Edit tour

Windows Analysis Report
https://amazon.coupahost.com/supplier_order_headers/view_po_via_email/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ

Overview

General Information

Sample URL:	https://amazon.coupahost.com/supplier_order_headers/view_po_via_email/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ
Analysis ID:	1501917
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Found iframes

HTML body contains low number of good links

No HTML title found

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6528 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1936,i,5482196442743689001,1920426809616658187,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5072 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5996 --field-trial-handle=1936,i,5482196442743689001,1920426809616658187,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://amazon.coupahost.com/supplier_order_headers/view_po_via_email/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-E5315549ST&gtm=45je48s0v875195491z876479390za200zb76479390&_p=1725035658671&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=0&cid=1871837291.1725035668&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1725035668&sct=1&seg=0&dl=https%3A%2F%2Fwww.coupa.com%2F&dt=Coupa%20%7C%20All%20in%20one%20AI-Driven%20Platform&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=11248 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.coupa.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.coupa.com/contact-us	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NJRSMZ4
Source: https://www.coupa.com/contact-us	HTTP Parser: Iframe src: https://consent.trustarc.com/get?name=crossdomain.html&domain=coupa.com
Source: https://www.coupa.com/contact-us	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.coupa.com/contact-us	HTTP Parser: Iframe src: https://x.adroll.com/pxl/iframe_content.html?adroll_fpc=a7faf74184e724d86a1b8f416e2d0ed2-1725035674154&flg=1&pv=37486398652.82037&arrfrr=https%3A%2F%2Fwww.coupa.com%2Fcontact-us&advertisable=NMYEKBQZ6NCFHO636KEG7O
Source: https://www.coupa.com/contact-us	HTTP Parser: Iframe src: https://get.coupa.com/index.php/form/XDFrame
Source: https://www.coupa.com/contact-us	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NJRSMZ4
Source: https://www.coupa.com/contact-us	HTTP Parser: Iframe src: https://consent.trustarc.com/get?name=crossdomain.html&domain=coupa.com
Source: https://www.coupa.com/contact-us	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.coupa.com/contact-us	HTTP Parser: Iframe src: https://x.adroll.com/pxl/iframe_content.html?adroll_fpc=a7faf74184e724d86a1b8f416e2d0ed2-1725035674154&flg=1&pv=37486398652.82037&arrfrr=https%3A%2F%2Fwww.coupa.com%2Fcontact-us&advertisable=NMYEKBQZ6NCFHO636KEG7O
Source: https://www.coupa.com/contact-us	HTTP Parser: Iframe src: https://get.coupa.com/index.php/form/XDFrame

Source: https://www.coupa.com/	HTTP Parser: No favicon
Source: https://www.coupa.com/	HTTP Parser: No favicon
Source: https://www.coupa.com/	HTTP Parser: No favicon
Source: https://www.coupa.com/	HTTP Parser: No favicon
Source: https://www.coupa.com/	HTTP Parser: No favicon
Source: https://www.coupa.com/	HTTP Parser: No favicon
Source: https://margin-multiplier.coupa.com/	HTTP Parser: No favicon
Source: https://margin-multiplier.coupa.com/	HTTP Parser: No favicon
Source: https://www.coupa.com/contact-us	HTTP Parser: No favicon

Source: https://www.coupa.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.coupa.com/contact-us	HTTP Parser: No <meta name="author".. found
Source: https://www.coupa.com/contact-us	HTTP Parser: No <meta name="author".. found

Source: https://www.coupa.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.coupa.com/contact-us	HTTP Parser: No <meta name="copyright".. found
Source: https://www.coupa.com/contact-us	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49722 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_538.2.dr	String found in binary or memory: <a href="https://www.facebook.com/coupasoftware" target="_blank" rel="noopener"><i class="contact-us__social-icon icon-facebook2"></i></a> equals www.facebook.com (Facebook)
Source: chromecache_538.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/99595" target="_blank" rel="noopener"><i class="contact-us__social-icon icon-linkedin"></i></a> equals www.linkedin.com (Linkedin)
Source: chromecache_538.2.dr	String found in binary or memory: <a href="https://www.youtube.com/user/CoupaSoftware" target="_blank" rel="noopener"><i class="contact-us__social-icon icon-youtube"></i></a> equals www.youtube.com (Youtube)
Source: chromecache_359.2.dr	String found in binary or memory: "https://www.linkedin.com/company/99595", equals www.linkedin.com (Linkedin)
Source: chromecache_359.2.dr	String found in binary or memory: "https://www.youtube.com/user/CoupaSoftware", equals www.youtube.com (Youtube)
Source: chromecache_538.2.dr, chromecache_359.2.dr	String found in binary or memory: <a href="https://www.facebook.com/coupasoftware" class="icon" target="_blank" rel="noopener"><i class="icon-Facebook"></i></a> equals www.facebook.com (Facebook)
Source: chromecache_538.2.dr, chromecache_359.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/99595" class="icon" target="_blank" rel="noopener"><i class="icon-LinkedIn"></i></a> equals www.linkedin.com (Linkedin)
Source: chromecache_538.2.dr, chromecache_359.2.dr	String found in binary or memory: <a href="https://www.youtube.com/user/CoupaSoftware" class="icon" target="_blank" rel="noopener"><i class="icon-Youtube"></i></a> equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr, chromecache_588.2.dr, chromecache_440.2.dr, chromecache_685.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Vj:function(){e=Bb()},nd:function(){d()}}};var hc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)
Source: chromecache_440.2.dr, chromecache_685.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=eA(a,c,e);M(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return M(122),!0;if(d&&f){for(var m=Mb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},hA=function(){var a=[],b=function(c){return rb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_499.2.dr, chromecache_588.2.dr, chromecache_440.2.dr, chromecache_685.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Yg:e,Wg:f,Xg:g,Ih:k,Jh:m,Ee:n,Cb:b},q=D.YT;if(q)return q.ready&&q.ready(d),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(HC(w,"iframe_api")\|\|HC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!yC&&FC(x[A],p.Ee))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_629.2.dr, chromecache_405.2.dr	String found in binary or memory: return b}uC.J="internal.enableAutoEventOnTimer";var hc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)
Source: chromecache_656.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_656.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_656.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_629.2.dr, chromecache_440.2.dr, chromecache_685.2.dr, chromecache_405.2.dr	String found in binary or memory: var JB=function(a,b,c,d,e){var f=Cz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Cz("fsl","nv.ids",[]):Cz("fsl","ids",[]);if(!g.length)return!0;var k=Hz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if(m==="https://www.facebook.com/tr/")return M(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!qy(k,ry(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: amazon.coupahost.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.coupa.com
Source: global traffic	DNS traffic detected: DNS query: play.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: d21y75miwcfqoq.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: consent.trustarc.com
Source: global traffic	DNS traffic detected: DNS query: cdn.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: dev.visualwebsiteoptimizer.com
Source: global traffic	DNS traffic detected: DNS query: s.adroll.com
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: j.6sc.co
Source: global traffic	DNS traffic detected: DNS query: faro-collector-prod-us-central-0.grafana.net
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: d.adroll.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: www.snapengage.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: x.adroll.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: 950-olu-185.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: c.6sc.co
Source: global traffic	DNS traffic detected: DNS query: ipv6.6sc.co
Source: global traffic	DNS traffic detected: DNS query: b.6sc.co
Source: global traffic	DNS traffic detected: DNS query: epsilon.6sense.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: t.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: sync.outbrain.com
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: sync.taboola.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: tracking.g2crowd.com
Source: global traffic	DNS traffic detected: DNS query: margin-multiplier.coupa.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: assets.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: get.coupa.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 30 Aug 2024 16:34:53 GMTContent-Type: text/html; charset=UTF-8Content-Length: 1564Connection: closex-request-id: dc3eb8d6-2702-4ccb-be22-04d0b5008835x-runtime: 0.002164strict-transport-security: max-age=604800x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockx-download-options: noopenx-permitted-cross-domain-policies: nonereferrer-policy: strict-origin-when-cross-origincontent-security-policy: default-src 'self' .g2crowd.com .g2.com; connect-src 'self' .g2crowd.com .g2.com; font-src 'self' .g2crowd.com .g2.com; form-action 'self' .g2crowd.com .g2.com; frame-src 'self' .g2crowd.com .g2.com; img-src 'self' .g2crowd.com .g2.com; manifest-src 'self' .g2crowd.com .g2.com; media-src 'self' .g2crowd.com .g2.com; object-src 'self' .g2crowd.com .g2.com; script-src 'self' .g2crowd.com .g2.com; style-src 'self' .g2crowd.com .g2.com; worker-src 'self' .g2crowd.com .g2.comvary: OriginCF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 8bb630db6810c47f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 30 Aug 2024 16:34:54 GMTContent-Type: text/html; charset=UTF-8Content-Length: 1564Connection: closex-request-id: f67d8f87-4dca-4678-8f65-1c54233c5018x-runtime: 0.002900strict-transport-security: max-age=604800x-frame-options: SAMEORIGINx-content-type-options: nosniffx-xss-protection: 1; mode=blockx-download-options: noopenx-permitted-cross-domain-policies: nonereferrer-policy: strict-origin-when-cross-origincontent-security-policy: default-src 'self' .g2crowd.com .g2.com; connect-src 'self' .g2crowd.com .g2.com; font-src 'self' .g2crowd.com .g2.com; form-action 'self' .g2crowd.com .g2.com; frame-src 'self' .g2crowd.com .g2.com; img-src 'self' .g2crowd.com .g2.com; manifest-src 'self' .g2crowd.com .g2.com; media-src 'self' .g2crowd.com .g2.com; object-src 'self' .g2crowd.com .g2.com; script-src 'self' .g2crowd.com .g2.com; style-src 'self' .g2crowd.com .g2.com; worker-src 'self' .g2crowd.com .g2.comvary: OriginCF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 8bb630dfacb8431b-EWR

