Windows Analysis Report
https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda

Overview

General Information

Sample URL:	https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda
Analysis ID:	1522762
Infos:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on shot match)

HTML body contains low number of good links

HTML body contains password input but no form action

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Signatures

Phishing

Phishing site detected (based on shot match)

Source: https://customersio.enchant.com/auth/forget	Matcher: Template: captcha matched
Source: https://customersio.enchant.com/auth/forget	Matcher: Template: captcha matched

HTML body contains low number of good links

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: Number of links: 1
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: Number of links: 0

HTML body contains password input but no form action

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda

HTTP Parser: <input type="password" .../> found

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: No <meta name="author".. found
Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: No <meta name="author".. found
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: No <meta name="author".. found
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: No <meta name="author".. found

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: No <meta name="copyright".. found
Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: No <meta name="copyright".. found
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: No <meta name="copyright".. found
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: No <meta name="copyright".. found

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.42:443 -> 192.168.2.11:49793 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49766 version: TLS 1.2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.42:443 -> 192.168.2.11:49793 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ticket/66eed729bbddbd8b56beeeda HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/bootstrap-2.3.1/css/bootstrap.css?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/font-awesome-4.4.0/css/font-awesome.css HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/vex-2.3.2/css/vex.css HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/vex-theme-enchant.css?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style.css?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/jquery-2.1.0.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/underscore-1.8.3.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/bootstrap-2.3.1/js/bootstrap.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/jquery.tinysort.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/autosize-3.0.16/dist/autosize.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery.base64.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/moment-2.9.0.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/fc-1.0.6/lib/fc.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/vendor/jquery.ui.widget.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.iframe-transport.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.fileupload.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/vex-2.3.2/js/vex.combined.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/backbone-1.3.3.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/handlebars-v4.7.6.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/sfu_request.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/modernizr/modernizr.custom.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logotext.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/email_m.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/lock_m.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/jquery-2.1.0.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/jquery.tinysort.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/underscore-1.8.3.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/bootstrap-2.3.1/js/bootstrap.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/autosize-3.0.16/dist/autosize.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery.base64.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/moment-2.9.0.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.iframe-transport.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/vex-2.3.2/js/vex.combined.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/vendor/jquery.ui.widget.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/fc-1.0.6/lib/fc.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.fileupload.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/backbone-1.3.3.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/sfu_request.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /images/logotext.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/handlebars-v4.7.6.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /android-chrome-192x192.png HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
Source: global traffic	HTTP traffic detected: GET /assets/modernizr/modernizr.custom.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/email_m.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/lock_m.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
Source: global traffic	HTTP traffic detected: GET /android-chrome-192x192.png HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
Source: global traffic	HTTP traffic detected: GET /auth/forget HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1; _ga_YFMJZ2K9XT=GS1.2.1727705690.1.0.1727705690.0.0.0

Source: chromecache_159.2.dr, chromecache_117.2.dr

String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: customersio.enchant.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_114.2.dr, chromecache_145.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_114.2.dr, chromecache_145.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/8235
Source: chromecache_114.2.dr, chromecache_145.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413
Source: chromecache_109.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_109.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_114.2.dr, chromecache_145.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_145.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_154.2.dr, chromecache_131.2.dr	String found in binary or memory: http://modernizr.com/download/#-borderradius-csstransitions-history-input-inputtypes-websockets-test
Source: chromecache_150.2.dr, chromecache_152.2.dr	String found in binary or memory: http://tinysort.sjeiti.com/
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#affix
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#alerts
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#buttons
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#carousel
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#collapse
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#dropdowns
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#modals
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#popovers
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#scrollspy
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#tabs
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#tooltips
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#transitions
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#typeahead
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_147.2.dr, chromecache_132.2.dr	String found in binary or memory: http://viljamis.com/blog/2012/file-upload-support-on-mobile/
Source: chromecache_146.2.dr, chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_125.2.dr	String found in binary or memory: http://www.apple.com/safari/
Source: chromecache_125.2.dr	String found in binary or memory: http://www.enchant.com/images/logo.png
Source: chromecache_150.2.dr, chromecache_152.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_123.2.dr, chromecache_128.2.dr	String found in binary or memory: http://www.jacklmoore.com/autosize
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://www.modernizr.com/)
Source: chromecache_125.2.dr	String found in binary or memory: http://www.mozilla.org/firefox
Source: chromecache_147.2.dr, chromecache_140.2.dr, chromecache_132.2.dr, chromecache_148.2.dr	String found in binary or memory: http://www.opensource.org/licenses/MIT
Source: chromecache_150.2.dr, chromecache_152.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_117.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_147.2.dr, chromecache_140.2.dr, chromecache_132.2.dr, chromecache_148.2.dr	String found in binary or memory: https://blueimp.net
Source: chromecache_130.2.dr, chromecache_112.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=922896
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_125.2.dr, chromecache_149.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://github.com/bestiejs/lodash/blob/master/LICENSE.txt
Source: chromecache_147.2.dr, chromecache_140.2.dr, chromecache_132.2.dr, chromecache_148.2.dr	String found in binary or memory: https://github.com/blueimp/jQuery-File-Upload
Source: chromecache_140.2.dr, chromecache_148.2.dr	String found in binary or memory: https://github.com/blueimp/jQuery-File-Upload/wiki/Setup#content-type-negotiation
Source: chromecache_130.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/ftlabs/fastclick/issues/251
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://github.com/wycats/handlebars.js/issues/1639
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://github.com/zaach/jison/issues/291
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access
Source: chromecache_117.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_129.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_117.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_125.2.dr	String found in binary or memory: https://www.google.com/chrome
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_117.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49766 version: TLS 1.2

