Windows Analysis Report
https://sanbernardinoscounty.telcom-info.com/

Overview

General Information

Sample URL:	https://sanbernardinoscounty.telcom-info.com/
Analysis ID:	1523738
Tags:	urlscan
Infos:

Detection

HtmlDropper

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected Html Dropper

HTML page contains obfuscated javascript

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Phishing site or detected (based on various text indicators)

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Invalid 'sign-in options' or 'sign-up' link found

Invalid T&C link found

Classification

Signatures

Phishing

AI detected phishing page

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	LLM: Score: 9 Reasons: The brand 'Microsoft' is well-known and its legitimate domain is 'microsoft.com'., The provided URL 'sanbernardinoscounty.telcom-info.com' does not match the legitimate domain 'microsoft.com'., The URL contains extra words and hyphens which are common indicators of phishing., The domain 'telcom-info.com' is not associated with Microsoft., The subdomain 'sanbernardinoscounty' is unrelated to Microsoft and adds to the suspicion. DOM: 5.3.pages.csv
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	LLM: Score: 9 Reasons: The legitimate domain for Microsoft is microsoft.com., The provided URL (sanbernardinoscounty.telcom-info.com) does not match the legitimate domain., The URL contains extra words and hyphens which are common indicators of phishing., The domain 'telcom-info.com' is not associated with Microsoft., The subdomain 'sanbernardinoscounty' is unrelated to Microsoft and adds to the suspicion. DOM: 9.4.pages.csv

HTML page contains obfuscated javascript

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: var a0_0x20ca42=a0_0x575f;function a0_0x1bf9(){var _0x31263c=['getAttribute','test','appendChi
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: var a0_0x20ca42=a0_0x575f;function a0_0x1bf9(){var _0x31263c=['getAttribute','test','appendChi

Phishing site detected (based on favicon image match)

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	Matcher: Template: microsoft matched with high similarity
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	Matcher: Template: microsoft matched with high similarity

Phishing site detected (based on image similarity)

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	Matcher: Template: microsoft matched
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	Matcher: Template: microsoft matched

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 0.0

OCR Text: Verifying... CLOUDFLARE Ten-rs Microsoft

HTML body contains low number of good links

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: Number of links: 0
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: Number of links: 0

HTML page contains hidden javascript code

Source: https://sanbernardinoscounty.telcom-info.com/

HTTP Parser: Base64 decoded: {"version":3,"sources":["/cfsetup_build/src/orchestrator/turnstile/templates/turnstile.scss","%3Cinput%20css%20qtFLbZ%3E"],"names":[],"mappings":"AAmCA,gBACI,GACI,uBClCN,CACF,CDqCA,kBACI,GACI,mBCnCN,CACF,CDsCA,iBACI,MAEI,cCrCN,CDwCE,IACI,mBCtCN,CACF,CDyCA...

HTML title does not match URL

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: Title: Authenticating... does not match URL
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: Title: Authenticating... does not match URL

Invalid 'sign-in options' or 'sign-up' link found

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: Invalid link: get a new Microsoft account
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: Invalid link: get a new Microsoft account

Invalid T&C link found

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: Invalid link: Terms of use
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: Invalid link: Privacy & cookies
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: Invalid link: Terms of use
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: Invalid link: Privacy & cookies

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: No <meta name="author".. found
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: No <meta name="author".. found