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1936,i,5482196442743689001,1920426809616658187,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://amazon.coupahost.com/supplier_order_headers/view_po_via_email/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5996 --field-trial-handle=1936,i,5482196442743689001,1920426809616658187,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1936,i,5482196442743689001,1920426809616658187,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5996 --field-trial-handle=1936,i,5482196442743689001,1920426809616658187,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	0%	URL Reputation	safe
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://ogp.me/ns#	0%	URL Reputation	safe
http://daverupert.com	0%	URL Reputation	safe
https://dev.visualwebsiteoptimizer.com/v.gif?cd=	0%	URL Reputation	safe
https://s.adroll.com	0%	URL Reputation	safe
https://x.adroll.com/.well-known/attribution-reporting/debug/verbose	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://developers.marketo.com/MunchkinLicense.pdf	0%	URL Reputation	safe
http://www.elegantthemes.com	0%	URL Reputation	safe
http://sam.zoy.org/wtfpl/	0%	URL Reputation	safe
https://d.adroll.com/cm/taboola/out?adroll_fpc=a7faf74184e724d86a1b8f416e2d0ed2-1725035674154&flg=1&pv=37486398652.82037&arrfrr=https%3A%2F%2Fwww.coupa.com%2Fcontact-us&advertisable=NMYEKBQZ6NCFHO636KEG7O	0%	Avira URL Cloud	safe
https://get.coupa.com/js/forms2/css/forms2-theme-plain.css	0%	Avira URL Cloud	safe
https://dev.visualwebsiteoptimizer.com/ee.gif?a=778270&s=j.php&_cu=	0%	Avira URL Cloud	safe
https://www.clarity.ms/tag/uet/134631378	0%	Avira URL Cloud	safe
https://consent.trustarc.com/get?name=crossdomain.html&domain=coupa.com	0%	Avira URL Cloud	safe
https://dev.visualwebsiteoptimizer.com/cdn/edrv/worker-e738a30999ba7ab1af5d578729c27194gz.js	0%	Avira URL Cloud	safe
https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=0c35b637-e244-4aa4-a3d7-b42bb708f5ae&ttd_puid=709fbfd7-8b92-4d01-b486-02a95965948a%2C%2C	0%	Avira URL Cloud	safe
https://dev.visualwebsiteoptimizer.com/s.gif?account_id=778270&u=DCE498F39A471C5A4B554BD52ED68237C&s=1725035666&ed=%7B%22sr%22%3A%221280x1024%22%2C%22sc%22%3A24%2C%22de%22%3A%22UTF-8%22%2C%22ul%22%3A%22en-us%22%2C%22r%22%3A%22%22%2C%22lt%22%3A1725035668863%2C%22tO%22%3A4%2C%22tz%22%3A%22America%2FNew_York%22%7D&cu=https%3A%2F%2Fwww.coupa.com%2F&r=0&p=1&cq=0&vn=undefined&vns=undefined&vno=undefined&eTime=1725035666880&v=a9f839968	0%	Avira URL Cloud	safe
https://coupa.com/sites/default/files/coupa-business_spend_managment.png	0%	Avira URL Cloud	safe
https://www.coupa.com/sites/default/files/styles/card_item/public/customer/backgrounds/2021/Office-D	0%	Avira URL Cloud	safe
https://pixel.tapad.com/idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=1015241075869520946&pt=709fbfd7-8b92-4d01-b486-02a95965948a%2C%2C	0%	Avira URL Cloud	safe
https://d.adroll.com/cm/pubmatic/out?adroll_fpc=a7faf74184e724d86a1b8f416e2d0ed2-1725035674154&flg=1&pv=37486398652.82037&arrfrr=https%3A%2F%2Fwww.coupa.com%2Fcontact-us&advertisable=NMYEKBQZ6NCFHO636KEG7O	0%	Avira URL Cloud	safe
https://margin-multiplier.coupa.com/wp-content/uploads/et-cache/110/et-core-unified-tb-7-tb-21-defer	0%	Avira URL Cloud	safe
https://d.adroll.com/consent/check/NMYEKBQZ6NCFHO636KEG7O?flg=1&pv=97962302699.36064&arrfrr=https%3A%2F%2Fwww.coupa.com%2F&_s=137397071305a9d611c48c64fb158027&_b=2	0%	Avira URL Cloud	safe
https://dev.visualwebsiteoptimizer.com/ee.gif?s=mode_det&e=	0%	Avira URL Cloud	safe
https://margin-multiplier.coupa.com/wp-content/uploads/2024/06/Layer_2-2-1-480x480.png	0%	Avira URL Cloud	safe
https://950-olu-185.mktoresp.com/webevents/visitWebPage?_mchNc=1725035673278&_mchRu=%2Fvwo-integration&_mchQp=VWO-Test-ID-67-2&_mchId=950-OLU-185&_mchTk=_mch-coupa.com-1725035673275-43359&_mchHo=www.coupa.com&_mchPo=&_mchPc=https%3A&_mchVr=163&_mchEcid=&_mchRe=	0%	Avira URL Cloud	safe
https://s.adroll.com/pixel/NMYEKBQZ6NCFHO636KEG7O/SYMH3LIZGVD3HIYVGAKWB7/SVVLX2FYFVBVPJLH4MIIKG.js	0%	Avira URL Cloud	safe
https://amazon.coupahost.com/fonts/OpenSans-Regular.woff	0%	Avira URL Cloud	safe
https://github.com/select2/select2/blob/master/LICENSE.md	0%	Avira URL Cloud	safe
https://pippio.com/api/sync?pid=5324&it=1&iv=5e4e5922b46d7a6f35d659a757b98ec71cc1e0a645c270aef2ae0533a7db8ea3791426b5417dce21&_=2	0%	Avira URL Cloud	safe
https://www.coupa.com/fr/nous-contacter	0%	Avira URL Cloud	safe
https://www.glassdoor.com/Overview/Working-at-Coupa-Software-Inc-EI_IE217718.11%2C29.htm	0%	Avira URL Cloud	safe
https://amazon.coupahost.com/assets/common-aec4bc4c0d5cced5d32918b28e48df0033d78dec2e1250e852392148d300583a.js	0%	Avira URL Cloud	safe
https://d.adroll.com/cm/mk/NMYEKBQZ6NCFHO636KEG7O/in?id=	0%	Avira URL Cloud	safe
https://margin-multiplier.coupa.com/wp-json/	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
https://d.adroll.com/cm/taboola/out?adroll_fpc=a7faf74184e724d86a1b8f416e2d0ed2-1725035674154&flg=1&pv=37486398652.82037&arrfrr=https%3A%2F%2Fwww.coupa.com%2Fcontact-us&advertisable=NMYEKBQZ6NCFHO636KEG7O	false	Avira URL Cloud: safe	unknown
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false	URL Reputation: safe	unknown
https://dev.visualwebsiteoptimizer.com/cdn/edrv/worker-e738a30999ba7ab1af5d578729c27194gz.js	false	Avira URL Cloud: safe	unknown
https://www.clarity.ms/tag/uet/134631378	false	Avira URL Cloud: safe	unknown
https://get.coupa.com/js/forms2/css/forms2-theme-plain.css	false	Avira URL Cloud: safe	unknown
https://dev.visualwebsiteoptimizer.com/s.gif?account_id=778270&u=DCE498F39A471C5A4B554BD52ED68237C&s=1725035666&ed=%7B%22sr%22%3A%221280x1024%22%2C%22sc%22%3A24%2C%22de%22%3A%22UTF-8%22%2C%22ul%22%3A%22en-us%22%2C%22r%22%3A%22%22%2C%22lt%22%3A1725035668863%2C%22tO%22%3A4%2C%22tz%22%3A%22America%2FNew_York%22%7D&cu=https%3A%2F%2Fwww.coupa.com%2F&r=0&p=1&cq=0&vn=undefined&vns=undefined&vno=undefined&eTime=1725035666880&v=a9f839968	false	Avira URL Cloud: safe	unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=0c35b637-e244-4aa4-a3d7-b42bb708f5ae&ttd_puid=709fbfd7-8b92-4d01-b486-02a95965948a%2C%2C	false	Avira URL Cloud: safe	unknown
https://consent.trustarc.com/get?name=crossdomain.html&domain=coupa.com	false	Avira URL Cloud: safe	unknown
https://d.adroll.com/cm/pubmatic/out?adroll_fpc=a7faf74184e724d86a1b8f416e2d0ed2-1725035674154&flg=1&pv=37486398652.82037&arrfrr=https%3A%2F%2Fwww.coupa.com%2Fcontact-us&advertisable=NMYEKBQZ6NCFHO636KEG7O	false	Avira URL Cloud: safe	unknown
https://d.adroll.com/consent/check/NMYEKBQZ6NCFHO636KEG7O?flg=1&pv=97962302699.36064&arrfrr=https%3A%2F%2Fwww.coupa.com%2F&_s=137397071305a9d611c48c64fb158027&_b=2	false	Avira URL Cloud: safe	unknown
https://s.adroll.com/pixel/NMYEKBQZ6NCFHO636KEG7O/SYMH3LIZGVD3HIYVGAKWB7/SVVLX2FYFVBVPJLH4MIIKG.js	false	Avira URL Cloud: safe	unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=1015241075869520946&pt=709fbfd7-8b92-4d01-b486-02a95965948a%2C%2C	false	Avira URL Cloud: safe	unknown
https://amazon.coupahost.com/fonts/OpenSans-Regular.woff	false	Avira URL Cloud: safe	unknown
https://950-olu-185.mktoresp.com/webevents/visitWebPage?_mchNc=1725035673278&_mchRu=%2Fvwo-integration&_mchQp=VWO-Test-ID-67-2&_mchId=950-OLU-185&_mchTk=_mch-coupa.com-1725035673275-43359&_mchHo=www.coupa.com&_mchPo=&_mchPc=https%3A&_mchVr=163&_mchEcid=&_mchRe=	false	Avira URL Cloud: safe	unknown
https://pippio.com/api/sync?pid=5324&it=1&iv=5e4e5922b46d7a6f35d659a757b98ec71cc1e0a645c270aef2ae0533a7db8ea3791426b5417dce21&_=2	false	Avira URL Cloud: safe	unknown
https://amazon.coupahost.com/assets/common-aec4bc4c0d5cced5d32918b28e48df0033d78dec2e1250e852392148d300583a.js	false	Avira URL Cloud: safe	unknown
https://tracking.g2crowd.com/attribution_tracking/conversions/646.js?p=https://www.coupa.com/&e=	false	Avira URL Cloud: safe	unknown
https://d.adroll.com/cm/r/out?adroll_fpc=a7faf74184e724d86a1b8f416e2d0ed2-1725035674154&flg=1&pv=97962302699.36064&arrfrr=https%3A%2F%2Fwww.coupa.com%2F&advertisable=NMYEKBQZ6NCFHO636KEG7O	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=386815124993448&ev=PageView&dl=https%3A%2F%2Fwww.coupa.com%2F&rl=&if=false&ts=1725035678776&cd[segment_eid]=DF5L75PVANHVHMJJ2YVNSH&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4125&fbp=fb.1.1725035675970.75010593412791848&ler=empty&cdl=API_unavailable&it=1725035673260&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://x.adroll.com/.well-known/attribution-reporting/debug/verbose	false	URL Reputation: safe	unknown
https://www.facebook.com/tr/?id=386815124993448&ev=PageView&dl=https%3A%2F%2Fwww.coupa.com%2Fcontact-us&rl=&if=false&ts=1725035726539&cd[segment_eid]=SVVLX2FYFVBVPJLH4MIIKG&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4125&fbp=fb.1.1725035675970.75010593412791848&ler=empty&cdl=API_unavailable&it=1725035721661&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET	false	Avira URL Cloud: safe	unknown
https://x.bidswitch.net/sync?dsp_id=44&user_id=MmU0ZDA0NzBmZmRkMzUwZjNmNDIwNGNjMTJmNjAyYWQ	false	Avira URL Cloud: safe	unknown
https://amazon.coupahost.com/otp/grants/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ/error?return_to_url=%2Fsupplier_order_headers%2Fview_po_via_email%2F8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ&view_key=8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ	false		unknown
https://d.adroll.com/cm/b/out?adroll_fpc=a7faf74184e724d86a1b8f416e2d0ed2-1725035674154&flg=1&pv=97962302699.36064&arrfrr=https%3A%2F%2Fwww.coupa.com%2F&advertisable=NMYEKBQZ6NCFHO636KEG7O	false	Avira URL Cloud: safe	unknown
https://d.adroll.com/cm/outbrain/out?adroll_fpc=a7faf74184e724d86a1b8f416e2d0ed2-1725035674154&flg=1&pv=37486398652.82037&arrfrr=https%3A%2F%2Fwww.coupa.com%2Fcontact-us&advertisable=NMYEKBQZ6NCFHO636KEG7O	false	Avira URL Cloud: safe	unknown
https://d.adroll.com/cm/index/out?adroll_fpc=a7faf74184e724d86a1b8f416e2d0ed2-1725035674154&flg=1&pv=37486398652.82037&arrfrr=https%3A%2F%2Fwww.coupa.com%2Fcontact-us&advertisable=NMYEKBQZ6NCFHO636KEG7O	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=649206575611556&ev=PageView&dl=https%3A%2F%2Fwww.coupa.com%2Fcontact-us&rl=&if=false&ts=1725035722505&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725035675970.75010593412791848&cs_est=true&ler=empty&cdl=API_unavailable&it=1725035721661&coo=false&rqm=GET	false	Avira URL Cloud: safe	unknown
https://amazon.coupahost.com/assets/application-3a224739fe51026aa21445da023d439053e9e1c1b61b4a8f2e8c82983900422b.css	false	Avira URL Cloud: safe	unknown
https://www.snapengage.com/chatjs/ServiceGetConfig?w=beb9772e-aa6c-4615-8a2b-e23ecccd8842	false	Avira URL Cloud: safe	unknown
https://d.adroll.com/onp/NMYEKBQZ6NCFHO636KEG7O/SYMH3LIZGVD3HIYVGAKWB7?adroll_fpc=a7faf74184e724d86a1b8f416e2d0ed2-1725035674154&flg=1&arrfrr=https%3A%2F%2Fwww.coupa.com%2Fcontact-us&pv=37486398652.82037&ev=t%3Dblu	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=386815124993448&ev=PageView&dl=https%3A%2F%2Fwww.coupa.com%2F&rl=&if=false&ts=1725035678776&cd[segment_eid]=DF5L75PVANHVHMJJ2YVNSH&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4125&fbp=fb.1.1725035675970.75010593412791848&ler=empty&cdl=API_unavailable&it=1725035673260&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET	false	Avira URL Cloud: safe	unknown
https://consent.trustarc.com/log?domain=coupa.com&country=us&state=&behavior=implied&session=f31de04f-a6ef-42f8-9cd9-8843daaf5294&userType=NEW&c=0d5e&referer=https://www.coupa.com&language=en	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=649206575611556&ev=PageView&dl=https%3A%2F%2Fwww.coupa.com%2F&rl=&if=false&ts=1725035675974&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1725035675970.75010593412791848&cs_est=true&ler=empty&cdl=API_unavailable&it=1725035673260&coo=false&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://idsync.rlcdn.com/396846.gif?served_by=evergreen&partner_uid=ae437598-d1f4-4e50-aca6-1524f4bb64d8	false	Avira URL Cloud: safe	unknown
https://consent.trustarc.com/notice?domain=coupa.com&c=teconsent&js=nj&noticeType=bb&text=true&pn=1&text=true&gtm=1	false	Avira URL Cloud: safe	unknown
https://www.snapengage.com/chatjs/servicegetproactivegeodata?w=beb9772e-aa6c-4615-8a2b-e23ecccd8842	false	Avira URL Cloud: safe	unknown
https://x.adroll.com/attribution/trigger?fpc=a7faf74184e724d86a1b8f416e2d0ed2&advertisable_eid=NMYEKBQZ6NCFHO636KEG7O&conversion_type=PageView&conversion_value=0.00&currency=USC&flg=1&pv=97962302699.36064&arrfrr=https%3A%2F%2Fwww.coupa.com%2F	false	Avira URL Cloud: safe	unknown
https://consent.trustarc.com/get?name=RobotoRegular.ttf	false	Avira URL Cloud: safe	unknown
https://d.adroll.com/cm/taboola/out?adroll_fpc=a7faf74184e724d86a1b8f416e2d0ed2-1725035674154&flg=1&pv=97962302699.36064&arrfrr=https%3A%2F%2Fwww.coupa.com%2F&advertisable=NMYEKBQZ6NCFHO636KEG7O	false	Avira URL Cloud: safe	unknown
https://faro-collector-prod-us-central-0.grafana.net/collect/9ea54f105cfe4b908efe8385a5d6d2a7	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_499.2.dr, chromecache_588.2.dr, chromecache_440.2.dr, chromecache_685.2.dr	false	URL Reputation: safe	unknown
https://dev.visualwebsiteoptimizer.com/ee.gif?a=778270&s=j.php&_cu=	chromecache_388.2.dr, chromecache_461.2.dr, chromecache_425.2.dr, chromecache_389.2.dr	false	Avira URL Cloud: safe	unknown
https://ogp.me/ns#	chromecache_538.2.dr, chromecache_359.2.dr	false	URL Reputation: safe	unknown
https://coupa.com/sites/default/files/coupa-business_spend_managment.png	chromecache_359.2.dr	false	Avira URL Cloud: safe	unknown
https://www.coupa.com/sites/default/files/styles/card_item/public/customer/backgrounds/2021/Office-D	chromecache_413.2.dr, chromecache_610.2.dr	false	Avira URL Cloud: safe	unknown
http://daverupert.com	chromecache_406.2.dr, chromecache_491.2.dr	false	URL Reputation: safe	unknown
https://dev.visualwebsiteoptimizer.com/v.gif?cd=	chromecache_388.2.dr, chromecache_461.2.dr, chromecache_425.2.dr, chromecache_389.2.dr	false	URL Reputation: safe	unknown
https://margin-multiplier.coupa.com/wp-content/uploads/et-cache/110/et-core-unified-tb-7-tb-21-defer	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://dev.visualwebsiteoptimizer.com/ee.gif?s=mode_det&e=	chromecache_388.2.dr, chromecache_461.2.dr, chromecache_425.2.dr, chromecache_389.2.dr	false	Avira URL Cloud: safe	unknown
https://margin-multiplier.coupa.com/wp-content/uploads/2024/06/Layer_2-2-1-480x480.png	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/select2/select2/blob/master/LICENSE.md	chromecache_606.2.dr, chromecache_462.2.dr	false	Avira URL Cloud: safe	unknown
https://www.glassdoor.com/Overview/Working-at-Coupa-Software-Inc-EI_IE217718.11%2C29.htm	chromecache_359.2.dr	false	Avira URL Cloud: safe	unknown
https://www.coupa.com/fr/nous-contacter	chromecache_538.2.dr	false	Avira URL Cloud: safe	unknown
https://s.adroll.com	chromecache_412.2.dr	false	URL Reputation: safe	unknown
https://d.adroll.com/cm/mk/NMYEKBQZ6NCFHO636KEG7O/in?id=	chromecache_416.2.dr, chromecache_307.2.dr, chromecache_342.2.dr, chromecache_548.2.dr	false	Avira URL Cloud: safe	unknown
https://margin-multiplier.coupa.com/wp-json/	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://supplier.coupa.com/	chromecache_359.2.dr	false	Avira URL Cloud: safe	unknown
https://margin-multiplier.coupa.com/wp-content/uploads/2024/03/cropped-cropped-favicon-192x192.png	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://margin-multiplier.coupa.com/wp-content/uploads/2024/06/Layer_2-3.png	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://consent-pref.trustarc.com?type=coupaslider	chromecache_619.2.dr, chromecache_394.2.dr	false	Avira URL Cloud: safe	unknown
https://coupa.co.jp/	chromecache_538.2.dr, chromecache_359.2.dr	false	Avira URL Cloud: safe	unknown
https://openjsf.org/	chromecache_506.2.dr	false	URL Reputation: safe	unknown
https://margin-multiplier.coupa.com/wp-content/uploads/et-fonts/MuseoSans_300-1.ttf	chromecache_437.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/microsoft/clarity	chromecache_435.2.dr, chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown
https://www.coupa.com/solutions/finance-leader	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://margin-multiplier.coupa.com/wp-content/uploads/2024/03/Coupa_logo_white.png	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://margin-multiplier.coupa.com/wp-content/uploads/et-fonts/MuseoSans_300.ttf	chromecache_437.2.dr, chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://margin-multiplier.coupa.com/wp-content/uploads/2024/06/Layer_2-3-480x481.png	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://margin-multiplier.coupa.com/wp-content/uploads/2024/03/cropped-cropped-favicon-270x270.png	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_538.2.dr, chromecache_359.2.dr	false	URL Reputation: safe	unknown
http://jqueryui.com/themeroller/?ffDefault=Trebuchet%20MS%2C%20Tahoma%2C%20Verdana%2C%20Arial%2C%20s	chromecache_640.2.dr	false	Avira URL Cloud: safe	unknown
https://compass.coupa.com/	chromecache_538.2.dr	false	Avira URL Cloud: safe	unknown
https://margin-multiplier.coupa.com/wp-content/themes/divi/includes/builder/feature/dynamic-assets/a	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://margin-multiplier.coupa.com/wp-content/uploads/2024/03/cropped-cropped-favicon-180x180.png	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org/LICENSE	chromecache_506.2.dr	false	URL Reputation: safe	unknown
https://connect.facebook.net/	chromecache_693.2.dr, chromecache_656.2.dr	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0Font	chromecache_624.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_330.2.dr, chromecache_481.2.dr, chromecache_336.2.dr, chromecache_528.2.dr	false	URL Reputation: safe	unknown
https://supplier.coupa.com/resources/	chromecache_359.2.dr	false	Avira URL Cloud: safe	unknown
https://www.coupa.com/ebook/lp_all-23-building-resilience-action-plan	chromecache_538.2.dr, chromecache_359.2.dr	false	Avira URL Cloud: safe	unknown

