Edit tour

Windows Analysis Report
https://www.subarufuelpumpssettlement.com/

Overview

General Information

Sample URL:	https://www.subarufuelpumpssettlement.com/
Analysis ID:	1524441
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Drops files with a non-matching file extension (content does not match file extension)

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2316,i,10421881262024743713,15233110805317699260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6276 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.subarufuelpumpssettlement.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

Acrobat.exe (PID: 8164 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded (1).pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 7180 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7540 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2052 --field-trial-handle=1620,i,1030828127517406844,10251568133552731612,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

cleanup

HTTP traffic detected: POST /rest/v1/delivery?client=subaruofamerica&sessionId=5d186632d6bc4129bb9fad0844b99cab&version=2.8.2 HTTP/1.1Host: subaruofamerica.tt.omtrdc.netConnection: keep-aliveContent-Length: 1049sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.subaru.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.subaru.com/recallsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/xmlTransfer-Encoding: chunkedConnection: closeDate: Wed, 02 Oct 2024 17:58:52 GMTServer: AmazonS3X-Cache: Error from cloudfrontVia: 1.1 284574e4f15389d93bfcb84d196a92f0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P8X-Amz-Cf-Id: Nq_KrMK8PS0X04LLUnRkq8Pp6pPnox2DTP0Ao3vv1c4w-_wLgkHyuQ==

Source: https://www.subarufuelpumpssettlement.com/	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/admin/api/connectedapps.cms.extensions/asset?id=1ac35fcd-c4ed-4a74-8b96-6ded480491c8&languageId=1033&inline=true	HTTP Parser: No favicon
Source: https://www.subaru.com/recalls	HTTP Parser: No favicon
Source: https://www.subaru.com/recalls	HTTP Parser: No favicon
Source: https://www.subaru.com/recalls	HTTP Parser: No favicon
Source: https://www.subaru.com/recalls	HTTP Parser: No favicon
Source: https://www.subaru.com/recalls	HTTP Parser: No favicon
Source: https://www.subaru.com/recalls	HTTP Parser: No favicon
Source: https://www.subaru.com/recalls	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/faq	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/faq	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/faq	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/documents	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/documents	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/admin/api/connectedapps.cms.extensions/asset?id=c297b57c-b7ae-4217-9212-a311e2694d62&languageId=1033&inline=true	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/claim	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/claim	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded%20(1).pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded%20(1).pdf	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/dates	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/dates	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/faq#q-8	HTTP Parser: No favicon
Source: https://www.subarufuelpumpssettlement.com/faq#q-8	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:51548 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.4:51564 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:51544 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183

Source: chromecache_737.2.dr	String found in binary or memory: <subaru-cta data-cmp="subaru-cta" margin-bottom="mb-0" cta-url="http://www.youtube.com/user/Subaru" cta-target="_blank" :tab-index="0" :fadein-on-scroll="false" lang="en" soa-analytics-link-name="YouTube icon" img-config="{'srcXl':'/content/dam/subaru/en/common-images/icons/social_youtube_white.svg','srcLg':'','srcMd':'','srcSm':'','focusPointXl':'center-center','focusPointLg':'center-center','focusPointMm':'center-center','focusPointSm':'center-center','altTextXl':'YouTube icon','altTextLg':'','altTextMd':'','altTextSm':''}" :size-adapt="false"> equals www.youtube.com (Youtube)
Source: chromecache_737.2.dr	String found in binary or memory: <subaru-cta data-cmp="subaru-cta" margin-bottom="mb-0" cta-url="https://www.facebook.com/subaruofamerica" cta-target="_blank" :tab-index="0" :fadein-on-scroll="false" lang="en" soa-analytics-link-name="Facebook icon" img-config="{'srcXl':'/content/dam/subaru/en/common-images/icons/social_facebook_white.svg','srcLg':'','srcMd':'','srcSm':'','focusPointXl':'center-center','focusPointLg':'center-center','focusPointMm':'center-center','focusPointSm':'center-center','altTextXl':'Facebook icon','altTextLg':'','altTextMd':'','altTextSm':''}" :size-adapt="false"> equals www.facebook.com (Facebook)
Source: chromecache_739.2.dr, chromecache_450.2.dr, chromecache_475.2.dr, chromecache_479.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},dk:function(){e=zb()},od:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_503.2.dr	String found in binary or memory: _satellite.__registerScript('https://assets.adobedtm.com/ded5c54317a2/b31936cfa4aa/013b864476ba/RC16d92d37efd3455a8affef99140a5c5f-source.min.js', "<!-- Facebook Pixel Code -->\n<script>\n!function(f,b,e,v,n,t,s)\n{if(f.fbq)return;n=f.fbq=function(){n.callMethod?\nn.callMethod.apply(n,arguments):n.queue.push(arguments)};\nif(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';\nn.queue=[];t=b.createElement(e);t.async=!0;\nt.src=v;s=b.getElementsByTagName(e)[0];\ns.parentNode.insertBefore(t,s)}(window, document,'script','https://connect.facebook.net/en_US/fbevents.js');\nfbq('init', '144927317451189');\nfbq('track', 'PageView');\n</script>\n\n<noscript>\n<img height=\"1\" width=\"1\" style=\"display:none\"\nsrc=\"https://www.facebook.com/tr?id=144927317451189&ev=PageView&noscript=1\"/>\n</noscript>\n<!-- End Facebook Pixel Code -->"); equals www.facebook.com (Facebook)
Source: chromecache_487.2.dr, chromecache_450.2.dr, chromecache_475.2.dr, chromecache_647.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=qA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},tA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_739.2.dr, chromecache_450.2.dr, chromecache_475.2.dr, chromecache_479.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={ih:e,gh:f,hh:g,Sh:k,Th:m,Ie:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(VC(w,"iframe_api")\|\|VC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!MC&&TC(x[A],p.Ie))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_487.2.dr, chromecache_516.2.dr, chromecache_442.2.dr, chromecache_647.2.dr	String found in binary or memory: return b}IC.F="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_525.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_525.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_525.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_487.2.dr, chromecache_450.2.dr, chromecache_475.2.dr, chromecache_647.2.dr	String found in binary or memory: var XB=function(a,b,c,d,e){var f=Oz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Oz("fsl","nv.ids",[]):Oz("fsl","ids",[]);if(!g.length)return!0;var k=Tz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!By(k,Dy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.subarufuelpumpssettlement.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.subaru.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: solutions.invocacdn.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: subaruofamerica.demdex.net
Source: global traffic	DNS traffic detected: DNS query: s1.subaru.com
Source: global traffic	DNS traffic detected: DNS query: subaruofamerica.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: r.turn.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: gateway.foresee.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ads.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: pnapi.invoca.net
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: s7d1.scene7.com
Source: global traffic	DNS traffic detected: DNS query: lptag.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: accdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: lpcdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.search.spotxchange.com
Source: global traffic	DNS traffic detected: DNS query: mid.rkdms.com
Source: global traffic	DNS traffic detected: DNS query: analytics.foresee.com
Source: global traffic	DNS traffic detected: DNS query: va.idp.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: va.v.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: pixel-config.reddit.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: live.rezync.com
Source: global traffic	DNS traffic detected: DNS query: js-cdn.dynatrace.com
Source: global traffic	DNS traffic detected: DNS query: cdn.boomtrain.com
Source: global traffic	DNS traffic detected: DNS query: c1.rfihub.net
Source: global traffic	DNS traffic detected: DNS query: 927-ct.c3tag.com
Source: global traffic	DNS traffic detected: DNS query: 20858363p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: people.api.boomtrain.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: bf32445fqf.bf.dynatrace.com
Source: global traffic	DNS traffic detected: DNS query: img.c3tag.com
Source: global traffic	DNS traffic detected: DNS query: events.api.boomtrain.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: contextual.media.net
Source: global traffic	DNS traffic detected: DNS query: i6.liadm.com
Source: global traffic	DNS traffic detected: DNS query: a.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: bpi.rtactivate.com
Source: global traffic	DNS traffic detected: DNS query: x.dlx.addthis.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: ps.eyeota.net
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: privacyportal.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2316,i,10421881262024743713,15233110805317699260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.subarufuelpumpssettlement.com/"
Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded (1).pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2052 --field-trial-handle=1620,i,1030828127517406844,10251568133552731612,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2316,i,10421881262024743713,15233110805317699260,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2052 --field-trial-handle=1620,i,1030828127517406844,10251568133552731612,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 568
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 572
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 568	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 572	Jump to dropped file

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	11 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://www.redditstatic.com/ads/pixel.js	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://js.adsrvr.org/up_loader.1.1.0.js	0%	URL Reputation	safe
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://cdn.cookielaw.org/vendorlist/googleData.json	0%	URL Reputation	safe
https://cdn.cookielaw.org/vendorlist/iab2Data.json	0%	URL Reputation	safe