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: No <meta name="copyright".. found
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49816 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/style.css HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/logo.svg HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/u972b/0x4AAAAAAAwgo_4sU4R7BlsA/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cbff7d01962c33d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/u972b/0x4AAAAAAAwgo_4sU4R7BlsA/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/u972b/0x4AAAAAAAwgo_4sU4R7BlsA/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/logo.svg HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cbff7d01962c33d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1121365584:1727821582:FtjyX9VbAvqmLS5-UuL06udmIDQT7dp1rW-1y8F4S1Y/8cbff7d01962c33d/bcbf9bd71f426c2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8cbff7d01962c33d/1727822571917/09924a35f3c758709af88e0a588b7cd2bbbe09a1e05bd9809c84033ada6e7c05/xRO-NWK2Qn8voTN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/u972b/0x4AAAAAAAwgo_4sU4R7BlsA/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cbff7d01962c33d/1727822571920/dF8dAYCSi2ZeUfY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/u972b/0x4AAAAAAAwgo_4sU4R7BlsA/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cbff7d01962c33d/1727822571920/dF8dAYCSi2ZeUfY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1121365584:1727821582:FtjyX9VbAvqmLS5-UuL06udmIDQT7dp1rW-1y8F4S1Y/8cbff7d01962c33d/bcbf9bd71f426c2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1121365584:1727821582:FtjyX9VbAvqmLS5-UuL06udmIDQT7dp1rW-1y8F4S1Y/8cbff7d01962c33d/bcbf9bd71f426c2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/rc/8cbff7d01962c33d HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /em9XWWsyOWNaZkNyVjZorobotem9XWWsyOWNaZkNyVjZo HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8 HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /js___/66fc7b007c23b-b860da8ffc87dc502860e1b645c22d2f HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /b_/66fc7b007c246-b860da8ffc87dc502860e1b645c22d2f HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /js_/66fc7b007c248-b860da8ffc87dc502860e1b645c22d2f HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /js_/66fc7b007c248-b860da8ffc87dc502860e1b645c22d2f HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /js___/66fc7b007c23b-b860da8ffc87dc502860e1b645c22d2f HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /b_/66fc7b007c246-b860da8ffc87dc502860e1b645c22d2f HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /home6dca65610bad709b07a9e6041699d6ce HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /css_/DmiM9Aw3DnV3DPQ HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /logo_/5HwVWMJJMP8EV8z HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /sig/c96dc13f1d8b04b0d1feb407ec1a1d4666fc7b0344ab6 HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /2svg/ZLWhvXZy16NYSMW HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /fav/BxFYbJCBp2C7xgu HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /logo_/c96dc13f1d8b04b0d1feb407ec1a1d4666fc7b03449ef HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /home6dca65610bad709b07a9e6041699d6ce HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /2svg/ZLWhvXZy16NYSMW HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /sig/c96dc13f1d8b04b0d1feb407ec1a1d4666fc7b0344ab6 HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /logo_/5HwVWMJJMP8EV8z HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /logo_/c96dc13f1d8b04b0d1feb407ec1a1d4666fc7b03449ef HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /fav/BxFYbJCBp2C7xgu HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5

Source: global traffic	DNS traffic detected: DNS query: sanbernardinoscounty.telcom-info.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1121365584:1727821582:FtjyX9VbAvqmLS5-UuL06udmIDQT7dp1rW-1y8F4S1Y/8cbff7d01962c33d/bcbf9bd71f426c2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 2725sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: bcbf9bd71f426c2sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/u972b/0x4AAAAAAAwgo_4sU4R7BlsA/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 22:42:53 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: iVUfkqzDj6ISIDnRlVCYRvDMHq8s6XDDntU=$SfM5gXKhzaY16mU0Server: cloudflareCF-RAY: 8cbff7ec3b9443dd-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 22:42:56 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: iABQd8T5oRdI+YoqoZN7W1iXyt8LDzDMyUY=$5MceBAlnseEyNTMtcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8cbff7fe5f8242a3-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 22:43:07 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: u7lAuu4eLQraXN80ERw77e6sFA+M0ONH8pc=$YoML+a8rvAYgi7V1Server: cloudflareCF-RAY: 8cbff845b8b50cac-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 22:43:09 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: Ift8h9bhffiG4uk7g0MwCSdomfvcHeTUrhA=$YGfTgMxi+zPk/LRycache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a8T1Qd3SVcD%2F8d63OMNi7R2OF1JMH4nGl1Ai5w%2Fakfl%2FASpREMQp0YO8v4RET0xY76sqbbWDfvRn0%2BZxxm2EhL4VPoHYND0tjTkVJjFBX%2F4e9DFvSbCqIiLr6ykf3vL1CyGCgwobkIh27Zbd2X5HSV9NjMmpxPI%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8cbff8507e6b8c71-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 22:43:15 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: MISSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rCr0V%2FzgHZB%2BkWu9A6kT0o8yVOOUO9ZQU%2F3IFWHGE7VCtYczsC6PaihKy12vNUyOx%2F8HLX7l3J3kBJXffTGPm0blB8sp3gmb7BxcxX9eT2l9orEpF8ozeSxwvfnCStFChG8%2BTs%2BB%2BlgJ9LOUtGw%2BrHE3g6R1kMw%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8cbff873beed8c06-EWR