Name	IP	Active	Malicious	Reputation
s.dsp-prod.demandbase.com	34.96.71.22	true	false	unknown
cdn-cf.vidyard.com	18.239.18.21	true	false	unknown
eu-eb2.3lift.com	13.248.245.213	true	false	unknown
stats.g.doubleclick.net	74.125.71.157	true	false	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.71.149.231	true	false	unknown
cm.g.doubleclick.net	142.250.185.66	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
tracking.g2crowd.com	104.18.30.176	true	false	unknown
id.rlcdn.com	35.244.174.68	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
d1qug1xf2dk5z6.cloudfront.net	65.9.86.59	true	false	unknown
us-u.openx.net	34.98.64.218	true	false	unknown
nydc1.outbrain.org	64.202.112.191	true	false	unknown
sludge-sludge-production-624682132.eu-west-1.elb.amazonaws.com	54.76.0.5	true	false	unknown
consent.trustarc.com	18.238.243.123	true	false	unknown
s-part-0029.t-0009.t-msedge.net	13.107.246.57	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
analytics-alv.google.com	216.239.34.181	true	false	unknown
td.doubleclick.net	216.58.206.66	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	44.195.182.155	true	false	unknown
unpkg.com	104.17.248.203	true	false	unknown
adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com	34.253.108.189	true	false	unknown
ghs.googlehosted.com	216.58.206.83	true	false	unknown
abj.mktossl.com	104.17.70.206	true	false	unknown
static.cloudflareinsights.com	104.16.80.73	true	false	unknown
dev.visualwebsiteoptimizer.com	34.96.102.137	true	false	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	unknown
amazon.coupahost.com	54.236.3.27	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
cs6.wpc.omegacdn.net	93.184.221.26	true	false	unknown
tag.demandbase.com	18.239.50.80	true	false	unknown
scontent.xx.fbcdn.net	157.240.251.9	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
code.jquery.com	151.101.194.137	true	false	unknown
950-olu-185.mktoresp.com	192.28.144.124	true	false	unknown
epsilon.6sense.com	76.223.9.105	true	false	unknown
d21y75miwcfqoq.cloudfront.net	18.239.47.63	true	false	unknown
tag-logger.demandbase.com	18.239.18.62	true	false	unknown
am-vip001.taboola.com	141.226.228.48	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
pippio.com	107.178.254.65	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
faro-collector-prod-us-central-0.grafana.net	34.160.12.0	true	false	unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false	unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	unknown
api.company-target.com	108.156.22.13	true	false	unknown
ib.anycast.adnxs.com	185.89.210.153	true	false	unknown
adserver-vpc-alb-0-1578609942.eu-west-1.elb.amazonaws.com	52.19.116.75	true	false	unknown
d.adroll.com	unknown	unknown	false	unknown
margin-multiplier.coupa.com	unknown	unknown	false	unknown
t.clarity.ms	unknown	unknown	false	unknown
secure.adnxs.com	unknown	unknown	false	unknown
www.snapengage.com	unknown	unknown	false	unknown
j.6sc.co	unknown	unknown	false	unknown
c.clarity.ms	unknown	unknown	false	unknown
s.company-target.com	unknown	unknown	false	unknown
c.6sc.co	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
munchkin.marketo.net	unknown	unknown	false	unknown
x.adroll.com	unknown	unknown	false	unknown
partners.tremorhub.com	unknown	unknown	false	unknown
ipv6.6sc.co	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
ups.analytics.yahoo.com	unknown	unknown	false	unknown
get.coupa.com	unknown	unknown	false	unknown
image2.pubmatic.com	unknown	unknown	false	unknown
cdn.vidyard.com	unknown	unknown	false	unknown
b.6sc.co	unknown	unknown	false	unknown
sync.outbrain.com	unknown	unknown	false	unknown
sync.taboola.com	unknown	unknown	false	unknown
x.bidswitch.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
s.adroll.com	unknown	unknown	false	unknown
www.coupa.com	unknown	unknown	false	unknown
play.vidyard.com	unknown	unknown	false	unknown
assets.vidyard.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
eb2.3lift.com	unknown	unknown	false	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
192.28.144.124	950-olu-185.mktoresp.com	United States	15224	OMNITUREUS	false
34.253.108.189	adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.239.18.21	cdn-cf.vidyard.com	United States	16509	AMAZON-02US	false
34.160.12.0	faro-collector-prod-us-central-0.grafana.net	United States	2686	ATGS-MMD-ASUS	false
185.89.210.153	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
52.86.6.77	unknown	United States	14618	AMAZON-AESUS	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
157.240.252.13	unknown	United States	32934	FACEBOOKUS	false
93.184.221.26	cs6.wpc.omegacdn.net	European Union	15133	EDGECASTUS	false
13.248.245.213	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
18.239.18.33	unknown	United States	16509	AMAZON-02US	false
104.18.30.176	tracking.g2crowd.com	United States	13335	CLOUDFLARENETUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
79.125.92.28	unknown	Ireland	16509	AMAZON-02US	false
35.244.174.68	id.rlcdn.com	United States	15169	GOOGLEUS	false
76.223.9.105	epsilon.6sense.com	United States	16509	AMAZON-02US	false
108.156.22.13	api.company-target.com	United States	16509	AMAZON-02US	false
104.17.70.206	abj.mktossl.com	United States	13335	CLOUDFLARENETUS	false
74.125.71.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.239.18.49	unknown	United States	16509	AMAZON-02US	false
13.33.158.137	unknown	United States	16509	AMAZON-02US	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
142.250.185.83	unknown	United States	15169	GOOGLEUS	false
13.227.219.102	unknown	United States	16509	AMAZON-02US	false
150.171.27.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
44.195.182.155	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.17.247.203	unknown	United States	13335	CLOUDFLARENETUS	false
65.9.86.59	d1qug1xf2dk5z6.cloudfront.net	United States	16509	AMAZON-02US	false
52.19.116.75	adserver-vpc-alb-0-1578609942.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.239.18.62	tag-logger.demandbase.com	United States	16509	AMAZON-02US	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
18.239.47.63	d21y75miwcfqoq.cloudfront.net	United States	16509	AMAZON-02US	false
104.17.248.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
18.238.243.123	consent.trustarc.com	United States	16509	AMAZON-02US	false
13.248.142.121	unknown	United States	16509	AMAZON-02US	false
34.255.253.31	unknown	United States	16509	AMAZON-02US	false
64.202.112.95	unknown	United States	22075	AS-OUTBRAINUS	false
142.250.185.66	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
54.236.3.27	amazon.coupahost.com	United States	14618	AMAZON-AESUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
216.58.206.83	ghs.googlehosted.com	United States	15169	GOOGLEUS	false
104.17.72.206	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
54.76.0.5	sludge-sludge-production-624682132.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
18.239.50.10	unknown	United States	16509	AMAZON-02US	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
3.71.149.231	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
18.238.243.42	unknown	United States	16509	AMAZON-02US	false
185.89.210.82	unknown	Germany	29990	ASN-APPNEXUS	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
64.202.112.191	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
76.223.111.18	unknown	United States	16509	AMAZON-02US	false
34.96.102.137	dev.visualwebsiteoptimizer.com	United States	15169	GOOGLEUS	false
13.107.246.57	s-part-0029.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
216.58.206.66	td.doubleclick.net	United States	15169	GOOGLEUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
13.225.78.35	unknown	United States	16509	AMAZON-02US	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
18.164.52.88	unknown	United States	3	MIT-GATEWAYSUS	false
34.98.64.218	us-u.openx.net	United States	15169	GOOGLEUS	false
18.239.50.80	tag.demandbase.com	United States	16509	AMAZON-02US	false
65.9.86.19	unknown	United States	16509	AMAZON-02US	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1501917
Start date and time:	2024-08-30 18:33:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://amazon.coupahost.com/supplier_order_headers/view_po_via_email/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@31/652@236/71
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.coupa.com/ Browse: https://margin-multiplier.coupa.com/ Browse: https://www.coupa.com/contact-us