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_739.2.dr, chromecache_450.2.dr, chromecache_475.2.dr, chromecache_479.2.dr	false	URL Reputation: safe	unknown
https://assets.adobedtm.com/ded5c54317a2/b31936cfa4aa/013b864476ba/RC142612ca377e4ce98489558b4b4e017	chromecache_590.2.dr	false		unknown
http://www.___________.com/)	chromecache_572.2.dr, downloaded (1).pdf.crdownload.0.dr, 16bfeac7-e626-47af-a4c5-f32aadbef8f3.tmp.0.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_681.2.dr	false	URL Reputation: safe	unknown
https://assets.adobedtm.com/ded5c54317a2/b31936cfa4aa/launch-8808b063e474.js	chromecache_524.2.dr, chromecache_477.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_678.2.dr, chromecache_642.2.dr	false		unknown
https://secure.subarufuelpumpssettlement.com/lookup	chromecache_624.2.dr, chromecache_529.2.dr, chromecache_690.2.dr, chromecache_706.2.dr	false		unknown
http://www.javascripter.net/faq/browsern.htm	chromecache_694.2.dr, chromecache_454.2.dr	false		unknown
http://www.smartphoneperformancesettlement.com/)	chromecache_572.2.dr, downloaded (1).pdf.crdownload.0.dr, 16bfeac7-e626-47af-a4c5-f32aadbef8f3.tmp.0.dr	false		unknown
https://www.foresee.com/privacy-policy/	chromecache_733.2.dr, chromecache_628.2.dr	false		unknown
https://assets.adobedtm.com/extensions/EPe51f9b26f7c243dfa8d1d3ea2bf16f5f/AppMeasurement_Module_Acti	chromecache_646.2.dr, chromecache_549.2.dr	false		unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_725.2.dr	false	URL Reputation: safe	unknown
https://s7d1.scene7.com/is/image/scom/NHTSA	chromecache_737.2.dr	false		unknown
http://solutions.invocacdn.com/js/invoca-4.34.0.min.js	chromecache_649.2.dr, chromecache_666.2.dr	false		unknown
https://connect.facebook.net/	chromecache_718.2.dr, chromecache_566.2.dr, chromecache_525.2.dr	false	URL Reputation: safe	unknown
https://assets.prod.analytics.dealer.com/pixall/pix-aop.min.js	chromecache_578.2.dr, chromecache_590.2.dr	false		unknown
http://ianlunn.co.uk/	chromecache_681.2.dr	false		unknown
https://github.com/IanLunn/Hover	chromecache_681.2.dr	false		unknown
https://assets.adobedtm.com/ded5c54317a2/b31936cfa4aa/013b864476ba/RC0948862fd47b4ce8a70b3484c7e4339	chromecache_459.2.dr	false		unknown
https://unifiedid.com/docs/sdks/client-side-identity#event-types-and-payload-details	chromecache_542.2.dr, chromecache_698.2.dr	false		unknown
https://www.foresee.com/sms-terms-and-conditions/	chromecache_733.2.dr, chromecache_628.2.dr	false		unknown
http://www.website.com/)	chromecache_572.2.dr, downloaded (1).pdf.crdownload.0.dr, 16bfeac7-e626-47af-a4c5-f32aadbef8f3.tmp.0.dr	false		unknown
https://cdn.cookielaw.org	chromecache_547.2.dr, chromecache_687.2.dr	false		unknown
http://www.no-margin-for-errors.com)	chromecache_480.2.dr, chromecache_490.2.dr	false		unknown
https://github.com/InteractiveAdvertisingBureau/Global-Privacy-Platform/blob/main/Core/CMP%20API%20S	chromecache_542.2.dr, chromecache_698.2.dr	false		unknown
https://www.dynatrace.com/company/trust-center/customers/reports/	chromecache_738.2.dr, chromecache_742.2.dr	false		unknown
https://js-cdn.dynatrace.com/jstag/147f84b2bdc/ruxitagent_ICA7NVfghqrux_10299241001084140.js	chromecache_738.2.dr, chromecache_742.2.dr	false		unknown
https://assets.adobedtm.com/ded5c54317a2/b31936cfa4aa/013b864476ba/RC1d8cc4b6e5134800b3fdd3415330e56	chromecache_748.2.dr	false		unknown
https://cdn.cookielaw.org/vendorlist/googleData.json	chromecache_547.2.dr, chromecache_687.2.dr	false	URL Reputation: safe	unknown
https://device.4seeresults.com	chromecache_628.2.dr	false		unknown
https://global.prod.uidapi.com	chromecache_542.2.dr, chromecache_698.2.dr	false		unknown
https://assets.adobedtm.com/ded5c54317a2/b31936cfa4aa/013b864476ba/RC16d92d37efd3455a8affef99140a5c5	chromecache_503.2.dr	false		unknown
https://cdn.cookielaw.org/vendorlist/iab2Data.json	chromecache_547.2.dr, chromecache_687.2.dr	false	URL Reputation: safe	unknown
http://instagram.com/subaru_usa	chromecache_737.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
37.252.171.149	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
54.165.217.33	people.api.boomtrain.com	United States	14618	AMAZON-AESUS	false
185.89.210.153	unknown	Germany	29990	ASN-APPNEXUS	false
18.172.112.57	dt9s2nur7u2e9.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
13.224.189.98	unknown	United States	16509	AMAZON-02US	false
66.235.152.225	unknown	United States	15224	OMNITUREUS	false
66.235.152.221	adobetarget.data.adobedc.net	United States	15224	OMNITUREUS	false
52.7.15.254	unknown	United States	14618	AMAZON-AESUS	false
151.101.65.140	unknown	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
157.240.252.13	unknown	United States	32934	FACEBOOKUS	false
104.18.87.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
63.140.62.17	unknown	United States	15224	OMNITUREUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
65.9.66.84	unknown	United States	16509	AMAZON-02US	false
54.82.242.150	unknown	United States	14618	AMAZON-AESUS	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
216.58.212.162	unknown	United States	15169	GOOGLEUS	false
34.252.162.78	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.186.130	td.doubleclick.net	United States	15169	GOOGLEUS	false
13.224.189.35	d1vb8d7cedz7p0.cloudfront.net	United States	16509	AMAZON-02US	false
23.21.150.78	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
46.228.164.13	d-ams1.turn.com	United Kingdom	56396	TURNGB	false
46.228.164.11	presentation-ams1.turn.com	United Kingdom	56396	TURNGB	false
18.172.112.82	unknown	United States	3	MIT-GATEWAYSUS	false
172.217.18.98	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.252.35	unknown	United States	32934	FACEBOOKUS	false
143.204.215.98	unknown	United States	16509	AMAZON-02US	false
172.64.41.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
3.233.202.34	unknown	United States	14618	AMAZON-AESUS	false
208.89.15.170	va.idp.liveperson.net	United States	11054	LIVEPERSONUS	false
150.171.27.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.129.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
65.9.66.7	d1smr1lmx74eg3.cloudfront.net	United States	16509	AMAZON-02US	false
52.58.104.46	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
13.32.27.99	live.rezync.com	United States	7018	ATT-INTERNET4US	false
23.195.76.153	unknown	United States	2914	NTT-COMMUNICATIONS-2914US	false
104.18.32.137	privacyportal.onetrust.com	United States	13335	CLOUDFLARENETUS	false

