 20 3e 20 37 36 38 20 2a 2f 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 09 2e 73 65 63 74 69 6f 6e Data Ascii: oads_list .edd_download .edd_download_inner {margin: 0 5% 20px}}/* #Desktop & Tablet (Landscape) > 768 --------------------------------------------------- #Desktop & Tablet (Landscape) > 768 */@media only screen and (min-width: 768px) {.section
2024-08-29 16:34:34 UTC	16384	IN	Data Raw: 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 0a 09 7d 0a 09 2e 73 65 63 74 69 6f 6e 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 65 78 2d 6d 6f 62 69 6c 65 3e 2e 6f 6e 65 2e 63 6f 6c 75 6d 6e 2c 20 2e 73 65 63 74 69 6f 6e 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 65 78 2d 6d 6f 62 69 6c 65 3e 2e 73 65 63 74 69 6f 6e 5f 77 72 61 70 70 65 72 3e 2e 6f 6e 65 2e 63 6f 6c 75 6d 6e 2c 20 2e 73 65 63 74 69 6f 6e 2e 66 75 6c 6c 2d 77 69 64 74 68 2d 65 78 2d 6d 6f 62 69 6c 65 20 2e 6f 6e 65 2e 77 72 61 70 20 2e 6f 6e 65 2e 63 6f 6c 75 6d 6e 20 7b 0a 09 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 0a 09 7d 0a 09 2f 2a 20 54 72 61 6e 73 70 61 72 65 6e 74 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 09 2e 74 72 2d 6d 65 6e Data Ascii: max-width: 100%!important}.section.full-width-ex-mobile>.one.column, .section.full-width-ex-mobile>.section_wrapper>.one.column, .section.full-width-ex-mobile .one.wrap .one.column {width: 100%;margin: 0}/* Transparent ---------- */.tr-men

Timestamp	Bytes transferred	Direction	Data
2024-08-29 16:34:33 UTC	551	OUT	GET /css/employment.css HTTP/1.1 Host: sgsconsulting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sgsconsulting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 16:34:33 UTC	297	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 19 Oct 2023 17:25:42 GMT Accept-Ranges: bytes ETag: "14d49749b12da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Thu, 29 Aug 2024 16:34:33 GMT Connection: close Content-Length: 69072
2024-08-29 16:34:33 UTC	16087	IN	Data Raw: 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 34 30 70 78 29 20 7b 0a 09 62 6f 64 79 3a 6e 6f 74 28 2e 68 65 61 64 65 72 2d 73 69 6d 70 6c 65 29 20 23 54 6f 70 5f 62 61 72 20 23 6d 65 6e 75 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 0a 09 7d 0a 09 2e 74 72 2d 6d 65 6e 75 20 23 54 6f 70 5f 62 61 72 20 23 6d 65 6e 75 20 7b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 0a 09 7d 0a 09 23 54 6f 70 5f 62 61 72 20 2e 6d 65 6e 75 3e 6c 69 3e 75 6c 2e 6d 66 6e 2d 6d 65 67 61 6d 65 6e 75 20 7b 0a 09 09 77 69 64 74 68 3a 20 39 38 34 70 78 0a 09 7d 0a 09 23 54 6f 70 5f 62 61 72 20 2e 6d 65 6e 75 3e 6c 69 3e 75 6c Data Ascii: @media only screen and (min-width: 1240px) {body:not(.header-simple) #Top_bar #menu {display: block !important}.tr-menu #Top_bar #menu {background: none !important}#Top_bar .menu>li>ul.mfn-megamenu {width: 984px}#Top_bar .menu>li>ul
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 68 74 3a 20 33 32 35 70 78 0a 09 7d 0a 09 2e 68 65 61 64 65 72 2d 72 74 6c 2e 68 65 61 64 65 72 2d 6f 70 65 6e 20 23 70 6f 70 75 70 5f 63 6f 6e 74 61 63 74 20 7b 0a 09 09 72 69 67 68 74 3a 20 32 37 30 70 78 0a 09 7d 0a 09 2e 68 65 61 64 65 72 2d 72 74 6c 2e 68 65 61 64 65 72 2d 6f 70 65 6e 20 2e 66 69 78 65 64 2d 6e 61 76 2e 66 69 78 65 64 2d 6e 61 76 2d 6e 65 78 74 20 7b 0a 09 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 35 30 70 78 0a 09 7d 0a 09 23 48 65 61 64 65 72 5f 63 72 65 61 74 69 76 65 2e 61 63 74 69 76 65 20 7b 0a 09 09 6c 65 66 74 3a 20 2d 31 70 78 3b 0a 09 7d 0a 09 2e 68 65 61 64 65 72 2d 72 74 6c 20 23 48 65 61 64 65 72 5f 63 72 65 61 74 69 76 65 2e 61 63 74 69 76 65 20 7b 0a 09 09 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 09 09 72 69 67 68 74 Data Ascii: ht: 325px}.header-rtl.header-open #popup_contact {right: 270px}.header-rtl.header-open .fixed-nav.fixed-nav-next {margin-right: 250px}#Header_creative.active {left: -1px;}.header-rtl #Header_creative.active {left: auto;right