Input	Output
URL: https://amazon.coupahost.com/otp/grants/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ/error?return_to_url=%2Fsupplier_order_headers%2Fview_po_via_email%2F8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ&view_key=8e504acfaae0d117872f32c7e8d971d2fa Model: jbxai	{ "brand":["coupa"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.coupa.com/ Model: jbxai	{ "brand":["Coupa"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.coupa.com/ Model: jbxai	{ "brand":["Coupa"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.coupa.com/contact-us Model: jbxai	{ "brand":["Coupa"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["Please Select Your Area of Interest"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://margin-multiplier.coupa.com/ Model: jbxai	{ "brand":["Coupa"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.coupa.com/ Model: jbxai	{ "brand":["Coupa"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.coupa.com/contact-us Model: jbxai	{ "brand":["Coupa"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["Please Select Your Area of Interest", "First Name", "Last Name"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.2676765382550546
Encrypted:	false
SSDEEP:	96:jsGms9myLxhiNl8UPcApf9ia9Oa0UNBfNtO3xRldbeSNsg1shGD:jsPs9m0xs7xPR9iO0SB1ABDVZ8hA
MD5:	2E71A952CA6B50268367A1405D118354
SHA1:	591B1F22C7D6C433F5184A1CACE7352CD8997130
SHA-256:	AF1D5F7CB19847A90255C25828B2A21CD9F610E26DBE19BA60A2EEC3F80683D8
SHA-512:	9A65D7A76CFEE2E73D820A71191019DA4DBD164C8CD345400678693634D834DF2F8049DAEB8F4EA6F9DEC8E5BDF651961B700B9F39FC2E85A49A4F9C7626D26F
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................m...m.......................................................................................................................................................................................g.%.d...d...g.%.........................................................................................................................................b...d.8.................................e...e...e...e...................................g