Source: chromecache_73.2.dr, chromecache_67.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_73.2.dr, chromecache_67.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_73.2.dr, chromecache_67.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49816 version: TLS 1.2

Source: classification engine

Classification label: mal76.phis.troj.win@18/49@18/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2188,i,10797738705276059449,12300204305592509053,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sanbernardinoscounty.telcom-info.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2188,i,10797738705276059449,12300204305592509053,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

Yara detected Html Dropper

Source: Yara match	File source: 5.3.pages.csv, type: HTML
Source: Yara match	File source: 9.4.pages.csv, type: HTML

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.55.67	sanbernardinoscounty.telcom-info.com	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.4
192.168.2.6

Contacted Domains

Name	IP	Active
bg.microsoft.map.fastly.net	199.232.210.172	true
a.nel.cloudflare.com	35.190.80.1	true
code.jquery.com	151.101.2.137	true
challenges.cloudflare.com	104.18.94.41	true
www.google.com	216.58.206.36	true
sanbernardinoscounty.telcom-info.com	104.21.55.67	true
fp2e7a.wpc.phicdn.net	192.229.221.95	true

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://sanbernardinoscounty.telcom-info.com/sig/c96dc13f1d8b04b0d1feb407ec1a1d4666fc7b0344ab6	false		unknown
https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js	false		unknown
https://sanbernardinoscounty.telcom-info.com/logo_/c96dc13f1d8b04b0d1feb407ec1a1d4666fc7b03449ef	false		unknown
https://sanbernardinoscounty.telcom-info.com/logo_/5HwVWMJJMP8EV8z	false		unknown
https://code.jquery.com/jquery-3.6.0.min.js	false	URL Reputation: safe	unknown
https://sanbernardinoscounty.telcom-info.com/cdn-cgi/challenge-platform/h/g/rc/8cbff7d01962c33d	false		unknown
https://sanbernardinoscounty.telcom-info.com/js___/66fc7b007c23b-b860da8ffc87dc502860e1b645c22d2f	false		unknown
https://sanbernardinoscounty.telcom-info.com/js_/66fc7b007c248-b860da8ffc87dc502860e1b645c22d2f	false		unknown
https://sanbernardinoscounty.telcom-info.com/captcha/style.css	false		unknown
https://sanbernardinoscounty.telcom-info.com/b_/66fc7b007c246-b860da8ffc87dc502860e1b645c22d2f	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/u972b/0x4AAAAAAAwgo_4sU4R7BlsA/auto/fbE/normal/auto/	false		unknown
https://sanbernardinoscounty.telcom-info.com/fav/BxFYbJCBp2C7xgu	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8cbff7d01962c33d/1727822571917/09924a35f3c758709af88e0a588b7cd2bbbe09a1e05bd9809c84033ada6e7c05/xRO-NWK2Qn8voTN	false		unknown
https://sanbernardinoscounty.telcom-info.com/em9XWWsyOWNaZkNyVjZorobotem9XWWsyOWNaZkNyVjZo	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8cbff7d01962c33d/1727822571920/dF8dAYCSi2ZeUfY	false		unknown
https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	true		unknown
https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	true		unknown
https://sanbernardinoscounty.telcom-info.com/	false		unknown
https://sanbernardinoscounty.telcom-info.com/2svg/ZLWhvXZy16NYSMW	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		unknown
https://sanbernardinoscounty.telcom-info.com/captcha/logo.svg	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cbff7d01962c33d&lang=auto	false		unknown
https://sanbernardinoscounty.telcom-info.com/css_/DmiM9Aw3DnV3DPQ	false		unknown
https://sanbernardinoscounty.telcom-info.com/home6dca65610bad709b07a9e6041699d6ce	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1121365584:1727821582:FtjyX9VbAvqmLS5-UuL06udmIDQT7dp1rW-1y8F4S1Y/8cbff7d01962c33d/bcbf9bd71f426c2	false		unknown
https://sanbernardinoscounty.telcom-info.com/favicon.ico	false		unknown