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 63 34 35 35 31 3b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 7d 0a 2e 62 75 74 74 6f 6e 2d 73 74 72 6f 6b 65 20 61 2e 62 75 74 74 6f 6e 2c 20 2e 62 75 74 74 6f 6e 2d 73 74 72 6f 6b 65 20 61 2e 62 75 74 74 6f 6e 2e 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 2c 20 2e 62 75 74 74 6f 6e 2d 73 74 72 6f 6b 65 20 61 2e 62 75 74 74 6f 6e 20 2e 62 75 74 74 6f 6e 5f 69 63 6f 6e 20 69 2c 20 2e 62 75 74 74 6f 6e 2d 73 74 72 6f 6b 65 20 61 2e 74 70 2d 62 75 74 74 6f 6e 20 7b 0a 09 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 63 34 35 35 31 3b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 7d 0a 2e 62 75 74 74 6f 6e 2d 73 74 72 6f 6b 65 20 61 3a 68 6f 76 65 72 2e 62 75 74 74 6f 6e 2c 20 2e 62 75 74 Data Ascii: {background-color: #3c4551;color: #fff;}.button-stroke a.button, .button-stroke a.button.action_button, .button-stroke a.button .button_icon i, .button-stroke a.tp-button {border-color: #3c4551;color: #fff;}.button-stroke a:hover.button, .but
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 6e 2d 68 65 61 64 65 72 20 2e 70 72 69 63 65 3e 73 70 61 6e 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 35 61 36 30 3b 0a 7d 0a 2e 70 72 69 63 69 6e 67 2d 62 6f 78 20 2e 70 6c 61 6e 2d 69 6e 73 69 64 65 20 75 6c 20 6c 69 20 2e 79 65 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 35 61 36 30 3b 0a 7d 0a 2e 70 72 69 63 69 6e 67 2d 62 6f 78 2d 62 6f 78 2e 70 72 69 63 69 6e 67 2d 62 6f 78 2d 66 65 61 74 75 72 65 64 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 35 61 36 30 3b 0a 7d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 65 6d 61 69 6c 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 5d 2c Data Ascii: n-header .price>span {color: #ff5a60;}.pricing-box .plan-inside ul li .yes {background: #ff5a60;}.pricing-box-box.pricing-box-featured {background: #ff5a60;}input[type="date"], input[type="email"], input[type="number"], input[type="password"],
2024-08-29 16:34:33 UTC	3833	IN	Data Raw: 5f 62 5f 37 2c 20 64 69 76 2e 68 72 6d 61 72 67 69 6e 5f 62 5f 37 2c 20 68 32 2e 68 72 6d 61 72 67 69 6e 5f 62 5f 37 2c 20 68 33 2e 68 72 6d 61 72 67 69 6e 5f 62 5f 37 2c 20 68 34 2e 68 72 6d 61 72 67 69 6e 5f 62 5f 37 2c 20 68 35 2e 68 72 6d 61 72 67 69 6e 5f 62 5f 37 2c 20 68 36 2e 68 72 6d 61 72 67 69 6e 5f 62 5f 37 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 37 70 78 3b 0a 7d 0a 2e 68 72 6d 61 72 67 69 6e 5f 62 5f 34 30 2c 20 70 2e 68 72 6d 61 72 67 69 6e 5f 62 5f 34 30 2c 20 68 72 2e 68 72 6d 61 72 67 69 6e 5f 62 5f 34 30 2c 20 64 69 76 2e 68 72 6d 61 72 67 69 6e 5f 62 5f 34 30 2c 20 68 32 2e 68 72 6d 61 72 67 69 6e 5f 62 5f 34 30 2c 20 68 33 2e 68 72 6d 61 72 67 69 6e 5f 62 5f 34 30 2c 20 68 34 2e 68 72 6d 61 72 67 69 6e 5f 62 5f 34 30 Data Ascii: _b_7, div.hrmargin_b_7, h2.hrmargin_b_7, h3.hrmargin_b_7, h4.hrmargin_b_7, h5.hrmargin_b_7, h6.hrmargin_b_7 {margin-bottom: 7px;}.hrmargin_b_40, p.hrmargin_b_40, hr.hrmargin_b_40, div.hrmargin_b_40, h2.hrmargin_b_40, h3.hrmargin_b_40, h4.hrmargin_b_40

Timestamp	Bytes transferred	Direction	Data
