Edit tour

Windows Analysis Report
https://crowncommercialservice.bravosolution.co.uk

Overview

General Information

Sample URL:	https://crowncommercialservice.bravosolution.co.uk
Analysis ID:	1524027
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1936,i,4927461430831556362,13177952517883645410,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://crowncommercialservice.bravosolution.co.uk" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /csp/frame-ancestors/38fac9d5b82543fc4729580d18ff2d3d HTTP/1.1Host: csp.withgoogle.comConnection: keep-aliveContent-Length: 384sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/csp-reportAccept: */*Origin: https://crowncommercialservice.bravosolution.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: reportReferer: https://crowncommercialservice.bravosolution.co.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.crowncommercial.gov.uk/esourcing-register	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NQGRQN
Source: https://www.crowncommercial.gov.uk/esourcing-register	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NQGRQN
Source: https://www.crowncommercial.gov.uk/esourcing-training	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NQGRQN
Source: https://www.crowncommercial.gov.uk/esourcing-training	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NQGRQN
Source: https://www.crowncommercial.gov.uk/esourcing-training	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NQGRQN
Source: https://www.crowncommercial.gov.uk/esourcing-training	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/775935662?random=1727864421983&cv=11&fst=1727864421983&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10z8811252684za201zb811252684&gcd=13r3r3r3r5l1&dma=0&tag_exp=99312313~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.crowncommercial.gov.uk%2Fesourcing-training&hn=www.googleadservices.com&frm=0&tiba=Book%20online%20training%20for%20the%20CCS%20eSourcing%20tool%20-%20CCS&npa=0&pscdl=noapi&auid=1038336825.1727864422&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Source: https://www.crowncommercial.gov.uk/esourcing-training	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/775935662?random=1727864421993&cv=11&fst=1727864421993&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10z8811252684za201zb811252684&gcd=13r3r3r3r5l1&dma=0&tag_exp=99312313~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.crowncommercial.gov.uk%2Fesourcing-training&hn=www.googleadservices.com&frm=0&tiba=Book%20online%20training%20for%20the%20CCS%20eSourcing%20tool%20-%20CCS&npa=0&pscdl=noapi&auid=1038336825.1727864422&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse

Source: https://www.crowncommercial.gov.uk/esourcing-register	HTTP Parser: Title: Register as a buyer for the CCS eSourcing tool - CCS does not match URL
Source: https://www.crowncommercial.gov.uk/esourcing-training	HTTP Parser: Title: Book online training for the CCS eSourcing tool - CCS does not match URL

Source: https://crowncommercialservice.bravosolution.co.uk/	HTTP Parser: No favicon
Source: https://crowncommercialservice.bravosolution.co.uk/esop/guest/forgot/password/view.si?_ncp=1727864352128.825317-1	HTTP Parser: No favicon
Source: https://crowncommercialservice.bravosolution.co.uk/esop/guest/forgot/password/view.si?_ncp=1727864352128.825317-1	HTTP Parser: No favicon
Source: https://crowncommercialservice.bravosolution.co.uk/esop/toolkit/registration/displayCaptcha.si?isOnModification=true&_ncp=1727864384154.826863-3	HTTP Parser: No favicon
Source: https://crowncommercialservice.bravosolution.co.uk/esop/toolkit/registration/displayCaptcha.si?isOnModification=true&_ncp=1727864384154.826863-3	HTTP Parser: No favicon

Source: https://crowncommercialservice.bravosolution.co.uk/web/login.html	HTTP Parser: No <meta name="author".. found
Source: https://www.crowncommercial.gov.uk/esourcing-register	HTTP Parser: No <meta name="author".. found
Source: https://www.crowncommercial.gov.uk/esourcing-register	HTTP Parser: No <meta name="author".. found
Source: https://www.crowncommercial.gov.uk/esourcing-training	HTTP Parser: No <meta name="author".. found
Source: https://www.crowncommercial.gov.uk/esourcing-training	HTTP Parser: No <meta name="author".. found
Source: https://www.crowncommercial.gov.uk/esourcing-training	HTTP Parser: No <meta name="author".. found

Source: https://crowncommercialservice.bravosolution.co.uk/web/login.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.crowncommercial.gov.uk/esourcing-register	HTTP Parser: No <meta name="copyright".. found
Source: https://www.crowncommercial.gov.uk/esourcing-register	HTTP Parser: No <meta name="copyright".. found
Source: https://www.crowncommercial.gov.uk/esourcing-training	HTTP Parser: No <meta name="copyright".. found
Source: https://www.crowncommercial.gov.uk/esourcing-training	HTTP Parser: No <meta name="copyright".. found
Source: https://www.crowncommercial.gov.uk/esourcing-training	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_518.1.dr, chromecache_410.1.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/government-procurement-service/" class="govuk-footer__link"> equals www.linkedin.com (Linkedin)
Source: chromecache_251.1.dr	String found in binary or memory: L.getElementsByTagName("iframe"),la=P.length,na=0;na<la;na++)if(!v&&c(P[na],H.Ie)){nJ("https://www.youtube.com/iframe_api");v=!0;break}})}}else F(u.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,v=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_477.1.dr, chromecache_251.1.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},dk:function(){e=zb()},od:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_389.1.dr, chromecache_221.1.dr, chromecache_471.1.dr, chromecache_545.1.dr, chromecache_364.1.dr, chromecache_490.1.dr	String found in binary or memory: return b}IC.F="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: crowncommercialservice.bravosolution.co.uk
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: csp.withgoogle.com
Source: global traffic	DNS traffic detected: DNS query: www.gov.uk
Source: global traffic	DNS traffic detected: DNS query: www.crowncommercial.gov.uk
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: t.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: c.contentsquare.net

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1936,i,4927461430831556362,13177952517883645410,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://crowncommercialservice.bravosolution.co.uk"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1936,i,4927461430831556362,13177952517883645410,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Link
c.ba.contentsquare.net	0%	Virustotal	Browse
googleads.g.doubleclick.net	0%	Virustotal	Browse
t.contentsquare.net	0%	Virustotal	Browse
td.doubleclick.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
csp.withgoogle.com	0%	Virustotal	Browse
unpkg.com	0%	Virustotal	Browse
www-gov-uk.map.fastly.net	0%	Virustotal	Browse
c.contentsquare.net	0%	Virustotal	Browse
crowncommercialservice.bravosolution.co.uk	3%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
www.crowncommercial.gov.uk	0%	Virustotal	Browse
www.gov.uk	0%	Virustotal	Browse

Source	Detection	Scanner	Label	Link
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://px.ads.linkedin.com/collect?	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://www.gov.uk/browse/education	0%	Virustotal		Browse
https://www.gov.uk/browse/disabilities	0%	Virustotal		Browse
https://www.gov.uk/government/how-government-works	0%	Virustotal		Browse
https://identify.crowncommercial.gov.uk/manage-org/register	0%	Virustotal		Browse
https://www.gov.uk/browse/working	0%	Virustotal		Browse
https://dojotoolkit.org/	0%	Virustotal		Browse
https://www.gov.uk/contact/govuk/problem_reports	0%	Virustotal		Browse
https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/	0%	Virustotal		Browse
https://www.gov.uk/assets/static/light-94a07e06a1-v2-01565b0034e61d4609689bbb7ae0be844701f3812c8fe029fa1659b7ef3aa94f.woff2	0%	Virustotal		Browse