Source: classification engine

Classification label: sus22.phis.win@17/102@6/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2488 --field-trial-handle=2460,i,17426046979286100372,17203110558233026359,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2488 --field-trial-handle=2460,i,17426046979286100372,17203110558233026359,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
54.158.82.124	customersio.enchant.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.205.78.181	unknown	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.11
192.168.2.10

Contacted Domains

Name	IP	Active
www.google.com	142.250.186.36	true
customersio.enchant.com	54.158.82.124	true
fp2e7a.wpc.phicdn.net	192.229.221.95	true

Contacted URLs

Name	Malicious	Reputation
https://customersio.enchant.com/assets/modernizr/modernizr.custom.js	false	unknown
https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda	false	unknown
https://customersio.enchant.com/style.css?da39a3ee5e6b4b0d3255bfef95601890afd80709	false	unknown
https://customersio.enchant.com/spa/assets/bootstrap-2.3.1/css/bootstrap.css?da39a3ee5e6b4b0d3255bfef95601890afd80709	false	unknown
https://customersio.enchant.com/manifest.json	false	unknown
https://customersio.enchant.com/spa/assets/font-awesome-4.4.0/css/font-awesome.css	false	unknown
https://customersio.enchant.com/spa/assets/moment-2.9.0.min.js	false	unknown
https://customersio.enchant.com/spa/assets/jquery-file-upload-9.10.1/js/jquery.fileupload.js	false	unknown
https://customersio.enchant.com/spa/assets/jquery.base64.min.js	false	unknown
https://customersio.enchant.com/spa/assets/autosize-3.0.16/dist/autosize.min.js	false	unknown
https://customersio.enchant.com/android-chrome-192x192.png	false	unknown
https://customersio.enchant.com/assets/jquery.tinysort.min.js	false	unknown
https://customersio.enchant.com/favicon-32x32.png	false	unknown
https://customersio.enchant.com/spa/assets/vex-theme-enchant.css?da39a3ee5e6b4b0d3255bfef95601890afd80709	false	unknown
https://customersio.enchant.com/spa/assets/jquery-file-upload-9.10.1/js/jquery.iframe-transport.js	false	unknown
https://customersio.enchant.com/images/logotext.svg	false	unknown
https://customersio.enchant.com/spa/assets/sfu_request.js?da39a3ee5e6b4b0d3255bfef95601890afd80709	false	unknown
https://customersio.enchant.com/images/icons/email_m.svg	false	unknown
https://customersio.enchant.com/assets/jquery-2.1.0.min.js	false	unknown
https://customersio.enchant.com/spa/assets/underscore-1.8.3.min.js	false	unknown
https://customersio.enchant.com/spa/assets/fc-1.0.6/lib/fc.js	false	unknown
https://customersio.enchant.com/images/icons/lock_m.svg	false	unknown
https://customersio.enchant.com/spa/assets/handlebars-v4.7.6.js	false	unknown
https://customersio.enchant.com/spa/assets/jquery-file-upload-9.10.1/js/vendor/jquery.ui.widget.js	false	unknown
https://customersio.enchant.com/spa/assets/vex-2.3.2/js/vex.combined.min.js	false	unknown
https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	false	unknown
https://customersio.enchant.com/auth/forget	true	unknown
https://customersio.enchant.com/spa/assets/bootstrap-2.3.1/js/bootstrap.js?da39a3ee5e6b4b0d3255bfef95601890afd80709	false	unknown
https://customersio.enchant.com/common.js?da39a3ee5e6b4b0d3255bfef95601890afd80709	false	unknown
https://customersio.enchant.com/spa/assets/vex-2.3.2/css/vex.css	false	unknown