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 53	ASCII text, with very long lines (6645), with no line terminators	AD9F46DD1FB91B96EFB4A31DE1D50F77	03CA511BB1457FC368403B369EDA88F69D5A1558	FB231833B3DA52E6925BD85EF97156B8DA3500AEE026D5FAC97BBA193A12A734
Chrome Cache Entry: 54	ASCII text, with no line terminators	011B17B116126E6E0C4A9B0DE9145805	DF63A6EB731FFCE96F79802EFF6D53D00CDA42BC	3418E6E704387A99F1611EB7BB883328A438BA600971E6D692E8BEA60F10B179
Chrome Cache Entry: 55	ASCII text, with very long lines (32065)	2F6B11A7E914718E0290410E85366FE9	69BB69E25CA7D5EF0935317584E6153F3FD9A88C	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
Chrome Cache Entry: 56	SVG Scalable Vector Graphics image	EE5C8D9FB6248C938FD0DC19370E90BD	D01A22720918B781338B5BBF9202B241A5F99EE4	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
Chrome Cache Entry: 57	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced	9246CCA8FC3C00F50035F28E9F6B7F7D	3AA538440F70873B574F40CD793060F53EC17A5D	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
Chrome Cache Entry: 58	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced	9246CCA8FC3C00F50035F28E9F6B7F7D	3AA538440F70873B574F40CD793060F53EC17A5D	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
Chrome Cache Entry: 59	ASCII text, with very long lines (3379)	59087D72EEDCB7650C9D5D6088440DD3	97B607FCE11F640E5764699038E50A76EB98944B	E0E3FB0FE5CA541950CF8DD213FBE9E8957A3DB0010B515AD01ADFF6CA908A3E
Chrome Cache Entry: 60	SVG Scalable Vector Graphics image	EE5C8D9FB6248C938FD0DC19370E90BD	D01A22720918B781338B5BBF9202B241A5F99EE4	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
Chrome Cache Entry: 61	ASCII text, with very long lines (65447)	8FB8FEE4FCC3CC86FF6C724154C49C42	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
Chrome Cache Entry: 62	HTML document, ASCII text	A34AC19F4AFAE63ADC5D2F7BC970C07F	A82190FC530C265AA40A045C21770D967F4767B8	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
Chrome Cache Entry: 63	ASCII text, with very long lines (47261)	E07E7ED6F75A7D48B3DF3C153EB687EB	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
Chrome Cache Entry: 64	SVG Scalable Vector Graphics image	4E48046CE74F4B89D45037C90576BFAC	4A41B3B51ED787F7B33294202DA72220C7CD2C32	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
Chrome Cache Entry: 65	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors	12E3DAC858061D088023B2BD48E2FA96	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
Chrome Cache Entry: 66	ASCII text, with very long lines (47261)	E07E7ED6F75A7D48B3DF3C153EB687EB	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
Chrome Cache Entry: 67	ASCII text, with very long lines (50758)	67176C242E1BDC20603C878DEE836DF3	27A71B00383D61EF3C489326B3564D698FC1227C	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
Chrome Cache Entry: 68	PNG image data, 12 x 71, 8-bit/color RGB, non-interlaced	992F9850603D1F9EB470320B9EB0B174	1B42373E6B0AEDBA515031D255AB74AE917D0051	0455AD3FBBC240087EC77C1A2B42931B4EEC4F5448ECE5585C5B1352337FE9B2
Chrome Cache Entry: 69	SVG Scalable Vector Graphics image	7D2B8F25545A2894E2721E9FE528E34C	D0DAE76F4BF5C04ACD5FCDF1BCB12908099E328C	797BDA35D13E5130FE5A14E0069C31B46EC1AF6EA47F2D300309803BB4D2608C
Chrome Cache Entry: 70	PNG image data, 12 x 71, 8-bit/color RGB, non-interlaced	992F9850603D1F9EB470320B9EB0B174	1B42373E6B0AEDBA515031D255AB74AE917D0051	0455AD3FBBC240087EC77C1A2B42931B4EEC4F5448ECE5585C5B1352337FE9B2
Chrome Cache Entry: 71	SVG Scalable Vector Graphics image	4E48046CE74F4B89D45037C90576BFAC	4A41B3B51ED787F7B33294202DA72220C7CD2C32	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
Chrome Cache Entry: 72	ASCII text, with very long lines (65536), with no line terminators	3ED91A738DACD5E5F7FFF1E515984B25	F530BC374249D640F65A282B9B742F30F678F485	01DDAE43AFA0B63A161958DDA28D72798719DC0E752E4C92AE9F9C9A146F3703
Chrome Cache Entry: 73	ASCII text, with very long lines (50758)	67176C242E1BDC20603C878DEE836DF3	27A71B00383D61EF3C489326B3564D698FC1227C	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
Chrome Cache Entry: 74	SVG Scalable Vector Graphics image	EE5C8D9FB6248C938FD0DC19370E90BD	D01A22720918B781338B5BBF9202B241A5F99EE4	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
Chrome Cache Entry: 75	HTML document, ASCII text, with very long lines (4903)	57DE9FC42295C76736C7F0B89BB937E1	EB4C02A083B0B066D6D620AB8CCCC02215331A24	705181EB514AA1DEDABCBCB367F757EBBCADE1BFFD55275269C7E25C4C59F334
Chrome Cache Entry: 76	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors	12E3DAC858061D088023B2BD48E2FA96	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
Chrome Cache Entry: 77	ASCII text, with very long lines (6645), with no line terminators	AD9F46DD1FB91B96EFB4A31DE1D50F77	03CA511BB1457FC368403B369EDA88F69D5A1558	FB231833B3DA52E6925BD85EF97156B8DA3500AEE026D5FAC97BBA193A12A734
Chrome Cache Entry: 78	SVG Scalable Vector Graphics image	BC3D32A696895F78C19DF6C717586A5D	9191CB156A30A3ED79C44C0A16C95159E8FF689D	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
Chrome Cache Entry: 79	SVG Scalable Vector Graphics image	BC3D32A696895F78C19DF6C717586A5D	9191CB156A30A3ED79C44C0A16C95159E8FF689D	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
Chrome Cache Entry: 80	ASCII text, with very long lines (32065)	2F6B11A7E914718E0290410E85366FE9	69BB69E25CA7D5EF0935317584E6153F3FD9A88C	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
Chrome Cache Entry: 81	ASCII text, with very long lines (65447)	8FB8FEE4FCC3CC86FF6C724154C49C42	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
Chrome Cache Entry: 82	SVG Scalable Vector Graphics image	7D2B8F25545A2894E2721E9FE528E34C	D0DAE76F4BF5C04ACD5FCDF1BCB12908099E328C	797BDA35D13E5130FE5A14E0069C31B46EC1AF6EA47F2D300309803BB4D2608C
Chrome Cache Entry: 83	SVG Scalable Vector Graphics image	EE5C8D9FB6248C938FD0DC19370E90BD	D01A22720918B781338B5BBF9202B241A5F99EE4	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A