Name	IP	Active	Malicious	Antivirus Detection	Reputation
csp.withgoogle.com	142.250.185.177	true	false	0%, Virustotal, Browse	unknown
c.ba.contentsquare.net	3.251.50.104	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	142.250.186.66	true	false	0%, Virustotal, Browse	unknown
webprod.crowncommercial.gov.uk	3.10.25.218	true	false		unknown
www.google.com	142.250.184.196	true	false	0%, Virustotal, Browse	unknown
www-gov-uk.map.fastly.net	151.101.192.144	true	false	0%, Virustotal, Browse	unknown
td.doubleclick.net	142.250.186.98	true	false	0%, Virustotal, Browse	unknown
t.contentsquare.net	18.244.18.53	true	false	0%, Virustotal, Browse	unknown
alb-ja-prod-ogc-ext-689013233.eu-west-2.elb.amazonaws.com	18.171.201.232	true	false		unknown
unpkg.com	104.17.247.203	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
www.crowncommercial.gov.uk	unknown	unknown	false	0%, Virustotal, Browse	unknown
c.contentsquare.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
crowncommercialservice.bravosolution.co.uk	unknown	unknown	false	3%, Virustotal, Browse	unknown
www.gov.uk	unknown	unknown	false	0%, Virustotal, Browse	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.gov.uk/browse/education	chromecache_496.1.dr	false	0%, Virustotal, Browse	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_389.1.dr, chromecache_221.1.dr, chromecache_471.1.dr, chromecache_364.1.dr	false	URL Reputation: safe	unknown
https://www.gov.uk/browse/disabilities	chromecache_496.1.dr	false	0%, Virustotal, Browse	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_407.1.dr, chromecache_252.1.dr, chromecache_315.1.dr	false	URL Reputation: safe	unknown
https://www.crowncommercial.gov.uk/accessibility-statement	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://www.gov.uk/government/publications/become-a-crown-commercial-service-supplier/becoming-a-sup	chromecache_518.1.dr	false		unknown
https://www.crowncommercial.gov.uk/about-ccs/press-office/	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://dojotoolkit.org/	chromecache_542.1.dr, chromecache_319.1.dr	false	0%, Virustotal, Browse	unknown
https://www.gov.uk/government/how-government-works	chromecache_496.1.dr	false	0%, Virustotal, Browse	unknown
https://identify.crowncommercial.gov.uk/manage-org/register	chromecache_518.1.dr, chromecache_410.1.dr	false	0%, Virustotal, Browse	unknown
https://px.ads.linkedin.com/collect?	chromecache_251.1.dr	false	URL Reputation: safe	unknown
https://www.gov.uk/contact/govuk/problem_reports	chromecache_496.1.dr	false	0%, Virustotal, Browse	unknown
https://www.gov.uk/browse/working	chromecache_496.1.dr	false	0%, Virustotal, Browse	unknown
https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/	chromecache_496.1.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/recaptcha/#6175971	chromecache_407.1.dr, chromecache_252.1.dr, chromecache_315.1.dr	false	URL Reputation: safe	unknown
https://www.gov.uk/government/publications/esourcing-tool-guidance-for-suppliers	chromecache_335.1.dr	false		unknown
https://www.crowncommercial.gov.uk/sectors	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://crowncommercialservice.bravosolution.co.uk/esop/mdl/certifyIdentity/init.si?jsonByPassword=	chromecache_492.1.dr, chromecache_485.1.dr	false		unknown
https://www.crowncommercial.gov.uk/cookie-settings/	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://www.gov.uk/find-tender	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
http://www.gnu.org/licenses/gpl-3.0-standalone.html	chromecache_535.1.dr, chromecache_286.1.dr	false		unknown
https://www.crowncommercial.gov.uk/news	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://support.google.com/recaptcha	chromecache_315.1.dr	false	URL Reputation: safe	unknown
https://www.gov.uk/government/government-efficiency-transparency-and-accountability	chromecache_496.1.dr	false		unknown
https://www.crowncommercial.gov.uk/social-value	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://www.crowncommercial.gov.uk/jaggaer-uk-accessibility-statement-2/	chromecache_335.1.dr	false		unknown
https://www.crowncommercial.gov.uk/information-for-buyers-and-suppliers	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://github.com/MikeMcl/decimal.js-light/LICENCE	chromecache_354.1.dr, chromecache_540.1.dr, chromecache_306.1.dr, chromecache_376.1.dr	false		unknown
https://assets.publishing.service.gov.uk/media/66967be2ab418ab055592648/Sourcing_System___Simplified	chromecache_496.1.dr	false		unknown
https://www.gov.uk/browse/justice	chromecache_496.1.dr	false		unknown
https://www.gov.uk/contracts-finder	chromecache_518.1.dr, chromecache_410.1.dr, chromecache_335.1.dr	false		unknown
https://www.gov.uk/government/organisations/government-digital-service	chromecache_496.1.dr	false		unknown
http://identify.crowncommercial.gov.uk/	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://www.crowncommercial.gov.uk/contact?type=complaint	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/API/Document/cookie/Simple_document.cookie_framework	chromecache_535.1.dr, chromecache_286.1.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_407.1.dr, chromecache_252.1.dr, chromecache_315.1.dr	false	URL Reputation: safe	unknown
https://www.gov.uk/browse/employing-people	chromecache_496.1.dr	false		unknown
https://www.gov.uk/government/organisations/crown-commercial-service/about/modern-slavery-statement	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://www.gov.uk/help/terms-conditions	chromecache_496.1.dr	false		unknown
https://fleetportal.crowncommercial.gov.uk/login.mth	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://www.gov.uk/browse/births-deaths-marriages	chromecache_496.1.dr	false		unknown
https://www.gov.uk/browse/abroad	chromecache_496.1.dr	false		unknown
https://www.gov.uk/assets/government-frontend/govuk_publishing_components/govuk-schema-placeholder-1	chromecache_496.1.dr	false		unknown
https://www.gov.uk/assets/government-frontend/govuk_publishing_components/govuk-schema-placeholder-4	chromecache_496.1.dr	false		unknown
https://www.crowncommercial.gov.uk/events	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://www.smartsurvey.co.uk/s/gov-uk-banner/?c=no-js	chromecache_496.1.dr	false		unknown
https://www.gov.uk/search	chromecache_496.1.dr	false		unknown
https://www.crowncommercial.gov.uk/terms-and-conditions/	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://www.crowncommercial.gov.uk/suppliers	chromecache_518.1.dr, chromecache_410.1.dr	false		unknown
https://www.gov.uk/government/government-spending	chromecache_496.1.dr	false		unknown
https://www.gov.uk/search/policy-papers-and-consultations	chromecache_496.1.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.192.144	www-gov-uk.map.fastly.net	United States	54113	FASTLYUS	false
216.58.212.164	unknown	United States	15169	GOOGLEUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
151.101.128.144	unknown	United States	54113	FASTLYUS	false
142.250.186.98	td.doubleclick.net	United States	15169	GOOGLEUS	false
18.171.201.232	alb-ja-prod-ogc-ext-689013233.eu-west-2.elb.amazonaws.com	United States	3	MIT-GATEWAYSUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
18.244.18.53	t.contentsquare.net	United States	16509	AMAZON-02US	false
3.10.25.218	webprod.crowncommercial.gov.uk	United States	16509	AMAZON-02US	false
142.250.185.177	csp.withgoogle.com	United States	15169	GOOGLEUS	false
35.179.204.87	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.247.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
18.168.100.199	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.186.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1524027
Start date and time:	2024-10-02 12:18:03 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://crowncommercialservice.bravosolution.co.uk
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@23/579@40/19
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://crowncommercialservice.bravosolution.co.uk/esop/guest/go/public/lostPwd Browse: https://crowncommercialservice.bravosolution.co.uk/esop/guest/go/public/registration Browse: https://www.gov.uk/government/publications/esourcing-suite-guidance-for-customers Browse: https://www.crowncommercial.gov.uk/esourcing-register Browse: https://www.crowncommercial.gov.uk/esourcing-training

Input	Output
URL: https://crowncommercialservice.bravosolution.co.uk/web/login.html Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://crowncommercialservice.bravosolution.co.uk/esop/guest/forgot/password/view.si?_ncp=1727864352128.825317-1 Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://crowncommercialservice.bravosolution.co.uk/esop/guest/forgot/password/view.si?_ncp=1727864352128.825317-1 Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://crowncommercialservice.bravosolution.co.uk/esop/guest/forgot/password/view.si?_ncp=1727864352128.825317-1 Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://crowncommercialservice.bravosolution.co.uk/esop/toolkit/registration/displayCaptcha.si?isOnModification=true&_ncp=1727864384154.826863-3 Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://crowncommercialservice.bravosolution.co.uk/esop/toolkit/registration/displayCaptcha.si?isOnModification=true&_ncp=1727864384154.826863-3 Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://www.gov.uk/government/publications/esourcing-suite-guidance-for-customers Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://www.crowncommercial.gov.uk/esourcing-register Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://www.crowncommercial.gov.uk/esourcing-training Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://www.crowncommercial.gov.uk/esourcing-training Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://www.crowncommercial.gov.uk/esourcing-training Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (540)
Category:	downloaded
Size (bytes):	860
Entropy (8bit):	5.17791694393584
Encrypted:	false
SSDEEP:	24:kMnPPt621zUbmzDggwnXCEPYCPmOqJsNAF:LnPPo21zg79mrOAF
MD5:	468C383AB1B21C0B6145D6EDA68238AC
SHA1:	7E94D547180A6488A3D89B07752D89E63076E16C
SHA-256:	AD4AF30EF6ED772590D1406D23D75185BA05C69755D429F3D552D8C732A09B72
SHA-512:	5FF66A5636212B3631375E26177F9ACB33945950D65125BA27D4C1817F72E9E1DF310FCB464DA8B0F90925E34E8CE97E6F5EF29DC5A02C43D3F84966E7CD95F1
Malicious:	false
Reputation:	low
URL:	https://crowncommercialservice.bravosolution.co.uk/esop/guest/js/dj/dojo/store/util/SimpleQueryEngine.js?dcb=24.2.0.0.331
Preview:	//>>built.define("dojo/store/util/SimpleQueryEngine",["../../_base/array"],function(n){return function(b,c){function k(a){a=n.filter(a,b);var d=c&&c.sort;d&&a.sort("function"==typeof d?d:function(p,q){for(var h,l=0;h=d[l];l++){var e=p[h.attribute],f=q[h.attribute];e=null!=e?e.valueOf():e;f=null!=f?f.valueOf():f;if(e!=f)return!!h.descending==(null==e\|\|e>f)?-1:1}return 0});if(c&&(c.start\|\|c.count)){var g=a.length;a=a.slice(c.start\|\|0,(c.start\|\|0)+(c.count\|\|Infinity));a.total=g}return a}switch(typeof b){default:throw Error("Can not query with a "+.typeof b);case "object":case "undefined":var m=b;b=function(a){for(var d in m){var g=m[d];if(g&&g.test){if(!g.test(a[d],a))return!1}else if(g!=a[d])return!1}return!0};break;case "string":if(!this[b])throw Error("No filter function "+b+" was found in store");b=this[b];case "function":}k.matches=b;return k}});