https://customersio.enchant.com/spa/assets/backbone-1.3.3.min.js	false	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 13:14:42 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	2FA7392AB2AE8F718AB9114ED37E740F	6C5EAD35E996463A83089B943C1BC677B90DBF08	0742A6C50EE33AF7B83274B6530D9359EA97F6A94763942EC66FAA725D5908CF
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 13:14:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	AD60476EB6E256680A9D7CF7D23BFC0E	62BE929A1812B39FBB3B78AEF283C4A1F428C6ED	B9446F5AA3A647BCC2411DF2ACFA47AB56CF3470B1A07099EBB0B66144EA9C43
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 09:52:18 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	A8B19BA7B3ACEEF2B0B91EF79D4953FD	2814606E41C4F2A53621B9F0D8F50DC180EDA808	C88A1A720A52EB0301BFD692A8810DF97F791359ADA4ABA65D255724C0C6CB9C
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 13:14:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	C293E181FC95F500D10B0E9A97A57562	4D290581514AB9FE7D4FF47D530E5E73582D069A	8D5E5715F3E43B7BE43BE16EB59CC1B5147442B628F45F478186D623E5B21E2A
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 13:14:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	8EAE08C7C00F867205A636C9ED1C7161	976585B6983AB0532F7012300D4493F523BA06B5	BD78005EB2101677BB1B5F4886DEBD0B37D2D6464E1855CD68E17C43E2442AF9
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 13:14:41 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	34F01F56C5E9B4369D4869590C24B396	56E95DA4E5C0BDEC7BC15043046119B5E0C6735E	4CD25CBD24B4FE2C0F58F2FACE73323BE100B410D130EB57F594C28C01BA65D9
Chrome Cache Entry: 104	ASCII text, with no line terminators	4DE186E7E8B8E27DED242B9BEECEF58F	FF9697F746B7AE6164400393732A572678DF2244	17433014C9332E3380B2121A1C88263F77F5880CD799B38F983E237ADAB460CA
Chrome Cache Entry: 105	SVG Scalable Vector Graphics image	7D314CE15F90CF269C2EB2883D3F482B	3C2AB3AA79B837E26038321E9DDF97BA3A96AAB7	56CC3F8163B5AAEC6F9524506906BCB3CBBC10B7158F88E45044790AB6483D51
Chrome Cache Entry: 106	ASCII text, with very long lines (16194)	6A3A434A1360CC744341E97DE9177BC6	D110825C3252A677CE8B6FD81CD2EDA0201E4E1B	4F5B2528815D8B1CD9B68B1A4BB1FE689696F8DCBC2C4A5104343B886EE68828
Chrome Cache Entry: 107	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0	8EFF0B8045FD1959E117F85654AE7770	227FEE13CEB7C410B5C0BB8000258B6643CB6255	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
Chrome Cache Entry: 108	ASCII text, with very long lines (32065)	5CA7582261C421482436DFDF3AF9BFFE	98884258CBDB0D939FA2C5E74FC7AC9E56D8170F	F284353A7CC4D97F6FE20A5155131BD43587A0F1C98A56EEAF52CFF72910F47D
Chrome Cache Entry: 109	troff or preprocessor input, ASCII text, with very long lines (602)	1E1D5E81CE3EA5DB630596B5BFE971E0	4D5A7FED03AFA86C5245A7799FE59C2CAA043573	286D0D30EEF94966882381E25EDBCD85F5263AEB8EAC92CE6BD0607D11035A80
Chrome Cache Entry: 110	ASCII text, with very long lines (23317)	9263DDBE52F85E7BE13301AC26889C8E	6659D494A0F176E79C772FF1CE444B890E245830	3616EDD841FFB4C1937A207C787D0D8048E93B4C34A339BED9B9D4F0A1E226A3
Chrome Cache Entry: 111	ASCII text, with very long lines (23317)	9263DDBE52F85E7BE13301AC26889C8E	6659D494A0F176E79C772FF1CE444B890E245830	3616EDD841FFB4C1937A207C787D0D8048E93B4C34A339BED9B9D4F0A1E226A3
Chrome Cache Entry: 112	ASCII text, with very long lines (382)	6E9D3B0DA74F2A4A7042B494CDAA7C2E	06CEF196733A710E77AD7E386CED6963F092DC55	1AA08CB3C7AA70D268D24D59C374C14AF7BD08E0AF8C85F8E4F60A2651F4BAB5