2024-08-29 16:34:33 UTC	547	OUT	GET /css/custom.css HTTP/1.1 Host: sgsconsulting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sgsconsulting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 16:34:33 UTC	292	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Sat, 14 Aug 2021 12:47:42 GMT Accept-Ranges: bytes ETag: "0ab3e92a91d71:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Thu, 29 Aug 2024 16:34:33 GMT Connection: close Content-Length: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-29 16:34:33 UTC	549	OUT	GET /css/settings.css HTTP/1.1 Host: sgsconsulting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sgsconsulting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 16:34:33 UTC	297	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Sat, 14 Aug 2021 00:26:54 GMT Accept-Ranges: bytes ETag: "01b2c15a390d71:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Thu, 29 Aug 2024 16:34:33 GMT Connection: close Content-Length: 35844
2024-08-29 16:34:33 UTC	16087	IN	Data Raw: 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 0d 0a 2d 09 52 65 76 6f 6c 75 74 69 6f 6e 20 53 6c 69 64 65 72 20 35 2e 30 20 44 65 66 61 75 6c 74 20 53 74 79 6c 65 20 53 65 74 74 69 6e 67 73 20 2d 0d 0a 0d 0a 53 63 72 65 65 6e 20 53 74 79 6c 65 73 68 65 65 74 0d 0a 0d 0a 76 65 72 73 69 6f 6e 3a 20 20 20 09 35 2e 30 2e 30 0d 0a 64 61 74 65 3a 20 20 20 20 20 20 09 32 39 2f 31 30 2f 31 35 0d 0a 61 75 74 68 6f 72 3a 09 09 74 68 65 6d 65 70 75 6e 63 68 0d 0a 65 6d 61 69 6c 3a 20 20 20 20 20 09 69 6e 66 6f 40 74 68 65 6d 65 70 75 6e 63 68 2e 63 6f 6d 0d 0a 77 65 62 73 Data Ascii: /*------------------------------------------------------------------------------Revolution Slider 5.0 Default Style Settings -Screen Stylesheetversion: 5.0.0date: 29/10/15author:themepunchemail: info@themepunch.comwebs
2024-08-29 16:34:33 UTC	16384	IN	Data Raw: 22 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 2d 32 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 32 35 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 36 29 3b 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 32 35 70 78 20 30 70 78 20 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 36 29 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 32 35 70 78 20 30 70 78 20 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 36 29 3b 0d 0a 20 20 20 20 74 6f 70 3a 33 30 25 3b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 30 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 32 30 70 78 3b 0d 0a 20 20 20 20 72 69 67 68 74 3a 32 Data Ascii: "; position:absolute; z-index:-2; -webkit-box-shadow:0 0 25px 0px rgba(0,0,0,0.6); -moz-box-shadow:0 0 25px 0px rgba(0,0,0,0.6); box-shadow:0 0 25px 0px rgba(0,0,0,0.6); top:30%; bottom:0; left:20px; right:2
2024-08-29 16:34:33 UTC	3373	IN	Data Raw: 0d 0a 20 20 74 6f 70 3a 20 61 75 74 6f 3b 0d 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 2d 31 2e 30 73 3b 0d 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 2d 31 2e 30 73 3b 0d 0a 7d 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 74 70 2d 72 6f 74 61 74 65 20 7b 20 31 30 30 25 20 7b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 20 7d 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 74 70 2d 72 6f 74 61 74 65 20 7b 20 31 30 30 25 20 7b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 Data Ascii: top: auto; bottom: 0px; -webkit-animation-delay: -1.0s; animation-delay: -1.0s;}@-webkit-keyframes tp-rotate { 100% { -webkit-transform: rotate(360deg) }}@keyframes tp-rotate { 100% { transform: rotate(360deg); -webkit-transform: rota

Timestamp	Bytes transferred	Direction	Data
2024-08-29 16:34:33 UTC	551	OUT	GET /css/style-demo.css HTTP/1.1 Host: sgsconsulting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sgsconsulting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 16:34:34 UTC	294	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Sat, 14 Aug 2021 12:46:58 GMT Accept-Ranges: bytes ETag: "0cd478a91d71:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Thu, 29 Aug 2024 16:34:33 GMT Connection: close Content-Length: 7347