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 2, 2024 12:18:58.125278950 CEST	192.168.2.4	1.1.1.1	0x5f4f	Standard query (0)	crowncommercialservice.bravosolution.co.uk	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:18:58.125530958 CEST	192.168.2.4	1.1.1.1	0x4c9a	Standard query (0)	crowncommercialservice.bravosolution.co.uk	65	IN (0x0001)	false
Oct 2, 2024 12:19:00.774914026 CEST	192.168.2.4	1.1.1.1	0x529c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:00.775722027 CEST	192.168.2.4	1.1.1.1	0xea1d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 2, 2024 12:19:01.914998055 CEST	192.168.2.4	1.1.1.1	0x69d5	Standard query (0)	crowncommercialservice.bravosolution.co.uk	65	IN (0x0001)	false
Oct 2, 2024 12:19:01.914999008 CEST	192.168.2.4	1.1.1.1	0x7d88	Standard query (0)	crowncommercialservice.bravosolution.co.uk	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:13.910445929 CEST	192.168.2.4	1.1.1.1	0x8d5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:13.911009073 CEST	192.168.2.4	1.1.1.1	0x8054	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 2, 2024 12:19:15.797853947 CEST	192.168.2.4	1.1.1.1	0x192c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:15.798183918 CEST	192.168.2.4	1.1.1.1	0xef3e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 2, 2024 12:19:17.969317913 CEST	192.168.2.4	1.1.1.1	0xea9d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:17.969472885 CEST	192.168.2.4	1.1.1.1	0xee1e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 2, 2024 12:19:18.947499037 CEST	192.168.2.4	1.1.1.1	0x1036	Standard query (0)	csp.withgoogle.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:18.948060036 CEST	192.168.2.4	1.1.1.1	0x5551	Standard query (0)	csp.withgoogle.com	65	IN (0x0001)	false
Oct 2, 2024 12:19:55.251018047 CEST	192.168.2.4	1.1.1.1	0x4693	Standard query (0)	www.gov.uk	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:55.251203060 CEST	192.168.2.4	1.1.1.1	0xda88	Standard query (0)	www.gov.uk	65	IN (0x0001)	false
Oct 2, 2024 12:19:59.865888119 CEST	192.168.2.4	1.1.1.1	0x3e66	Standard query (0)	www.gov.uk	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:59.866235018 CEST	192.168.2.4	1.1.1.1	0x428f	Standard query (0)	www.gov.uk	65	IN (0x0001)	false
Oct 2, 2024 12:20:01.241772890 CEST	192.168.2.4	1.1.1.1	0x998	Standard query (0)	www.crowncommercial.gov.uk	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:01.242579937 CEST	192.168.2.4	1.1.1.1	0xb340	Standard query (0)	www.crowncommercial.gov.uk	65	IN (0x0001)	false
Oct 2, 2024 12:20:03.704787016 CEST	192.168.2.4	1.1.1.1	0xde95	Standard query (0)	www.crowncommercial.gov.uk	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:03.704957008 CEST	192.168.2.4	1.1.1.1	0x9fb8	Standard query (0)	www.crowncommercial.gov.uk	65	IN (0x0001)	false
Oct 2, 2024 12:20:06.186994076 CEST	192.168.2.4	1.1.1.1	0x9c50	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:06.187390089 CEST	192.168.2.4	1.1.1.1	0x585e	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Oct 2, 2024 12:20:08.046649933 CEST	192.168.2.4	1.1.1.1	0xfeb8	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:08.047513008 CEST	192.168.2.4	1.1.1.1	0x827c	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Oct 2, 2024 12:20:23.266036987 CEST	192.168.2.4	1.1.1.1	0xf33e	Standard query (0)	t.contentsquare.net	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:23.266390085 CEST	192.168.2.4	1.1.1.1	0x465e	Standard query (0)	t.contentsquare.net	65	IN (0x0001)	false
Oct 2, 2024 12:20:23.287062883 CEST	192.168.2.4	1.1.1.1	0xb892	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:23.287298918 CEST	192.168.2.4	1.1.1.1	0xf1d9	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 2, 2024 12:20:23.295761108 CEST	192.168.2.4	1.1.1.1	0xfc6a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:23.295918941 CEST	192.168.2.4	1.1.1.1	0x1d83	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 2, 2024 12:20:23.315243006 CEST	192.168.2.4	1.1.1.1	0x315e	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:23.315372944 CEST	192.168.2.4	1.1.1.1	0x5308	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 2, 2024 12:20:24.345140934 CEST	192.168.2.4	1.1.1.1	0x589f	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.345140934 CEST	192.168.2.4	1.1.1.1	0x36a7	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 2, 2024 12:20:24.841528893 CEST	192.168.2.4	1.1.1.1	0xb3da	Standard query (0)	c.contentsquare.net	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.841677904 CEST	192.168.2.4	1.1.1.1	0xdb19	Standard query (0)	c.contentsquare.net	65	IN (0x0001)	false
Oct 2, 2024 12:20:24.868383884 CEST	192.168.2.4	1.1.1.1	0xcbab	Standard query (0)	t.contentsquare.net	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.868535995 CEST	192.168.2.4	1.1.1.1	0xef27	Standard query (0)	t.contentsquare.net	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 2, 2024 12:18:58.401251078 CEST	1.1.1.1	192.168.2.4	0x4c9a	No error (0)	crowncommercialservice.bravosolution.co.uk	ogc.bravosolution.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:18:58.401251078 CEST	1.1.1.1	192.168.2.4	0x4c9a	No error (0)	ogc.bravosolution.co.uk	alb-ja-prod-ogc-ext-689013233.eu-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:18:58.407758951 CEST	1.1.1.1	192.168.2.4	0x5f4f	No error (0)	crowncommercialservice.bravosolution.co.uk	ogc.bravosolution.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:18:58.407758951 CEST	1.1.1.1	192.168.2.4	0x5f4f	No error (0)	ogc.bravosolution.co.uk	alb-ja-prod-ogc-ext-689013233.eu-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:18:58.407758951 CEST	1.1.1.1	192.168.2.4	0x5f4f	No error (0)	alb-ja-prod-ogc-ext-689013233.eu-west-2.elb.amazonaws.com		18.171.201.232	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:18:58.407758951 CEST	1.1.1.1	192.168.2.4	0x5f4f	No error (0)	alb-ja-prod-ogc-ext-689013233.eu-west-2.elb.amazonaws.com		18.168.100.199	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:18:58.407758951 CEST	1.1.1.1	192.168.2.4	0x5f4f	No error (0)	alb-ja-prod-ogc-ext-689013233.eu-west-2.elb.amazonaws.com		35.176.179.20	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:00.788336039 CEST	1.1.1.1	192.168.2.4	0x529c	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:00.788373947 CEST	1.1.1.1	192.168.2.4	0xea1d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 2, 2024 12:19:01.961885929 CEST	1.1.1.1	192.168.2.4	0x69d5	No error (0)	crowncommercialservice.bravosolution.co.uk	ogc.bravosolution.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:01.961885929 CEST	1.1.1.1	192.168.2.4	0x69d5	No error (0)	ogc.bravosolution.co.uk	alb-ja-prod-ogc-ext-689013233.eu-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:01.971093893 CEST	1.1.1.1	192.168.2.4	0x7d88	No error (0)	crowncommercialservice.bravosolution.co.uk	ogc.bravosolution.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:01.971093893 CEST	1.1.1.1	192.168.2.4	0x7d88	No error (0)	ogc.bravosolution.co.uk	alb-ja-prod-ogc-ext-689013233.eu-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:01.971093893 CEST	1.1.1.1	192.168.2.4	0x7d88	No error (0)	alb-ja-prod-ogc-ext-689013233.eu-west-2.elb.amazonaws.com		18.168.100.199	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:01.971093893 CEST	1.1.1.1	192.168.2.4	0x7d88	No error (0)	alb-ja-prod-ogc-ext-689013233.eu-west-2.elb.amazonaws.com		35.176.179.20	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:01.971093893 CEST	1.1.1.1	192.168.2.4	0x7d88	No error (0)	alb-ja-prod-ogc-ext-689013233.eu-west-2.elb.amazonaws.com		18.171.201.232	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:12.073887110 CEST	1.1.1.1	192.168.2.4	0x777f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:12.073887110 CEST	1.1.1.1	192.168.2.4	0x777f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:13.917156935 CEST	1.1.1.1	192.168.2.4	0x8d5	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:13.918606997 CEST	1.1.1.1	192.168.2.4	0x8054	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 2, 2024 12:19:15.804728031 CEST	1.1.1.1	192.168.2.4	0xef3e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 2, 2024 12:19:15.804860115 CEST	1.1.1.1	192.168.2.4	0x192c	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:17.976284981 CEST	1.1.1.1	192.168.2.4	0xee1e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 2, 2024 12:19:17.976315022 CEST	1.1.1.1	192.168.2.4	0xea9d	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:18.954528093 CEST	1.1.1.1	192.168.2.4	0x1036	No error (0)	csp.withgoogle.com		142.250.185.177	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:26.528765917 CEST	1.1.1.1	192.168.2.4	0x78a9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:26.528765917 CEST	1.1.1.1	192.168.2.4	0x78a9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:50.290337086 CEST	1.1.1.1	192.168.2.4	0x2d64	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:50.290337086 CEST	1.1.1.1	192.168.2.4	0x2d64	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:55.257993937 CEST	1.1.1.1	192.168.2.4	0x4693	No error (0)	www.gov.uk	www-cdn.production.govuk.service.gov.uk		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:55.257993937 CEST	1.1.1.1	192.168.2.4	0x4693	No error (0)	www-cdn.production.govuk.service.gov.uk	www-gov-uk.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:55.257993937 CEST	1.1.1.1	192.168.2.4	0x4693	No error (0)	www-gov-uk.map.fastly.net		151.101.192.144	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:55.257993937 CEST	1.1.1.1	192.168.2.4	0x4693	No error (0)	www-gov-uk.map.fastly.net		151.101.64.144	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:55.257993937 CEST	1.1.1.1	192.168.2.4	0x4693	No error (0)	www-gov-uk.map.fastly.net		151.101.0.144	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:55.257993937 CEST	1.1.1.1	192.168.2.4	0x4693	No error (0)	www-gov-uk.map.fastly.net		151.101.128.144	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:55.275340080 CEST	1.1.1.1	192.168.2.4	0xda88	No error (0)	www.gov.uk	www-cdn.production.govuk.service.gov.uk		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:55.275340080 CEST	1.1.1.1	192.168.2.4	0xda88	No error (0)	www-cdn.production.govuk.service.gov.uk	www-gov-uk.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:59.872921944 CEST	1.1.1.1	192.168.2.4	0x3e66	No error (0)	www.gov.uk	www-cdn.production.govuk.service.gov.uk		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:59.872921944 CEST	1.1.1.1	192.168.2.4	0x3e66	No error (0)	www-cdn.production.govuk.service.gov.uk	www-gov-uk.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:59.872921944 CEST	1.1.1.1	192.168.2.4	0x3e66	No error (0)	www-gov-uk.map.fastly.net		151.101.128.144	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:59.872921944 CEST	1.1.1.1	192.168.2.4	0x3e66	No error (0)	www-gov-uk.map.fastly.net		151.101.64.144	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:59.872921944 CEST	1.1.1.1	192.168.2.4	0x3e66	No error (0)	www-gov-uk.map.fastly.net		151.101.192.144	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:59.872921944 CEST	1.1.1.1	192.168.2.4	0x3e66	No error (0)	www-gov-uk.map.fastly.net		151.101.0.144	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:19:59.874228001 CEST	1.1.1.1	192.168.2.4	0x428f	No error (0)	www.gov.uk	www-cdn.production.govuk.service.gov.uk		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:19:59.874228001 CEST	1.1.1.1	192.168.2.4	0x428f	No error (0)	www-cdn.production.govuk.service.gov.uk	www-gov-uk.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:20:01.302319050 CEST	1.1.1.1	192.168.2.4	0xb340	No error (0)	www.crowncommercial.gov.uk	webprod.crowncommercial.gov.uk		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:20:01.314793110 CEST	1.1.1.1	192.168.2.4	0x998	No error (0)	www.crowncommercial.gov.uk	webprod.crowncommercial.gov.uk		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:20:01.314793110 CEST	1.1.1.1	192.168.2.4	0x998	No error (0)	webprod.crowncommercial.gov.uk		3.10.25.218	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:01.314793110 CEST	1.1.1.1	192.168.2.4	0x998	No error (0)	webprod.crowncommercial.gov.uk		35.179.204.87	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:01.314793110 CEST	1.1.1.1	192.168.2.4	0x998	No error (0)	webprod.crowncommercial.gov.uk		3.9.60.15	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:03.717955112 CEST	1.1.1.1	192.168.2.4	0xde95	No error (0)	www.crowncommercial.gov.uk	webprod.crowncommercial.gov.uk		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:20:03.717955112 CEST	1.1.1.1	192.168.2.4	0xde95	No error (0)	webprod.crowncommercial.gov.uk		35.179.204.87	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:03.717955112 CEST	1.1.1.1	192.168.2.4	0xde95	No error (0)	webprod.crowncommercial.gov.uk		3.10.25.218	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:03.717955112 CEST	1.1.1.1	192.168.2.4	0xde95	No error (0)	webprod.crowncommercial.gov.uk		3.9.60.15	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:03.733196020 CEST	1.1.1.1	192.168.2.4	0x9fb8	No error (0)	www.crowncommercial.gov.uk	webprod.crowncommercial.gov.uk		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:20:06.194232941 CEST	1.1.1.1	192.168.2.4	0x9c50	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:06.194232941 CEST	1.1.1.1	192.168.2.4	0x9c50	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:06.194232941 CEST	1.1.1.1	192.168.2.4	0x9c50	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:06.194232941 CEST	1.1.1.1	192.168.2.4	0x9c50	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:06.194232941 CEST	1.1.1.1	192.168.2.4	0x9c50	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:06.194399118 CEST	1.1.1.1	192.168.2.4	0x585e	No error (0)	unpkg.com			65	IN (0x0001)	false
Oct 2, 2024 12:20:08.054335117 CEST	1.1.1.1	192.168.2.4	0x827c	No error (0)	unpkg.com			65	IN (0x0001)	false
Oct 2, 2024 12:20:08.054514885 CEST	1.1.1.1	192.168.2.4	0xfeb8	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:08.054514885 CEST	1.1.1.1	192.168.2.4	0xfeb8	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:08.054514885 CEST	1.1.1.1	192.168.2.4	0xfeb8	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:08.054514885 CEST	1.1.1.1	192.168.2.4	0xfeb8	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:08.054514885 CEST	1.1.1.1	192.168.2.4	0xfeb8	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:10.161748886 CEST	1.1.1.1	192.168.2.4	0xcf0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:20:10.161748886 CEST	1.1.1.1	192.168.2.4	0xcf0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:23.326324940 CEST	1.1.1.1	192.168.2.4	0xf33e	No error (0)	t.contentsquare.net		18.244.18.53	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:23.326324940 CEST	1.1.1.1	192.168.2.4	0xf33e	No error (0)	t.contentsquare.net		18.244.18.60	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:23.326324940 CEST	1.1.1.1	192.168.2.4	0xf33e	No error (0)	t.contentsquare.net		18.244.18.112	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:23.326324940 CEST	1.1.1.1	192.168.2.4	0xf33e	No error (0)	t.contentsquare.net		18.244.18.115	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:23.337373018 CEST	1.1.1.1	192.168.2.4	0xb892	No error (0)	googleads.g.doubleclick.net		142.250.186.66	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:23.337383032 CEST	1.1.1.1	192.168.2.4	0xf1d9	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 2, 2024 12:20:23.340796947 CEST	1.1.1.1	192.168.2.4	0x1d83	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 2, 2024 12:20:23.342329025 CEST	1.1.1.1	192.168.2.4	0xfc6a	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:23.346366882 CEST	1.1.1.1	192.168.2.4	0x315e	No error (0)	td.doubleclick.net		142.250.186.98	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.352180958 CEST	1.1.1.1	192.168.2.4	0x589f	No error (0)	googleads.g.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.352215052 CEST	1.1.1.1	192.168.2.4	0x36a7	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 2, 2024 12:20:24.848913908 CEST	1.1.1.1	192.168.2.4	0xb3da	No error (0)	c.contentsquare.net	c.ba.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:20:24.848913908 CEST	1.1.1.1	192.168.2.4	0xb3da	No error (0)	c.ba.contentsquare.net		3.251.50.104	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.848913908 CEST	1.1.1.1	192.168.2.4	0xb3da	No error (0)	c.ba.contentsquare.net		54.220.241.123	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.848913908 CEST	1.1.1.1	192.168.2.4	0xb3da	No error (0)	c.ba.contentsquare.net		52.19.230.154	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.848913908 CEST	1.1.1.1	192.168.2.4	0xb3da	No error (0)	c.ba.contentsquare.net		52.211.102.231	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.848913908 CEST	1.1.1.1	192.168.2.4	0xb3da	No error (0)	c.ba.contentsquare.net		54.72.118.39	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.848913908 CEST	1.1.1.1	192.168.2.4	0xb3da	No error (0)	c.ba.contentsquare.net		52.215.85.89	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.848913908 CEST	1.1.1.1	192.168.2.4	0xb3da	No error (0)	c.ba.contentsquare.net		54.194.238.149	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.848913908 CEST	1.1.1.1	192.168.2.4	0xb3da	No error (0)	c.ba.contentsquare.net		34.247.21.38	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.849874020 CEST	1.1.1.1	192.168.2.4	0xdb19	No error (0)	c.contentsquare.net	c.ba.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 12:20:24.875895023 CEST	1.1.1.1	192.168.2.4	0xcbab	No error (0)	t.contentsquare.net		18.244.18.115	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.875895023 CEST	1.1.1.1	192.168.2.4	0xcbab	No error (0)	t.contentsquare.net		18.244.18.60	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.875895023 CEST	1.1.1.1	192.168.2.4	0xcbab	No error (0)	t.contentsquare.net		18.244.18.53	A (IP address)	IN (0x0001)	false
Oct 2, 2024 12:20:24.875895023 CEST	1.1.1.1	192.168.2.4	0xcbab	No error (0)	t.contentsquare.net		18.244.18.112	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-02 10:18:59 UTC	685	OUT	GET / HTTP/1.1 Host: crowncommercialservice.bravosolution.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 10:18:59 UTC	2864	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 10:18:59 GMT Content-Type: text/html Content-Length: 94 Connection: close X-Powered-By: JAGGAER Set-Cookie: CLUSTER-NODE=ogcadm_lb2; Path=/; Secure; HttpOnly; SameSite=None X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Referrer-Policy: origin-when-cross-origin Content-Security-Policy: default-src http: wss: ws: data: blob: 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com; base-uri 'self'; frame-src blob: ; frame-ancestors 'self' app.pendo.io adopt.pendo.io .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com .ggap.it; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com flash.sncfholding-prod.aws.vsct.fr app.pendo.io adopt.pendo.io pendo-io-static.storage.googleapis.com cdn.pendo.io cnd.pendo.io data.pendo.io pendo-static-5691992481071104.storage.googleapis.com www.google.com www.gstatic.com fonts.gstatic.com www.recaptcha.net ajax.googleapis.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com vcc-na4.8x8.com vcc-na4b.8x8.com feedroll.com feed.mikle.com code.jquery.com maxcdn.bootstrapcdn.com cdn.walkme.com ec.walkme.com playerserver.walkme.com d3sbxpiag177w8.cloudfront.net pa [TRUNCATED] Accept-Ranges: bytes Last-Modified: Mon, 19 Dec 2022 02:14:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: AWSALBAPP-0=AAAAAAAAAABuUnx4+LjXEpprNYL1XMioWQb3jL+F4aNKJN6PUs8Y4bKx/w1DTp6d5p17aGgBMTiI9W9tGVeQpUkjoQfkLIWzQVo4umN7Shwyj4+iIZRimiwObEMvBK99VsMNKYpckaPkYmk=; Expires=Wed, 09 Oct 2024 10:18:59 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Wed, 09 Oct 2024 10:18:59 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Wed, 09 Oct 2024 10:18:59 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Wed, 09 Oct 2024 10:18:59 GMT; Path=/; SameSite=None; Secure
2024-10-02 10:18:59 UTC	94	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 2f 77 65 62 2f 6c 6f 67 69 6e 2e 68 74 6d 6c 22 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body> <meta http-equiv="refresh" content="0;url=/web/login.html"></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-10-02 10:18:59 UTC	1005	OUT	GET /web/login.html HTTP/1.1 Host: crowncommercialservice.bravosolution.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://crowncommercialservice.bravosolution.co.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLUSTER-NODE=ogcadm_lb2; AWSALBAPP-0=AAAAAAAAAABuUnx4+LjXEpprNYL1XMioWQb3jL+F4aNKJN6PUs8Y4bKx/w1DTp6d5p17aGgBMTiI9W9tGVeQpUkjoQfkLIWzQVo4umN7Shwyj4+iIZRimiwObEMvBK99VsMNKYpckaPkYmk=; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_
2024-10-02 10:18:59 UTC	2866	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 10:18:59 GMT Content-Type: text/html Content-Length: 6457 Connection: close X-Powered-By: JAGGAER Set-Cookie: CLUSTER-NODE=ogcadm_lb2; Path=/; Secure; HttpOnly; SameSite=None X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Referrer-Policy: origin-when-cross-origin Content-Security-Policy: default-src http: wss: ws: data: blob: 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com; base-uri 'self'; frame-src blob: ; frame-ancestors 'self' app.pendo.io adopt.pendo.io .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com .ggap.it; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com flash.sncfholding-prod.aws.vsct.fr app.pendo.io adopt.pendo.io pendo-io-static.storage.googleapis.com cdn.pendo.io cnd.pendo.io data.pendo.io pendo-static-5691992481071104.storage.googleapis.com www.google.com www.gstatic.com fonts.gstatic.com www.recaptcha.net ajax.googleapis.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com vcc-na4.8x8.com vcc-na4b.8x8.com feedroll.com feed.mikle.com code.jquery.com maxcdn.bootstrapcdn.com cdn.walkme.com ec.walkme.com playerserver.walkme.com d3sbxpiag177w8.cloudfront.net pa [TRUNCATED] Accept-Ranges: bytes Last-Modified: Mon, 19 Dec 2022 02:14:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: AWSALBAPP-0=AAAAAAAAAAClCvlyHCMVEoMGdVtOG5K4juSvCXemNrDtSEBgy4/a6NoMGmtaTdGOCWkRMFSEP7q03rPJX+RZ8zDVrAhvL6a3HwOAquG++tivMrAqkPfbPinCLb/FafKPIV5O/7gEa3nLjtw=; Expires=Wed, 09 Oct 2024 10:18:59 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Wed, 09 Oct 2024 10:18:59 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Wed, 09 Oct 2024 10:18:59 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Wed, 09 Oct 2024 10:18:59 GMT; Path=/; SameSite=None; Secure
2024-10-02 10:18:59 UTC	6457	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 74 69 74 6c 65 3e 43 72 6f 77 6e 20 43 6f 6d 6d 65 72 63 69 61 6c 20 53 65 72 76 69 63 65 20 43 26 61 6d 70 3b 53 4d 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2e 2e 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2d 38 64 38 31 31 62 38 63 33 62 61 64 62 63 30 62 30 65 32 66 36 65 32 35 64 33 36 36 30 61 39 36 63 63 30 63 63 61 37 39 39 33 65 36 66 33 32 65 39 38 37 38 35 66 32 30 35 66 63 34 30 39 30 37 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 Data Ascii: <!doctype html><html><head><meta charset="utf-8"><title>Crown Commercial Service C&SM</title><link rel="shortcut icon" href="../images/favicon-8d811b8c3badbc0b0e2f6e25d3660a96cc0cca7993e6f32e98785f205fc40907.ico" type="image/x-icon"><link