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:04 UTC	753	OUT	GET /supplier_order_headers/view_po_via_email/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ HTTP/1.1 Host: amazon.coupahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 16:34:04 UTC	1512	IN	HTTP/1.1 302 Found Date: Fri, 30 Aug 2024 16:34:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close status: 302 Found cache-control: no-cache referrer-policy: strict-origin-when-cross-origin x-robots-tag: none x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block feature-policy: camera 'none'; gyroscope 'none'; microphone 'none'; usb 'none'; fullscreen 'self'; payment 'self' x-request-id: a841143a-96f2-4afe-91f9-1f19fe1ff2b5 location: https://amazon.coupahost.com/otp/grants/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ/error?return_to_url=%2Fsupplier_order_headers%2Fview_po_via_email%2F8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ&view_key=8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ x-download-options: noopen x-runtime: 0.030245 x-frame-options: SAMEORIGIN x-content-type-options: nosniff set-cookie: _mkra_ctxt=a4e5713fb19066c111c520183ec91b1f--302; path=/; max-age=5; secure; HttpOnly set-cookie: san_otp_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSmtOMlV4WkRBNExUVm1aREl0TkdWbU1pMWlPRFJsTFRZNU1qWTFNalExTlRNNU1TST0iLCJleHAiOiIyMDQ0LTA4LTMwVDE2OjM0OjA0WiIsInB1ciI6bnVsbH19--3f9f028ac6fad5c359b7bd9b3bff3011d7f027cd; path=/; expires=Tue, 30 Aug 2044 16:34:04 GMT set-cookie: _coupa_session=ff40ef77d6f290e7cf00fe38519906d5; path=/; expires=Sat, 31 Aug 2024 16:34:04 GMT; secure; HttpOnly; SameSite=Lax server: envoy front-end-https: on strict-transport-security: max-age=31536000; includeSubDomains;
2024-08-30 16:34:04 UTC	355	IN	Data Raw: 31 35 63 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6d 61 7a 6f 6e 2e 63 6f 75 70 61 68 6f 73 74 2e 63 6f 6d 2f 6f 74 70 2f 67 72 61 6e 74 73 2f 38 65 35 30 34 61 63 66 61 61 65 30 64 31 31 37 38 37 32 66 33 32 63 37 65 38 64 39 37 31 64 32 66 61 64 65 32 62 35 63 26 61 6d 70 3b 64 3d 44 77 4d 46 61 51 2f 65 72 72 6f 72 3f 72 65 74 75 72 6e 5f 74 6f 5f 75 72 6c 3d 25 32 46 73 75 70 70 6c 69 65 72 5f 6f 72 64 65 72 5f 68 65 61 64 65 72 73 25 32 46 76 69 65 77 5f 70 6f 5f 76 69 61 5f 65 6d 61 69 6c 25 32 46 38 65 35 30 34 61 63 66 61 61 65 30 64 31 31 37 38 37 32 66 33 32 63 37 65 38 64 39 37 31 64 32 66 61 64 65 32 62 35 63 25 32 36 64 25 33 44 44 77 4d 46 61 51 Data Ascii: 15c<html><body>You are being <a href="https://amazon.coupahost.com/otp/grants/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ/error?return_to_url=%2Fsupplier_order_headers%2Fview_po_via_email%2F8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ
2024-08-30 16:34:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:04 UTC	1230	OUT	GET /otp/grants/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ/error?return_to_url=%2Fsupplier_order_headers%2Fview_po_via_email%2F8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ&view_key=8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ HTTP/1.1 Host: amazon.coupahost.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _mkra_ctxt=a4e5713fb19066c111c520183ec91b1f--302; san_otp_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSmtOMlV4WkRBNExUVm1aREl0TkdWbU1pMWlPRFJsTFRZNU1qWTFNalExTlRNNU1TST0iLCJleHAiOiIyMDQ0LTA4LTMwVDE2OjM0OjA0WiIsInB1ciI6bnVsbH19--3f9f028ac6fad5c359b7bd9b3bff3011d7f027cd; _coupa_session=ff40ef77d6f290e7cf00fe38519906d5
2024-08-30 16:34:05 UTC	1048	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:34:05 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close status: 200 OK cache-control: no-store referrer-policy: strict-origin-when-cross-origin x-robots-tag: none x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block feature-policy: camera 'none'; gyroscope 'none'; microphone 'none'; usb 'none'; fullscreen 'self'; payment 'self' x-request-id: 1e607d3e-0023-4317-b9a7-c0b7c93c14a5 x-coupa-request-id: 1e607d3e-0023-4317-b9a7-c0b7c93c14a5 x-download-options: noopen etag: W/"f3be18c65c07be3e43bf5871f1cc3052" x-frame-options: SAMEORIGIN x-runtime: 0.073767 x-content-type-options: nosniff set-cookie: _mkra_ctxt=a4e5713fb19066c111c520183ec91b1f--200; path=/; max-age=5; secure; HttpOnly set-cookie: _coupa_session=ff40ef77d6f290e7cf00fe38519906d5; path=/; expires=Sat, 31 Aug 2024 16:34:05 GMT; secure; HttpOnly; SameSite=Lax server: envoy front-end-https: on strict-transport-security: max-age=31536000; includeSubDomains;
2024-08-30 16:34:05 UTC	1824	IN	Data Raw: 37 31 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 27 6c 74 72 27 20 6c 61 6e 67 3d 27 65 6e 27 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 63 68 72 6f 6d 65 3d 31 27 20 68 74 74 70 2d 65 71 75 69 76 3d 27 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 27 3e 0a 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 66 61 76 69 63 6f 6e 2d 63 64 39 34 31 65 37 62 65 65 31 31 61 64 32 65 38 36 32 64 63 36 62 39 62 32 32 62 64 34 37 33 31 63 35 30 63 36 63 Data Ascii: 719<!DOCTYPE html><html dir='ltr' lang='en'><head> <meta charset='utf-8'> <meta content='chrome=1' http-equiv='X-UA-Compatible'> <title></title> <link rel="icon" type="image/x-icon" href="/assets/favicon-cd941e7bee11ad2e862dc6b9b22bd4731c50c6c
2024-08-30 16:34:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:06 UTC	1193	OUT	GET /assets/application-3a224739fe51026aa21445da023d439053e9e1c1b61b4a8f2e8c82983900422b.css HTTP/1.1 Host: amazon.coupahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://amazon.coupahost.com/otp/grants/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ/error?return_to_url=%2Fsupplier_order_headers%2Fview_po_via_email%2F8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ&view_key=8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: san_otp_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSmtOMlV4WkRBNExUVm1aREl0TkdWbU1pMWlPRFJsTFRZNU1qWTFNalExTlRNNU1TST0iLCJleHAiOiIyMDQ0LTA4LTMwVDE2OjM0OjA0WiIsInB1ciI6bnVsbH19--3f9f028ac6fad5c359b7bd9b3bff3011d7f027cd; _coupa_session=ff40ef77d6f290e7cf00fe38519906d5; _mkra_ctxt=a4e5713fb19066c111c520183ec91b1f--200
2024-08-30 16:34:06 UTC	339	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:34:06 GMT Content-Type: text/css Content-Length: 1548495 Connection: close server: envoy expires: Sat, 30 Aug 2025 16:34:06 GMT cache-control: max-age=31536000,public x-content-type-options: nosniff accept-ranges: bytes strict-transport-security: max-age=31536000; includeSubDomains;
2024-08-30 16:34:06 UTC	16045	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 39 2e 32 20 2d 20 32 30 31 34 2d 31 31 2d 32 31 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 6a 71 75 65 72 79 2e 75 69 2e 63 6f 72 65 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 73 65 6c 65 63 74 61 62 6c 65 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 62 75 74 74 6f 6e 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 64 69 61 Data Ascii: /! jQuery UI - v1.9.2 - 2014-11-21 http://jqueryui.com* Includes: jquery.ui.core.css, jquery.ui.resizable.css, jquery.ui.selectable.css, jquery.ui.accordion.css, jquery.ui.autocomplete.css, jquery.ui.button.css, jquery.ui.datepicker.css, jquery.ui.dia
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 2e 75 69 2d 70 72 69 6f 72 69 74 79 2d 73 65 63 6f 6e 64 61 72 79 7b 6f 70 61 63 69 74 79 3a 2e 37 3b 66 69 6c 74 65 72 3a 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 37 30 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 2c 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 2c 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 7b 6f 70 61 63 69 74 79 3a 2e 33 35 3b 66 69 6c 74 65 72 3a 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 33 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 20 2e 75 69 2d 69 Data Ascii: .ui-priority-secondary{opacity:.7;filter:Alpha(Opacity=70);font-weight:normal}.ui-state-disabled,.ui-widget-content .ui-state-disabled,.ui-widget-header .ui-state-disabled{opacity:.35;filter:Alpha(Opacity=35);background-image:none}.ui-state-disabled .ui-i
2024-08-30 16:34:06 UTC	19	IN	Data Raw: 7b 68 65 69 67 68 74 3a 31 25 7d 2e 63 6c 65 61 72 66 69 Data Ascii: {height:1%}.clearfi
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 78 2c 2e 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 6c 65 61 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 63 61 70 73 7b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 73 6d 61 6c 6c 2d 63 61 70 73 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 31 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6c 6f 77 65 72 63 61 73 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 70 61 64 64 69 6e 67 3a 30 20 32 70 78 7d 2e 74 65 78 74 5f 72 65 67 75 6c 61 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2f 2a 21 0a 43 68 6f 73 65 6e 2c 20 61 20 53 65 6c 65 63 74 20 42 Data Ascii: x,.container{display:block}.clear{clear:both}.caps{font-variant:small-caps;letter-spacing:1px;text-transform:lowercase;font-size:16px;font-weight:bold;padding:0 2px}.text_regular{font-size:13px;font-family:Helvetica,Arial,sans-serif}/*!Chosen, a Select B
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 73 69 74 69 6f 6e 3a 2d 31 30 70 78 20 30 7d 2e 73 66 2d 6d 65 6e 75 20 75 6c 20 61 3e 2e 73 66 2d 73 75 62 2d 69 6e 64 69 63 61 74 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 2e 73 66 2d 76 65 72 74 69 63 61 6c 2c 2e 73 66 2d 76 65 72 74 69 63 61 6c 20 6c 69 7b 77 69 64 74 68 3a 31 30 65 6d 7d 2e 73 66 2d 76 65 72 74 69 63 61 6c 20 6c 69 3a 68 6f 76 65 72 20 75 6c 2c 2e 73 66 2d 76 65 72 74 69 63 61 6c 20 6c 69 2e 73 66 48 6f 76 65 72 20 75 6c 7b 6c 65 66 74 3a 31 30 65 6d 3b 74 6f 70 3a 30 7d 2e 73 66 2d 76 65 72 74 69 63 61 6c 20 2e 73 66 2d 73 75 62 2d 69 6e 64 69 63 61 74 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 30 70 78 20 30 7d 2e 73 66 2d 76 65 72 74 69 63 61 6c 20 61 3e 2e 73 Data Ascii: sition:-10px 0}.sf-menu ul a>.sf-sub-indicator{background-position:0 0}.sf-vertical,.sf-vertical li{width:10em}.sf-vertical li:hover ul,.sf-vertical li.sfHover ul{left:10em;top:0}.sf-vertical .sf-sub-indicator{background-position:-10px 0}.sf-vertical a>.s
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 70 20 69 6e 70 75 74 2e 62 74 6e 2d 62 6c 6f 63 6b 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2c 2e 65 6e 61 62 6c 65 2d 62 6f 6f 74 73 74 72 61 70 20 69 6e 70 75 74 2e 62 74 6e 2d 62 6c 6f 63 6b 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2c 2e 65 6e 61 62 6c 65 2d 62 6f 6f 74 73 74 72 61 70 20 69 6e 70 75 74 2e 62 74 6e 2d 62 6c 6f 63 6b 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 6e 61 62 6c 65 2d 62 6f 6f 74 73 74 72 61 70 20 68 31 2c 2e 65 6e 61 62 6c 65 2d 62 6f 6f 74 73 74 72 61 70 20 68 32 2c 2e 65 6e 61 62 6c 65 2d 62 6f 6f 74 73 74 72 61 70 20 68 33 2c 2e 65 6e 61 62 6c 65 2d 62 6f 6f 74 73 74 72 61 70 20 68 34 2c 2e 65 6e 61 62 6c 65 2d 62 6f 6f 74 73 74 72 61 70 20 68 35 2c 2e 65 6e 61 62 6c 65 2d 62 Data Ascii: p input.btn-block[type="submit"],.enable-bootstrap input.btn-block[type="reset"],.enable-bootstrap input.btn-block[type="button"]{width:100%}.enable-bootstrap h1,.enable-bootstrap h2,.enable-bootstrap h3,.enable-bootstrap h4,.enable-bootstrap h5,.enable-b
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 2d 35 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 2e 65 6e 61 62 6c 65 2d 62 6f 6f 74 73 74 72 61 70 20 2e 74 65 78 74 5f 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 36 30 37 36 38 61 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 2e 65 6e 61 62 6c 65 2d 62 6f 6f 74 73 74 72 61 70 20 2e 74 65 78 74 5f 73 6d 61 6c 6c 2c 2e 65 6e 61 62 6c 65 2d 62 6f 6f 74 73 74 72 61 70 20 2e 74 65 78 74 5f 68 69 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 36 39 31 72 65 6d 7d 2e 65 6e 61 62 6c 65 2d 62 6f 6f 74 73 74 72 61 70 20 2e 62 74 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 72 65 6d Data Ascii: -5);font-weight:bold}.enable-bootstrap .text_label{color:#60768a;font-weight:bold}.enable-bootstrap .text_small,.enable-bootstrap .text_hint{font-size:.691rem}.enable-bootstrap .btn{font-family:Helvetica,Arial,sans-serif;font-weight:bold;font-size:.812rem
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 72 2d 62 72 61 6e 64 33 2d 34 30 30 29 7d 2e 65 78 70 61 6e 64 61 62 6c 65 2d 73 65 63 74 69 6f 6e 7b 6d 61 72 67 69 6e 3a 34 30 70 78 20 30 7d 2e 65 78 70 61 6e 64 61 62 6c 65 2d 73 65 63 74 69 6f 6e 20 2e 65 78 70 61 6e 64 61 62 6c 65 2d 61 72 72 6f 77 2c 2e 65 78 70 61 6e 64 61 62 6c 65 2d 73 65 63 74 69 6f 6e 20 2e 65 78 70 61 6e 64 61 62 6c 65 2d 63 6f 6d 6d 65 6e 74 73 2d 61 72 72 6f 77 2c 2e 65 78 70 61 6e 64 61 62 6c 65 2d 73 65 63 74 69 6f 6e 20 2e 65 78 70 61 6e 64 61 62 6c 65 2d 70 61 79 6d 65 6e 74 73 2d 61 72 72 6f 77 7b 77 69 64 74 68 3a 32 31 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 38 70 78 3b 72 69 67 68 74 3a 35 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 Data Ascii: r-brand3-400)}.expandable-section{margin:40px 0}.expandable-section .expandable-arrow,.expandable-section .expandable-comments-arrow,.expandable-section .expandable-payments-arrow{width:21px;height:20px;position:absolute;top:8px;right:5px;cursor:pointer;b
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 34 38 72 65 6d 7d 23 66 6c 61 73 68 5f 63 6f 6e 74 61 69 6e 65 72 20 61 2e 78 2c 23 70 65 72 73 69 73 74 65 6e 74 5f 6d 65 73 73 61 67 65 5f 63 6f 6e 74 61 69 6e 65 72 20 61 2e 78 2c 23 69 65 31 31 5f 64 65 70 72 65 63 61 74 69 6f 6e 5f 6d 65 73 73 61 67 65 5f 63 6f 6e 74 61 69 6e 65 72 20 61 2e 78 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 61 73 73 65 74 73 2f 72 65 6d 6f 76 65 5f 6d 65 73 73 61 67 65 2d 39 39 33 31 37 36 61 38 36 32 62 66 36 33 66 38 38 31 35 39 65 34 37 33 33 61 32 64 61 30 39 33 66 35 33 34 63 36 34 64 62 63 38 30 66 64 33 66 39 62 39 61 30 65 36 31 65 31 33 39 62 35 65 35 2e 70 Data Ascii: ;font-size:.748rem}#flash_container a.x,#persistent_message_container a.x,#ie11_deprecation_message_container a.x{display:block;width:15px;height:15px;background:url(/assets/remove_message-993176a862bf63f88159e4733a2da093f534c64dbc80fd3f9b9a0e61e139b5e5.p
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 75 6e 64 65 64 5f 6f 75 74 73 69 64 65 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 6c 65 66 74 20 74 6f 70 2c 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 66 72 6f 6d 28 23 34 36 62 38 65 39 29 2c 74 6f 28 23 33 34 39 38 64 62 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 34 36 62 38 65 39 2c 23 33 34 39 38 64 62 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 64 61 38 65 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 2d 33 29 3b 62 6f 72 64 65 72 Data Ascii: unded_outside:hover{background-image:none;background-image:-webkit-gradient(linear,left top,left bottom,from(#46b8e9),to(#3498db));background:-moz-linear-gradient(top,#46b8e9,#3498db);background-color:#3da8e2;background-color:var(--color-primary-3);border