2024-08-29 16:34:34 UTC	7347	IN	Data Raw: 2e 6e 69 63 65 2d 73 63 72 6f 6c 6c 20 23 6d 66 6e 2d 64 65 6d 6f 2d 70 61 6e 65 6c 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 7d 23 6d 66 6e 2d 64 65 6d 6f 2d 70 61 6e 65 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 36 32 35 32 35 3b 63 6f 6c 6f 72 3a 23 64 62 64 62 64 62 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 77 69 64 74 68 3a 33 36 37 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 72 69 67 68 74 3a 2d 33 36 37 70 78 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 30 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 31 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d Data Ascii: .nice-scroll #mfn-demo-panel{margin-right:10px}#mfn-demo-panel{background:#262525;color:#dbdbdb;position:fixed;width:367px;height:100%;right:-367px;top:0;z-index:9000;line-height:21px;font-size:18px;font-weight:300;font-family:Roboto,Arial,Helvetica,sans-

Timestamp	Bytes transferred	Direction	Data
2024-08-29 16:34:34 UTC	553	OUT	GET /css/owl.carousel.css HTTP/1.1 Host: sgsconsulting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sgsconsulting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 16:34:34 UTC	296	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Mon, 08 Nov 2021 17:00:52 GMT Accept-Ranges: bytes ETag: "03ab72fc2d4d71:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Thu, 29 Aug 2024 16:34:33 GMT Connection: close Content-Length: 4803
2024-08-29 16:34:34 UTC	4803	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2f 2a 0a 20 2a 20 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 2d 20 43 6f 72 65 0a 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 2d 77 65 62 6b 69 74 Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE // * Owl Carousel - Core */.owl-carousel { display: none; width: 100%; -webkit

Timestamp	Bytes transferred	Direction	Data
2024-08-29 16:34:34 UTC	600	OUT	GET /images/employment.png HTTP/1.1 Host: sgsconsulting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sgsconsulting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 16:34:35 UTC	298	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 20 Aug 2021 10:38:16 GMT Accept-Ranges: bytes ETag: "09cd37baf95d71:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Thu, 29 Aug 2024 16:34:34 GMT Connection: close Content-Length: 18956
2024-08-29 16:34:35 UTC	16086	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e0 00 00 00 75 08 06 00 00 00 57 86 ed 11 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRuWpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-08-29 16:34:35 UTC	2870	IN	Data Raw: 57 4f 3b 00 ee 6e b2 85 aa 58 6b f1 3d 0f 11 28 05 96 7c b1 88 ef 79 e4 8b 25 44 04 1b 5a ac c2 82 59 7d 0c 8f e6 d8 bc 63 08 54 99 37 ab 97 85 b3 fb b8 ff 91 8d 0c 0c 8e 31 73 5a 27 d9 4c 0a 9b b0 60 6c 1f 18 61 6c bc c8 a9 27 2c a5 b3 bd 85 db ee 5a 4d b1 18 b0 64 e1 0c 06 87 73 ac 59 bf 83 39 fd dd 64 d2 7e d5 e7 8c 08 63 b9 02 c3 a3 79 8c 08 2d d9 34 d9 8c 4f 10 5a 44 84 74 ca c7 98 fd 1b 08 1d bb 27 3c 97 6a 33 56 f2 18 71 3d 23 7c 4f 9f 4c 41 d8 4d 7a 2a 02 70 72 9d 0e ac 5a 3c 67 a5 89 b3 1b c6 72 05 52 be 47 36 1d 75 ce 1a cf 17 19 1d 2f d0 d5 d1 42 26 e5 63 eb 5c 7b d4 3c 46 d9 31 30 4a 29 08 e9 eb 69 c7 33 86 91 b1 3c be ef d1 d1 96 a9 02 5e 93 9a f4 44 02 f0 49 11 8c 1d 45 b7 9b 2a 40 02 b4 b5 64 ca c6 13 80 6c 26 45 36 93 aa da 37 a9 81 a6 a7 Data Ascii: WO;nXk=(\|y%DZY}cT71sZ'L`lal',ZMdsY9d~cy-4OZDt'<j3Vq=#\|OLAMzprZ<grRG6u/B&c\{<F10J)i3<^DIE@dl&E67

Timestamp	Bytes transferred	Direction	Data
2024-08-29 16:34:34 UTC	606	OUT	GET /images/customer-service.png HTTP/1.1 Host: sgsconsulting.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sgsconsulting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 16:34:35 UTC	298	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 04 Mar 2022 11:38:30 GMT Accept-Ranges: bytes ETag: "03fe75ebc2fd81:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Thu, 29 Aug 2024 16:34:34 GMT Connection: close Content-Length: 24677