Timestamp	Bytes transferred	Direction	Data
2024-10-02 10:19:01 UTC	869	OUT	GET /web/default.css HTTP/1.1 Host: crowncommercialservice.bravosolution.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://crowncommercialservice.bravosolution.co.uk/web/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLUSTER-NODE=ogcadm_lb2; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; AWSALBAPP-0=AAAAAAAAAAClCvlyHCMVEoMGdVtOG5K4juSvCXemNrDtSEBgy4/a6NoMGmtaTdGOCWkRMFSEP7q03rPJX+RZ8zDVrAhvL6a3HwOAquG++tivMrAqkPfbPinCLb/FafKPIV5O/7gEa3nLjtw=
2024-10-02 10:19:01 UTC	2865	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 10:19:01 GMT Content-Type: text/css Content-Length: 7127 Connection: close X-Powered-By: JAGGAER Set-Cookie: CLUSTER-NODE=ogcadm_lb2; Path=/; Secure; HttpOnly; SameSite=None X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Referrer-Policy: origin-when-cross-origin Content-Security-Policy: default-src http: wss: ws: data: blob: 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com; base-uri 'self'; frame-src blob: ; frame-ancestors 'self' app.pendo.io adopt.pendo.io .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com .ggap.it; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com flash.sncfholding-prod.aws.vsct.fr app.pendo.io adopt.pendo.io pendo-io-static.storage.googleapis.com cdn.pendo.io cnd.pendo.io data.pendo.io pendo-static-5691992481071104.storage.googleapis.com www.google.com www.gstatic.com fonts.gstatic.com www.recaptcha.net ajax.googleapis.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com vcc-na4.8x8.com vcc-na4b.8x8.com feedroll.com feed.mikle.com code.jquery.com maxcdn.bootstrapcdn.com cdn.walkme.com ec.walkme.com playerserver.walkme.com d3sbxpiag177w8.cloudfront.net pa [TRUNCATED] Accept-Ranges: bytes Last-Modified: Mon, 19 Dec 2022 02:14:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: AWSALBAPP-0=AAAAAAAAAACJBP+aSDCZPJZuWU9Pgyj+m1l4IGZQ5pOMrG884bE3imsWU6p9qYKXi+AXtbLwzMeqm57coEUVP+K4FblBzSCupYTQoZ2oa5XMuVnQd0rTHpukqxfnCFdQkU72X3JJdqhAFAE=; Expires=Wed, 09 Oct 2024 10:19:01 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Wed, 09 Oct 2024 10:19:01 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Wed, 09 Oct 2024 10:19:01 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Wed, 09 Oct 2024 10:19:01 GMT; Path=/; SameSite=None; Secure
2024-10-02 10:19:01 UTC	7127	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 22 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 73 6f 75 72 63 65 73 61 6e 73 70 72 6f 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 73 6f 75 72 63 65 73 61 6e 73 70 72 6f 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 74 66 27 29 2c 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 73 6f 75 72 63 65 73 61 6e 73 70 72 6f 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b Data Ascii: @font-face { font-family: "Source Sans Pro"; src: url('../fonts/sourcesanspro.woff2') format('woff2'), url('../fonts/sourcesanspro.ttf') format('ttf'), url('../fonts/sourcesanspro.woff') format('woff'); font-weight: normal; font-style: normal;

