Windows Analysis Report
https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/

Overview

General Information

Sample URL: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/
Analysis ID: 1526894
Tags: openphish
Infos:

Detection

Score: 52
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Antivirus / Scanner detection for submitted sample
Uses IPFS gateway to access IPFS content in browser (often used in phishing/scams)
Detected non-DNS traffic on DNS port
Found iframes
HTML body contains low number of good links
HTML body contains password input but no form action
HTML page contains hidden javascript code
HTML title does not match URL

Classification

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/ SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing
barindex
Uses IPFS gateway to access IPFS content in browser (often used in phishing/scams)
Source: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link HTTP Parser: Gateway: dweb.link
Source: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/ HTTP Parser: Gateway: dweb.link
Found iframes
Source: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/ HTTP Parser: Iframe src: https://www.YXNkYXNkQGdtYWlsLmNvbQ==
HTML body contains low number of good links
Source: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/ HTTP Parser: Number of links: 0
HTML body contains password input but no form action
Source: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/ HTTP Parser: <input type="password" .../> found but no <form action="...
HTML page contains hidden javascript code
Source: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/ HTTP Parser: Base64 decoded: asdasd@gmail.com
HTML title does not match URL
Source: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/ HTTP Parser: Title: Webmail does not match URL
Source: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/ HTTP Parser: <input type="password" .../> found
Source: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/ HTTP Parser: No favicon
Source: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/ HTTP Parser: No <meta name="author".. found
Source: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/ HTTP Parser: No <meta name="copyright".. found
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:61386 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:61497 version: TLS 1.2
Detected non-DNS traffic on DNS port
Source: global traffic TCP traffic: 192.168.2.4:61383 -> 1.1.1.1:53
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.linkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /jquery-2.2.4.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.linksec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif HTTP/1.1Host: ik.imagekit.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /customviews/image/password_hidden:93edf7d3ceb704be92ee084ecc62c6c8/ HTTP/1.1Host: fac.corp.fortinet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.linkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /jquery-2.2.4.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif HTTP/1.1Host: ik.imagekit.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic DNS traffic detected: DNS query: bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link
Source: global traffic DNS traffic detected: DNS query: code.jquery.com
Source: global traffic DNS traffic detected: DNS query: ik.imagekit.io
Source: global traffic DNS traffic detected: DNS query: fac.corp.fortinet.com
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 06 Oct 2024 15:38:27 GMTContent-Length: 4288Content-Security-Policy: base-uri 'self'; object-src 'none'; style-src 'self' 'unsafe-inline'; default-src 'self'; script-src 'self'X-Frame-Options: SAMEORIGINVary: Accept-EncodingContent-Language: enX-Content-Type-Options: nosniffReferrer-Policy: strict-origin-when-cross-originCache-Control: public, max-age=31536000X-XSS-Protection: 1; mode=blockPermissions-Policy: fullscreen=(self)Connection: closeContent-Type: text/html; charset=utf-8
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 06 Oct 2024 15:38:34 GMTContent-Type: text/plain; charset=utf-8Content-Length: 191Connection: closeaccess-control-allow-headers: Content-Typeaccess-control-allow-headers: Rangeaccess-control-allow-headers: User-Agentaccess-control-allow-headers: X-Requested-Withaccess-control-allow-methods: GETaccess-control-allow-methods: HEADaccess-control-allow-methods: OPTIONSaccess-control-allow-origin: *access-control-expose-headers: Content-Lengthaccess-control-expose-headers: Content-Rangeaccess-control-expose-headers: X-Chunked-Outputaccess-control-expose-headers: X-Ipfs-Pathaccess-control-expose-headers: X-Ipfs-Rootsaccess-control-expose-headers: X-Stream-Outputx-content-type-options: nosniffx-ipfs-path: /ipfs/bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu/favicon.icox-ipfs-pop: rainbow-dc13-09CF-Cache-Status: EXPIREDSet-Cookie: __cflb=02DiuFZYQ2YmkVcQ1PJ7ooXNYcVk9ZufLDsB6UmQ1Md5E; SameSite=None; Secure; path=/; expires=Mon, 07-Oct-24 14:38:34 GMT; HttpOnlyServer: cloudflareCF-RAY: 8ce6bd17aee2438d-EWR
Source: chromecache_113.2.dr String found in binary or memory: https://code.jquery.com/jquery-2.2.4.min.js
Source: chromecache_113.2.dr String found in binary or memory: https://fac.corp.fortinet.com/customviews/image/password_hidden:93edf7d3ceb704be92ee084ecc62c6c8/
Source: chromecache_113.2.dr String found in binary or memory: https://firebasestorage.googleapis.com/v0/b/portal-aa363.appspot.com/o/favicons.png?alt=media&token=
Source: chromecache_113.2.dr String found in binary or memory: https://ik.imagekit.io/escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif
Source: unknown Network traffic detected: HTTP traffic on port 61522 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 61436 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 61459 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61465 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61488 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61509
Source: unknown Network traffic detected: HTTP traffic on port 61471 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61545 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61501
Source: unknown Network traffic detected: HTTP traffic on port 61391 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61502
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61503
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61504
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61505
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61506
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61507
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61508
Source: unknown Network traffic detected: HTTP traffic on port 61407 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61539 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61516 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61500
Source: unknown Network traffic detected: HTTP traffic on port 61397 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61454 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61504 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61563 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61402 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61512
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61513
Source: unknown Network traffic detected: HTTP traffic on port 61557 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61511 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61514
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61515
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61516
Source: unknown Network traffic detected: HTTP traffic on port 61448 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61517
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61518
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61519
Source: unknown Network traffic detected: HTTP traffic on port 61482 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61510
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61511
Source: unknown Network traffic detected: HTTP traffic on port 61419 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61396 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61505 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61402
Source: unknown Network traffic detected: HTTP traffic on port 61510 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61523
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61403
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61524
Source: unknown Network traffic detected: HTTP traffic on port 61533 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61404
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61525
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61405
Source: unknown Network traffic detected: HTTP traffic on port 61453 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61526
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61406
Source: unknown Network traffic detected: HTTP traffic on port 61447 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61527
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61407
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61528
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61408
Source: unknown Network traffic detected: HTTP traffic on port 61476 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61495 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61529
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61409
Source: unknown Network traffic detected: HTTP traffic on port 61420 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61552 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61520
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61400
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61521
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61401
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61522