IP
192.168.2.4
192.168.2.5

Name	IP	Active	Malicious	Reputation
subaru.com.ssl.sc.omtrdc.net	63.140.62.27	true	false	unknown
d-ams1.turn.com	46.228.164.13	true	false	unknown
live.rezync.com	13.32.27.99	true	false	unknown
stats.g.doubleclick.net	142.251.173.157	true	false	unknown
img.c3tag.com	192.65.229.43	true	false	unknown
cm.g.doubleclick.net	172.217.18.98	true	false	unknown
dt9s2nur7u2e9.cloudfront.net	18.172.112.57	true	false	unknown
927-ct.c3tag.com	192.65.229.36	true	false	unknown
idaas-ext.cph.liveintent.com	23.21.150.78	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
js-cdn.dynatrace.com	52.222.236.111	true	false	unknown
idaas6.cph.liveintent.com	34.194.53.2	true	false	unknown
match.adsrvr.org	3.33.220.150	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	44.205.71.210	true	false	unknown
events.api.boomtrain.com	18.235.124.220	true	false	unknown
us-u.openx.net	34.98.64.218	true	false	unknown
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	52.58.104.46	true	false	unknown
bf32445fqf.bf.dynatrace.com	3.230.25.79	true	false	unknown
pnapi-stateless-868251922.us-east-1.elb.amazonaws.com	54.158.97.201	true	false	unknown
dualstack.reddit.map.fastly.net	151.101.129.140	true	false	unknown
analytics-alv.google.com	216.239.32.181	true	false	unknown
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	52.209.249.174	true	false	unknown
googleads.g.doubleclick.net	142.250.186.98	true	false	unknown
ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com	54.166.78.246	true	false	unknown
reddit.map.fastly.net	151.101.129.140	true	false	unknown
presentation-ams1.turn.com	46.228.164.11	true	false	unknown
td.doubleclick.net	142.250.186.130	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	18.214.213.210	true	false	unknown
cdn.cookielaw.org	104.18.87.42	true	false	unknown
mid.rkdms.com	44.196.165.185	true	false	unknown
va.idp.liveperson.net	208.89.15.170	true	false	unknown
chrome.cloudflare-dns.com	172.64.41.3	true	false	unknown
people.api.boomtrain.com	54.165.217.33	true	false	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.103.101	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
contextual.media.net	88.221.168.23	true	false	unknown
adobetarget.data.adobedc.net	66.235.152.221	true	false	unknown
insight.adsrvr.org	3.33.220.150	true	false	unknown
ps.eyeota.net	52.57.150.20	true	false	unknown
scontent.xx.fbcdn.net	157.240.247.8	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
privacyportal.onetrust.com	104.18.32.137	true	false	unknown
d1tcwf12y4kqv3.cloudfront.net	18.244.18.32	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	34.252.162.78	true	false	unknown
d1vb8d7cedz7p0.cloudfront.net	13.224.189.35	true	false	unknown
d279u996ipxqqp.cloudfront.net	18.172.112.45	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.22	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
d1smr1lmx74eg3.cloudfront.net	65.9.66.7	true	false	unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false	unknown
dosnujlvxkgze.cloudfront.net	143.204.215.42	true	false	unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	unknown
ib.anycast.adnxs.com	37.252.171.149	true	false	unknown
geolocation.onetrust.com	172.64.155.119	true	false	unknown
alb.reddit.com	unknown	unknown	false	unknown
a.rfihub.com	unknown	unknown	false	unknown
va.v.liveperson.net	unknown	unknown	false	unknown
solutions.invocacdn.com	unknown	unknown	false	unknown
cm.everesttech.net	unknown	unknown	false	unknown
pnapi.invoca.net	unknown	unknown	false	unknown
www.subaru.com	unknown	unknown	false	unknown
subaruofamerica.tt.omtrdc.net	unknown	unknown	false	unknown
i6.liadm.com	unknown	unknown	false	unknown
www.redditstatic.com	unknown	unknown	false	unknown
js.adsrvr.org	unknown	unknown	false	unknown
accdn.lpsnmedia.net	unknown	unknown	false	unknown
x1.i.lencr.org	unknown	unknown	false	unknown
assets.adobedtm.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
d.turn.com	unknown	unknown	false	unknown
partners.tremorhub.com	unknown	unknown	false	unknown
sync-tm.everesttech.net	unknown	unknown	false	unknown
s1.subaru.com	unknown	unknown	false	unknown
p.rfihub.com	unknown	unknown	false	unknown
lpcdn.lpsnmedia.net	unknown	unknown	false	unknown
c1.rfihub.net	unknown	unknown	false	unknown
cdn.boomtrain.com	unknown	unknown	false	unknown
image2.pubmatic.com	unknown	unknown	false	unknown
pixel-config.reddit.com	unknown	unknown	false	unknown
20858363p.rfihub.com	unknown	unknown	false	unknown
ads.scorecardresearch.com	unknown	unknown	false	unknown
subaruofamerica.demdex.net	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
aa.agkn.com	unknown	unknown	false	unknown
www.subarufuelpumpssettlement.com	unknown	unknown	false	unknown
x.bidswitch.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
r.turn.com	unknown	unknown	false	unknown
i.liadm.com	unknown	unknown	false	unknown
gateway.foresee.com	unknown	unknown	false	unknown
x.dlx.addthis.com	unknown	unknown	false	unknown
s7d1.scene7.com	unknown	unknown	false	unknown
analytics.foresee.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
sync.search.spotxchange.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://bf32445fqf.bf.dynatrace.com/bf?type=js3&sn=v_4_srv_-2D14_sn_G8G2M609IU9U531276F4DT06V2U5ALIH&svrid=-14&flavor=cors&vi=UHUUKFBVIACREQMJPRKARKRFEHKMUEOH-0&modifiedSince=1710843148094&rf=https%3A%2F%2Fwww.subaru.com%2Frecalls&bp=3&app=03b0f856cc7e7c0c&crc=2785619934&en=akvgmeau&end=1	false		unknown
https://us-u.openx.net/w/1.0/sd?cc=1&id=537148856&val=Zv2JwQAAANrJwgOV	false		unknown
https://pnapi.invoca.net/2199/na.jsonp?network_id=2199&js_version=4.34.0&tag_id=2199%2F0059851491&request_data_shared_params=%7B%22invoca_id%22%3A%22i-aa5ec8da-42d7-4bc8-b6dc-6c65f8108deb%22%2C%22utm_medium%22%3A%22direct%22%2C%22utm_source%22%3A%22direct%22%2C%22body_style%22%3Anull%2C%22calling_page%22%3A%22www.subaru.com%2Frecalls%22%2C%22comm_segment%22%3Anull%2C%22DEALER_NUMBER%22%3Anull%2C%22device%22%3A%22desktop%22%2C%22domain_name%22%3A%22www.subaru.com%22%2C%22ga_api_secret%22%3Anull%2C%22gclid%22%3Anull%2C%22gclsrc%22%3Anull%2C%22item_category%22%3Anull%2C%22item_color%22%3Anull%2C%22item_condition%22%3Anull%2C%22item_fuel_type%22%3Anull%2C%22item_inventory_date%22%3Anull%2C%22item_number%22%3Anull%2C%22item_price%22%3Anull%2C%22item_type%22%3Anull%2C%22item_variant%22%3Anull%2C%22landing_page%22%3A%22https%3A%2F%2Fwww.subaru.com%2Frecalls%22%2C%22make%22%3Anull%2C%22mc_id%22%3Anull%2C%22model%22%3Anull%2C%22msclkid%22%3Anull%2C%22page_type%22%3Anull%2C%22provider%22%3Anull%2C%22region%22%3Anull%2C%22REGION_CODE%22%3Anull%2C%22SALES_DISTRICT%22%3Anull%2C%22SALES_DISTRICT_backup%22%3Anull%2C%22sd_adgroup%22%3Anull%2C%22sd_adid%22%3Anull%2C%22sd_campaign%22%3Anull%2C%22sd_campaign_type%22%3Anull%2C%22sd_channel%22%3Anull%2C%22sd_digadcid%22%3Anull%2C%22sd_keyword%22%3Anull%2C%22sd_program%22%3Anull%2C%22SERVICE_DISTRICT%22%3Anull%2C%22stock_type%22%3Anull%2C%22TERMIN_DATE%22%3Anull%2C%22tier%22%3Anull%2C%22trim%22%3Anull%2C%22utm_campaign%22%3Anull%2C%22utm_content%22%3Anull%2C%22utm_term%22%3Anull%2C%22vehicle_status%22%3Anull%2C%22vin%22%3Anull%2C%22website_journey%22%3A%22%2Frecalls%22%2C%22year%22%3Anull%2C%22ga_measurement_id%22%3A%22G-ETDQ32N89Y%22%2C%22ga_session_id%22%3A%221727891910%22%2C%22g_cid%22%3A%221671993217.1727891911%22%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fwww.subaru.com%2Frecalls%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A4%2C%22platform%22%3A%22Win32%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&jsoncallback=json_rr2&	false		unknown
https://bf32445fqf.bf.dynatrace.com/bf?type=js3&sn=v_4_srv_19_sn_G8G2M609IU9U531276F4DT06V2U5ALIH_app-3A03b0f856cc7e7c0c_1_ol_0_perc_100000_mul_1&svrid=19&flavor=cors&vi=UHUUKFBVIACREQMJPRKARKRFEHKMUEOH-0&modifiedSince=1727820726508&rf=https%3A%2F%2Fwww.subaru.com%2Frecalls&bp=3&app=03b0f856cc7e7c0c&crc=2062649277&en=akvgmeau&end=1	false		unknown
https://www.redditstatic.com/ads/pixel.js	false	URL Reputation: safe	unknown
https://i.liadm.com/s/64581?bidder_id=200442&bidder_uuid=f2e7d96f-83b0-4ccf-bebf-6b9f48382578:1727891931.7568486&_=1727891933.3617895&_li_chk=true&previous_uuid=011007d27618416bbe2bdb2a321425f9	false		unknown
https://idsync.rlcdn.com/365868.gif?partner_uid=57763684269549985822374227371999349499	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme1/js/search.js?v=4	false		unknown
https://gateway.foresee.com/sites/subaru/production/gateway.min.js	false		unknown
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw==&piggybackCookie=5134455426554916901&r=	false		unknown
https://www.subarufuelpumpssettlement.com/common/js/sticky.js?v=0.2	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1220515312433591&ev=PageView&dl=https%3A%2F%2Fwww.subarufuelpumpssettlement.com%2Fclaim&rl=&if=false&ts=1727891915126&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1727891877030.629555982831073790&ler=empty&cdl=API_unavailable&it=1727891915050&coo=false&tm=1&rqm=FGET	false		unknown
https://s1.subaru.com/b/ss/subarucomv2global/10/JS-2.24.0-LEWM/s96256782479243?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=2%2F9%2F2024%2013%3A58%3A48%203%20240&d.&nsid=0&jsonv=1&.d&sdid=4337F99852692DA8-730592E0AF8176DC&mid=67855616084058719243382224319171519737&aamlh=6&ce=UTF-8&pageName=subaru%3Arecalls&g=https%3A%2F%2Fwww.subaru.com%2Frecalls&cc=USD&events=event2&v24=vehicle%20recalls%20form&pe=lnk_o&pev2=Form%20Tracking%20-%20Impressions&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=94001C8B532957140A490D4D%40AdobeOrg&AQE=1	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme4/js/jquery.prettyPhoto.js	false		unknown
https://idsync.rlcdn.com/1000.gif?memo=CKyqFhIxCi0IARCYEhomNTc3NjM2ODQyNjk1NDk5ODU4MjIzNzQyMjczNzE5OTkzNDk0OTkQABoNCL-T9rcGEgUI6AcQAEIASgA	false		unknown
https://cdn.cookielaw.org/scripttemplates/202401.2.0/assets/v2/otPcTab.json	false		unknown
https://r.turn.com/r/du/id/L2NzaWQvMS9zcGlkLzU/url/https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D375%26dpuuid%3DPARTNER_UUID	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme4/images/base-works.png	false		unknown
https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D158%26code%3DZv2JwQAAANrJwgOV	false		unknown
https://www.subarufuelpumpssettlement.com/dates	false		unknown
https://alb.reddit.com/rp.gif?ts=1727891923841&id=t2_26tiny3f&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=6f851d06-229a-4387-971d-41a676af5de3&aaid=0000000000000000000000000000000000000000000000000000000000000001&em=0000000000000000000000000000000000000000000000000000000000000001&external_id=0000000000000000000000000000000000000000000000000000000000000001&idfa=0000000000000000000000000000000000000000000000000000000000000001&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=	false		unknown
https://ps.eyeota.net/match/bounce/?uid=5134455426554916901&bid=omt9pi0	false		unknown
https://www.subarufuelpumpssettlement.com/common/js/sticky-scroll.js?v=0.2	false		unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false	URL Reputation: safe	unknown
https://cdn.cookielaw.org/scripttemplates/202401.2.0/assets/otCenterRounded.json	false		unknown
https://dpm.demdex.net/ibs:dpid=1121&dpuuid=5134455426554916901&redir=	false		unknown
https://cdn.cookielaw.org/consent/88b2e15d-16bd-4b10-8ff1-68c55f87db60/88b2e15d-16bd-4b10-8ff1-68c55f87db60.json	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme4/css/theme4.min.css?v1.2	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme4/js/jquery.isotope.min.js	false		unknown
https://connect.facebook.net/signals/config/1220515312433591?v=2.9.170&r=stable&domain=www.subarufuelpumpssettlement.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112	false		unknown
https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=3d12a4a1e18f1e464bbbb4cdf00c2b8a&k=subaru-of-america-pixel-0133&zmpID=subaru-of-america&cache_buster=1727891928814&page_referrer=&PageUrl=https%3A%2F%2Fwww.subaru.com%2Frecalls	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme4/js/jquery-easing.js	false		unknown
https://gateway.foresee.com/code/19.13.0-fs/fs.compress.js	false		unknown
https://www.subarufuelpumpssettlement.com/common/fonts/rawline-700.woff2	false		unknown
https://www.subarufuelpumpssettlement.com/faq#q-8	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme4/css/print.css	false		unknown
https://bpi.rtactivate.com/tag/?id=11017&user_id=5134455426554916901	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme4/css/flexslider.css	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme4/css/bootstrap5.css	false		unknown
https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WnYySndRQUFBTnJKd2dPVg==	false		unknown
https://solutions.invocacdn.com/js/networks/2199/0059851491/tag-live.js	false		unknown
https://www.subarufuelpumpssettlement.com/	false		unknown
https://dpm.demdex.net/ibs:dpid=470&dpuuid=8155357215279845113	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme4/js/jquery.flexslider.js	false		unknown
https://www.subarufuelpumpssettlement.com/claim	false		unknown
https://match.adsrvr.org/track/upb/?adv=ofk8356&ref=https%3A%2F%2Fwww.subaru.com%2Frecalls&upid=qoapa13&upv=1.1.6&paapi=1	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme4/css/hover-min.css	false		unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://dpm.demdex.net/ibs:dpid=375&dpuuid=8155357215279845113	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=144927317451189&ev=PageView&dl=https%3A%2F%2Fwww.subaru.com%2Frecalls&rl=&if=false&ts=1727891926370&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4126&fbp=fb.1.1727891926365.595080738202137392&cs_est=true&ler=empty&cdl=API_unavailable&it=1727891923873&coo=false&rqm=FGET	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme4/css/theme4fix.css?v=4	false		unknown
https://analytics.foresee.com/ingest/events	false		unknown
https://www.facebook.com/tr/?id=144927317451189&ev=PageView&dl=https%3A%2F%2Fwww.subaru.com%2Frecalls&rl=&if=false&ts=1727891926370&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4126&fbp=fb.1.1727891926365.595080738202137392&cs_est=true&ler=empty&cdl=API_unavailable&it=1727891923873&coo=false&rqm=GET	false		unknown
https://www.subarufuelpumpssettlement.com/common/bootstrap/5.1.3/js/bootstrap.bundle.min.js	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme4/js/jquery.placeholder.min.js	false		unknown
https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEEWolUoEp3p8ZD4c93d_Nr8&google_cver=1?gdpr=0&gdpr_consent=	false		unknown
https://cdn.cookielaw.org/logos/1d87978c-8b58-46ba-83c1-acbc9aa41e6a/ac7bb819-b832-41c6-a0e1-06710faf6ed5/9f7272a7-2a6a-4ebd-af88-fbcd86defee9/1389-20210902154751.png	false		unknown
https://dpm.demdex.net/ibs:dpid=411&dpuuid=Zv2JwQAAANrJwgOV	false		unknown
https://insight.adsrvr.org/track/up?adv=ofk8356&ref=https%3A%2F%2Fwww.subaru.com%2Frecalls&upid=qoapa13&upv=1.1.6&paapi=1	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1220515312433591&ev=PageView&dl=https%3A%2F%2Fwww.subarufuelpumpssettlement.com%2Ffaq%23q-8&rl=&if=false&ts=1727891923722&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1727891877030.629555982831073790&ler=empty&cdl=API_unavailable&it=1727891923535&coo=false&tm=1&rqm=FGET	false		unknown
https://us-u.openx.net/w/1.0/sd?id=537148856&val=Zv2JwQAAANrJwgOV	false		unknown
https://www.subarufuelpumpssettlement.com/common/bootstrap/5.1.3/css/bootstrap.min.css	false		unknown
https://img.c3tag.com/x.gif	false		unknown
https://www.subarufuelpumpssettlement.com/themes/theme4/js/jquery.backstretch.min.js	false		unknown
https://subaruofamerica.tt.omtrdc.net/rest/v1/delivery?client=subaruofamerica&sessionId=5d186632d6bc4129bb9fad0844b99cab&version=2.8.2	false		unknown
https://www.subarufuelpumpssettlement.com/common/fonts/rawline-700i.woff2	false		unknown

