Windows Analysis Report
https://corsairfinanceirelandno2dac.com/

Overview

General Information

Sample URL:	https://corsairfinanceirelandno2dac.com/
Analysis ID:	1520594
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Suspicious form URL found

Classification

Signatures

Suspicious form URL found

Source: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1	HTTP Parser: Form action: https://corsairfinanceirelandno2dac.com/wp-login.php
Source: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpassword	HTTP Parser: Form action: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpassword
Source: https://corsairfinanceirelandno2dac.com/wp-login.php	HTTP Parser: Form action: https://corsairfinanceirelandno2dac.com/wp-login.php

Source: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1	HTTP Parser: <input type="password" .../> found
Source: https://corsairfinanceirelandno2dac.com/wp-login.php	HTTP Parser: <input type="password" .../> found

Source: https://corsairfinanceirelandno2dac.com/	HTTP Parser: No favicon
Source: https://corsairfinanceirelandno2dac.com/documents-archive/	HTTP Parser: No favicon
Source: https://corsairfinanceirelandno2dac.com/contact/	HTTP Parser: No favicon
Source: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1	HTTP Parser: No favicon
Source: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpassword	HTTP Parser: No favicon
Source: https://corsairfinanceirelandno2dac.com/wp-login.php	HTTP Parser: No favicon

Source: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1	HTTP Parser: No <meta name="author".. found
Source: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpassword	HTTP Parser: No <meta name="author".. found
Source: https://corsairfinanceirelandno2dac.com/wp-login.php	HTTP Parser: No <meta name="author".. found

Source: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1	HTTP Parser: No <meta name="copyright".. found
Source: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpassword	HTTP Parser: No <meta name="copyright".. found
Source: https://corsairfinanceirelandno2dac.com/wp-login.php	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic

TCP traffic: 192.168.2.4:59100 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/fonts/ma_customfonts.css?ver=e71414f8 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/oxygen/component-framework/oxygen.css?ver=4.9 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/oxygen/css/15.css?cache=1727275541&ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/oxygen/css/18.css?cache=1727275541&ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/oxygen/css/universal.css?cache=1727275539&ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/fonts/montserrat/latin/Montserrat-VariableFont_wght.woff2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://corsairfinanceirelandno2dac.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://corsairfinanceirelandno2dac.com/wp-content/uploads/fonts/ma_customfonts.css?ver=e71414f8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/fonts/open-sans/latin/OpenSans-VariableFont_wght.woff2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://corsairfinanceirelandno2dac.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://corsairfinanceirelandno2dac.com/wp-content/uploads/fonts/ma_customfonts.css?ver=e71414f8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /documents-archive/ HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/oxygen/css/28.css?cache=1727275540&ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/documents-archive/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/documents-archive/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=65276-65276If-Range: "64ecd5ef-15601"
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/documents-archive/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=65276-87552If-Range: "64ecd5ef-15601"
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://corsairfinanceirelandno2dac.com/documents-archive/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contact/ HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/oxygen/css/31.css?cache=1727275539&ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/contact/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://corsairfinanceirelandno2dac.com/contact/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-admin/edit.php?post_type=document HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dashicons.min.css?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/buttons.min.css?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/css/forms.min.css?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/css/l10n.min.css?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/css/login.min.css?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/zxcvbn-async.min.js?ver=1.0 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/js/password-strength-meter.min.js?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-util.min.js?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/js/user-profile.min.js?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/zxcvbn-async.min.js?ver=1.0 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/js/password-strength-meter.min.js?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-util.min.js?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/js/user-profile.min.js?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/zxcvbn.min.js HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/zxcvbn.min.js HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-login.php?action=lostpassword HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpasswordAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://corsairfinanceirelandno2dac.com/wp-login.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check