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:06 UTC	1192	OUT	GET /assets/otp_grants-72ebbd8fa3e1eed856b8669f2abf350c60c4d6b584161d6eab4969cabc489c3c.css HTTP/1.1 Host: amazon.coupahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://amazon.coupahost.com/otp/grants/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ/error?return_to_url=%2Fsupplier_order_headers%2Fview_po_via_email%2F8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ&view_key=8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: san_otp_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSmtOMlV4WkRBNExUVm1aREl0TkdWbU1pMWlPRFJsTFRZNU1qWTFNalExTlRNNU1TST0iLCJleHAiOiIyMDQ0LTA4LTMwVDE2OjM0OjA0WiIsInB1ciI6bnVsbH19--3f9f028ac6fad5c359b7bd9b3bff3011d7f027cd; _coupa_session=ff40ef77d6f290e7cf00fe38519906d5; _mkra_ctxt=a4e5713fb19066c111c520183ec91b1f--200
2024-08-30 16:34:06 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:34:06 GMT Content-Type: text/css Content-Length: 1964 Connection: close server: envoy expires: Sat, 30 Aug 2025 16:34:06 GMT cache-control: max-age=31536000,public x-content-type-options: nosniff accept-ranges: bytes strict-transport-security: max-age=31536000; includeSubDomains;
2024-08-30 16:34:06 UTC	1964	IN	Data Raw: 2e 65 78 70 69 72 65 64 2d 70 61 67 65 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 77 69 64 74 68 3a 36 35 25 7d 2e 72 65 66 72 65 73 68 2d 61 63 63 65 73 73 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 37 61 63 35 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 72 65 63 61 70 74 63 68 61 2d 69 6e 73 74 72 75 63 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 36 61 36 61 36 61 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 70 65 6e 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6d 61 72 67 69 6e 3a 32 34 70 78 20 30 Data Ascii: .expired-page-content{margin:auto;width:65%}.refresh-access{border-radius:10px;background:#007ac5;width:100%;height:40px;color:#fff}.recaptcha-instruction{color:#6a6a6a;font-family:"Open Sans";font-size:12px;font-style:normal;font-weight:400;margin:24px 0

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:06 UTC	1173	OUT	GET /assets/common-aec4bc4c0d5cced5d32918b28e48df0033d78dec2e1250e852392148d300583a.js HTTP/1.1 Host: amazon.coupahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://amazon.coupahost.com/otp/grants/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ/error?return_to_url=%2Fsupplier_order_headers%2Fview_po_via_email%2F8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ&view_key=8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: san_otp_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSmtOMlV4WkRBNExUVm1aREl0TkdWbU1pMWlPRFJsTFRZNU1qWTFNalExTlRNNU1TST0iLCJleHAiOiIyMDQ0LTA4LTMwVDE2OjM0OjA0WiIsInB1ciI6bnVsbH19--3f9f028ac6fad5c359b7bd9b3bff3011d7f027cd; _coupa_session=ff40ef77d6f290e7cf00fe38519906d5; _mkra_ctxt=a4e5713fb19066c111c520183ec91b1f--200
2024-08-30 16:34:06 UTC	353	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:34:06 GMT Content-Type: application/javascript Content-Length: 2058275 Connection: close server: envoy expires: Sat, 30 Aug 2025 16:34:06 GMT cache-control: max-age=31536000,public x-content-type-options: nosniff accept-ranges: bytes strict-transport-security: max-age=31536000; includeSubDomains;
2024-08-30 16:34:06 UTC	16031	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 66 6c 61 73 68 5f 6d 65 73 73 61 67 65 5f 63 6c 6f 73 65 5f 68 61 6e 64 6c 65 72 28 65 2c 74 29 7b 76 61 72 20 69 3d 74 3f 24 28 22 2e 73 65 63 74 69 6f 6e 5f 66 6c 61 73 68 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 78 22 29 3a 24 28 22 23 66 6c 61 73 68 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 78 22 29 2c 6e 3d 74 3f 24 28 22 2e 73 65 63 74 69 6f 6e 5f 66 6c 61 73 68 5f 63 6f 6e 74 61 69 6e 65 72 22 29 3a 24 28 22 23 66 6c 61 73 68 5f 63 6f 6e 74 61 69 6e 65 72 22 29 3b 69 2e 6f 66 66 28 22 63 6c 69 63 6b 22 29 2c 69 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 3f 28 24 28 22 23 66 6c 61 73 68 5f 63 6f 6e 74 61 69 6e 65 72 5f 70 6f 70 75 70 22 29 2e Data Ascii: function flash_message_close_handler(e,t){var i=t?$(".section_flash_container .x"):$("#flash_container .x"),n=t?$(".section_flash_container"):$("#flash_container");i.off("click"),i.on("click",(function(e){e.preventDefault(),t?($("#flash_container_popup").
2024-08-30 16:34:06 UTC	19	IN	Data Raw: 2c 61 2e 68 74 6d 6c 28 72 7c 7c 5f 2e 65 73 63 61 70 65 Data Ascii: ,a.html(r\|\|_.escape
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 28 69 29 29 2c 24 28 22 23 22 2b 65 2b 22 5f 72 65 73 65 74 5f 62 75 74 74 6f 6e 22 29 2e 73 68 6f 77 28 29 2c 73 26 26 6f 26 26 28 24 28 22 23 22 2b 65 2b 22 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 29 2e 63 73 73 28 7b 64 69 73 70 6c 61 79 3a 22 62 6c 6f 63 6b 22 7d 29 2c 24 28 22 23 22 2b 65 2b 22 5f 64 65 73 63 72 69 70 74 69 6f 6e 20 73 70 61 6e 22 29 2e 65 71 28 30 29 2e 68 74 6d 6c 28 5f 2e 65 73 63 61 70 65 28 6f 29 29 2c 24 28 22 23 22 2b 65 2b 22 5f 64 65 73 63 72 69 70 74 69 6f 6e 20 73 70 61 6e 22 29 2e 65 71 28 31 29 2e 68 74 6d 6c 28 5f 2e 65 73 63 61 70 65 28 73 29 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 73 65 74 5f 61 63 63 6f 75 6e 74 5f 70 69 63 6b 65 72 28 65 29 7b 24 28 22 23 22 2b 65 2b 22 5f 69 64 22 29 2e 76 61 6c 28 22 22 29 2e Data Ascii: (i)),$("#"+e+"_reset_button").show(),s&&o&&($("#"+e+"_description").css({display:"block"}),$("#"+e+"_description span").eq(0).html(_.escape(o)),$("#"+e+"_description span").eq(1).html(_.escape(s))))}function reset_account_picker(e){$("#"+e+"_id").val("").
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 6c 74 73 2e 70 6c 65 61 73 65 5f 63 6f 6e 66 69 72 6d 22 29 3b 73 77 61 6c 28 7b 74 69 74 6c 65 3a 6e 2c 74 65 78 74 3a 74 2c 62 75 74 74 6f 6e 73 3a 7b 63 61 6e 63 65 6c 3a 7b 74 65 78 74 3a 69 2c 76 61 6c 75 65 3a 6e 75 6c 6c 2c 76 69 73 69 62 6c 65 3a 21 30 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 62 75 74 74 6f 6e 22 2c 63 6c 6f 73 65 4d 6f 64 61 6c 3a 21 30 7d 7d 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 72 61 69 6c 73 2d 73 77 65 65 74 2d 61 6c 65 72 74 22 7d 29 7d 2c 24 2e 72 61 69 6c 73 2e 73 68 6f 77 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 44 69 61 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 76 61 72 20 74 3d 65 2e 64 61 74 61 28 22 63 6f 6e 66 69 72 6d 22 29 2c 69 3d 49 31 38 6e 2e 74 28 22 64 65 66 61 75 6c 74 73 2e 6f 6b 22 29 26 26 49 31 38 6e 2e 74 Data Ascii: lts.please_confirm");swal({title:n,text:t,buttons:{cancel:{text:i,value:null,visible:!0,className:"button",closeModal:!0}},className:"rails-sweet-alert"})},$.rails.showConfirmationDialog=function(e){var t=e.data("confirm"),i=I18n.t("defaults.ok")&&I18n.t
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 6e 65 5f 73 75 70 70 6c 69 65 72 5f 73 65 61 72 63 68 3a 76 69 73 69 62 6c 65 22 29 2e 76 61 6c 28 29 3b 6e 2e 73 68 6f 77 28 29 2e 76 61 6c 28 63 29 2c 24 28 22 23 22 2b 69 2b 22 5f 73 75 70 70 6c 69 65 72 5f 73 69 74 65 22 29 2e 73 68 6f 77 28 29 2c 73 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 64 69 73 61 62 6c 65 64 22 29 2c 75 70 64 61 74 65 5f 73 69 74 65 73 5f 64 65 66 61 75 6c 74 65 64 5f 63 75 73 74 6f 6d 5f 66 69 65 6c 64 73 28 69 2c 22 22 29 2c 6c 26 26 73 65 74 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 66 69 65 6c 64 5f 65 6c 65 6d 65 6e 74 73 28 22 6e 6f 74 5f 61 70 70 6c 69 63 61 62 6c 65 22 2c 22 30 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 6f 6e 65 22 3a 72 65 63 6f 72 64 46 6f 63 75 73 45 6c 65 6d 65 6e 74 28 65 2e 74 61 72 67 65 74 29 2c Data Ascii: ne_supplier_search:visible").val();n.show().val(c),$("#"+i+"_supplier_site").show(),s.removeAttr("disabled"),update_sites_defaulted_custom_fields(i,""),l&&set_confirmation_field_elements("not_applicable","0");break;case"none":recordFocusElement(e.target),
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 28 72 2c 6e 29 3e 2d 31 29 73 26 26 73 2e 70 75 73 68 28 72 29 3b 65 6c 73 65 20 69 66 28 61 3d 70 65 2e 63 6f 6e 74 61 69 6e 73 28 72 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 72 29 2c 6c 3d 66 28 67 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 29 2c 22 73 63 72 69 70 74 22 29 2c 61 26 26 6d 28 6c 29 2c 69 29 66 6f 72 28 6f 3d 30 3b 72 3d 6c 5b 6f 2b 2b 5d 3b 29 57 65 2e 74 65 73 74 28 72 2e 74 79 70 65 7c 7c 22 22 29 26 26 69 2e 70 75 73 68 28 72 29 3b 72 65 74 75 72 6e 20 6c 3d 6e 75 6c 6c 2c 67 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 72 65 74 75 72 6e 21 30 7d 0a 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 7d Data Ascii: (r,n)>-1)s&&s.push(r);else if(a=pe.contains(r.ownerDocument,r),l=f(g.appendChild(r),"script"),a&&m(l),i)for(o=0;r=l[o++];)We.test(r.type\|\|"")&&i.push(r);return l=null,g}function v(){return!0}function y(){return!1}function b(){try{return ne.activeElement}
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 7c 73 29 72 65 74 75 72 6e 20 65 28 74 2c 69 2c 6f 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 29 7b 76 61 72 20 61 2c 6c 2c 63 2c 75 3d 5b 48 2c 6f 5d 3b 69 66 28 72 29 7b 66 6f 72 28 3b 74 3d 74 5b 6e 5d 3b 29 69 66 28 28 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 7c 7c 73 29 26 26 65 28 74 2c 69 2c 72 29 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 74 3d 74 5b 6e 5d 3b 29 69 66 28 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 7c 7c 73 29 7b 69 66 28 28 61 3d 28 6c 3d 28 63 3d 74 5b 24 5d 7c 7c 28 74 5b 24 5d 3d 7b 7d 29 29 5b 74 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 63 5b 74 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 6e 5d 29 26 26 61 5b 30 5d 3d 3d 3d 48 26 26 61 5b 31 5d 3d 3d 3d 6f 29 72 65 74 75 72 6e 20 75 5b 32 5d 3d 61 5b Data Ascii: \|s)return e(t,i,o)}:function(t,i,r){var a,l,c,u=[H,o];if(r){for(;t=t[n];)if((1===t.nodeType\|\|s)&&e(t,i,r))return!0}else for(;t=t[n];)if(1===t.nodeType\|\|s){if((a=(l=(c=t[$]\|\|(t[$]={}))[t.uniqueID]\|\|(c[t.uniqueID]={}))[n])&&a[0]===H&&a[1]===o)return u[2]=a[
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 65 2e 66 69 6e 64 3d 76 65 2c 70 65 2e 65 78 70 72 3d 76 65 2e 73 65 6c 65 63 74 6f 72 73 2c 70 65 2e 65 78 70 72 5b 22 3a 22 5d 3d 70 65 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 70 65 2e 75 6e 69 71 75 65 53 6f 72 74 3d 70 65 2e 75 6e 69 71 75 65 3d 76 65 2e 75 6e 69 71 75 65 53 6f 72 74 2c 70 65 2e 74 65 78 74 3d 76 65 2e 67 65 74 54 65 78 74 2c 70 65 2e 69 73 58 4d 4c 44 6f 63 3d 76 65 2e 69 73 58 4d 4c 2c 70 65 2e 63 6f 6e 74 61 69 6e 73 3d 76 65 2e 63 6f 6e 74 61 69 6e 73 3b 76 61 72 20 79 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 0a 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 73 3d 76 6f 69 64 20 30 21 3d 3d 69 3b 28 65 3d 65 5b 74 5d 29 26 26 39 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 29 69 66 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 Data Ascii: e.find=ve,pe.expr=ve.selectors,pe.expr[":"]=pe.expr.pseudos,pe.uniqueSort=pe.unique=ve.uniqueSort,pe.text=ve.getText,pe.isXMLDoc=ve.isXML,pe.contains=ve.contains;var ye=function(e,t,i){for(var n=[],s=void 0!==i;(e=e[t])&&9!==e.nodeType;)if(1===e.nodeType
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 28 21 63 2e 5f 64 65 66 61 75 6c 74 7c 7c 21 31 3d 3d 3d 63 2e 5f 64 65 66 61 75 6c 74 2e 61 70 70 6c 79 28 68 2e 70 6f 70 28 29 2c 69 29 29 26 26 4d 65 28 6e 29 26 26 72 26 26 6e 5b 70 5d 26 26 21 70 65 2e 69 73 57 69 6e 64 6f 77 28 6e 29 29 7b 28 75 3d 6e 5b 72 5d 29 26 26 28 6e 5b 72 5d 3d 6e 75 6c 6c 29 2c 70 65 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 65 64 3d 70 3b 74 72 79 7b 6e 5b 70 5d 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 70 65 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 65 64 3d 76 6f 69 64 20 30 2c 75 26 26 28 6e 5b 72 5d 3d 75 29 7d 72 65 74 75 72 6e 20 74 2e 72 65 73 75 6c 74 7d 7d 2c 64 69 73 70 61 74 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 70 65 2e 65 76 65 6e 74 2e 66 69 78 Data Ascii: faultPrevented()&&(!c._default\|\|!1===c._default.apply(h.pop(),i))&&Me(n)&&r&&n[p]&&!pe.isWindow(n)){(u=n[r])&&(n[r]=null),pe.event.triggered=p;try{n[p]()}catch(e){}pe.event.triggered=void 0,u&&(n[r]=u)}return t.result}},dispatch:function(e){e=pe.event.fix
2024-08-30 16:34:06 UTC	16384	IN	Data Raw: 70 74 28 65 2c 7b 6d 61 72 67 69 6e 4c 65 66 74 3a 30 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 6c 65 66 74 7d 29 29 3a 30 29 29 2b 22 70 78 22 7d 29 29 2c 70 65 2e 65 61 63 68 28 7b 6d 61 72 67 69 6e 3a 22 22 2c 70 61 64 64 69 6e 67 3a 22 22 2c 62 6f 72 64 65 72 3a 22 57 69 64 74 68 22 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 70 65 2e 63 73 73 48 6f 6f 6b 73 5b 65 2b 74 5d 3d 7b 65 78 70 61 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 0a 66 6f 72 28 76 61 72 20 6e 3d 30 2c 73 3d 7b 7d 2c 6f 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 3f 69 2e 73 70 6c 69 74 28 22 20 22 29 3a 5b 69 5d 3b 6e 3c 34 3b 6e 2b 2b 29 73 5b 65 2b 52 65 5b 6e Data Ascii: pt(e,{marginLeft:0},(function(){return e.getBoundingClientRect().left})):0))+"px"})),pe.each({margin:"",padding:"",border:"Width"},(function(e,t){pe.cssHooks[e+t]={expand:function(i){for(var n=0,s={},o="string"==typeof i?i.split(" "):[i];n<4;n++)s[e+Re[n