Chrome Cache Entry: 113	PNG image data, 32 x 32, 8-bit colormap, non-interlaced	85944CDA6B69DE6FCD25FD82033E85D5	9484A12D3A8761B095A834A47B871F78E0BC614F	51149BF10BC1EE646DADE797B266786A440D087EE23C0CADB562931B7AE5D372
Chrome Cache Entry: 114	ASCII text	59E54F72EF9F74FC76029FD45E1A9289	FEE0464ECC2534430000D81CC2046AD1081E410A	BCA8A4A92B74922E3333630DE0580EB897E42D843E0C8408726AEBF7680EF531
Chrome Cache Entry: 115	ASCII text, with very long lines (16194)	6A3A434A1360CC744341E97DE9177BC6	D110825C3252A677CE8B6FD81CD2EDA0201E4E1B	4F5B2528815D8B1CD9B68B1A4BB1FE689696F8DCBC2C4A5104343B886EE68828
Chrome Cache Entry: 116	ASCII text	8DC41F4DB956C76D89DB6024AF468314	45EFD38B0B0ECBFC7E35E33F39B24429704703C7	F7B07AB75D629041DFE38A9E1B95F313FCB8C0A25DC6414E7887BAD89C2A587E
Chrome Cache Entry: 117	ASCII text, with very long lines (4345)	C40AC6DEB30066AAB9505F3BDB99DEBA	CD624E8B12DCD0A090A0F3114B12DBD45ABC637B	6859F3646C0172DC2A180C9448C9E4123EA2A9DD6FD3F781A81BF2D538A796CA
Chrome Cache Entry: 118	ASCII text, with CRLF line terminators	50A5641508F5888F204808D01BB340D6	5AE88105D70DF553BDD24B95D4082FF2CA0E3BF4	439BD453A6C6966F48EA35C17F361C8E2F6AD4FE7F92BC9DEF322AF850FBCF36
Chrome Cache Entry: 119	SVG Scalable Vector Graphics image	7D314CE15F90CF269C2EB2883D3F482B	3C2AB3AA79B837E26038321E9DDF97BA3A96AAB7	56CC3F8163B5AAEC6F9524506906BCB3CBBC10B7158F88E45044790AB6483D51
Chrome Cache Entry: 120	Unicode text, UTF-8 text	CF225C0DC8E435E1317222F4FBEB5DD0	B97F184C6E7B0B186DC90F49D1C793E5074DF5C4	6CA33FAF21864AC6264C1AD0CC8A6311616347E81635FF6FCF5BAFD6302D971F
Chrome Cache Entry: 121	PNG image data, 192 x 192, 8-bit colormap, non-interlaced	D90817E052945562C249CFF466A2E9EE	F1DB94746C39451BEBE2B3E5242791EE136FB5CA	254340038F6528895E781EF4E7EB45F3B4278428B1C3D9F7A0D3C535CC32C9BE
Chrome Cache Entry: 122	SVG Scalable Vector Graphics image	DF9F038B90BFEAD39071F7FC8B7A74EF	B34B2E07CE06553D515BBE5653B97518C63CCB26	0C33E71E1EB04C9D36CB7927E6C5C4C623130E67CDB7E53740CDFB3F72032DC5
Chrome Cache Entry: 123	ASCII text, with very long lines (3441)	79E0E30E2620389ED47E6E578652F5F3	9CA412B4F05AAF16B7C12891232167514DF0A05C	AC1BEFD2B8919DB3FDDAFF06AF25076877A2183B305520D79A07C0191E08C6C7
Chrome Cache Entry: 124	ASCII text	8DC41F4DB956C76D89DB6024AF468314	45EFD38B0B0ECBFC7E35E33F39B24429704703C7	F7B07AB75D629041DFE38A9E1B95F313FCB8C0A25DC6414E7887BAD89C2A587E
Chrome Cache Entry: 125	HTML document, ASCII text	B11BAC18006CFD9B0F7D680259C4E1A4	0B720D00DA15DBC3B7B9B75E33C7F3FB42AEC3F7	DF79888B918403B45616D5DBA1F4415AF2163E903B2FD69C607BAB98894BE577
Chrome Cache Entry: 126	ASCII text, with very long lines (1782), with no line terminators	0E0645F8B1C2B9E45470ADD2DF1214B4	6FBEA5312AEE286AB3998612C9B5B4A13553C1E9	49416531519583E597DCCC3856DA2FA093B5E739BAF9FDA442B7047309E7F51C
Chrome Cache Entry: 127	SVG Scalable Vector Graphics image	00042AC074D2E8160B1FDA2ECC42F2A2	B3B2EB185AA47157A8EC89946DFEC63A32BCA980	766F8E2061644EA773B12848243C233676C1E53FA03998E07E0BC0F4DA8EF751
Chrome Cache Entry: 128	ASCII text, with very long lines (3441)	79E0E30E2620389ED47E6E578652F5F3	9CA412B4F05AAF16B7C12891232167514DF0A05C	AC1BEFD2B8919DB3FDDAFF06AF25076877A2183B305520D79A07C0191E08C6C7
Chrome Cache Entry: 129	ASCII text, with very long lines (2343)	575B5480531DA4D14E7453E2016FE0BC	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