Source: global traffic	DNS traffic detected: DNS query: corsairfinanceirelandno2dac.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_75.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/
Source: chromecache_82.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/?p=28
Source: chromecache_89.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/?p=31
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/comments/feed/
Source: chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/contact/
Source: chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/documents-archive/
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/feed/
Source: chromecache_76.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/css/forms.min.css?ver=6.6.2
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/css/l10n.min.css?ver=6.6.2
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/css/login.min.css?ver=6.6.2
Source: chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/edit.php?post_type=document
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/js/password-strength-meter.min.js?ver=6.6.2
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/js/user-profile.min.js?ver=6.6.2
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-content/plugins/oxygen/component-framework/oxygen.css?ver
Source: chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-content/themes/oxygen-is-not-a-theme/assets/fonts/dm-sans
Source: chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-content/themes/oxygen-is-not-a-theme/assets/fonts/ibm-ple
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-content/themes/oxygen-is-not-a-theme/assets/fonts/inter/I
Source: chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-content/themes/oxygen-is-not-a-theme/assets/fonts/source-
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/css/buttons.min.css?ver=6.6.2
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/css/dashicons.min.css?ver=6.6.2
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/js/underscore.min.js?ver=1.13.4
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/js/wp-util.min.js?ver=6.6.2
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/js/zxcvbn-async.min.js?ver=1.0
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-json/
Source: chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fcorsairfinanceire
Source: chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-json/wp/v2/pages/18
Source: chromecache_82.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-json/wp/v2/pages/28
Source: chromecache_89.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-json/wp/v2/pages/31
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-login.php
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpassword
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/xmlrpc.php?rsd
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://en-gb.wordpress.org/
Source: chromecache_87.2.dr, chromecache_107.2.dr	String found in binary or memory: https://github.com/dropbox/zxcvbn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59103
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59104
Source: unknown	Network traffic detected: HTTP traffic on port 59104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 59102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@21/71@6/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1928,i,1135030793279660961,1927055234735671034,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://corsairfinanceirelandno2dac.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1928,i,1135030793279660961,1927055234735671034,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
213.171.203.211	corsairfinanceirelandno2dac.com	United Kingdom	8560	ONEANDONE-ASBrauerstrasse48DE	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

Contacted Domains

Name	IP	Active
corsairfinanceirelandno2dac.com	213.171.203.211	true
www.google.com	216.58.206.36	true
fp2e7a.wpc.phicdn.net	192.229.221.95	true

Contacted URLs

Name	Malicious	Reputation
https://corsairfinanceirelandno2dac.com/wp-content/uploads/fonts/montserrat/latin/Montserrat-VariableFont_wght.woff2	false	unknown
https://corsairfinanceirelandno2dac.com/wp-admin/js/user-profile.min.js?ver=6.6.2	false	unknown
https://corsairfinanceirelandno2dac.com/contact/	false	unknown
https://corsairfinanceirelandno2dac.com/wp-content/plugins/oxygen/component-framework/oxygen.css?ver=4.9	false	unknown
https://corsairfinanceirelandno2dac.com/wp-admin/css/l10n.min.css?ver=6.6.2	false	unknown
https://corsairfinanceirelandno2dac.com/wp-content/uploads/fonts/ma_customfonts.css?ver=e71414f8	false	unknown
https://corsairfinanceirelandno2dac.com/wp-admin/js/password-strength-meter.min.js?ver=6.6.2	false	unknown
https://corsairfinanceirelandno2dac.com/wp-login.php	false	unknown
https://corsairfinanceirelandno2dac.com/wp-includes/js/wp-util.min.js?ver=6.6.2	false	unknown
https://corsairfinanceirelandno2dac.com/wp-content/uploads/oxygen/css/15.css?cache=1727275541&ver=6.6.2	false	unknown
https://corsairfinanceirelandno2dac.com/favicon.ico	false	unknown
https://corsairfinanceirelandno2dac.com/wp-admin/edit.php?post_type=document	false	unknown
https://corsairfinanceirelandno2dac.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6	false	unknown
https://corsairfinanceirelandno2dac.com/wp-content/uploads/oxygen/css/18.css?cache=1727275541&ver=6.6.2	false	unknown
https://corsairfinanceirelandno2dac.com/documents-archive/	false	unknown
https://corsairfinanceirelandno2dac.com/wp-includes/js/zxcvbn.min.js	false	unknown
https://corsairfinanceirelandno2dac.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	false	unknown
https://corsairfinanceirelandno2dac.com/wp-content/uploads/oxygen/css/universal.css?cache=1727275539&ver=6.6.2	false	unknown
https://corsairfinanceirelandno2dac.com/wp-includes/css/buttons.min.css?ver=6.6.2	false	unknown
https://corsairfinanceirelandno2dac.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18	false	unknown
https://corsairfinanceirelandno2dac.com/wp-admin/css/forms.min.css?ver=6.6.2	false	unknown
https://corsairfinanceirelandno2dac.com/wp-content/uploads/oxygen/css/31.css?cache=1727275539&ver=6.6.2	false	unknown
https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1	false	unknown
https://corsairfinanceirelandno2dac.com/wp-includes/js/underscore.min.js?ver=1.13.4	false	unknown
https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpassword	false	unknown
https://corsairfinanceirelandno2dac.com/wp-admin/css/login.min.css?ver=6.6.2	false	unknown
https://corsairfinanceirelandno2dac.com/	false	unknown
https://corsairfinanceirelandno2dac.com/wp-includes/js/zxcvbn-async.min.js?ver=1.0	false	unknown
https://corsairfinanceirelandno2dac.com/wp-content/uploads/oxygen/css/28.css?cache=1727275540&ver=6.6.2	false	unknown
https://corsairfinanceirelandno2dac.com/wp-includes/css/dashicons.min.css?ver=6.6.2	false	unknown
https://corsairfinanceirelandno2dac.com/wp-content/uploads/fonts/open-sans/latin/OpenSans-VariableFont_wght.woff2	false	unknown