Phishing

AI detected phishing page

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	LLM: Score: 9 Reasons: The brand 'Microsoft' is well-known and its legitimate domain is 'microsoft.com'., The provided URL 'sanbernardinoscounty.telcom-info.com' does not match the legitimate domain 'microsoft.com'., The URL contains extra words and hyphens which are common indicators of phishing., The domain 'telcom-info.com' is not associated with Microsoft., The subdomain 'sanbernardinoscounty' is unrelated to Microsoft and adds to the suspicion. DOM: 5.3.pages.csv
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	LLM: Score: 9 Reasons: The legitimate domain for Microsoft is microsoft.com., The provided URL (sanbernardinoscounty.telcom-info.com) does not match the legitimate domain., The URL contains extra words and hyphens which are common indicators of phishing., The domain 'telcom-info.com' is not associated with Microsoft., The subdomain 'sanbernardinoscounty' is unrelated to Microsoft and adds to the suspicion. DOM: 9.4.pages.csv

HTML page contains obfuscated javascript

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: var a0_0x20ca42=a0_0x575f;function a0_0x1bf9(){var _0x31263c=['getAttribute','test','appendChi
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: var a0_0x20ca42=a0_0x575f;function a0_0x1bf9(){var _0x31263c=['getAttribute','test','appendChi

Phishing site detected (based on favicon image match)

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	Matcher: Template: microsoft matched with high similarity
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	Matcher: Template: microsoft matched with high similarity