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://amazon.coupahost.com/supplier_order_headers/view_po_via_email/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Windows Analysis Report
https://amazon.coupahost.com/supplier_order_headers/view_po_via_email/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:06 UTC	1233	OUT	GET /assets/blank-47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292.gif HTTP/1.1 Host: amazon.coupahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://amazon.coupahost.com/otp/grants/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ/error?return_to_url=%2Fsupplier_order_headers%2Fview_po_via_email%2F8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ&view_key=8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: san_otp_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSmtOMlV4WkRBNExUVm1aREl0TkdWbU1pMWlPRFJsTFRZNU1qWTFNalExTlRNNU1TST0iLCJleHAiOiIyMDQ0LTA4LTMwVDE2OjM0OjA0WiIsInB1ciI6bnVsbH19--3f9f028ac6fad5c359b7bd9b3bff3011d7f027cd; _coupa_session=ff40ef77d6f290e7cf00fe38519906d5; _mkra_ctxt=a4e5713fb19066c111c520183ec91b1f--200
2024-08-30 16:34:06 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:34:06 GMT Content-Type: image/gif Content-Length: 42 Connection: close server: envoy expires: Sat, 30 Aug 2025 16:34:06 GMT cache-control: max-age=31536000,public x-content-type-options: nosniff accept-ranges: bytes strict-transport-security: max-age=31536000; includeSubDomains;
2024-08-30 16:34:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 01 44 00 3b Data Ascii: GIF89a!,@D;

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:07 UTC	747	OUT	GET /assets/blank-47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292.gif HTTP/1.1 Host: amazon.coupahost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: san_otp_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSmtOMlV4WkRBNExUVm1aREl0TkdWbU1pMWlPRFJsTFRZNU1qWTFNalExTlRNNU1TST0iLCJleHAiOiIyMDQ0LTA4LTMwVDE2OjM0OjA0WiIsInB1ciI6bnVsbH19--3f9f028ac6fad5c359b7bd9b3bff3011d7f027cd; _coupa_session=ff40ef77d6f290e7cf00fe38519906d5; _mkra_ctxt=a4e5713fb19066c111c520183ec91b1f--200
2024-08-30 16:34:08 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:34:07 GMT Content-Type: image/gif Content-Length: 42 Connection: close server: envoy expires: Sat, 30 Aug 2025 16:34:07 GMT cache-control: max-age=31536000,public x-content-type-options: nosniff accept-ranges: bytes strict-transport-security: max-age=31536000; includeSubDomains;
2024-08-30 16:34:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 01 44 00 3b Data Ascii: GIF89a!,@D;

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:09 UTC	994	OUT	GET /fonts/OpenSans-Regular.woff HTTP/1.1 Host: amazon.coupahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://amazon.coupahost.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://amazon.coupahost.com/assets/application-3a224739fe51026aa21445da023d439053e9e1c1b61b4a8f2e8c82983900422b.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: san_otp_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSmtOMlV4WkRBNExUVm1aREl0TkdWbU1pMWlPRFJsTFRZNU1qWTFNalExTlRNNU1TST0iLCJleHAiOiIyMDQ0LTA4LTMwVDE2OjM0OjA0WiIsInB1ciI6bnVsbH19--3f9f028ac6fad5c359b7bd9b3bff3011d7f027cd; _coupa_session=ff40ef77d6f290e7cf00fe38519906d5; _mkra_ctxt=a4e5713fb19066c111c520183ec91b1f--200
2024-08-30 16:34:09 UTC	338	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:34:09 GMT Content-Type: font/woff Content-Length: 19624 Connection: close server: envoy expires: Sat, 30 Aug 2025 16:34:09 GMT cache-control: max-age=31536000,public x-content-type-options: nosniff accept-ranges: bytes strict-transport-security: max-age=31536000; includeSubDomains;
2024-08-30 16:34:09 UTC	16046	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 4c a8 00 10 00 00 00 00 74 30 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1b 00 00 00 1c 5f 96 ba 97 47 44 45 46 00 00 01 88 00 00 00 1d 00 00 00 20 01 1c 00 03 4f 53 2f 32 00 00 01 a8 00 00 00 5d 00 00 00 60 a1 36 99 56 63 6d 61 70 00 00 02 08 00 00 01 99 00 00 01 fa 13 d0 34 38 63 76 74 20 00 00 03 a4 00 00 00 40 00 00 00 40 0a 66 0d ab 66 70 67 6d 00 00 03 e4 00 00 01 b1 00 00 02 65 0f b4 2f a7 67 61 73 70 00 00 05 98 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 05 a0 00 00 3e bb 00 00 61 a0 ba f1 e8 da 68 65 61 64 00 00 44 5c 00 00 00 33 00 00 00 36 fb 67 af 84 68 68 65 61 00 00 44 90 00 00 00 1f 00 00 00 24 0e b7 05 12 68 6d 74 78 00 00 44 b0 00 00 02 Data Ascii: wOFFLt0FFTMl_GDEF OS/2]`6Vcmap48cvt @@ffpgme/gaspglyf>aheadD\36ghheaD$hmtxD
2024-08-30 16:34:09 UTC	3578	IN	Data Raw: e3 d6 52 11 4f 78 58 40 c7 d0 de 93 47 f3 f6 78 03 97 1f 3f c7 dd 11 27 93 c7 28 6f 2a 2f 46 29 fd e5 d1 7b ef 7d e4 37 e5 1a c0 cd 29 74 a9 4f b3 db dc b4 86 4e c1 f2 55 bf 30 27 53 39 95 38 3f d2 90 25 8c 26 99 a4 a3 7a de 26 16 0f 49 e9 21 d9 01 26 7f 4e 90 ed 3e 8c 87 b6 07 81 50 14 8c 16 d8 7d 38 d7 02 73 cb 31 9b 59 29 e8 b1 64 db 10 63 f3 05 41 0c cf e3 f1 9a 78 5e 05 1e af c9 04 30 8f b9 f5 98 5d 8e e9 2c 9d 9c 11 93 83 55 14 59 13 55 a4 0e 9f 1a a7 87 af 20 a6 92 0a 9c 11 92 95 5b c6 82 86 6d eb 5b fe 8b 26 26 6d 0b 71 74 aa 2a 9e 41 f5 df 2f 39 d9 eb 96 c3 4f 9e b8 1c cf 37 d2 c1 63 5f ba 77 e4 a6 29 ca e7 0b 7a 9d ae b9 a0 fc bc 67 d3 ab 2f 6f 7e fe 95 ba 0d 7c 01 97 fd f4 53 0b d7 c0 26 36 d1 4e f3 66 3e 3a 5f f9 e5 ab a9 ca 3c d0 be f9 d9 df Data Ascii: ROxX@Gx?'(o/F){}7)tONU0'S98?%&z&I!&N>P}8s1Y)dcAx^0],UYU [m[&&mqtA/9O7c_w)zg/o~\|S&6Nf>:_<