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 100	ASCII text, with no line terminators	4DD8526F2D0ABDBB3F013E4C97264464	B7D7E7C2D5525A0B0D304857E9F6995848AA98AF	C0346FE6AD37F88334D9FE22DEEF4F41A7C8CD234F082EE48ADFBAADE2410CAA
Chrome Cache Entry: 101	data	A8127C1A87BB4F99EDBEEC7C37311DCD	9997A1745F48BDD233DBE9BD8164DAA53EBA105B	F313D12EA6124BD28FC4A6B7163D253BB83D5AEAB5EDCE594880C5C3DF475CBC
Chrome Cache Entry: 102	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0	057478083C1D55EA0C2182B24F6DD72F	CAF557CD276A76992084EFC4C8857B66791A6B7F	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
Chrome Cache Entry: 103	ASCII text, with very long lines (6391)	69C3E71872B47EC64850645EFDFBF542	D3D6BB9691432F95783101FEDC0694AC4EAACD37	8E973191F0DB85E0427B674B7C187B1E0F2E3B6B2C4E2CA52BAB4FD5A20D873E
Chrome Cache Entry: 104	ASCII text, with very long lines (6472)	6CBFAA62BD5D9BD2D23D51960F8EE2FF	A887836A66FBE0EF74CF94B8357DBA677CC7F88A	C069CEB5898DB820B7B4A97A1292B3E58B0CBA8509720F68ECDC7C8A8FD0B6A2
Chrome Cache Entry: 105	ASCII text, with very long lines (65447)	826EB77E86B02AB7724FE3D0141FF87C	79CD3587D565AFE290076A8D36C31C305A573D18	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
Chrome Cache Entry: 106	ASCII text, with very long lines (2614), with no line terminators	D79D512D5995C21DD014EF94879220CE	EFFD2E1A249D5EB07E6D5921FA401656E83B0822	6926CFE35BFBA793341750B009F024945FE87EBCEFC56029DB56194521EE40A1
Chrome Cache Entry: 107	ASCII text, with very long lines (53869)	027C098EBCA6235056092F7B954DFC5F	1EA18E5E6ECE74F6F3A7C1A57D2AC2462C9C666B	DAA6634ED8D6376BFD22D8F68942D00E1B56DB0FA8C9F90BA2AF52734DD5593B
Chrome Cache Entry: 108	ASCII text, with very long lines (65447)	826EB77E86B02AB7724FE3D0141FF87C	79CD3587D565AFE290076A8D36C31C305A573D18	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
Chrome Cache Entry: 109	ASCII text, with very long lines (6472)	6CBFAA62BD5D9BD2D23D51960F8EE2FF	A887836A66FBE0EF74CF94B8357DBA677CC7F88A	C069CEB5898DB820B7B4A97A1292B3E58B0CBA8509720F68ECDC7C8A8FD0B6A2
Chrome Cache Entry: 110	data	A8127C1A87BB4F99EDBEEC7C37311DCD	9997A1745F48BDD233DBE9BD8164DAA53EBA105B	F313D12EA6124BD28FC4A6B7163D253BB83D5AEAB5EDCE594880C5C3DF475CBC
Chrome Cache Entry: 71	ASCII text, with very long lines (5983), with no line terminators	D500D597635617F6A066D0D72ECCC689	44579AB85442D63E3EDBEE12BC23EE3CAEAD7900	CF7E307F69711FB7FB8A8C0DD78B194E825647AD82F2B6986F06D2D9012150D4
Chrome Cache Entry: 72	ASCII text, with no line terminators	9DE02E61FEB87DBDC0E888953CB8A72D	E7A119067238866DC644F007646F02944214AA8A	61D12FD92AB6F6B586C9584F1D06EB5864B82472B359C72137942DAA9B262796
Chrome Cache Entry: 73	ASCII text, with very long lines (1391)	19D386C9004E54941C1CC61D357EFA5D	0A77594006C8D86FDCC0ADBC2B9AECAEF3869586	3BC6467A95CEC8FA516C6F5F69E1301E37E16F9BB1046FE7756729249F901B95