Chrome Cache Entry: 130	ASCII text, with very long lines (382)	6E9D3B0DA74F2A4A7042B494CDAA7C2E	06CEF196733A710E77AD7E386CED6963F092DC55	1AA08CB3C7AA70D268D24D59C374C14AF7BD08E0AF8C85F8E4F60A2651F4BAB5
Chrome Cache Entry: 131	HTML document, ASCII text, with very long lines (3664)	E39D476EC5ADBEFD5584A507BE389B50	D3D4AB4D820DDB0D056016049A11B85A67FDF988	4EB5E660F3360812175D505828973A40B5008160D62825D5AEA59211CAE04750
Chrome Cache Entry: 132	ASCII text	E7EFEE9E288DB58AE9FCF835CC5A0A2E	30E69DB4A8EEECBDCB16A2118B691559396556DC	ED6CB89D0247B04E2B53FED1FAD67B36756CC71AFBE289965BE57D5C6F418744
Chrome Cache Entry: 133	ASCII text	F14D35F1BD6E1AE934B2131D2E56E026	6B6E1F82F4AE94D2096EDCDC5807C52D212B88E8	0A9F0A86BF2F900E60D2C208AE989B453AF24CEF0EDD52BF49162BB0EAE673A5
Chrome Cache Entry: 134	ASCII text, with very long lines (1782), with no line terminators	0E0645F8B1C2B9E45470ADD2DF1214B4	6FBEA5312AEE286AB3998612C9B5B4A13553C1E9	49416531519583E597DCCC3856DA2FA093B5E739BAF9FDA442B7047309E7F51C
Chrome Cache Entry: 135	ASCII text, with no line terminators	F7D59D3BE131AD16CC24D036112D9991	635B8DB4843997BA0331C4C0EDDD2601F4F69698	57CCDE9F4BE6E3F510E37BEFB67BA272AB6D263980802EA18C18F3B78B3DAB32
Chrome Cache Entry: 136	ASCII text	7FA2ACAD65DE8E30ED0F1D86E8269FCE	CD9FAE8E43A81DA6FB7AAF4354B56E19DA48C9E1	3291F002BAB4C659296121D4107CD9C55E0B3D972F46EBB161F573D0B276C09C
Chrome Cache Entry: 137	PNG image data, 32 x 32, 8-bit colormap, non-interlaced	85944CDA6B69DE6FCD25FD82033E85D5	9484A12D3A8761B095A834A47B871F78E0BC614F	51149BF10BC1EE646DADE797B266786A440D087EE23C0CADB562931B7AE5D372
Chrome Cache Entry: 138	ASCII text, with very long lines (7149)	C9F77CB11959B4EF266CEED650987A8B	9C53AE90048CE6060BA599ECDD36D818C2A187B1	A5482267B105BCAEB5B79B7B271BCAA6F7252C39F541DE23EA6380F897BD5D79
Chrome Cache Entry: 139	ASCII text, with very long lines (32017)	85E5D41EB9C451C16D4E784AEC13D948	851E2DF2ACD5F0BC4EF10FCF2F50C17F7AA09C1F	0A3BB1E382060C6999C26FAAC38AED7E3D6CC03F7376A9A36B881A7E5BA923CA
Chrome Cache Entry: 140	ASCII text	75D1D0238D2DFE2C37647AC5A5CCF685	578E5ED0172208210B7A3BBD6C766283CC0ABC94	A3031B21DB743EA04174E256C8E9E2B0C976D4D14389463246BAD5EEC8DF083A
Chrome Cache Entry: 141	ASCII text, with very long lines (1194)	ED8B370AF90222ADA2709FECC368E354	39AD70B07918180DF1E7AE8439B937004B0D7E91	D6C7A51C6FF3794B09D774A522962751BEDB8884F350E71A940F16AA4681938B
Chrome Cache Entry: 142	Algol 68 source, ASCII text, with very long lines (1831)	3A102A97671A524DC588FB10700EAD22	C3FA2285139993222644FE4EE6A28459F7D27BFE	65A7EB3BC65711160EEFDE13C7584F68071D71735950D997B9F5CE49ED07C63F
Chrome Cache Entry: 143	JSON data	6D61B59B5ED960F17C8F7A8DD6D04EF6	1E9830E3AC211E2EA3BFB694DFCC4A29BFAB9E80	4CFE18EACF4DE173FA62328B21E7BA7FF61DBEF417B43E5B15D530BC16D6BC0D
Chrome Cache Entry: 144	ASCII text	E6AB111A0CDEFD5EC53683331D858E4E	560663A58A1D3D7993F07F67F16B5EBCA7B57796	3C22E9643C935F4B83BF1EA1FDE71AC088E852B1F56C98454DBE3A1535810851
Chrome Cache Entry: 145	ASCII text	59E54F72EF9F74FC76029FD45E1A9289	FEE0464ECC2534430000D81CC2046AD1081E410A	BCA8A4A92B74922E3333630DE0580EB897E42D843E0C8408726AEBF7680EF531
Chrome Cache Entry: 146	ASCII text	F14D35F1BD6E1AE934B2131D2E56E026	6B6E1F82F4AE94D2096EDCDC5807C52D212B88E8	0A9F0A86BF2F900E60D2C208AE989B453AF24CEF0EDD52BF49162BB0EAE673A5