Phishing site detected (based on image similarity)

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	Matcher: Template: microsoft matched
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	Matcher: Template: microsoft matched

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 0.0

OCR Text: Verifying... CLOUDFLARE Ten-rs Microsoft

HTML body contains low number of good links

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: Number of links: 0
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: Number of links: 0

HTML page contains hidden javascript code

Source: https://sanbernardinoscounty.telcom-info.com/

HTML title does not match URL

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: Title: Authenticating... does not match URL
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: Title: Authenticating... does not match URL

Invalid 'sign-in options' or 'sign-up' link found

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: Invalid link: get a new Microsoft account
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: Invalid link: get a new Microsoft account

Invalid T&C link found

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: Invalid link: Terms of use
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: Invalid link: Privacy & cookies
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: Invalid link: Terms of use
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: Invalid link: Privacy & cookies

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: No <meta name="author".. found
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: No <meta name="author".. found

Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8	HTTP Parser: No <meta name="copyright".. found
Source: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8#	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49816 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/style.css HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/logo.svg HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/u972b/0x4AAAAAAAwgo_4sU4R7BlsA/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cbff7d01962c33d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/u972b/0x4AAAAAAAwgo_4sU4R7BlsA/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/u972b/0x4AAAAAAAwgo_4sU4R7BlsA/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/logo.svg HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cbff7d01962c33d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1121365584:1727821582:FtjyX9VbAvqmLS5-UuL06udmIDQT7dp1rW-1y8F4S1Y/8cbff7d01962c33d/bcbf9bd71f426c2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8cbff7d01962c33d/1727822571917/09924a35f3c758709af88e0a588b7cd2bbbe09a1e05bd9809c84033ada6e7c05/xRO-NWK2Qn8voTN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/u972b/0x4AAAAAAAwgo_4sU4R7BlsA/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cbff7d01962c33d/1727822571920/dF8dAYCSi2ZeUfY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/u972b/0x4AAAAAAAwgo_4sU4R7BlsA/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cbff7d01962c33d/1727822571920/dF8dAYCSi2ZeUfY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1121365584:1727821582:FtjyX9VbAvqmLS5-UuL06udmIDQT7dp1rW-1y8F4S1Y/8cbff7d01962c33d/bcbf9bd71f426c2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1121365584:1727821582:FtjyX9VbAvqmLS5-UuL06udmIDQT7dp1rW-1y8F4S1Y/8cbff7d01962c33d/bcbf9bd71f426c2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/rc/8cbff7d01962c33d HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /em9XWWsyOWNaZkNyVjZorobotem9XWWsyOWNaZkNyVjZo HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8 HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://sanbernardinoscounty.telcom-info.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /js___/66fc7b007c23b-b860da8ffc87dc502860e1b645c22d2f HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /b_/66fc7b007c246-b860da8ffc87dc502860e1b645c22d2f HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /js_/66fc7b007c248-b860da8ffc87dc502860e1b645c22d2f HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /js_/66fc7b007c248-b860da8ffc87dc502860e1b645c22d2f HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /js___/66fc7b007c23b-b860da8ffc87dc502860e1b645c22d2f HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /b_/66fc7b007c246-b860da8ffc87dc502860e1b645c22d2f HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /home6dca65610bad709b07a9e6041699d6ce HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /css_/DmiM9Aw3DnV3DPQ HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /logo_/5HwVWMJJMP8EV8z HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /sig/c96dc13f1d8b04b0d1feb407ec1a1d4666fc7b0344ab6 HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /2svg/ZLWhvXZy16NYSMW HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /fav/BxFYbJCBp2C7xgu HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /logo_/c96dc13f1d8b04b0d1feb407ec1a1d4666fc7b03449ef HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sanbernardinoscounty.telcom-info.com/&redirect=748a7e906055260effecf777292e4da84f206e0fmain&uid=f253efe302d32ab264a76e0ce65be76966fc7b00337d8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5; cf_clearance=WI3_X5Q8DqvBE7vRfDhgGrfo36.yzEAQnX7Fkgx1WLQ-1727822588-1.2.1.1-yVg.R8iXsSEyCdH6mpk7OwykeKWYET9_iK56vfB.G.m9J4LJqn2mjEGUcz_hgM6junbyj03Eoeyxghf7DKwQjnOHT_RV.dkyB8YOhZsRNoePwI64pJc2MVeitRkAjjMCWVl2FXYkhZ1d5WMaB4mbRLrIyh9e4TcPrwbqn58bq2kyq5mT_1oGYdVeO_3cvXt7CVTKoxVr8szlJlVf52OJy0NaLZzpmkKC87R2prCuqoJXWnwmag_1iRpA8JVYZTUVIx36Rn8K_V4I5xYC16R4Ea6wqGO2bZTTQXYUd7Ww2ArPF_on1ymBOKV6N_LGXJnc8r2nfHBk87oT30hKH5frHigjIy8ou5a2XpE4K4plr4D3fDah52V2p9j2UGAz6XwAu8c436H48fmfZT7BOzmQtT8s1xW6OSO7to8bPnw.0eUBWkz5qzk0jmBG3bn07J.o
Source: global traffic	HTTP traffic detected: GET /home6dca65610bad709b07a9e6041699d6ce HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /2svg/ZLWhvXZy16NYSMW HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /sig/c96dc13f1d8b04b0d1feb407ec1a1d4666fc7b0344ab6 HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /logo_/5HwVWMJJMP8EV8z HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /logo_/c96dc13f1d8b04b0d1feb407ec1a1d4666fc7b03449ef HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5
Source: global traffic	HTTP traffic detected: GET /fav/BxFYbJCBp2C7xgu HTTP/1.1Host: sanbernardinoscounty.telcom-info.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d2b586c48e6c37e4b46c75c985eb61c5