Chrome Cache Entry: 74	ASCII text, with very long lines (65501)	1F68753865D6F4E312B747BB7CF1589B	7CAF8DB2C93B1F567B2BECF7107703CF8B6786FE	F451DAE4C566645E0E83905E00E8A87133084AFE9DC037CF81DE226CA79608CA
Chrome Cache Entry: 75	HTML document, Unicode text, UTF-8 text, with very long lines (10112), with CRLF, LF line terminators	2CB45D1C6FD4D44047FDBB925ED979C5	E0FEBF67C2432DC782ABA428FD6850BB758DE5CD	FFD587196BCA56ED3B414EA6CA782B387441B960E3E9E1EB80D35866F53D77FE
Chrome Cache Entry: 76	HTML document, ASCII text, with very long lines (689)	2CC083B0E81C6C654D0C3F5BF730248D	4DE7EB25F5D3534B743CA613DE207B8A1188A788	833B3E3E0883B55F5AC7F5FF60994453CAF344F303C3267BBB1FA01C983E2FA6
Chrome Cache Entry: 77	ASCII text, with very long lines (28524)	3166A13465B2FDB2915209E21D432278	EAF4657F5BF76BB94FFA44D4D73AA72F8DE22534	87340FF69F885CBA81092ED2401A4F82E6A9ED37ED7FDE4A8E4CBCAD79887195
Chrome Cache Entry: 78	ASCII text, with very long lines (1391)	19D386C9004E54941C1CC61D357EFA5D	0A77594006C8D86FDCC0ADBC2B9AECAEF3869586	3BC6467A95CEC8FA516C6F5F69E1301E37E16F9BB1046FE7756729249F901B95
Chrome Cache Entry: 79	ASCII text, with very long lines (1088)	B2E45AC2D733C572EE0B3B5DD53C7CC0	F0D35678945439784D91DED2F48936C0396095DC	FCBE9E9FF2D1C20CAB10BF43DC49914E188B44AE21F34257B4A0EF5CAE90F7AC
Chrome Cache Entry: 80	ASCII text, with very long lines (58981)	D68D6BF519169D86E155BAD0BED833F8	27BA9C67D0E775FC4E6DD62011DAF4C3902698FC	C21E5A2B32C47BC5F9D9EFC97BC0E29FD081946D1D3EBFFC5621CFAFB1D3960E
Chrome Cache Entry: 81	ASCII text, with very long lines (18798)	F88D5720BB454ED5D204CBDB56901F6B	F1952292FDE4B15936E9AAC16B2B9896684DB95B	726B820E44F6AB90AD991D30A4BF26D3A5D71493CBCD1FB1EFD0D14E89B9DF2A
Chrome Cache Entry: 82	HTML document, Unicode text, UTF-8 text, with very long lines (10112)	D834B790CFF840524970CDFC2ED55D27	6D896B8B8ECC76EFA24BE0E2066E86B9159EFAE1	C82740E1AE9BF7B72321B6ADD988149778EF436991ACA8F99053CE4DCFE449FF
Chrome Cache Entry: 83	ASCII text, with very long lines (582), with CRLF, LF line terminators	C586071A4AFABAAF37D63608E50866A9	7E7FD9A897EF95C92C79509D7796926BB3EAE846	87BEF833C8ECB16E6998CBF5FE150D4DC2F824A383E19A8CB3F06C80218AE650
Chrome Cache Entry: 84	ASCII text, with very long lines (316)	C6F045D5E79F0A4F5CE90419CA598162	45D70AF2AB1D5D4FF738AFC052758A0242F31A00	E93E18F2F34A865E27D2D839EACCCA6BEC750D357F1C937980026D6D25507C2C
Chrome Cache Entry: 85	ASCII text, with very long lines (4272)	072D3F6E5C446F57D5C544F9931860E2	EE6AA3D65B474309376468B24BB6F829A4514809	2CB546FBDDA7995D374FFFA4B2F6530BBCF57D014639DDF76DE45DF43D593045
Chrome Cache Entry: 86	ASCII text, with very long lines (6026)	5C113141F5F44BD474A14E5B75E00595	9F06DCADB72FC200D5A9B258A58F3804D6F4181A	D5A5FEA14A12EC9EE91F044A7FF810602662C97D3FAD8728497EA4E8C5AEF0EB