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1524441
Start date and time:	2024-10-02 19:56:48 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.subarufuelpumpssettlement.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@60/581@268/86
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.subarufuelpumpssettlement.com/admin/api/connectedapps.cms.extensions/asset?id=1ac35fcd-c4ed-4a74-8b96-6ded480491c8&languageId=1033&inline=true Browse: https://www.subaru.com/recalls Browse: https://www.subarufuelpumpssettlement.com/documents Browse: https://www.subarufuelpumpssettlement.com/faq Browse: https://www.subarufuelpumpssettlement.com/admin/api/connectedapps.cms.extensions/asset?id=c297b57c-b7ae-4217-9212-a311e2694d62&languageId=1033&inline=true Browse: https://www.subarufuelpumpssettlement.com/claim Browse: https://www.subarufuelpumpssettlement.com/dates Browse: https://www.subarufuelpumpssettlement.com/faq#q-8 Found PDF document Close Viewer

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.248551670934911
Encrypted:	false
SSDEEP:	6:W4ujt+q2Pwkn2nKuAl9OmbnIFUt8B4umZZmw+B4uDVkwOwkn2nKuAl9OmbjLJ:3u8vYfHAahFUt8CuE/+CuJ5JfHAaSJ
MD5:	C6131BDB286F57CA1CED5098C40D5545
SHA1:	77E9B72C9DB43392ACB7176D0814556CCC353686
SHA-256:	4F0A475F9A0A92938CB8A742A367EE2B14F48D624C8CC9CABDB7C0EAAC4A0E89
SHA-512:	E40C0158032A3292C363AE33F66043FD399CD8D5DC062D996973D649EBD270C25A58FCF6EEC525FA1BA07EE84910B6A584DE6986D6B44FF7D5EC1F05D833D796
Malicious:	false
Reputation:	low
Preview:	2024/10/02-13:59:13.568 1cb8 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/02-13:59:13.570 1cb8 Recovering log #3.2024/10/02-13:59:13.571 1cb8 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.7, 175 pages
Category:	dropped
Size (bytes):	2955256
Entropy (8bit):	7.8619767414423105
Encrypted:	false
SSDEEP:	49152:oYuTknLw4eYrX0r2iULnEOhZTUAj4CpW7HMfn7:oYrnLw4eYrq2iUD7bpWwf7
MD5:	1E967127FB1D20E8C91CF61CAD2E2011
SHA1:	BB7522D483422D0D5E0EC540FB25C2BC2499E9D7
SHA-256:	B044C1399153AB31581DD724ACB92C15E33D40597D8E429CE7F23D322180FF9B
SHA-512:	FFA0E0A2A338261E272B6A8F750C14912421AA729095C302836F3FF49A61DE5FA58BD0B0FA8FBD86CDD277ED1916183FBC8D5F1500C612A9177A524071BFD10C
Malicious:	false
Reputation:	low
Preview:	%PDF-1.7.%......1 0 obj..<</Pages 3 0 R../Metadata 1381 0 R../Type /Catalog../Outlines 1380 0 R..>>..endobj..2 0 obj..<</CreationDate (D:20240712135625-07'00')../ModDate (D:20240712135831-07'00')../Creator (Nitro PDF Pro 14 \(14.24.1.0\))..>>..endobj..3 0 obj..<</Count 175../Kids [4 0 R 27 0 R 40 0 R 45 0 R 50 0 R 59 0 R 64 0 R 69 0 R 74 0 R 79 0 R 84 0 R 89 0 R 94 0 R 103 0 R 108 0 R 113 0 R 118 0 R 123 0 R 128 0 R 133 0 R 138 0 R 143 0 R 148 0 R 153 0 R 158 0 R 163 0 R 168 0 R 173 0 R 178 0 R 183 0 R 188 0 R 193 0 R 198 0 R 203 0 R 208 0 R 213 0 R 218 0 R 223 0 R 228 0 R 233 0 R 238 0 R 243 0 R 248 0 R 253 0 R 258 0 R 263 0 R 268 0 R 273 0 R 278 0 R 283 0 R 288 0 R 293 0 R 298 0 R 303 0 R 308 0 R 420 0 R 425 0 R 438 0 R 447 0 R 455 0 R 464 0 R 472 0 R 494 0 R 503 0 R 508 0 R 513 0 R 518 0 R 523 0 R 528 0 R 533 0 R 538 0 R 543 0 R 548 0 R 553 0 R 558 0 R 563 0 R 571 0 R 614 0 R 629 0 R 633 0 R 650 0 R 658 0 R 680 0 R 687 0 R 692 0 R 697 0 R 702 0 R 707 0 R 712 0 R 717 0 R 722 0 R 727