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:09 UTC	1084	OUT	GET /assets/remove_message-993176a862bf63f88159e4733a2da093f534c64dbc80fd3f9b9a0e61e139b5e5.png HTTP/1.1 Host: amazon.coupahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://amazon.coupahost.com/assets/application-3a224739fe51026aa21445da023d439053e9e1c1b61b4a8f2e8c82983900422b.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: san_otp_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSmtOMlV4WkRBNExUVm1aREl0TkdWbU1pMWlPRFJsTFRZNU1qWTFNalExTlRNNU1TST0iLCJleHAiOiIyMDQ0LTA4LTMwVDE2OjM0OjA0WiIsInB1ciI6bnVsbH19--3f9f028ac6fad5c359b7bd9b3bff3011d7f027cd; _coupa_session=ff40ef77d6f290e7cf00fe38519906d5; _mkra_ctxt=a4e5713fb19066c111c520183ec91b1f--200
2024-08-30 16:34:09 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:34:09 GMT Content-Type: image/png Content-Length: 198 Connection: close server: envoy expires: Sat, 30 Aug 2025 16:34:09 GMT cache-control: max-age=31536000,public x-content-type-options: nosniff accept-ranges: bytes strict-transport-security: max-age=31536000; includeSubDomains;
2024-08-30 16:34:09 UTC	198	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0f 04 03 00 00 00 c9 f8 88 79 00 00 00 1e 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 24 7c 9b 95 00 00 00 09 74 52 4e 53 00 78 fa f4 b8 74 5b 69 5c 30 3d 57 62 00 00 00 4e 49 44 41 54 08 d7 63 48 0e 60 00 02 a1 04 06 cd 89 40 9a 71 a6 01 83 e4 4c 01 06 20 11 00 e4 4c 04 63 10 4f 00 88 c0 f2 53 40 02 60 21 a0 00 08 b0 cc 9c c2 80 10 41 a8 41 e8 62 85 99 53 09 e2 81 84 2c 21 76 29 30 34 81 75 04 27 00 00 a7 a1 19 6a 1a 5c 2d 1c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRyPLTE$\|tRNSxt[i\0=WbNIDATcH`@qL LcOS@`!AAbS,!v)04u'j\-IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:09 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-30 16:34:09 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=61364 Date: Fri, 30 Aug 2024 16:34:09 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:09 UTC	1075	OUT	GET /assets/coupa-2fbe32db2f68a3f218fa684b7d8f1f43a4e424e9bcecdb2fec558dc785388b08.png HTTP/1.1 Host: amazon.coupahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://amazon.coupahost.com/assets/application-3a224739fe51026aa21445da023d439053e9e1c1b61b4a8f2e8c82983900422b.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: san_otp_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSmtOMlV4WkRBNExUVm1aREl0TkdWbU1pMWlPRFJsTFRZNU1qWTFNalExTlRNNU1TST0iLCJleHAiOiIyMDQ0LTA4LTMwVDE2OjM0OjA0WiIsInB1ciI6bnVsbH19--3f9f028ac6fad5c359b7bd9b3bff3011d7f027cd; _coupa_session=ff40ef77d6f290e7cf00fe38519906d5; _mkra_ctxt=a4e5713fb19066c111c520183ec91b1f--200
2024-08-30 16:34:09 UTC	337	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:34:09 GMT Content-Type: image/png Content-Length: 2581 Connection: close server: envoy expires: Sat, 30 Aug 2025 16:34:09 GMT cache-control: max-age=31536000,public x-content-type-options: nosniff accept-ranges: bytes strict-transport-security: max-age=31536000; includeSubDomains;
2024-08-30 16:34:09 UTC	2581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 63 00 00 00 1c 08 02 00 00 00 fa 2d 96 d6 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 31 31 2f 32 30 2f 31 33 8e d2 df d1 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 36 e8 bc b2 8c 00 00 09 6e 49 44 41 54 68 81 ed 58 6f 6c 5b 57 15 3f 7e 79 7e b6 e3 bc be 67 c7 69 1a a7 8d ed b4 5b d3 51 12 77 28 ac b0 88 38 29 2a 8b 44 15 57 13 5d 01 95 b8 02 b1 09 69 8a 91 10 7c 62 71 d9 f8 5c 17 6d 08 89 0f 75 b6 49 d5 2a aa be 48 48 05 b1 a6 0e 0d 0c 6a b5 b1 b3 6c 73 34 75 76 d2 d8 5d 63 27 7e f6 8b ff e6 d9 e6 c3 75 af 5f Data Ascii: PNGIHDRc-sBITOpHYs~tEXtCreation Time11/20/13tEXtSoftwareAdobe Fireworks CS6nIDAThXol[W?~y~gi[Qw(8)DW]i\|bq\muIHHjls4uv]c'~u_

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:10 UTC	756	OUT	GET /assets/remove_message-993176a862bf63f88159e4733a2da093f534c64dbc80fd3f9b9a0e61e139b5e5.png HTTP/1.1 Host: amazon.coupahost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: san_otp_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSmtOMlV4WkRBNExUVm1aREl0TkdWbU1pMWlPRFJsTFRZNU1qWTFNalExTlRNNU1TST0iLCJleHAiOiIyMDQ0LTA4LTMwVDE2OjM0OjA0WiIsInB1ciI6bnVsbH19--3f9f028ac6fad5c359b7bd9b3bff3011d7f027cd; _coupa_session=ff40ef77d6f290e7cf00fe38519906d5; _mkra_ctxt=a4e5713fb19066c111c520183ec91b1f--200
2024-08-30 16:34:10 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:34:10 GMT Content-Type: image/png Content-Length: 198 Connection: close server: envoy expires: Sat, 30 Aug 2025 16:34:10 GMT cache-control: max-age=31536000,public x-content-type-options: nosniff accept-ranges: bytes strict-transport-security: max-age=31536000; includeSubDomains;
2024-08-30 16:34:10 UTC	198	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0f 04 03 00 00 00 c9 f8 88 79 00 00 00 1e 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 24 7c 9b 95 00 00 00 09 74 52 4e 53 00 78 fa f4 b8 74 5b 69 5c 30 3d 57 62 00 00 00 4e 49 44 41 54 08 d7 63 48 0e 60 00 02 a1 04 06 cd 89 40 9a 71 a6 01 83 e4 4c 01 06 20 11 00 e4 4c 04 63 10 4f 00 88 c0 f2 53 40 02 60 21 a0 00 08 b0 cc 9c c2 80 10 41 a8 41 e8 62 85 99 53 09 e2 81 84 2c 21 76 29 30 34 81 75 04 27 00 00 a7 a1 19 6a 1a 5c 2d 1c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRyPLTE$\|tRNSxt[i\0=WbNIDATcH`@qL LcOS@`!AAbS,!v)04u'j\-IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:10 UTC	1235	OUT	GET /assets/favicon-cd941e7bee11ad2e862dc6b9b22bd4731c50c6c90339ce35d27cf01571ce69c2.ico HTTP/1.1 Host: amazon.coupahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://amazon.coupahost.com/otp/grants/8e504acfaae0d117872f32c7e8d971d2fade2b5c&d=DwMFaQ/error?return_to_url=%2Fsupplier_order_headers%2Fview_po_via_email%2F8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ&view_key=8e504acfaae0d117872f32c7e8d971d2fade2b5c%26d%3DDwMFaQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: san_otp_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSmtOMlV4WkRBNExUVm1aREl0TkdWbU1pMWlPRFJsTFRZNU1qWTFNalExTlRNNU1TST0iLCJleHAiOiIyMDQ0LTA4LTMwVDE2OjM0OjA0WiIsInB1ciI6bnVsbH19--3f9f028ac6fad5c359b7bd9b3bff3011d7f027cd; _coupa_session=ff40ef77d6f290e7cf00fe38519906d5; _mkra_ctxt=a4e5713fb19066c111c520183ec91b1f--200
2024-08-30 16:34:10 UTC	340	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:34:10 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close server: envoy expires: Sat, 30 Aug 2025 16:34:10 GMT cache-control: max-age=31536000,public x-content-type-options: nosniff accept-ranges: bytes strict-transport-security: max-age=31536000; includeSubDomains;
2024-08-30 16:34:10 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 dd 95 00 10 dd 95 00 bf dd 95 00 30 00 00 00 00 ed b9 00 30 ed b9 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ed b9 00 a0 ed b9 00 a0 ed b9 00 10 dd 95 00 50 dd 95 00 ff dd 95 00 a0 ed b9 00 20 ed b9 00 f0 ed b9 00 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ed b9 00 c0 ed b9 00 ff ed b9 00 c0 dd 95 00 80 dd 95 00 ff dd 95 00 ef ed b9 00 a0 ed b9 00 ff ed b9 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h( 00PP

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:10 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-30 16:34:10 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=61316 Date: Fri, 30 Aug 2024 16:34:10 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-30 16:34:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-08-30 16:34:11 UTC	699	OUT	GET /assets/favicon-cd941e7bee11ad2e862dc6b9b22bd4731c50c6c90339ce35d27cf01571ce69c2.ico HTTP/1.1 Host: amazon.coupahost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: san_otp_device=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSmtOMlV4WkRBNExUVm1aREl0TkdWbU1pMWlPRFJsTFRZNU1qWTFNalExTlRNNU1TST0iLCJleHAiOiIyMDQ0LTA4LTMwVDE2OjM0OjA0WiIsInB1ciI6bnVsbH19--3f9f028ac6fad5c359b7bd9b3bff3011d7f027cd; _coupa_session=ff40ef77d6f290e7cf00fe38519906d5
2024-08-30 16:34:11 UTC	340	IN	HTTP/1.1 200 OK Date: Fri, 30 Aug 2024 16:34:11 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close server: envoy expires: Sat, 30 Aug 2025 16:34:11 GMT cache-control: max-age=31536000,public x-content-type-options: nosniff accept-ranges: bytes strict-transport-security: max-age=31536000; includeSubDomains;
2024-08-30 16:34:11 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 dd 95 00 10 dd 95 00 bf dd 95 00 30 00 00 00 00 ed b9 00 30 ed b9 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ed b9 00 a0 ed b9 00 a0 ed b9 00 10 dd 95 00 50 dd 95 00 ff dd 95 00 a0 ed b9 00 20 ed b9 00 f0 ed b9 00 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ed b9 00 c0 ed b9 00 ff ed b9 00 c0 dd 95 00 80 dd 95 00 ff dd 95 00 ef ed b9 00 a0 ed b9 00 ff ed b9 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h( 00PP