Chrome Cache Entry: 147	ASCII text	E7EFEE9E288DB58AE9FCF835CC5A0A2E	30E69DB4A8EEECBDCB16A2118B691559396556DC	ED6CB89D0247B04E2B53FED1FAD67B36756CC71AFBE289965BE57D5C6F418744
Chrome Cache Entry: 148	ASCII text	75D1D0238D2DFE2C37647AC5A5CCF685	578E5ED0172208210B7A3BBD6C766283CC0ABC94	A3031B21DB743EA04174E256C8E9E2B0C976D4D14389463246BAD5EEC8DF083A
Chrome Cache Entry: 149	HTML document, ASCII text	02587BCCBFD759826F6315A09F904B29	48978023A9E25F459C77D83E33C5C8CD3453EFA3	C497FCE308EF04D78C80AB2AD846E71F08F447B97FC046127B47CA16FCC561E7
Chrome Cache Entry: 150	ASCII text, with very long lines (3483), with no line terminators	E1DE51F3FB346CD1C301254EFE98411A	478002233211E9897158C7BD5F9ED61F2B83B5C4	F0A0E4253B89D13A4B64796C74B0801D310B761CF0D200188EB06B0F0A3A9202
Chrome Cache Entry: 151	SVG Scalable Vector Graphics image	00042AC074D2E8160B1FDA2ECC42F2A2	B3B2EB185AA47157A8EC89946DFEC63A32BCA980	766F8E2061644EA773B12848243C233676C1E53FA03998E07E0BC0F4DA8EF751
Chrome Cache Entry: 152	ASCII text, with very long lines (3483), with no line terminators	E1DE51F3FB346CD1C301254EFE98411A	478002233211E9897158C7BD5F9ED61F2B83B5C4	F0A0E4253B89D13A4B64796C74B0801D310B761CF0D200188EB06B0F0A3A9202
Chrome Cache Entry: 153	PNG image data, 192 x 192, 8-bit colormap, non-interlaced	D90817E052945562C249CFF466A2E9EE	F1DB94746C39451BEBE2B3E5242791EE136FB5CA	254340038F6528895E781EF4E7EB45F3B4278428B1C3D9F7A0D3C535CC32C9BE
Chrome Cache Entry: 154	HTML document, ASCII text, with very long lines (3664)	E39D476EC5ADBEFD5584A507BE389B50	D3D4AB4D820DDB0D056016049A11B85A67FDF988	4EB5E660F3360812175D505828973A40B5008160D62825D5AEA59211CAE04750
Chrome Cache Entry: 155	ASCII text, with CRLF line terminators	50A5641508F5888F204808D01BB340D6	5AE88105D70DF553BDD24B95D4082FF2CA0E3BF4	439BD453A6C6966F48EA35C17F361C8E2F6AD4FE7F92BC9DEF322AF850FBCF36
Chrome Cache Entry: 156	ASCII text, with very long lines (32065)	5CA7582261C421482436DFDF3AF9BFFE	98884258CBDB0D939FA2C5E74FC7AC9E56D8170F	F284353A7CC4D97F6FE20A5155131BD43587A0F1C98A56EEAF52CFF72910F47D
Chrome Cache Entry: 157	ASCII text	86360BD11A40F2E7BA5825B51DD8ADE7	42010A606C3DF0B203A74C691FD1FAA2F47E9476	73CA500DB12DA9F33DD36D488E4B6347EDBC550C5686CE6DA6C0F0F97537F2BB
Chrome Cache Entry: 158	SVG Scalable Vector Graphics image	DF9F038B90BFEAD39071F7FC8B7A74EF	B34B2E07CE06553D515BBE5653B97518C63CCB26	0C33E71E1EB04C9D36CB7927E6C5C4C623130E67CDB7E53740CDFB3F72032DC5
Chrome Cache Entry: 159	ASCII text, with very long lines (4345)	5CD7C458A2976314580F140BC74CE683	E5D4C2158AF548349A178D837941775AEE9AD4B0	8DD706B87FAF0E89920527BEB4CE8CC7FEAF2E7DB5F3A6414D5A5D11B589709B
Chrome Cache Entry: 160	ASCII text, with very long lines (7149)	C9F77CB11959B4EF266CEED650987A8B	9C53AE90048CE6060BA599ECDD36D818C2A187B1	A5482267B105BCAEB5B79B7B271BCAA6F7252C39F541DE23EA6380F897BD5D79
Chrome Cache Entry: 161	Algol 68 source, ASCII text, with very long lines (1831)	3A102A97671A524DC588FB10700EAD22	C3FA2285139993222644FE4EE6A28459F7D27BFE	65A7EB3BC65711160EEFDE13C7584F68071D71735950D997B9F5CE49ED07C63F
Chrome Cache Entry: 162	ASCII text, with very long lines (2343)	575B5480531DA4D14E7453E2016FE0BC	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
Chrome Cache Entry: 163	ASCII text, with very long lines (32017)	85E5D41EB9C451C16D4E784AEC13D948	851E2DF2ACD5F0BC4EF10FCF2F50C17F7AA09C1F	0A3BB1E382060C6999C26FAAC38AED7E3D6CC03F7376A9A36B881A7E5BA923CA