Source: global traffic	DNS traffic detected: DNS query: sanbernardinoscounty.telcom-info.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 22:42:53 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: iVUfkqzDj6ISIDnRlVCYRvDMHq8s6XDDntU=$SfM5gXKhzaY16mU0Server: cloudflareCF-RAY: 8cbff7ec3b9443dd-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 22:42:56 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: iABQd8T5oRdI+YoqoZN7W1iXyt8LDzDMyUY=$5MceBAlnseEyNTMtcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8cbff7fe5f8242a3-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 22:43:07 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: u7lAuu4eLQraXN80ERw77e6sFA+M0ONH8pc=$YoML+a8rvAYgi7V1Server: cloudflareCF-RAY: 8cbff845b8b50cac-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 22:43:09 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: Ift8h9bhffiG4uk7g0MwCSdomfvcHeTUrhA=$YGfTgMxi+zPk/LRycache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a8T1Qd3SVcD%2F8d63OMNi7R2OF1JMH4nGl1Ai5w%2Fakfl%2FASpREMQp0YO8v4RET0xY76sqbbWDfvRn0%2BZxxm2EhL4VPoHYND0tjTkVJjFBX%2F4e9DFvSbCqIiLr6ykf3vL1CyGCgwobkIh27Zbd2X5HSV9NjMmpxPI%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8cbff8507e6b8c71-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 22:43:15 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: MISSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rCr0V%2FzgHZB%2BkWu9A6kT0o8yVOOUO9ZQU%2F3IFWHGE7VCtYczsC6PaihKy12vNUyOx%2F8HLX7l3J3kBJXffTGPm0blB8sp3gmb7BxcxX9eT2l9orEpF8ozeSxwvfnCStFChG8%2BTs%2BB%2BlgJ9LOUtGw%2BrHE3g6R1kMw%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8cbff873beed8c06-EWR

Source: chromecache_73.2.dr, chromecache_67.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_73.2.dr, chromecache_67.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_73.2.dr, chromecache_67.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49816 version: TLS 1.2

Source: classification engine

Classification label: mal76.phis.troj.win@18/49@18/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2188,i,10797738705276059449,12300204305592509053,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sanbernardinoscounty.telcom-info.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2188,i,10797738705276059449,12300204305592509053,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

Yara detected Html Dropper

Source: Yara match	File source: 5.3.pages.csv, type: HTML
Source: Yara match	File source: 9.4.pages.csv, type: HTML

ID:	1523738
Product:	CloudBasic
Start time:	00:41:50
Start date:	02.10.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://sanbernardinoscounty.telcom-info.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://sanbernardinoscounty.telcom-info.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://sanbernardinoscounty.telcom-info.com/