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://crowncommercialservice.bravosolution.co.uk

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Windows Analysis Report
https://crowncommercialservice.bravosolution.co.uk

Timestamp	Bytes transferred	Direction	Data
2024-10-02 10:19:01 UTC	886	OUT	GET /esop/common-host/public/images/logo/powered.js HTTP/1.1 Host: crowncommercialservice.bravosolution.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://crowncommercialservice.bravosolution.co.uk/web/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLUSTER-NODE=ogcadm_lb2; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; AWSALBAPP-0=AAAAAAAAAAClCvlyHCMVEoMGdVtOG5K4juSvCXemNrDtSEBgy4/a6NoMGmtaTdGOCWkRMFSEP7q03rPJX+RZ8zDVrAhvL6a3HwOAquG++tivMrAqkPfbPinCLb/FafKPIV5O/7gEa3nLjtw=
2024-10-02 10:19:01 UTC	3057	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 10:19:01 GMT Content-Type: application/javascript Content-Length: 756 Connection: close X-Powered-By: JAGGAER Set-Cookie: CLUSTER-NODE=ogcadm_lb2; Path=/; Secure; HttpOnly; SameSite=None X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Referrer-Policy: origin-when-cross-origin ThreadLogIdentifier: ogcadm_lb2#Z/iFQQ#default task-12097#00164 Content-Security-Policy: default-src http: wss: ws: data: blob: 'self' .bravosolution.com .bravosolution.co.uk .tejari.com .app.jaggaer.com .jaggaer.com .de.jaggaer.com;base-uri 'self'; frame-src blob: ; frame-ancestors 'self' app.pendo.io adopt.pendo.io .webbo .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .tejari.com .jaggaer.com .de.jaggaer.com .combinenet.com .ggap.it; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' .bravosolution.com .bravosolution.co.uk .tejari.com .app.jaggaer.com .jaggaer.com .de.jaggaer.com flash.sncfholding-prod.aws.vsct.fr app.pendo.io adopt.pendo.io pendo-io-static.storage.googleapis.com cdn.pendo.io cnd.pendo.io data.pendo.io pendo-static-5691992481071104.storage.googleapis.com www.google.com www.gstatic.com fonts.gstatic.com www.recaptcha.net ajax.googleapis.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com vcc-na4.8x8.com vcc-na4b.8x8.com feedroll.com feed.mikle.com code.jquery [TRUNCATED] Accept-Ranges: bytes Last-Modified: Thu, 26 Sep 2024 13:35:04 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: AWSALBAPP-0=AAAAAAAAAAB5P7+zNdhJ7f2Z1hyupLTlUP39KwRFaOkamEnsnMAhizp9TK7C8bHLcz5Crk5cQMKz5zajoqTyjsFDLFJ2lF1OB6D2Nr4yJQTLIHx2EpM6RIsQ56iRHQzkyj5oe4Jnxz1TOns=; Expires=Wed, 09 Oct 2024 10:19:01 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Wed, 09 Oct 2024 10:19:01 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Wed, 09 Oct 2024 10:19:01 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Wed, 09 Oct 2024 10:19:01 GMT; Path=/; SameSite=None; Secure
2024-10-02 10:19:01 UTC	756	IN	Data Raw: 2f 2f 20 4a 61 76 61 53 63 72 69 70 74 20 44 6f 63 75 6d 65 6e 74 0d 0a 2f 2a 0d 0a 76 61 72 20 70 6f 77 65 72 20 3d 20 22 50 6f 77 65 72 65 64 20 62 79 20 22 3b 0d 0a 76 61 72 20 67 6f 20 3d 20 22 3c 61 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 61 67 67 61 65 72 2e 63 6f 6d 27 20 74 61 72 67 65 74 3d 27 5f 62 6c 61 6e 6b 27 3e 4a 41 47 47 41 45 52 3c 2f 61 3e 22 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 70 6f 77 65 72 20 2b 20 67 6f 29 3b 0d 0a 2a 2f 0d 0a 0d 0a 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6c 61 6e 67 20 3d 3d 20 27 65 6e 27 29 20 7b 20 0d 0a 20 20 20 20 76 61 72 20 70 6f 77 65 72 20 3d 20 22 50 6f 77 65 72 65 64 20 62 79 20 22 3b 0d 0a 7d 20 65 6c 73 65 20 69 66 20 28 Data Ascii: // JavaScript Document/var power = "Powered by ";var go = "<a href='http://www.jaggaer.com' target='_blank'>JAGGAER</a>";document.write(power + go);/if (document.documentElement.lang == 'en') { var power = "Powered by ";} else if (