Phishing

Phishing site detected (based on shot match)

Source: https://customersio.enchant.com/auth/forget	Matcher: Template: captcha matched
Source: https://customersio.enchant.com/auth/forget	Matcher: Template: captcha matched

HTML body contains low number of good links

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: Number of links: 1
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: Number of links: 0

HTML body contains password input but no form action

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda

HTTP Parser: <input type="password" .../> found

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: No <meta name="author".. found
Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: No <meta name="author".. found
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: No <meta name="author".. found
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: No <meta name="author".. found

Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: No <meta name="copyright".. found
Source: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda	HTTP Parser: No <meta name="copyright".. found
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: No <meta name="copyright".. found
Source: https://customersio.enchant.com/auth/forget	HTTP Parser: No <meta name="copyright".. found

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.42:443 -> 192.168.2.11:49793 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49766 version: TLS 1.2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.42:443 -> 192.168.2.11:49793 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ticket/66eed729bbddbd8b56beeeda HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeeda HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/bootstrap-2.3.1/css/bootstrap.css?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/font-awesome-4.4.0/css/font-awesome.css HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/vex-2.3.2/css/vex.css HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/vex-theme-enchant.css?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style.css?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/jquery-2.1.0.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/underscore-1.8.3.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/bootstrap-2.3.1/js/bootstrap.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/jquery.tinysort.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/autosize-3.0.16/dist/autosize.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery.base64.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/moment-2.9.0.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/fc-1.0.6/lib/fc.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/vendor/jquery.ui.widget.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.iframe-transport.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.fileupload.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/vex-2.3.2/js/vex.combined.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/backbone-1.3.3.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/handlebars-v4.7.6.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/sfu_request.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/modernizr/modernizr.custom.js HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logotext.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/email_m.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/lock_m.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/jquery-2.1.0.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/jquery.tinysort.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/underscore-1.8.3.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/bootstrap-2.3.1/js/bootstrap.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/autosize-3.0.16/dist/autosize.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery.base64.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/moment-2.9.0.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.iframe-transport.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/vex-2.3.2/js/vex.combined.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/vendor/jquery.ui.widget.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/fc-1.0.6/lib/fc.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/jquery-file-upload-9.10.1/js/jquery.fileupload.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/backbone-1.3.3.min.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/sfu_request.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common.js?da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /images/logotext.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spa/assets/handlebars-v4.7.6.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /android-chrome-192x192.png HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customersio.enchant.com/auth/login?url=%2Fticket%2F66eed729bbddbd8b56beeedaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
Source: global traffic	HTTP traffic detected: GET /assets/modernizr/modernizr.custom.js HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/email_m.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/lock_m.svg HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
Source: global traffic	HTTP traffic detected: GET /android-chrome-192x192.png HTTP/1.1Host: customersio.enchant.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1
Source: global traffic	HTTP traffic detected: GET /auth/forget HTTP/1.1Host: customersio.enchant.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.2076989062.1727705688; _gid=GA1.2.1629830352.1727705688; _gat=1; _ga_YFMJZ2K9XT=GS1.2.1727705690.1.0.1727705690.0.0.0