2024-08-29 16:34:35 UTC	16086	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 79 9c 5c 65 95 37 f0 df 79 ee ad a5 f7 ee ac 04 08 fb 22 fb 16 10 08 c8 be c9 96 04 12 25 88 26 c2 c0 88 1b e2 38 ef bc 33 ef cc 64 76 67 1c 41 40 1d d9 04 47 07 95 b0 39 e2 a0 a3 b2 29 0a 42 58 03 06 c2 1a 12 12 b2 75 3a bd 56 d5 bd cf 79 ff a8 6e d2 84 5e aa aa ef 56 55 bf ef e7 93 4f 48 ba ea b9 07 a8 ba e7 dc 67 05 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 Data Ascii: PNGIHDRxsBIT\|dpHYs+tEXtSoftwarewww.inkscape.org< IDATxy\e7y"%&83dvgA@G9)BXu:Vyn^VUOHg
2024-08-29 16:34:35 UTC	8591	IN	Data Raw: 20 38 41 2e b8 e3 d1 89 35 41 65 d9 b0 61 43 4b 3e 9f ff f0 d0 f8 3d 80 d9 00 c2 eb 7e a4 48 d5 62 21 30 d6 93 ff 48 05 00 50 3d 45 40 eb 96 17 bb 77 7d e5 bb e1 ed fa 97 ca c0 b4 86 70 82 5d 3d 6a 9e 01 9c fe 6f 13 ef 05 58 bf 3c 01 bd 00 db 25 ff 21 d1 16 01 f7 c8 85 77 5c 30 91 06 58 00 8c 63 d5 aa 55 3b 1a 63 66 8b c8 71 aa 3a 1b c0 61 00 38 1b a8 c6 d5 4a 21 30 5e b7 ff 68 05 00 50 1d 45 c0 5e 2f 5d 8f 86 9e b7 42 6b df b4 b4 43 d2 dc f6 37 30 35 d1 0b 30 4a f2 1f 12 5d 11 e0 c3 3a 7b cb 82 ef bf 51 69 03 4c 64 e3 e8 ec ec fc a9 e7 79 5f 55 d5 2f 00 38 02 fc 6f 56 17 06 e7 08 1c 3e 79 f2 e4 17 32 99 4c 54 03 7b 81 1a 2f f9 8f e7 5a cc 3c e1 61 b4 3d 16 60 48 81 4a f7 af ef 0c 33 f9 c3 38 90 14 93 7f a0 fe 78 1f 10 c4 7c a8 fd e6 4e bc 8d 8a 8c 93 fc Data Ascii: 8A.5AeaCK>=~Hb!0HP=E@w}p]=joX<%!w\0XcU;cfq:a8J!0^hPE^/]BkC7050J]:{QiLdy_U/8oV>y2LT{/Z<a=`HJ38x\|N

Timestamp	Bytes transferred	Direction	Data
2024-08-29 16:34:35 UTC	578	OUT	GET /ajax/libs/normalize/5.0.0/normalize.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sgsconsulting.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 16:34:35 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 16:34:35 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03f2b-897" Last-Modified: Mon, 04 May 2020 16:13:31 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1260532 Expires: Tue, 19 Aug 2025 16:34:35 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7zpZFFrYOzEmJDJbK2E5%2BQJ4KUEdEeN6%2BToIMUALpccRGY9TTs3T4D2P5J7QvjxsS4dfY4Lct5WjHz7Z9HnLU8kK93ZNvmnIl2lKxMilQrsNMuvnoSpXvraTolIGK9T8XSv1O0a9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8badf30aa88732e8-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 16:34:35 UTC	427	IN	Data Raw: 38 39 37 0d 0a 62 75 74 74 6f 6e 2c 68 72 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 70 72 6f 67 72 65 73 73 2c 73 75 62 2c 73 75 70 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 20 6d 65 6e 75 2c 61 72 74 69 63 6c Data Ascii: 897button,hr,input{overflow:visible}audio,canvas,progress,video{display:inline-block}progress,sub,sup{vertical-align:baseline}html{font-family:sans-serif;line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0} menu,articl
2024-08-29 16:34:35 UTC	1369	IN	Data Raw: 78 3b 68 65 69 67 68 74 3a 30 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 3a 6f 62 6a 65 63 74 73 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c Data Ascii: x;height:0}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}a{background-color:transparent;-webkit-text-decoration-skip:objects}a:active,a:hover{outline-width:0}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underl
2024-08-29 16:34:35 UTC	410	IN	Data Raw: 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 Data Ascii: -spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-cancel-button,[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-up
2024-08-29 16:34:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0