Timestamp	Bytes transferred	Direction	Data
2024-10-02 10:19:01 UTC	927	OUT	GET /images/CCS_WHITE_SML_AW.png HTTP/1.1 Host: crowncommercialservice.bravosolution.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://crowncommercialservice.bravosolution.co.uk/web/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLUSTER-NODE=ogcadm_lb2; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; AWSALBAPP-0=AAAAAAAAAAClCvlyHCMVEoMGdVtOG5K4juSvCXemNrDtSEBgy4/a6NoMGmtaTdGOCWkRMFSEP7q03rPJX+RZ8zDVrAhvL6a3HwOAquG++tivMrAqkPfbPinCLb/FafKPIV5O/7gEa3nLjtw=
2024-10-02 10:19:01 UTC	2867	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 10:19:01 GMT Content-Type: image/png Content-Length: 31431 Connection: close X-Powered-By: JAGGAER Set-Cookie: CLUSTER-NODE=ogcadm_lb2; Path=/; Secure; HttpOnly; SameSite=None X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Referrer-Policy: origin-when-cross-origin Content-Security-Policy: default-src http: wss: ws: data: blob: 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com; base-uri 'self'; frame-src blob: ; frame-ancestors 'self' app.pendo.io adopt.pendo.io .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com .ggap.it; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com flash.sncfholding-prod.aws.vsct.fr app.pendo.io adopt.pendo.io pendo-io-static.storage.googleapis.com cdn.pendo.io cnd.pendo.io data.pendo.io pendo-static-5691992481071104.storage.googleapis.com www.google.com www.gstatic.com fonts.gstatic.com www.recaptcha.net ajax.googleapis.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com vcc-na4.8x8.com vcc-na4b.8x8.com feedroll.com feed.mikle.com code.jquery.com maxcdn.bootstrapcdn.com cdn.walkme.com ec.walkme.com playerserver.walkme.com d3sbxpiag177w8.cloudfront.net pa [TRUNCATED] Accept-Ranges: bytes Last-Modified: Mon, 19 Dec 2022 02:14:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: AWSALBAPP-0=AAAAAAAAAAByDbMWg9MAsjvkcqzcmBatyaXb7lxSlxi3ClEPwfTSGcRnUtGrQK3Xp55c95Ke6WVbXFhZv01Z1j4WR3Ps2FlcP18OqMweBA3sBWKchDxA9Vniosc4xWzXrWM/7FhqI+ZQ//o=; Expires=Wed, 09 Oct 2024 10:19:01 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Wed, 09 Oct 2024 10:19:01 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Wed, 09 Oct 2024 10:19:01 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Wed, 09 Oct 2024 10:19:01 GMT; Path=/; SameSite=None; Secure
2024-10-02 10:19:01 UTC	13517	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 8f 00 00 03 cd 08 03 00 00 00 37 1c ba d9 00 00 00 45 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 90 16 3e dc 00 00 00 16 74 52 4e 53 00 10 1f 20 2e 30 40 50 60 6a 70 80 90 a0 a6 b0 ba c0 c4 d0 e0 f0 4a 2c 19 11 00 00 7a 1b 49 44 41 54 78 da ec 9d db a2 ab 2a b7 a5 3b c5 16 29 91 a2 28 a1 bf ff a3 d6 85 9a 18 05 05 35 19 c9 5c ad 5d ec fd af 31 c7 f0 14 f9 d2 cf 10 41 0b 19 9e 34 08 3c 0c 08 82 fe 56 6e c4 51 6c f0 28 20 08 fa 43 09 22 12 91 99 99 bb e9 3f 21 08 82 fe 44 5d 43 44 9a 99 d9 13 11 0d 78 22 10 f4 87 e2 b5 cc 7f ea Data Ascii: PNGIHDR7EPLTE>tRNS .0@P`jpJ,zIDATx*;)(5\]1A4<VnQl( C"?!D]CDx"
2024-10-02 10:19:01 UTC	2867	IN	Data Raw: 5f 3d 2d e9 f1 1c 50 9f 0d 81 47 7f c1 a3 b3 13 ce d2 7b 76 c8 13 5b 57 0f 93 e5 14 78 1e 5b 99 35 4f 9a bc fd 96 bc 9c b3 43 9b 22 dc 37 08 3c fa 93 f8 91 3a 33 21 3f bb a7 59 2c 6b cf 58 aa 67 37 39 6c 8a 88 48 4c 66 52 52 c2 d5 0d e8 3e 35 d4 f2 d9 fb 02 41 e0 d1 a7 e3 d9 6d b5 15 61 b3 0b d6 d6 af 6f 39 26 c7 44 1c 8b 88 fa fd 51 b1 19 93 a7 af fc fd 53 37 07 41 e0 d1 fb 55 69 45 ec 0d 59 6c 4f 58 1b 9e a3 1a a3 cf 46 88 ee 70 32 63 b2 a9 4e de 75 73 01 73 21 21 f0 e8 8f f3 fd 35 56 c4 be fd 10 ea 7d 9f d5 54 ec c3 d1 43 62 4b 24 7b d7 cd f5 30 8e 20 f0 e8 cf eb 8f 84 bb c9 7e e8 4e f8 3e 8d 67 e6 68 94 3b 18 fc 9f 27 92 bc c7 fe 2b de c7 16 82 c0 a3 b7 aa bb c7 7e 78 69 f0 2f be 0f 39 96 27 b9 e2 6d 86 5e f9 79 68 52 95 35 07 0f e8 66 83 a0 2f a9 cf Data Ascii: _=-PG{v[Wx[5OC"7<:3!?Y,kXg79lHLfRR>5Amao9&DQS7AUiEYlOXFp2cNuss!!5V}TCbK${0 ~N>gh;'+~xi/9'm^yhR5f/
2024-10-02 10:19:01 UTC	15047	IN	Data Raw: 76 c8 65 b8 8e a6 5a f0 e8 9d 3c 52 5f 18 24 b8 3a f6 c2 df 32 bf 67 28 31 90 12 65 9a 5d e5 e5 a9 b6 36 80 64 4b 50 7b 47 cf 47 8b 12 6d e8 ef 79 64 be 98 47 fa dc 2d a5 aa 19 4f 84 4f b6 e7 0f f5 76 d8 3a 58 27 6a 4d 90 50 82 c0 5b 86 86 84 af b3 9d 21 f0 e8 8b 78 54 72 69 fe a6 e1 3d 6d 89 bb d3 57 67 03 9a cd 01 2b 03 48 4d 91 8b c8 77 38 ad fd b7 b5 12 41 ff 38 8f f4 4f f1 a8 c4 93 94 b7 15 16 27 43 48 cd a1 c3 76 50 bd d5 6d 6c 9b be 2e 22 de 15 31 a2 b0 82 aa 16 7d 8c 25 09 1e bd 11 16 a9 da bc ee 5b 79 54 f4 e5 dc df e2 ad 65 3d 36 7b e8 d2 1c d8 37 6e c3 b7 b6 0e 1a ae e8 f3 ba 9e 62 4c 1f 05 15 da e0 d1 87 79 a4 be 94 47 65 54 09 f7 59 7c 5d 41 8f bb ad a5 66 dc 1e ae 2e 46 56 66 f4 dc 61 1e a5 7c 5f 85 35 09 1e 81 47 c5 76 5b 7b e7 20 b1 70 1c Data Ascii: veZ<R_$:2g(1e]6dKP{GGmydG-OOv:X'jMP[!xTri=mWg+HMw8A8O'CHvPml."1}%[yTe=6{7nbLyGeTY\|]Af.FVfa\|_5Gv[{ p

Timestamp	Bytes transferred	Direction	Data
2024-10-02 10:19:02 UTC	921	OUT	GET /fonts/sourcesanspro.woff2 HTTP/1.1 Host: crowncommercialservice.bravosolution.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://crowncommercialservice.bravosolution.co.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://crowncommercialservice.bravosolution.co.uk/web/default.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLUSTER-NODE=ogcadm_lb2; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; AWSALBAPP-0=AAAAAAAAAAByDbMWg9MAsjvkcqzcmBatyaXb7lxSlxi3ClEPwfTSGcRnUtGrQK3Xp55c95Ke6WVbXFhZv01Z1j4WR3Ps2FlcP18OqMweBA3sBWKchDxA9Vniosc4xWzXrWM/7FhqI+ZQ//o=
2024-10-02 10:19:02 UTC	2880	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 10:19:02 GMT Content-Type: application/font-woff2 Content-Length: 27528 Connection: close X-Powered-By: JAGGAER Set-Cookie: CLUSTER-NODE=ogcadm_lb2; Path=/; Secure; HttpOnly; SameSite=None X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Referrer-Policy: origin-when-cross-origin Content-Security-Policy: default-src http: wss: ws: data: blob: 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com; base-uri 'self'; frame-src blob: ; frame-ancestors 'self' app.pendo.io adopt.pendo.io .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com .ggap.it; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com flash.sncfholding-prod.aws.vsct.fr app.pendo.io adopt.pendo.io pendo-io-static.storage.googleapis.com cdn.pendo.io cnd.pendo.io data.pendo.io pendo-static-5691992481071104.storage.googleapis.com www.google.com www.gstatic.com fonts.gstatic.com www.recaptcha.net ajax.googleapis.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com vcc-na4.8x8.com vcc-na4b.8x8.com feedroll.com feed.mikle.com code.jquery.com maxcdn.bootstrapcdn.com cdn.walkme.com ec.walkme.com playerserver.walkme.com d3sbxpiag177w8.cloudfront.net pa [TRUNCATED] Accept-Ranges: bytes Last-Modified: Mon, 19 Dec 2022 02:14:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: AWSALBAPP-0=AAAAAAAAAACLMp3Es9tIT6YnM8ajU7Y7GxHswAwCcxR6xz8eltLPIOXODTenSZBYjEmWRiBsww/zWicaWcDnXGcStJ7NmdUgTaLReuRh5BN99midYvwSFNhqchW9EcmAnIkj1Pwo7yFH5ck=; Expires=Wed, 09 Oct 2024 10:19:02 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Wed, 09 Oct 2024 10:19:02 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Wed, 09 Oct 2024 10:19:02 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Wed, 09 Oct 2024 10:19:02 GMT; Path=/; SameSite=None; Secure
2024-10-02 10:19:02 UTC	13504	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6b 88 00 12 00 00 00 01 63 50 00 00 6b 1d 00 02 05 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 26 1b 82 df 08 1c 86 0a 06 60 00 83 52 08 4a 09 84 65 11 08 0a 82 b7 68 82 9c 3f 01 36 02 24 03 87 28 0b 83 56 00 04 20 05 88 50 07 85 5c 0c 82 4c 5b 95 52 71 01 e7 6d 29 c7 dd 0e fc 86 ef 8a cf 9d 8c 5b 78 b7 43 ed c3 5e 3c 33 3b 10 c3 c6 41 18 63 fb f8 d9 ff ff 67 25 95 31 34 2d 9a b4 00 20 de b9 ff 20 44 50 08 39 19 a8 99 e1 24 14 68 89 9e 18 c8 c4 c8 c9 9a 24 6a 87 5a 55 1b 55 88 b6 bc 6b 63 37 1b d1 97 13 68 5e 97 cb e1 a9 f5 58 b2 49 7f 62 3b 37 2f 16 fd 3c 88 b0 d5 cc 10 82 f8 24 a2 95 6e 2f b0 67 c1 4b db 68 bf 2e 0b c9 13 f6 b3 cd 72 9d 66 1d 30 48 a6 a1 ff 0b 91 32 b2 3a e6 c1 f5 ea Data Ascii: wOF2kcPk`?FFTM&`RJeh?6$(V P\L[Rqm)[xC^<3;Acg%14- DP9$h$jZUUkc7h^XIb;7/<$n/gKh.rf0H2:
2024-10-02 10:19:02 UTC	2880	IN	Data Raw: fc db 96 db 8b fb dd 06 d7 84 66 f2 b1 d1 3c 75 48 ea 33 79 e2 5d 55 53 ed 39 1d 01 90 59 99 6d 74 91 7a 8c 6d eb 25 dc ae 6f 20 dc b3 f4 8d 70 d4 da 61 1e c0 50 98 79 b2 3b 86 96 86 37 95 e3 6b 45 7e 19 d4 36 90 8f a3 8a 81 69 fe 3f 53 4b 5f cb 46 96 ba 46 9f 7f 1b 05 e9 99 e7 d9 28 3e 61 a2 c0 7e f9 91 ff 07 ff ff da 31 98 7b 2a 71 1b d2 24 cd a1 b7 19 b9 cf a1 13 4f 55 ad 8c 8a 1d 6a 44 2e e1 91 c2 1a df ce 32 18 66 d8 e5 bd d9 cf 1b 29 eb 9b e5 94 32 1b 93 bd ca e8 de 57 30 00 f5 0d 71 7b eb c7 ca c9 35 a9 5f f9 26 62 21 c3 91 b1 18 46 2d 56 3b aa c9 67 b6 c1 66 62 b3 2f d6 08 e1 bc 72 06 d3 6a f6 8e ce 2c 9e 14 25 8f 88 cb 7b 01 ed bf 29 b7 05 f7 3f 18 88 9c be 32 f3 c2 f6 19 f9 f2 c0 d9 af 42 16 50 31 d3 cb 79 83 f0 dd 16 0f 7d ee 6f a3 23 7a b6 d2 Data Ascii: f<uH3y]US9Ymtzm%o paPy;7kE~6i?SK_FF(>a~1{*q$OUjD.2f)2W0q{5_&b!F-V;gfb/rj,%{)?2BP1y}o#z
2024-10-02 10:19:02 UTC	11144	IN	Data Raw: 81 e6 86 4c b8 85 57 52 52 4e ce 29 70 ec ce 93 09 fa bd 0a 2b 4a 9d ca e5 4b c0 0c 21 35 26 d7 bf 65 51 4c 65 e8 c9 64 8a 82 45 67 34 83 ae 42 93 23 3f 3b 93 47 a7 a4 f2 b1 89 3c 5a 6e 3d 58 98 21 db 4e c7 ad 4b 9b c1 e4 a8 de a7 86 18 8b f3 71 70 31 87 6c 8c c9 d4 ee 17 4b b6 7b bf 89 11 ba ed 00 3e e6 a8 0d 22 ca 73 ea 56 81 57 1b 9b b3 11 48 06 d8 3b e6 16 fc ee 05 4d 9f 4c 6a 8b 7d 69 7b a4 c7 6c 4b 12 09 e4 c1 3a 7f b4 aa 57 56 40 d4 c6 6d cf f5 29 f3 d3 c4 3a 89 aa 00 6a 77 35 6b d6 6b 3c 01 2f 91 96 d1 ec 17 d3 3b 4a 39 47 53 74 e7 21 01 b8 18 94 94 e4 1d e8 a9 5e 96 c4 8a ba c6 60 25 22 35 89 0e 17 6f 90 9c b5 12 3b c0 10 0e 40 96 2e 15 cd 04 a5 ae df 3d 2d a2 ae 97 24 f4 59 76 b5 54 12 fd de 74 14 a4 35 0a 25 76 78 0e b9 0c 2e 94 a0 1a 0b 0a 50 Data Ascii: LWRRN)p+JK!5&eQLedEg4B#?;G<Zn=X!NKqp1lK{>"sVWH;MLj}i{lK:WV@m):jw5kk</;J9GSt!^`%"5o;@.=-$YvTt5%vx.P