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:47 UTC	676	OUT	GET / HTTP/1.1 Host: www.subarufuelpumpssettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 17:57:48 UTC	564	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 22245 Connection: close Cache-Control: public, max-age=14400 strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff x-frame-options: sameorigin x-xss-protection: 1; mode=block Date: Wed, 02 Oct 2024 17:57:48 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f2fa38e6635ded6d22a69d089217bc90.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: iF4jboqc1QYSzirTJHduvGUYeLtBZGRUAU5mZsP9ZrYaJsugwVtJmw==
2024-10-02 17:57:48 UTC	8086	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 65 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 21 2d 2d 3c 21 5b Data Ascii: <!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="en"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="en"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="en"> <![endif]-->...[if (gte IE 9)\|!(IE)]>...><html lang="en"> ...<![
2024-10-02 17:57:48 UTC	14159	IN	Data Raw: 75 61 6e 74 20 74 6f 20 63 65 72 74 61 69 6e 20 72 65 63 61 6c 6c 73 20 69 73 73 75 65 64 20 62 79 20 53 75 62 61 72 75 2c 20 28 32 29 20 61 20 43 75 73 74 6f 6d 65 72 20 53 75 70 70 6f 72 74 20 50 72 6f 67 72 61 6d 20 66 6f 72 20 41 64 64 69 74 69 6f 6e 61 6c 20 56 65 68 69 63 6c 65 73 20 69 6e 20 74 68 65 20 66 6f 72 6d 20 6f 66 20 61 6e 20 45 78 74 65 6e 64 65 64 20 4e 65 77 20 56 65 68 69 63 6c 65 20 4c 69 6d 69 74 65 64 20 57 61 72 72 61 6e 74 79 20 70 72 6f 76 69 64 69 6e 67 20 70 72 6f 73 70 65 63 74 69 76 65 20 63 6f 76 65 72 61 67 65 20 6f 66 20 31 35 20 79 65 61 72 73 2c 20 6d 65 61 73 75 72 65 64 20 66 72 6f 6d 20 74 68 65 20 64 61 74 65 20 6f 66 20 6f 72 69 67 69 6e 61 6c 20 73 61 6c 65 20 6f 72 20 6c 65 61 73 65 20 6f 66 20 74 68 65 20 76 65 Data Ascii: uant to certain recalls issued by Subaru, (2) a Customer Support Program for Additional Vehicles in the form of an Extended New Vehicle Limited Warranty providing prospective coverage of 15 years, measured from the date of original sale or lease of the ve

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:48 UTC	609	OUT	GET /common/bootstrap/5.1.3/css/bootstrap.min.css HTTP/1.1 Host: www.subarufuelpumpssettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.subarufuelpumpssettlement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 17:57:49 UTC	581	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 163873 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Wed, 02 Mar 2022 23:33:34 GMT Accept-Ranges: bytes ETag: "1d82e8deed81b21" strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff Date: Wed, 02 Oct 2024 17:57:49 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 980059f199bdd603b925d049efedf130.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: X97oymxoPB-8Z3JUlgh66H0hBaHs4VLTDOE7jEiVr8fa4WWZMLE_AA==
2024-10-02 17:57:49 UTC	8067	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d Data Ascii: @charset "UTF-8";/! Bootstrap v5.1.3 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d6efd;-
2024-10-02 17:57:49 UTC	8317	IN	Data Raw: 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 31 31 34 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 34 30 30 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 78 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 31 33 32 30 70 78 7d 7d 2e 72 6f 77 7b 2d 2d 62 73 2d 67 75 74 Data Ascii: 0px}}@media (min-width:1200px){.container,.container-lg,.container-md,.container-sm,.container-xl{max-width:1140px}}@media (min-width:1400px){.container,.container-lg,.container-md,.container-sm,.container-xl,.container-xxl{max-width:1320px}}.row{--bs-gut
2024-10-02 17:57:50 UTC	16384	IN	Data Raw: 36 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 Data Ascii: 6666667%}.offset-xl-3{margin-left:25%}.offset-xl-4{margin-left:33.33333333%}.offset-xl-5{margin-left:41.66666667%}.offset-xl-6{margin-left:50%}.offset-xl-7{margin-left:58.33333333%}.offset-xl-8{margin-left:66.66666667%}.offset-xl-9{margin-left:75%}.offset
2024-10-02 17:57:50 UTC	8949	IN	Data Raw: 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 66 6f 72 6d 2d 72 61 6e 67 65 3a 3a 2d 77 65 62 6b 69 74 2d 73 6c 69 64 65 72 2d 74 68 75 6d 62 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 Data Ascii: e-in-out;transition:background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;-webkit-appearance:none;appearance:none}@media (prefers-reduced-motion:reduce){.form-range::-webkit-slider-thumb{-webkit-transition:none;transi
2024-10-02 17:57:50 UTC	15990	IN	Data Raw: 6c 63 28 31 2e 35 65 6d 20 2b 20 2e 37 35 72 65 6d 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 74 6f 70 20 63 61 6c 63 28 2e 33 37 35 65 6d 20 2b 20 2e 31 38 37 35 72 65 6d 29 20 72 69 67 68 74 20 63 61 6c 63 28 2e 33 37 35 65 6d 20 2b 20 2e 31 38 37 35 72 65 6d 29 7d 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 2e 69 73 2d 69 6e 76 61 6c 69 64 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 3a 69 6e 76 61 6c 69 64 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 2e 69 73 2d 69 6e 76 61 6c 69 64 3a 6e 6f 74 28 5b 6d 75 6c 74 69 70 6c 65 5d 29 3a 6e 6f 74 28 5b 73 69 7a 65 5d 29 2c 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 2e 69 73 2d 69 6e 76 61 6c 69 64 3a 6e Data Ascii: lc(1.5em + .75rem);background-position:top calc(.375em + .1875rem) right calc(.375em + .1875rem)}.form-select.is-invalid,.was-validated .form-select:invalid{border-color:#dc3545}.form-select.is-invalid:not([multiple]):not([size]),.form-select.is-invalid:n
2024-10-02 17:57:50 UTC	394	IN	Data Raw: 72 61 64 69 75 73 3a 2e 33 72 65 6d 7d 2e 62 74 6e 2d 67 72 6f 75 70 2d 73 6d 3e 2e 62 74 6e 2c 2e 62 74 6e 2d 73 6d 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 20 2e 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 2e 66 61 64 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 6c 69 6e 65 61 72 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 66 61 64 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 66 61 64 65 3a 6e 6f 74 28 2e 73 68 6f 77 29 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 63 6f 6c 6c 61 70 73 65 3a 6e 6f 74 28 2e 73 68 6f 77 29 7b 64 69 73 70 6c 61 79 3a 6e Data Ascii: radius:.3rem}.btn-group-sm>.btn,.btn-sm{padding:.25rem .5rem;font-size:.875rem;border-radius:.2rem}.fade{transition:opacity .15s linear}@media (prefers-reduced-motion:reduce){.fade{transition:none}}.fade:not(.show){opacity:0}.collapse:not(.show){display:n
2024-10-02 17:57:50 UTC	15990	IN	Data Raw: 6f 6c 6c 61 70 73 69 6e 67 2e 63 6f 6c 6c 61 70 73 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 7b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 33 35 73 20 65 61 73 65 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 63 6f 6c 6c 61 70 73 69 6e 67 2e 63 6f 6c 6c 61 70 73 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 64 72 6f 70 64 6f 77 6e 2c 2e 64 72 6f 70 65 6e 64 2c 2e 64 72 6f 70 73 74 61 72 74 2c 2e 64 72 6f 70 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 Data Ascii: ollapsing.collapse-horizontal{width:0;height:auto;transition:width .35s ease}@media (prefers-reduced-motion:reduce){.collapsing.collapse-horizontal{transition:none}}.dropdown,.dropend,.dropstart,.dropup{position:relative}.dropdown-toggle{white-space:nowra
2024-10-02 17:57:50 UTC	394	IN	Data Raw: 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 33 30 20 33 30 27 25 33 65 25 33 63 70 61 74 68 20 73 74 72 6f 6b 65 3d 27 72 67 62 61 25 32 38 30 2c 20 30 2c 20 30 2c 20 30 2e 35 35 25 32 39 27 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 27 72 6f 75 6e 64 27 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 27 31 30 27 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 27 32 27 20 64 3d 27 4d 34 20 37 68 32 32 4d 34 20 31 35 68 32 32 4d 34 20 32 33 68 32 32 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 29 7d 2e 6e 61 76 62 61 72 2d 6c 69 67 68 74 20 2e 6e 61 76 62 61 72 2d 74 65 78 74 7b 63 Data Ascii: :image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 30 30'%3e%3cpath stroke='rgba%280, 0, 0, 0.55%29' stroke-linecap='round' stroke-miterlimit='10' stroke-width='2' d='M4 7h22M4 15h22M4 23h22'/%3e%3c/svg%3e")}.navbar-light .navbar-text{c
2024-10-02 17:57:50 UTC	16384	IN	Data Raw: 29 7d 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 3a 66 6f 63 75 73 2c 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 35 35 29 7d 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 6e 61 76 62 61 72 2d 64 61 72 6b 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b Data Ascii: )}.navbar-dark .navbar-brand{color:#fff}.navbar-dark .navbar-brand:focus,.navbar-dark .navbar-brand:hover{color:#fff}.navbar-dark .navbar-nav .nav-link{color:rgba(255,255,255,.55)}.navbar-dark .navbar-nav .nav-link:focus,.navbar-dark .navbar-nav .nav-link
2024-10-02 17:57:50 UTC	7435	IN	Data Raw: 65 6d 2d 61 63 74 69 6f 6e 2e 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 66 35 31 33 32 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 66 35 31 33 32 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 7b 63 6f 6c 6f 72 3a 23 30 35 35 31 36 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 66 66 34 66 63 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 61 63 74 69 6f 6e 3a 66 6f 63 75 73 2c 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 61 63 74 69 6f 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 35 35 31 36 30 3b 62 61 63 6b Data Ascii: em-action.active{color:#fff;background-color:#0f5132;border-color:#0f5132}.list-group-item-info{color:#055160;background-color:#cff4fc}.list-group-item-info.list-group-item-action:focus,.list-group-item-info.list-group-item-action:hover{color:#055160;back