Source: unknown Network traffic detected: HTTP traffic on port 61414 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61487 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61527 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61470 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61431 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61544 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61534
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61414
Source: unknown Network traffic detected: HTTP traffic on port 61425 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61535
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61415
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61536
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61416
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61537
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61417
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61538
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61418
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61539
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61419
Source: unknown Network traffic detected: HTTP traffic on port 61408 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61530
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61410
Source: unknown Network traffic detected: HTTP traffic on port 61442 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61531
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61411
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61532
Source: unknown Network traffic detected: HTTP traffic on port 61538 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61412
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61533
Source: unknown Network traffic detected: HTTP traffic on port 61461 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61390
Source: unknown Network traffic detected: HTTP traffic on port 61484 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61391
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61392
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61393
Source: unknown Network traffic detected: HTTP traffic on port 61432 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61503 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61564 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61455 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61549 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61526 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61426 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61558 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61449 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61478 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61386
Source: unknown Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61387
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61388
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61389
Source: unknown Network traffic detected: HTTP traffic on port 61403 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61437 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61521 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61489 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61493 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61509 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61450 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61390 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61394
Source: unknown Network traffic detected: HTTP traffic on port 61444 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61515 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61395
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61396
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61397
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61398
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61399
Source: unknown Network traffic detected: HTTP traffic on port 61532 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61553 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61438 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61520 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61543 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61415 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61499 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61508 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61472 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61409 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61443 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61514 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61460 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61537 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61466 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61483 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61395 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61548 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61410 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61559 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61477 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61494 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 61389 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 61421 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown Network traffic detected: HTTP traffic on port 61404 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61470
Source: unknown Network traffic detected: HTTP traffic on port 61507 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61560 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61451 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61468
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61469
Source: unknown Network traffic detected: HTTP traffic on port 61474 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61497 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61460
Source: unknown Network traffic detected: HTTP traffic on port 61468 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61461
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61462
Source: unknown Network traffic detected: HTTP traffic on port 61445 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61463
Source: unknown Network traffic detected: HTTP traffic on port 61388 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61464
Source: unknown Network traffic detected: HTTP traffic on port 61531 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61465
Source: unknown Network traffic detected: HTTP traffic on port 61422 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61466
Source: unknown Network traffic detected: HTTP traffic on port 61554 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61467
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61480
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61481
Source: unknown Network traffic detected: HTTP traffic on port 61485 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61433 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61416 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61525 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61542 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61479
Source: unknown Network traffic detected: HTTP traffic on port 61427 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61394 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61479 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61471
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61472
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61473
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61474
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61475
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61476
Source: unknown Network traffic detected: HTTP traffic on port 61440 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61477
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61478
Source: unknown Network traffic detected: HTTP traffic on port 61519 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61536 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61490
Source: unknown Network traffic detected: HTTP traffic on port 61467 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61491
Source: unknown Network traffic detected: HTTP traffic on port 61492 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61492
Source: unknown Network traffic detected: HTTP traffic on port 61434 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61411 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61524 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61547 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61393 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61428 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61482
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61483
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61484
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61485
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61486
Source: unknown Network traffic detected: HTTP traffic on port 61518 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61487
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61488
Source: unknown Network traffic detected: HTTP traffic on port 61405 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61489
Source: unknown Network traffic detected: HTTP traffic on port 61439 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61462 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61456 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61502 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61399 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61561 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61498 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61473 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61493
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61494
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61495