Timestamp	Bytes transferred	Direction	Data
2024-10-02 10:19:02 UTC	924	OUT	GET /images/icon-pointer.png HTTP/1.1 Host: crowncommercialservice.bravosolution.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://crowncommercialservice.bravosolution.co.uk/web/default.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLUSTER-NODE=ogcadm_lb2; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; AWSALBAPP-0=AAAAAAAAAAByDbMWg9MAsjvkcqzcmBatyaXb7lxSlxi3ClEPwfTSGcRnUtGrQK3Xp55c95Ke6WVbXFhZv01Z1j4WR3Ps2FlcP18OqMweBA3sBWKchDxA9Vniosc4xWzXrWM/7FhqI+ZQ//o=
2024-10-02 10:19:02 UTC	2866	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 10:19:02 GMT Content-Type: image/png Content-Length: 1166 Connection: close X-Powered-By: JAGGAER Set-Cookie: CLUSTER-NODE=ogcadm_lb2; Path=/; Secure; HttpOnly; SameSite=None X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Referrer-Policy: origin-when-cross-origin Content-Security-Policy: default-src http: wss: ws: data: blob: 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com; base-uri 'self'; frame-src blob: ; frame-ancestors 'self' app.pendo.io adopt.pendo.io .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com .ggap.it; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com flash.sncfholding-prod.aws.vsct.fr app.pendo.io adopt.pendo.io pendo-io-static.storage.googleapis.com cdn.pendo.io cnd.pendo.io data.pendo.io pendo-static-5691992481071104.storage.googleapis.com www.google.com www.gstatic.com fonts.gstatic.com www.recaptcha.net ajax.googleapis.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com vcc-na4.8x8.com vcc-na4b.8x8.com feedroll.com feed.mikle.com code.jquery.com maxcdn.bootstrapcdn.com cdn.walkme.com ec.walkme.com playerserver.walkme.com d3sbxpiag177w8.cloudfront.net pa [TRUNCATED] Accept-Ranges: bytes Last-Modified: Mon, 19 Dec 2022 02:14:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: AWSALBAPP-0=AAAAAAAAAABmcaZWOHmjnG33hDkya2WslxwgymEmBsP6Fch0C+sh1RyhUWS9piPOZZeaF0Jby70e1+NnX9x+my7acYOHQJ8cblzuwd8xCBo2pobbkvetIRxh7/fg9GkrOh2Isp9/IwOKUjA=; Expires=Wed, 09 Oct 2024 10:19:02 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Wed, 09 Oct 2024 10:19:02 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Wed, 09 Oct 2024 10:19:02 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Wed, 09 Oct 2024 10:19:02 GMT; Path=/; SameSite=None; Secure
2024-10-02 10:19:02 UTC	1166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 13 08 06 00 00 00 99 67 8d cf 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRgtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39

Timestamp	Bytes transferred	Direction	Data
2024-10-02 10:19:02 UTC	669	OUT	GET /esop/common-host/public/images/logo/powered.js HTTP/1.1 Host: crowncommercialservice.bravosolution.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLUSTER-NODE=ogcadm_lb2; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; AWSALBAPP-0=AAAAAAAAAAByDbMWg9MAsjvkcqzcmBatyaXb7lxSlxi3ClEPwfTSGcRnUtGrQK3Xp55c95Ke6WVbXFhZv01Z1j4WR3Ps2FlcP18OqMweBA3sBWKchDxA9Vniosc4xWzXrWM/7FhqI+ZQ//o=
2024-10-02 10:19:03 UTC	3057	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 10:19:02 GMT Content-Type: application/javascript Content-Length: 756 Connection: close X-Powered-By: JAGGAER Set-Cookie: CLUSTER-NODE=ogcadm_lb2; Path=/; Secure; HttpOnly; SameSite=None X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Referrer-Policy: origin-when-cross-origin ThreadLogIdentifier: ogcadm_lb2#Z/iFQQ#default task-12088#01087 Content-Security-Policy: default-src http: wss: ws: data: blob: 'self' .bravosolution.com .bravosolution.co.uk .tejari.com .app.jaggaer.com .jaggaer.com .de.jaggaer.com;base-uri 'self'; frame-src blob: ; frame-ancestors 'self' app.pendo.io adopt.pendo.io .webbo .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .tejari.com .jaggaer.com .de.jaggaer.com .combinenet.com .ggap.it; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' .bravosolution.com .bravosolution.co.uk .tejari.com .app.jaggaer.com .jaggaer.com .de.jaggaer.com flash.sncfholding-prod.aws.vsct.fr app.pendo.io adopt.pendo.io pendo-io-static.storage.googleapis.com cdn.pendo.io cnd.pendo.io data.pendo.io pendo-static-5691992481071104.storage.googleapis.com www.google.com www.gstatic.com fonts.gstatic.com www.recaptcha.net ajax.googleapis.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com vcc-na4.8x8.com vcc-na4b.8x8.com feedroll.com feed.mikle.com code.jquery [TRUNCATED] Accept-Ranges: bytes Last-Modified: Thu, 26 Sep 2024 13:35:04 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: AWSALBAPP-0=AAAAAAAAAAD/bP48V0smEFQl/ojD79TkMkH1OOlCqS3H5xrYxS+Oq8cjt5yMdxtStx2zN8tMfKq9saIq7lGq3ZbUUf49gAvD96yMInheKRsVg/mC7btk/6SyVV9x+GX9Uck584PgLEjriLY=; Expires=Wed, 09 Oct 2024 10:19:02 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Wed, 09 Oct 2024 10:19:02 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Wed, 09 Oct 2024 10:19:02 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Wed, 09 Oct 2024 10:19:02 GMT; Path=/; SameSite=None; Secure
2024-10-02 10:19:03 UTC	756	IN	Data Raw: 2f 2f 20 4a 61 76 61 53 63 72 69 70 74 20 44 6f 63 75 6d 65 6e 74 0d 0a 2f 2a 0d 0a 76 61 72 20 70 6f 77 65 72 20 3d 20 22 50 6f 77 65 72 65 64 20 62 79 20 22 3b 0d 0a 76 61 72 20 67 6f 20 3d 20 22 3c 61 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 61 67 67 61 65 72 2e 63 6f 6d 27 20 74 61 72 67 65 74 3d 27 5f 62 6c 61 6e 6b 27 3e 4a 41 47 47 41 45 52 3c 2f 61 3e 22 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 70 6f 77 65 72 20 2b 20 67 6f 29 3b 0d 0a 2a 2f 0d 0a 0d 0a 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6c 61 6e 67 20 3d 3d 20 27 65 6e 27 29 20 7b 20 0d 0a 20 20 20 20 76 61 72 20 70 6f 77 65 72 20 3d 20 22 50 6f 77 65 72 65 64 20 62 79 20 22 3b 0d 0a 7d 20 65 6c 73 65 20 69 66 20 28 Data Ascii: // JavaScript Document/var power = "Powered by ";var go = "<a href='http://www.jaggaer.com' target='_blank'>JAGGAER</a>";document.write(power + go);/if (document.documentElement.lang == 'en') { var power = "Powered by ";} else if (