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:49 UTC	611	OUT	GET /themes/theme4/css/bootstrap-responsive.min.css HTTP/1.1 Host: www.subarufuelpumpssettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.subarufuelpumpssettlement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 17:57:50 UTC	580	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 16562 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 18 May 2018 21:29:28 GMT Accept-Ranges: bytes ETag: "1d3eeef4cfb6cb2" strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff Date: Wed, 02 Oct 2024 17:57:50 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a618edcb8ddcdae59a3a61a6c82ff54c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: I1p3B9owTuCdY8kghzgeMqBnIKEYMbbjRBL6qQQ8ZAnODfoma68FTQ==
2024-10-02 17:57:50 UTC	15804	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 52 65 73 70 6f 6e 73 69 76 65 20 76 32 2e 32 2e 32 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0d 0a 20 2a 0d 0a 20 2a 20 44 65 73 69 67 6e 65 64 20 61 6e 64 20 62 75 69 6c 74 20 77 69 74 68 20 61 6c 6c 20 74 68 65 20 6c 6f 76 65 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 20 40 74 77 69 74 74 65 72 20 62 79 20 40 6d 64 6f 20 61 6e 64 20 40 66 61 74 2e 0d 0a 20 2a 2f 40 2d 6d 73 Data Ascii: /! Bootstrap Responsive v2.2.2 * * Copyright 2012 Twitter, Inc * Licensed under the Apache License v2.0 * http://www.apache.org/licenses/LICENSE-2.0 * * Designed and built with all the love in the world @twitter by @mdo and @fat. */@-ms
2024-10-02 17:57:50 UTC	758	IN	Data Raw: 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 32 66 32 66 32 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 32 66 32 66 32 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 29 2c 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 29 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 29 2c 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c Data Ascii: top:1px solid #f2f2f2;border-bottom:1px solid #f2f2f2;-webkit-box-shadow:inset 0 1px 0 rgba(255,255,255,0.1),0 1px 0 rgba(255,255,255,0.1);-moz-box-shadow:inset 0 1px 0 rgba(255,255,255,0.1),0 1px 0 rgba(255,255,255,0.1);box-shadow:inset 0 1px 0 rgba(255,

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:49 UTC	597	OUT	GET /themes/theme4/css/flexslider.css HTTP/1.1 Host: www.subarufuelpumpssettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.subarufuelpumpssettlement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 17:57:50 UTC	579	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3501 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 18 May 2018 21:29:28 GMT Accept-Ranges: bytes ETag: "1d3eeef4cfb21ad" strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff Date: Wed, 02 Oct 2024 17:57:50 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6165dcc1fdf84ac65e8204c05709f1ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: mAwuJeyi9of2CSBkLtORQbHJnnjC7u7nF-TjQG1JdFg1QiZgVrvwzQ==
2024-10-02 17:57:50 UTC	3501	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 6a 51 75 65 72 79 20 46 6c 65 78 53 6c 69 64 65 72 20 76 32 2e 30 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 6f 6f 74 68 65 6d 65 73 2e 63 6f 6d 2f 66 6c 65 78 73 6c 69 64 65 72 2f 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 57 6f 6f 54 68 65 6d 65 73 0d 0a 20 2a 20 46 72 65 65 20 74 6f 20 75 73 65 20 75 6e 64 65 72 20 74 68 65 20 47 50 4c 76 32 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 67 70 6c 2d 32 2e 30 2e 68 74 6d 6c 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 61 75 74 68 6f 72 3a 20 54 79 6c 65 72 20 53 6d 69 74 68 20 28 40 6d 62 6d 75 66 66 66 69 6e 29 0d 0a 20 2a 2f 0d 0a 0d 0a 20 0d 0a Data Ascii: /* * jQuery FlexSlider v2.0 * http://www.woothemes.com/flexslider/ * * Copyright 2012 WooThemes * Free to use under the GPLv2 license. * http://www.gnu.org/licenses/gpl-2.0.html * * Contributing author: Tyler Smith (@mbmufffin) */

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:49 UTC	598	OUT	GET /themes/theme4/css/prettyPhoto.css HTTP/1.1 Host: www.subarufuelpumpssettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.subarufuelpumpssettlement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 17:57:50 UTC	580	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 20057 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 18 May 2018 21:29:28 GMT Accept-Ranges: bytes ETag: "1d3eeef4cfb6259" strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff Date: Wed, 02 Oct 2024 17:57:49 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 43c19aee1cbb38bf37ea4d5265ba1f54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: Z0ChwGKBfDgoU63oaMJq0POgJA2k-cY8hZRif5-70iKXksJ76TWVWw==
2024-10-02 17:57:50 UTC	15561	IN	Data Raw: 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 74 6f 70 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 74 6f 70 20 2e 70 70 5f 6d 69 64 64 6c 65 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 74 6f 70 20 2e 70 70 5f 6c 65 66 74 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 74 6f 70 20 2e 70 70 5f 72 69 67 68 74 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 62 6f 74 74 6f 6d 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 62 6f 74 74 6f 6d 20 2e 70 70 5f 6c 65 66 74 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 62 6f 74 74 6f 6d 20 2e 70 70 5f 6d 69 64 64 6c 65 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 62 6f 74 74 6f 6d 20 2e 70 70 5f 72 69 67 68 74 Data Ascii: div.pp_default .pp_top,div.pp_default .pp_top .pp_middle,div.pp_default .pp_top .pp_left,div.pp_default .pp_top .pp_right,div.pp_default .pp_bottom,div.pp_default .pp_bottom .pp_left,div.pp_default .pp_bottom .pp_middle,div.pp_default .pp_bottom .pp_right
2024-10-02 17:57:50 UTC	4496	IN	Data Raw: 74 3a 6c 65 66 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 0d 0a 2e 70 70 5f 67 61 6c 6c 65 72 79 20 75 6c 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 33 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 35 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 0d 0a 2e 70 70 5f 67 61 6c 6c 65 72 79 20 75 6c 20 61 7b 62 6f 72 64 65 72 3a 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 29 20 73 6f 6c 69 64 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 33 33 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 0d 0a 2e 70 70 Data Ascii: t:left;overflow:hidden;position:relative}.pp_gallery ul{float:left;height:35px;position:relative;white-space:nowrap;margin:0 0 0 5px;padding:0}.pp_gallery ul a{border:1px rgba(0,0,0,0.5) solid;display:block;float:left;height:33px;overflow:hidden}.pp

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.subarufuelpumpssettlement.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\d1302cda-f5b3-4ea4-b2d9-1d3eacb80e87.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241002175917Z-163.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.8136

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Windows Analysis Report
https://www.subarufuelpumpssettlement.com/