Chrome Cache Entry: 87	ASCII text, with very long lines (53869)	027C098EBCA6235056092F7B954DFC5F	1EA18E5E6ECE74F6F3A7C1A57D2AC2462C9C666B	DAA6634ED8D6376BFD22D8F68942D00E1B56DB0FA8C9F90BA2AF52734DD5593B
Chrome Cache Entry: 88	ASCII text, with very long lines (18798)	F88D5720BB454ED5D204CBDB56901F6B	F1952292FDE4B15936E9AAC16B2B9896684DB95B	726B820E44F6AB90AD991D30A4BF26D3A5D71493CBCD1FB1EFD0D14E89B9DF2A
Chrome Cache Entry: 89	HTML document, Unicode text, UTF-8 text, with very long lines (10112)	DBE59B434B3F34976BF7818312EFD48A	EAD67E930C598044E13A7F9779E72A82BE810FCE	FD4D33AC29590BA10E35D366AC391A230ECF717D2F878AF33C2200B2BC283E83
Chrome Cache Entry: 90	ASCII text, with very long lines (4272)	072D3F6E5C446F57D5C544F9931860E2	EE6AA3D65B474309376468B24BB6F829A4514809	2CB546FBDDA7995D374FFFA4B2F6530BBCF57D014639DDF76DE45DF43D593045
Chrome Cache Entry: 91	HTML document, ASCII text, with very long lines (689)	61CBAAEDD3BB84D4ABE2D7B5341964C6	A7ECF23C167173E399B8ADE349CAE300B01EBF2D	935C564B8D34712E1869ABD483F998C0E1120A6AEC22E62B51DC649D4582B8BC
Chrome Cache Entry: 92	ASCII text, with very long lines (3165)	6AB6AE6BD910D522BB3EDB221BD2AAB2	BFA85D3D52207A0774683634DE7BB3B1240D78C1	8A77610FD0190EA9ECB57063433A619486DEC13A59B1C2CE3B502B5C7CAD7454
Chrome Cache Entry: 93	HTML document, ASCII text	E1CBA27E42BDD8845550BA620F7835CA	15711A4FCD9EE6A7D1F42E49AAA25A8CEDC71F51	81B98C0936ADA111D73A6C46DED53F26DDB945EF51D6885874B29AB06821DDEE
Chrome Cache Entry: 94	ASCII text, with very long lines (316)	C6F045D5E79F0A4F5CE90419CA598162	45D70AF2AB1D5D4FF738AFC052758A0242F31A00	E93E18F2F34A865E27D2D839EACCCA6BEC750D357F1C937980026D6D25507C2C
Chrome Cache Entry: 95	Web Open Font Format (Version 2), TrueType, length 48432, version 1.0	E2D74C5E631BC53A7240BBFE4BE99C8F	EB513857BB01CC4F7249067FC7E969BEF415FC90	9B1B9D7CB74A9923D83F36F0026F421940B861FD6E1A51B8F79AF45492ED4ED5
Chrome Cache Entry: 96	ASCII text	1B9220B26278263AFA7BDC2F8C159090	F6CEBC900BFF42DC962FB884CB4DE8668FC3B4A8	52B14906D431F4169AE615361F6391278F5D35B9E93E57D076717B0D398435B8
Chrome Cache Entry: 97	ASCII text, with no line terminators	CF95228787ED47EF61D41673CF683579	9D652CCE0C3EC9C27ACEA150DB690FCAE8EDDCEC	D3C633CEEDC7B643950FFABBCB6E6F7A9767FD8A16367EB3B9D8C11CEA1B2174
Chrome Cache Entry: 98	ASCII text, with very long lines (1088)	B2E45AC2D733C572EE0B3B5DD53C7CC0	F0D35678945439784D91DED2F48936C0396095DC	FCBE9E9FF2D1C20CAB10BF43DC49914E188B44AE21F34257B4A0EF5CAE90F7AC
Chrome Cache Entry: 99	ASCII text, with very long lines (895), with no line terminators	727D10805E0F737678B9F53B47064506	1E0DFC061F35DB138C48E9BD7F18054285F70A18	A52464786EC9C18856ADA8418B90B52E84938B4A17E23BB2775A2F9DEFB5E8BE