Timestamp	Bytes transferred	Direction	Data
2024-10-02 10:19:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-02 10:19:03 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=109607 Date: Wed, 02 Oct 2024 10:19:03 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-02 10:19:03 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-02 10:19:04 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=109550 Date: Wed, 02 Oct 2024 10:19:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-02 10:19:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-02 10:19:04 UTC	983	OUT	GET /images/favicon-8d811b8c3badbc0b0e2f6e25d3660a96cc0cca7993e6f32e98785f205fc40907.ico HTTP/1.1 Host: crowncommercialservice.bravosolution.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://crowncommercialservice.bravosolution.co.uk/web/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLUSTER-NODE=ogcadm_lb2; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; AWSALBAPP-0=AAAAAAAAAAD/bP48V0smEFQl/ojD79TkMkH1OOlCqS3H5xrYxS+Oq8cjt5yMdxtStx2zN8tMfKq9saIq7lGq3ZbUUf49gAvD96yMInheKRsVg/mC7btk/6SyVV9x+GX9Uck584PgLEjriLY=
2024-10-02 10:19:04 UTC	2869	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 10:19:04 GMT Content-Type: image/x-icon Content-Length: 4598 Connection: close X-Powered-By: JAGGAER Set-Cookie: CLUSTER-NODE=ogcadm_lb2; Path=/; Secure; HttpOnly; SameSite=None X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Referrer-Policy: origin-when-cross-origin Content-Security-Policy: default-src http: wss: ws: data: blob: 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com; base-uri 'self'; frame-src blob: ; frame-ancestors 'self' app.pendo.io adopt.pendo.io .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com .ggap.it; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com flash.sncfholding-prod.aws.vsct.fr app.pendo.io adopt.pendo.io pendo-io-static.storage.googleapis.com cdn.pendo.io cnd.pendo.io data.pendo.io pendo-static-5691992481071104.storage.googleapis.com www.google.com www.gstatic.com fonts.gstatic.com www.recaptcha.net ajax.googleapis.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com vcc-na4.8x8.com vcc-na4b.8x8.com feedroll.com feed.mikle.com code.jquery.com maxcdn.bootstrapcdn.com cdn.walkme.com ec.walkme.com playerserver.walkme.com d3sbxpiag177w8.cloudfront.net pa [TRUNCATED] Accept-Ranges: bytes Last-Modified: Mon, 19 Dec 2022 02:14:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: AWSALBAPP-0=AAAAAAAAAAABLonaXE3bRJWvMbKC+L6/f3tZdnMqsvQfCq0TKflnSQRa8aJIfY/Bh7sHIJX0zCnMv4PcccEGhUdmoGTrNZmVnzjb0h7kmkNm+4HyfCYNa3MWu0SwnALeKf+BROm0FbDEE+I=; Expires=Wed, 09 Oct 2024 10:19:04 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Wed, 09 Oct 2024 10:19:04 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Wed, 09 Oct 2024 10:19:04 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Wed, 09 Oct 2024 10:19:04 GMT; Path=/; SameSite=None; Secure
2024-10-02 10:19:04 UTC	4598	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 01 00 04 00 28 01 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 2e 2d 31 00 20 1f 23 00 ff ff ff 00 74 73 76 00 f1 f1 f1 00 66 65 68 00 58 57 5a 00 ab ab ad 00 4a 49 4c 00 9d 9d 9f 00 90 8f 91 00 e3 e3 e4 00 d5 d5 d6 00 c7 c7 c8 00 b9 b9 ba 00 3c 3b 3f 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 02 dd dd dd db 21 11 11 3c d4 74 47 4e c5 11 11 bb cd 9e d7 db bd 11 16 b3 b7 7b ca dc 3b 81 1d e1 46 0a a0 34 1e d1 13 91 61 19 91 18 19 31 13 23 8b a2 4a 98 32 31 10 6d de 9c d7 9b d6 01 11 1f 81 a4 2a 18 f1 11 11 11 11 1d 71 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N( .-1 #tsvfehXWZJIL<;?!<tGN{;F4a1#J21m*q

Timestamp	Bytes transferred	Direction	Data
2024-10-02 10:19:06 UTC	706	OUT	GET /images/favicon-8d811b8c3badbc0b0e2f6e25d3660a96cc0cca7993e6f32e98785f205fc40907.ico HTTP/1.1 Host: crowncommercialservice.bravosolution.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLUSTER-NODE=ogcadm_lb2; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; AWSALBAPP-0=AAAAAAAAAAABLonaXE3bRJWvMbKC+L6/f3tZdnMqsvQfCq0TKflnSQRa8aJIfY/Bh7sHIJX0zCnMv4PcccEGhUdmoGTrNZmVnzjb0h7kmkNm+4HyfCYNa3MWu0SwnALeKf+BROm0FbDEE+I=
2024-10-02 10:19:06 UTC	2869	IN	HTTP/1.1 200 OK Date: Wed, 02 Oct 2024 10:19:06 GMT Content-Type: image/x-icon Content-Length: 4598 Connection: close X-Powered-By: JAGGAER Set-Cookie: CLUSTER-NODE=ogcadm_lb2; Path=/; Secure; HttpOnly; SameSite=None X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Referrer-Policy: origin-when-cross-origin Content-Security-Policy: default-src http: wss: ws: data: blob: 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com; base-uri 'self'; frame-src blob: ; frame-ancestors 'self' app.pendo.io adopt.pendo.io .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com .ggap.it; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .jaggaer.com flash.sncfholding-prod.aws.vsct.fr app.pendo.io adopt.pendo.io pendo-io-static.storage.googleapis.com cdn.pendo.io cnd.pendo.io data.pendo.io pendo-static-5691992481071104.storage.googleapis.com www.google.com www.gstatic.com fonts.gstatic.com www.recaptcha.net ajax.googleapis.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com vcc-na4.8x8.com vcc-na4b.8x8.com feedroll.com feed.mikle.com code.jquery.com maxcdn.bootstrapcdn.com cdn.walkme.com ec.walkme.com playerserver.walkme.com d3sbxpiag177w8.cloudfront.net pa [TRUNCATED] Accept-Ranges: bytes Last-Modified: Mon, 19 Dec 2022 02:14:26 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: AWSALBAPP-0=AAAAAAAAAAAPhoXSsnNitF+zaKNrESjYvfoZGqB3LoyOWMWogRLzGYG+W6nrESajs5m5Kvhxt5jvICdg/V5NrC+v4KHovl0jtwHOFa8VO/ELd6InLfmO8PHnYy8yDa4PGD3Tf25uknfA1WE=; Expires=Wed, 09 Oct 2024 10:19:06 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Wed, 09 Oct 2024 10:19:06 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Wed, 09 Oct 2024 10:19:06 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Wed, 09 Oct 2024 10:19:06 GMT; Path=/; SameSite=None; Secure
2024-10-02 10:19:06 UTC	4598	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 01 00 04 00 28 01 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 2e 2d 31 00 20 1f 23 00 ff ff ff 00 74 73 76 00 f1 f1 f1 00 66 65 68 00 58 57 5a 00 ab ab ad 00 4a 49 4c 00 9d 9d 9f 00 90 8f 91 00 e3 e3 e4 00 d5 d5 d6 00 c7 c7 c8 00 b9 b9 ba 00 3c 3b 3f 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 02 dd dd dd db 21 11 11 3c d4 74 47 4e c5 11 11 bb cd 9e d7 db bd 11 16 b3 b7 7b ca dc 3b 81 1d e1 46 0a a0 34 1e d1 13 91 61 19 91 18 19 31 13 23 8b a2 4a 98 32 31 10 6d de 9c d7 9b d6 01 11 1f 81 a4 2a 18 f1 11 11 11 11 1d 71 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N( .-1 #tsvfehXWZJIL<;?!<tGN{;F4a1#J21m*q

Timestamp	Bytes transferred	Direction	Data
2024-10-02 10:19:12 UTC	950	OUT	GET /esop/guest/go/public/lostPwd HTTP/1.1 Host: crowncommercialservice.bravosolution.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLUSTER-NODE=ogcadm_lb2; AWSALBAPP-1=_remove_; AWSALBAPP-2=_remove_; AWSALBAPP-3=_remove_; AWSALBAPP-0=AAAAAAAAAAAPhoXSsnNitF+zaKNrESjYvfoZGqB3LoyOWMWogRLzGYG+W6nrESajs5m5Kvhxt5jvICdg/V5NrC+v4KHovl0jtwHOFa8VO/ELd6InLfmO8PHnYy8yDa4PGD3Tf25uknfA1WE=
2024-10-02 10:19:12 UTC	3645	IN	HTTP/1.1 302 Found Date: Wed, 02 Oct 2024 10:19:12 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: no-cache, private, no-store, must-revalidate Cache-Control: post-check=0, pre-check=0 Set-Cookie: VISITORID=724c243a-a4c8-40f3-b202-3b343bc92b40; Path=/; Secure; SameSite=None Set-Cookie: CLUSTER-NODE=ogcadm_lb2; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: _tabSessionId=; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; Secure; SameSite=None Set-Cookie: JSESSIONID=VJ3699e4qcbp3rhyXWPDyXU3Y--XdVU_52cyWp1k.ogcadm_lb2; path=/esop/guest; secure; SameSite=None X-XSS-Protection: 0 Pragma: no-cache Location: https://crowncommercialservice.bravosolution.co.uk/esop/guest/forgot/password/view.si?_ncp=1727864352128.825317-1 Referrer-Policy: origin-when-cross-origin ThreadLogIdentifier: ogcadm_lb2#Z/iFQQ#default task-12087#01357 Content-Security-Policy: default-src http: wss: ws: data: blob: 'self' .bravosolution.com .bravosolution.co.uk .tejari.com .app.jaggaer.com .jaggaer.com .de.jaggaer.com;base-uri 'self'; frame-src blob: ; frame-ancestors 'self' app.pendo.io adopt.pendo.io .webbo .bravosolution.com .bravosolution.co.uk .app.jaggaer.com .tejari.com .jaggaer.com .de.jaggaer.com .combinenet.com .ggap.it; object-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' .bravosolution.com .bravosolution.co.uk .tejari.com .app.jaggaer.com .jaggaer.com .de.jaggaer.com flash.sncfholding-prod.aws.vsct.fr app.pendo.io adopt.pendo.io pendo-io-static.storage.googleapis.com cdn.pendo.io cnd.pendo.io data.pendo.io pendo-static-5691992481071104.storage.googleapis.com www.google.com www.gstatic.com fonts.gstatic.com www.recaptcha.net ajax.googleapis.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com tagmanager.google.com vcc-na4.8x8.com vcc-na4b.8x8.com feedroll.com feed.mikle.com code.jquery [TRUNCATED] Strict-Transport-Security: max-age=63072000; includeSubDomains; preload sameSite: None X-Powered-By: JAGGAER X-Permitted-Cross-Domain-Policies: none X-Frame-Options: SAMEORIGIN Last-Modified: Wed, 02 Oct 2024 10:19:12 GMT X-Content-Type-Options: nosniff Set-Cookie: AWSALBAPP-0=AAAAAAAAAAB+eBdRo8ovSseB1tQDBf4dp4G2hk68brJschP0Z7Y0EW7Ei7YifWYrOtTp0sfkCBQ/JiHu16rcy7keHexO010tWlkAUyJqljN4dsUVeHj62H3HSJU2RzCj60gxlZiqv0ymdHs=; Expires=Wed, 09 Oct 2024 10:19:12 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-1=_remove_; Expires=Wed, 09 Oct 2024 10:19:12 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-2=_remove_; Expires=Wed, 09 Oct 2024 10:19:12 GMT; Path=/; SameSite=None; Secure Set-Cookie: AWSALBAPP-3=_remove_; Expires=Wed, 09 Oct 2024 10:19:12 GMT; Path=/; SameSite=None; Secure