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:49 UTC	599	OUT	GET /themes/theme4/css/layout.css?v=2.1 HTTP/1.1 Host: www.subarufuelpumpssettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.subarufuelpumpssettlement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 17:57:50 UTC	580	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 23200 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Mon, 14 Nov 2022 23:47:36 GMT Accept-Ranges: bytes ETag: "1d8f88378e306a0" strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff Date: Wed, 02 Oct 2024 17:57:50 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 547a50460a0cda7ae3dafb1c0b6d0e1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: PBhQ-R_30BLHhFqg6QH54OQX_FvDIxXFpZor00YXBUJ-NrcJFvDKLA==
2024-10-02 17:57:50 UTC	8205	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 53 69 74 65 20 53 74 79 6c 65 73 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 53 74 79 6c 65 73 20 2a 2f 0a 0a 2a 20 7b 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 72 61 77 6c 69 6e 65 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 Data Ascii: /* ========================= Site Styles ========================= // Page Styles / { -moz-box-sizing: border-box; -webkit-box-sizing: border-box; box-sizing: border-box;}body { font-family: 'rawline', sans-serif; color: #00
2024-10-02 17:57:50 UTC	8179	IN	Data Raw: 6c 69 64 65 72 20 75 6c 20 6c 69 20 70 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0a 7d 0a 0a 23 73 6c 69 64 65 72 20 75 6c 20 6c 69 20 70 20 73 70 61 6e 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 62 61 73 65 2d 73 6c 69 64 65 72 2d 74 65 78 74 2e 70 6e 67 29 20 72 65 70 65 61 74 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 36 38 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 32 30 70 78 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 35 36 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 3b 0a 20 20 Data Ascii: lider ul li p { margin: 0px;}#slider ul li p span { background: url(../images/base-slider-text.png) repeat; font-size: 48px; width: 680px; padding: 15px 20px; text-align: center; line-height: 56px; margin-bottom: 1px;
2024-10-02 17:57:50 UTC	6816	IN	Data Raw: 74 65 72 3a 20 22 70 72 6f 67 69 64 3a 20 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 36 30 29 22 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 36 3b 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 36 30 29 3b 0a 7d 0a 0a 0a 0a 73 65 6c 65 63 74 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 63 74 20 6c 61 62 65 6c 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 30 25 3b 0a 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 31 70 78 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 0a 2e 74 6f 70 2d 6e 61 76 2d 74 6f 70 2d 72 6f 77 20 2e 74 6f 70 2d 6e Data Ascii: ter: "progid: DXImageTransform.Microsoft.Alpha(Opacity=60)"; opacity: .6; filter: alpha(opacity=60);}select { width: 100%;}.contact label { font-size: 90%; letter-spacing: -1px; text-align: right;}.top-nav-top-row .top-n

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:49 UTC	592	OUT	GET /themes/theme4/css/green.css HTTP/1.1 Host: www.subarufuelpumpssettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.subarufuelpumpssettlement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 17:57:50 UTC	555	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 970 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 18 May 2018 21:29:28 GMT Accept-Ranges: bytes ETag: "1d3eeef4cfb2fca" strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff Date: Wed, 02 Oct 2024 17:57:50 GMT X-Cache: Miss from cloudfront Via: 1.1 b3dc72c60418e8887de31f772538f118.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: _n7gbTRg8xysbALzwrX5-nHwNdYkdqdUIUraeNGbvTh28MrB3TUaaQ==
2024-10-02 17:57:50 UTC	970	IN	Data Raw: 61 2c 20 61 3a 76 69 73 69 74 65 64 20 7b 20 63 6f 6c 6f 72 3a 23 35 38 62 37 36 34 3b 20 7d 0d 0a 61 3a 68 6f 76 65 72 20 7b 20 63 6f 6c 6f 72 3a 23 31 31 38 33 32 30 3b 20 7d 0d 0a 0d 0a 2e 62 74 6e 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 38 62 37 36 34 3b 20 7d 0d 0a 2e 62 74 6e 3a 68 6f 76 65 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 64 39 38 34 39 3b 20 7d 0d 0a 0d 0a 66 69 67 75 72 65 2e 66 69 67 75 72 65 2d 68 6f 76 65 72 20 64 69 76 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 38 62 37 36 34 3b 20 7d 0d 0a 0d 0a 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 70 61 67 69 6e 67 20 6c 69 20 61 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 37 64 65 36 38 62 3b 20 7d 0d 0a 2e 66 6c 65 Data Ascii: a, a:visited { color:#58b764; }a:hover { color:#118320; }.btn { background-color:#58b764; }.btn:hover { background-color:#3d9849; }figure.figure-hover div { background-color:#58b764; }.flex-control-paging li a { background:#7de68b; }.fle

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-02 17:57:50 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=82080 Date: Wed, 02 Oct 2024 17:57:50 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:50 UTC	596	OUT	GET /themes/theme4/css/hover-min.css HTTP/1.1 Host: www.subarufuelpumpssettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.subarufuelpumpssettlement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 17:57:51 UTC	581	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 104212 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 18 May 2018 21:29:28 GMT Accept-Ranges: bytes ETag: "1d3eeef4cfabb14" strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff Date: Wed, 02 Oct 2024 17:57:50 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5ab5e654a3dc7079aad7ac64ec697d82.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: Zc51H1R8I8RKfePzjFe0UIjRlHwZd2gITJstjjWqFNb7ELLg1T30aA==
2024-10-02 17:57:51 UTC	15803	IN	Data Raw: 2f 2a 21 0a 20 2a 20 48 6f 76 65 72 2e 63 73 73 20 28 68 74 74 70 3a 2f 2f 69 61 6e 6c 75 6e 6e 2e 67 69 74 68 75 62 2e 69 6f 2f 48 6f 76 65 72 2f 29 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 30 2e 31 0a 20 2a 20 41 75 74 68 6f 72 3a 20 49 61 6e 20 4c 75 6e 6e 20 40 49 61 6e 4c 75 6e 6e 0a 20 2a 20 41 75 74 68 6f 72 20 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 69 61 6e 6c 75 6e 6e 2e 63 6f 2e 75 6b 2f 0a 20 2a 20 47 69 74 68 75 62 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 49 61 6e 4c 75 6e 6e 2f 48 6f 76 65 72 0a 0a 20 2a 20 4d 61 64 65 20 61 76 61 69 6c 61 62 6c 65 20 75 6e 64 65 72 20 61 20 4d 49 54 20 4c 69 63 65 6e 73 65 3a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 Data Ascii: /! Hover.css (http://ianlunn.github.io/Hover/) * Version: 2.0.1 * Author: Ian Lunn @IanLunn * Author URL: http://ianlunn.co.uk/ * Github: https://github.com/IanLunn/Hover * Made available under a MIT License: * http://www.opensource.org/license
2024-10-02 17:57:51 UTC	581	IN	Data Raw: 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 68 76 72 2d 77 6f 62 62 6c 65 2d 74 6f 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 7b 31 36 2e 36 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 38 70 78 2c 38 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 38 70 78 2c 38 70 78 29 7d 33 33 2e 33 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 36 70 78 2c 2d 36 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 36 70 78 2c 2d 36 70 78 29 7d 34 39 2e 39 35 25 7b 2d 77 65 62 6b 69 74 2d Data Ascii: teration-count:1;animation-iteration-count:1}@-webkit-keyframes hvr-wobble-to-bottom-right{16.65%{-webkit-transform:translate(8px,8px);transform:translate(8px,8px)}33.3%{-webkit-transform:translate(-6px,-6px);transform:translate(-6px,-6px)}49.95%{-webkit-
2024-10-02 17:57:51 UTC	16384	IN	Data Raw: 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 38 70 78 2c 38 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 38 70 78 2c 38 70 78 29 7d 33 33 2e 33 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 36 70 78 2c 2d 36 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 36 70 78 2c 2d 36 70 78 29 7d 34 39 2e 39 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 34 70 78 2c 34 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 34 70 78 2c 34 70 78 29 7d 36 36 2e 36 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 32 70 78 2c 2d 32 70 78 29 3b 74 72 61 6e 73 Data Ascii: ansform:translate(8px,8px);transform:translate(8px,8px)}33.3%{-webkit-transform:translate(-6px,-6px);transform:translate(-6px,-6px)}49.95%{-webkit-transform:translate(4px,4px);transform:translate(4px,4px)}66.6%{-webkit-transform:translate(-2px,-2px);trans
2024-10-02 17:57:51 UTC	16384	IN	Data Raw: 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 35 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 35 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 Data Ascii: ebkit-transform-origin:0 50%;transform-origin:0 50%;-webkit-transition-property:transform;transition-property:transform;-webkit-transition-duration:.5s;transition-duration:.5s;-webkit-transition-timing-function:ease-out;transition-timing-function:ease-out
2024-10-02 17:57:51 UTC	16384	IN	Data Raw: 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 68 76 72 2d 6f 75 74 6c 69 6e 65 2d 69 6e 3a 62 65 66 6f 72 65 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 63 6f 6e 74 65 6e 74 3a 27 27 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 72 64 65 72 3a 23 65 31 65 31 65 31 20 73 6f 6c 69 64 Data Ascii: m:translateZ(0);box-shadow:0 0 1px rgba(0,0,0,0);-webkit-backface-visibility:hidden;backface-visibility:hidden;-moz-osx-font-smoothing:grayscale;position:relative}.hvr-outline-in:before{pointer-events:none;content:'';position:absolute;border:#e1e1e1 solid
2024-10-02 17:57:51 UTC	16384	IN	Data Raw: 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 68 76 72 2d 62 75 62 62 6c 65 2d 66 6c 6f 61 74 2d 74 6f 70 3a 61 63 74 69 76 65 2c 2e 68 76 72 2d 62 75 62 62 6c 65 2d 66 6c 6f 61 74 2d 74 6f 70 3a 66 6f 63 75 73 2c 2e 68 76 72 2d 62 75 62 62 6c 65 2d 66 6c 6f 61 74 2d 74 6f 70 3a 68 6f 76 65 72 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 30 70 78 29 Data Ascii: ion-duration:.3s;transition-duration:.3s;-webkit-transition-property:transform;transition-property:transform}.hvr-bubble-float-top:active,.hvr-bubble-float-top:focus,.hvr-bubble-float-top:hover{-webkit-transform:translateY(10px);transform:translateY(10px)
2024-10-02 17:57:51 UTC	16384	IN	Data Raw: 73 65 2d 73 68 72 69 6e 6b 7b 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 38 29 7d 7d 2e 68 76 72 2d 69 63 6f 6e 2d 70 75 6c 73 65 2d 73 68 72 69 6e 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 Data Ascii: se-shrink{to{-webkit-transform:scale(0.8);transform:scale(0.8)}}.hvr-icon-pulse-shrink{display:inline-block;vertical-align:middle;-webkit-transform:translateZ(0);transform:translateZ(0);box-shadow:0 0 1px rgba(0,0,0,0);-webkit-backface-visibility:hidden;b
2024-10-02 17:57:51 UTC	5908	IN	Data Raw: 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 68 76 72 2d 69 63 6f 6e 2d 62 75 7a 7a 2d 6f 75 74 7b 31 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 33 70 78 29 20 72 6f 74 61 74 65 28 32 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 33 70 78 29 20 72 6f 74 61 74 65 28 32 64 65 67 29 7d 32 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 70 78 29 20 72 6f 74 61 74 65 28 2d 32 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 70 78 29 20 72 6f 74 61 74 65 28 2d 32 64 65 67 29 7d 33 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 33 70 78 Data Ascii: webkit-keyframes hvr-icon-buzz-out{10%{-webkit-transform:translateX(3px) rotate(2deg);transform:translateX(3px) rotate(2deg)}20%{-webkit-transform:translateX(-3px) rotate(-2deg);transform:translateX(-3px) rotate(-2deg)}30%{-webkit-transform:translateX(3px