Suspicious form URL found

Source: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1	HTTP Parser: Form action: https://corsairfinanceirelandno2dac.com/wp-login.php
Source: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpassword	HTTP Parser: Form action: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpassword
Source: https://corsairfinanceirelandno2dac.com/wp-login.php	HTTP Parser: Form action: https://corsairfinanceirelandno2dac.com/wp-login.php

Source: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1	HTTP Parser: <input type="password" .../> found
Source: https://corsairfinanceirelandno2dac.com/wp-login.php	HTTP Parser: <input type="password" .../> found

Source: https://corsairfinanceirelandno2dac.com/	HTTP Parser: No favicon
Source: https://corsairfinanceirelandno2dac.com/documents-archive/	HTTP Parser: No favicon
Source: https://corsairfinanceirelandno2dac.com/contact/	HTTP Parser: No favicon
Source: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1	HTTP Parser: No favicon
Source: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpassword	HTTP Parser: No favicon
Source: https://corsairfinanceirelandno2dac.com/wp-login.php	HTTP Parser: No favicon

Source: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1	HTTP Parser: No <meta name="author".. found
Source: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpassword	HTTP Parser: No <meta name="author".. found
Source: https://corsairfinanceirelandno2dac.com/wp-login.php	HTTP Parser: No <meta name="author".. found

Source: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1	HTTP Parser: No <meta name="copyright".. found
Source: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpassword	HTTP Parser: No <meta name="copyright".. found
Source: https://corsairfinanceirelandno2dac.com/wp-login.php	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic

TCP traffic: 192.168.2.4:59100 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/fonts/ma_customfonts.css?ver=e71414f8 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/oxygen/component-framework/oxygen.css?ver=4.9 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/oxygen/css/15.css?cache=1727275541&ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/oxygen/css/18.css?cache=1727275541&ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/oxygen/css/universal.css?cache=1727275539&ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/fonts/montserrat/latin/Montserrat-VariableFont_wght.woff2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://corsairfinanceirelandno2dac.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://corsairfinanceirelandno2dac.com/wp-content/uploads/fonts/ma_customfonts.css?ver=e71414f8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/fonts/open-sans/latin/OpenSans-VariableFont_wght.woff2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://corsairfinanceirelandno2dac.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://corsairfinanceirelandno2dac.com/wp-content/uploads/fonts/ma_customfonts.css?ver=e71414f8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://corsairfinanceirelandno2dac.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /documents-archive/ HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/oxygen/css/28.css?cache=1727275540&ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/documents-archive/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/documents-archive/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=65276-65276If-Range: "64ecd5ef-15601"
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/documents-archive/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=65276-87552If-Range: "64ecd5ef-15601"
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://corsairfinanceirelandno2dac.com/documents-archive/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contact/ HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/oxygen/css/31.css?cache=1727275539&ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/contact/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://corsairfinanceirelandno2dac.com/contact/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-admin/edit.php?post_type=document HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dashicons.min.css?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/buttons.min.css?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/css/forms.min.css?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/css/l10n.min.css?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/css/login.min.css?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/zxcvbn-async.min.js?ver=1.0 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/js/password-strength-meter.min.js?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-util.min.js?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/js/user-profile.min.js?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/zxcvbn-async.min.js?ver=1.0 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/js/password-strength-meter.min.js?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-util.min.js?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-admin/js/user-profile.min.js?ver=6.6.2 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/zxcvbn.min.js HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?redirect_to=https%3A%2F%2Fcorsairfinanceirelandno2dac.com%2Fwp-admin%2Fedit.php%3Fpost_type%3Ddocument&reauth=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/zxcvbn.min.js HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-login.php?action=lostpassword HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpasswordAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://corsairfinanceirelandno2dac.com/wp-login.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: corsairfinanceirelandno2dac.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_test_cookie=WP%20Cookie%20check

Source: global traffic	DNS traffic detected: DNS query: corsairfinanceirelandno2dac.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_75.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/
Source: chromecache_82.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/?p=28
Source: chromecache_89.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/?p=31
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/comments/feed/
Source: chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/contact/
Source: chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/documents-archive/
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/feed/
Source: chromecache_76.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/css/forms.min.css?ver=6.6.2
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/css/l10n.min.css?ver=6.6.2
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/css/login.min.css?ver=6.6.2
Source: chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/edit.php?post_type=document
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/js/password-strength-meter.min.js?ver=6.6.2
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-admin/js/user-profile.min.js?ver=6.6.2
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-content/plugins/oxygen/component-framework/oxygen.css?ver
Source: chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-content/themes/oxygen-is-not-a-theme/assets/fonts/dm-sans
Source: chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-content/themes/oxygen-is-not-a-theme/assets/fonts/ibm-ple
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-content/themes/oxygen-is-not-a-theme/assets/fonts/inter/I
Source: chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-content/themes/oxygen-is-not-a-theme/assets/fonts/source-
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/css/buttons.min.css?ver=6.6.2
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/css/dashicons.min.css?ver=6.6.2
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/js/underscore.min.js?ver=1.13.4
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/js/wp-util.min.js?ver=6.6.2
Source: chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-includes/js/zxcvbn-async.min.js?ver=1.0
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-json/
Source: chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fcorsairfinanceire
Source: chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-json/wp/v2/pages/18
Source: chromecache_82.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-json/wp/v2/pages/28
Source: chromecache_89.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-json/wp/v2/pages/31
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-login.php
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/wp-login.php?action=lostpassword
Source: chromecache_82.2.dr, chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://corsairfinanceirelandno2dac.com/xmlrpc.php?rsd
Source: chromecache_93.2.dr, chromecache_76.2.dr, chromecache_91.2.dr	String found in binary or memory: https://en-gb.wordpress.org/
Source: chromecache_87.2.dr, chromecache_107.2.dr	String found in binary or memory: https://github.com/dropbox/zxcvbn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59103
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59104
Source: unknown	Network traffic detected: HTTP traffic on port 59104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 59102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@21/71@6/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1928,i,1135030793279660961,1927055234735671034,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://corsairfinanceirelandno2dac.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1928,i,1135030793279660961,1927055234735671034,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

ID:	1520594
Product:	CloudBasic
Start time:	16:22:20
Start date:	27.09.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://corsairfinanceirelandno2dac.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://corsairfinanceirelandno2dac.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://corsairfinanceirelandno2dac.com/