Source: unknown Network traffic detected: HTTP traffic on port 61530 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61496
Source: unknown Network traffic detected: HTTP traffic on port 61513 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61497
Source: unknown Network traffic detected: HTTP traffic on port 61555 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61400 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61498
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61499
Source: unknown Network traffic detected: HTTP traffic on port 61490 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61398 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61541 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61417 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61424
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61545
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61425
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61546
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61426
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61547
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61427
Source: unknown Network traffic detected: HTTP traffic on port 61512 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61548
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61428
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61549
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61429
Source: unknown Network traffic detected: HTTP traffic on port 61481 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61540
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61420
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61541
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61421
Source: unknown Network traffic detected: HTTP traffic on port 61441 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61542
Source: unknown Network traffic detected: HTTP traffic on port 61550 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61422
Source: unknown Network traffic detected: HTTP traffic on port 61535 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61543
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61423
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61544
Source: unknown Network traffic detected: HTTP traffic on port 61546 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61464 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61500 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61458 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61529 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61412 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61435
Source: unknown Network traffic detected: HTTP traffic on port 61475 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61556
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61436
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61557
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61437
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61558
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61438
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61559
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61439
Source: unknown Network traffic detected: HTTP traffic on port 61496 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61469 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61387 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61550
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61430
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61551
Source: unknown Network traffic detected: HTTP traffic on port 61423 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61431
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61552
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61432
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61553
Source: unknown Network traffic detected: HTTP traffic on port 61406 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61433
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61554
Source: unknown Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61434
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61555
Source: unknown Network traffic detected: HTTP traffic on port 61463 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61501 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61486 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61457 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61430 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61528 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61562 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61446
Source: unknown Network traffic detected: HTTP traffic on port 61401 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61447
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61448
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61449
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61560
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61440
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61561
Source: unknown Network traffic detected: HTTP traffic on port 61386 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61441
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61562
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61442
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61563
Source: unknown Network traffic detected: HTTP traffic on port 61424 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61443
Source: unknown Network traffic detected: HTTP traffic on port 61556 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61564
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61444
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61445
Source: unknown Network traffic detected: HTTP traffic on port 61523 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61491 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61540 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61418 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61435 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61506 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61392 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61457
Source: unknown Network traffic detected: HTTP traffic on port 61534 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61458
Source: unknown Network traffic detected: HTTP traffic on port 61452 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61459
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61450
Source: unknown Network traffic detected: HTTP traffic on port 61446 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61451
Source: unknown Network traffic detected: HTTP traffic on port 61480 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61429 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61452
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61453
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61454
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61455
Source: unknown Network traffic detected: HTTP traffic on port 61517 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61551 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61456
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:61386 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:61497 version: TLS 1.2
Source: classification engine Classification label: mal52.phis.win@22/12@14/9
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2484,i,13536140555643138251,5965002663243593236,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2484,i,13536140555643138251,5965002663243593236,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1526894 URL: https://bafybeidig6u5g3vjtv... Startdate: 06/10/2024 Architecture: WINDOWS Score: 52 26 Antivirus / Scanner detection for submitted sample 2->26 28 Uses IPFS gateway to access IPFS content in browser (often used in phishing/scams) 2->28 6 chrome.exe 1 2->6         started        9 chrome.exe 2->9         started        process3 dnsIp4 14 192.168.2.4, 138, 443, 49723 unknown unknown 6->14 16 192.168.2.6 unknown unknown 6->16 18 239.255.255.250 unknown Reserved 6->18 11 chrome.exe 6->11         started        process5 dnsIp6 20 bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link 209.94.90.3, 443, 49735, 49736 PROTOCOLUS United States 11->20 22 www.google.com 142.250.185.132, 443, 49745, 61447 GOOGLEUS United States 11->22 24 5 other IPs or domains 11->24
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
142.250.185.132
 www.google.com United States
15169 GOOGLEUS false
151.101.2.137
 code.jquery.com United States
54113 FASTLYUS false
13.35.58.119
 d28h3jm4r3crf8.cloudfront.net United States
16509 AMAZON-02US false
239.255.255.250
 unknown Reserved
unknown unknown false
13.35.58.96
 unknown United States
16509 AMAZON-02US false
209.94.90.3
 bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link United States
40680 PROTOCOLUS false
208.91.114.103
 fac.corp.fortinet.com United States
40934 FORTINETUS false

Private

IP
192.168.2.4
192.168.2.6

Contacted Domains

Name IP Active
code.jquery.com 151.101.2.137 true
s-part-0017.t-0009.t-msedge.net 13.107.246.45 true
www.google.com 142.250.185.132 true
fac.corp.fortinet.com 208.91.114.103 true
d28h3jm4r3crf8.cloudfront.net 13.35.58.119 true
bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link 209.94.90.3 true
fp2e7a.wpc.phicdn.net 192.229.221.95 true
s-part-0032.t-0009.t-msedge.net 13.107.246.60 true
ik.imagekit.io unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/ true
    		unknown
    https://code.jquery.com/jquery-2.2.4.min.js false
      		unknown
      https://fac.corp.fortinet.com/customviews/image/password_hidden:93edf7d3ceb704be92ee084ecc62c6c8/ false
        		unknown
        https://bafybeidig6u5g3vjtvfaewi7ydwefm3wvuueoicziqs3skdsvov66mxadu.ipfs.dweb.link/favicon.ico true
          		unknown
          https://ik.imagekit.io/escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif false
            		unknown