Source: chromecache_159.2.dr, chromecache_117.2.dr

Source: global traffic	DNS traffic detected: DNS query: customersio.enchant.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_114.2.dr, chromecache_145.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_114.2.dr, chromecache_145.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/8235
Source: chromecache_114.2.dr, chromecache_145.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413
Source: chromecache_109.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_109.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_114.2.dr, chromecache_145.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_145.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_154.2.dr, chromecache_131.2.dr	String found in binary or memory: http://modernizr.com/download/#-borderradius-csstransitions-history-input-inputtypes-websockets-test
Source: chromecache_150.2.dr, chromecache_152.2.dr	String found in binary or memory: http://tinysort.sjeiti.com/
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#affix
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#alerts
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#buttons
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#carousel
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#collapse
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#dropdowns
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#modals
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#popovers
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#scrollspy
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#tabs
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#tooltips
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#transitions
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://twitter.github.com/bootstrap/javascript.html#typeahead
Source: chromecache_115.2.dr, chromecache_106.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_147.2.dr, chromecache_132.2.dr	String found in binary or memory: http://viljamis.com/blog/2012/file-upload-support-on-mobile/
Source: chromecache_146.2.dr, chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_125.2.dr	String found in binary or memory: http://www.apple.com/safari/
Source: chromecache_125.2.dr	String found in binary or memory: http://www.enchant.com/images/logo.png
Source: chromecache_150.2.dr, chromecache_152.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_123.2.dr, chromecache_128.2.dr	String found in binary or memory: http://www.jacklmoore.com/autosize
Source: chromecache_146.2.dr, chromecache_133.2.dr	String found in binary or memory: http://www.modernizr.com/)
Source: chromecache_125.2.dr	String found in binary or memory: http://www.mozilla.org/firefox
Source: chromecache_147.2.dr, chromecache_140.2.dr, chromecache_132.2.dr, chromecache_148.2.dr	String found in binary or memory: http://www.opensource.org/licenses/MIT
Source: chromecache_150.2.dr, chromecache_152.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_117.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_147.2.dr, chromecache_140.2.dr, chromecache_132.2.dr, chromecache_148.2.dr	String found in binary or memory: https://blueimp.net
Source: chromecache_130.2.dr, chromecache_112.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=922896
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_125.2.dr, chromecache_149.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://github.com/bestiejs/lodash/blob/master/LICENSE.txt
Source: chromecache_147.2.dr, chromecache_140.2.dr, chromecache_132.2.dr, chromecache_148.2.dr	String found in binary or memory: https://github.com/blueimp/jQuery-File-Upload
Source: chromecache_140.2.dr, chromecache_148.2.dr	String found in binary or memory: https://github.com/blueimp/jQuery-File-Upload/wiki/Setup#content-type-negotiation
Source: chromecache_130.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/ftlabs/fastclick/issues/251
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://github.com/wycats/handlebars.js/issues/1639
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://github.com/zaach/jison/issues/291
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_161.2.dr, chromecache_142.2.dr	String found in binary or memory: https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access
Source: chromecache_117.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_129.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_117.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_125.2.dr	String found in binary or memory: https://www.google.com/chrome
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_117.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_162.2.dr, chromecache_129.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_159.2.dr, chromecache_117.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49766 version: TLS 1.2

Source: classification engine

Classification label: sus22.phis.win@17/102@6/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2488 --field-trial-handle=2460,i,17426046979286100372,17203110558233026359,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2488 --field-trial-handle=2460,i,17426046979286100372,17203110558233026359,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

ID:	1522762
Product:	CloudBasic
Start time:	16:13:37
Start date:	30.09.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://customersio.enchant.com/ticket/66eed729bbddbd8b56beeeda