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:51 UTC	592	OUT	GET /themes/theme4/css/print.css HTTP/1.1 Host: www.subarufuelpumpssettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.subarufuelpumpssettlement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 17:57:51 UTC	555	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 138 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 18 May 2018 21:29:28 GMT Accept-Ranges: bytes ETag: "1d3eeef4cfb2c8a" strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff Date: Wed, 02 Oct 2024 17:57:51 GMT X-Cache: Miss from cloudfront Via: 1.1 c359abeab0060e721cfaac65ce34b1cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: 96m6UI43fxi2N3qOILQFMBpA0R90a-FsQxDl6j0NkdMCSrvybrmNPQ==
2024-10-02 17:57:51 UTC	138	IN	Data Raw: 2f 2a 20 50 72 69 6e 74 20 53 74 79 6c 65 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 40 6d 65 64 69 61 20 70 72 69 6e 74 20 7b 0a 20 20 61 5b 68 72 65 66 5d 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 7d Data Ascii: /* Print Styles--------------------------------------------------*/@media print { a[href]:after { content: none !important; }}

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:51 UTC	591	OUT	GET /common/css/rawline.css?v=1 HTTP/1.1 Host: www.subarufuelpumpssettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.subarufuelpumpssettlement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 17:57:51 UTC	579	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 6645 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Wed, 21 Feb 2024 00:41:27 GMT Accept-Ranges: bytes ETag: "1da645eb3f90c75" strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff Date: Wed, 02 Oct 2024 17:57:51 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 cae542650fb32c773cc494fc6e7e71e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: RNTz1BtEjcF123W_lwUwrnuAvZc_iqs2GAAm9jC9RmgwhvzwJB93zw==
2024-10-02 17:57:51 UTC	6645	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 72 61 77 6c 69 6e 65 27 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 72 61 77 6c 69 6e 65 2d 31 30 30 2e 65 6f 74 27 29 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 63 6f 6d 6d 6f 6e 2f 66 6f 6e 74 73 2f 72 61 77 6c 69 6e 65 2d 31 30 30 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 20 20 20 20 20 20 20 20 75 72 6c 28 27 2f 63 6f 6d 6d 6f 6e 2f 66 6f 6e 74 73 2f 72 61 77 6c 69 6e 65 2d 31 30 30 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 20 75 72 6c 28 27 2f 63 6f 6d 6d 6f 6e 2f 66 6f 6e 74 73 2f 72 61 77 6c 69 6e 65 2d Data Ascii: @font-face { font-family: 'rawline'; src: url('rawline-100.eot'); src: url('/common/fonts/rawline-100.eot?#iefix') format('embedded-opentype'), url('/common/fonts/rawline-100.woff2') format('woff2'), url('/common/fonts/rawline-

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:51 UTC	600	OUT	GET /themes/theme4/css/theme4fix.css?v=4 HTTP/1.1 Host: www.subarufuelpumpssettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.subarufuelpumpssettlement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 17:57:51 UTC	579	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2111 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Thu, 09 May 2024 23:06:29 GMT Accept-Ranges: bytes ETag: "1daa265865580bf" strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff Date: Wed, 02 Oct 2024 17:57:51 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c888f786e25e6e3c7dbb7e9da462d714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: D3XNBLmKIRAsEyGW4NopCttIHVo6XU8Aj3nvarLBoMMMG9Rm3BpGaw==
2024-10-02 17:57:51 UTC	2111	IN	Data Raw: 61 20 7b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 68 33 2c 0a 68 33 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0a 7d 0a 0a 2e 68 31 2c 0a 2e 68 32 2c 0a 2e 68 33 2c 0a 68 31 2c 0a 68 32 2c 0a 68 33 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 70 75 6c 6c 2d 6c 65 66 74 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 70 75 6c 6c 2d 72 69 67 68 74 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 23 6d 61 69 6e 20 2e 63 6f 6e 74 61 63 74 20 69 6e 70 75 Data Ascii: a { text-decoration: none;}.h3,h3 { font-size: 24px;}.h1,.h2,.h3,h1,h2,h3 { margin-top: 20px; margin-bottom: 10px;}.pull-left { float: left !important;}.pull-right { float: right !important;}#main .contact inpu

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:51 UTC	597	OUT	GET /themes/theme4/css/bootstrap5.css HTTP/1.1 Host: www.subarufuelpumpssettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.subarufuelpumpssettlement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 17:57:52 UTC	579	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3461 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Tue, 21 Nov 2023 23:19:06 GMT Accept-Ranges: bytes ETag: "1da1cd11f511c85" strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff Date: Wed, 02 Oct 2024 17:57:51 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4874e0c922f34c928345f4c183ea11b4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: UBbLedFMPP2DeAC_m3-7XDULoWx9q8bUtaLJsMfcTHHNlZbaaDB9-w==
2024-10-02 17:57:52 UTC	3461	IN	Data Raw: 62 6f 64 79 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 63 74 20 6c 61 62 65 6c 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 31 70 78 3b 0a 7d 0a 0a 74 61 62 6c 65 3a 6e 6f 74 28 2e 74 61 62 6c 65 29 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 20 63 6f 6c 6c 61 70 73 65 3b 0a 7d 0a 0a 74 61 62 6c 65 3a 6e 6f 74 28 2e 74 61 62 6c 65 29 2c 0a 74 61 62 6c 65 3a 6e 6f 74 28 2e 74 61 62 6c 65 29 20 74 68 2c 0a 74 61 62 6c 65 3a 6e 6f 74 28 2e 74 61 62 6c 65 29 20 74 64 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 Data Ascii: body { padding: 0;}.contact label { font-size: 14px; font-weight: 600; letter-spacing: -1px;}table:not(.table) { border-collapse: collapse;}table:not(.table),table:not(.table) th,table:not(.table) td { border: 1px solid

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:51 UTC	602	OUT	GET /themes/theme4/css/theme4.min.css?v1.2 HTTP/1.1 Host: www.subarufuelpumpssettlement.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.subarufuelpumpssettlement.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 17:57:52 UTC	580	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 12042 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Thu, 06 Jul 2023 22:08:56 GMT Accept-Ranges: bytes ETag: "1d9b05674f4a30a" strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff Date: Wed, 02 Oct 2024 17:57:51 GMT Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 673c96d1f19de21216629aa48d90ac92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C1 X-Amz-Cf-Id: Sl0xoNKKD5H0tKoU83D7jLXNlHL7bk0viyB9jX6tfI2kSi01uJnWPw==
2024-10-02 17:57:52 UTC	12042	IN	Data Raw: 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 7d 23 68 65 61 64 65 72 7b 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 68 65 61 64 65 72 20 2e 6e 61 76 2d 6d 65 6e 75 20 75 6c 20 6c 69 2e 6c 6f 67 6f 20 2e 6c 6f 67 6f 2d 62 61 73 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 39 30 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 63 6c 61 73 73 61 63 74 69 6f 6e 2f 62 70 73 6f 6c 61 72 2f 69 6d 61 67 65 73 2f 62 61 73 65 2d 6c 6f 67 6f 2d 32 2e 70 6e 67 29 20 72 65 70 65 61 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 35 70 78 20 35 70 78 7d 2e 63 68 65 63 6b 62 6f 78 43 6f 6e 74 61 69 6e 65 72 7b 64 Data Ascii: h1{font-size:2.4em}#header{height:inherit}#header .nav-menu ul li.logo .logo-base{width:100%;height:90px;padding:8px;background:url(/classaction/bpsolar/images/base-logo-2.png) repeat;color:#fff;font-size:1em;border-radius:0 0 5px 5px}.checkboxContainer{d

Timestamp	Bytes transferred	Direction	Data
2024-10-02 17:57:51 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-02 17:57:51 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=82023 Date: Wed, 02 Oct 2024 17:57:51 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-02 17:57:51 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}