Windows Analysis Report
https://proposal-request.squarespace.com/

Overview

General Information

Sample URL:	https://proposal-request.squarespace.com/
Analysis ID:	1528655
Infos:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

AI detected landing page (webpage, office document or email)

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

Signatures

HTML page contains hidden javascript code

Source: https://proposal-request.squarespace.com/

HTTP Parser: Base64 decoded: AIzaSyCBTROq6LuvF_IE1r46-T4AeTSV-0d7my8

Source: https://www.example.com/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49773 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic

TCP traffic: 192.168.2.16:49738 -> 1.1.1.1:53

Detected suspicious crossdomain redirect

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: or4t.iednationusa.com to https://www.example.com

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 08 Oct 2024 05:20:02 GMTServer: ApacheX-Content-Type-Options: nosniffVary: Accept-EncodingLast-Modified: Wed, 06 Mar 2024 16:51:21 GMTX-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: same-originCross-Origin-Opener-Policy: same-originCache-Control: public, max-age=3600Expires: Tue, 08 Oct 2024 06:20:02 GMTContent-Encoding: gzipContent-Security-Policy: upgrade-insecure-requests; default-src 'self' https://*.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://*.gstatic.com;Age: 1586Content-Length: 1508Keep-Alive: timeout=2, max=358Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 58 cd 6e dc 36 10 3e 57 4f c1 e8 d0 93 b5 b2 b7 a8 53 34 5a 01 0b 27 41 0c 14 0b c3 75 10 a0 97 80 a2 66 57 74 28 51 21 a9 dd 6c 4f 7d 8d be 5e 9f a4 33 a4 b4 ff b1 e3 06 68 62 c0 2b 72 c4 f9 e1 37 c3 99 a1 a2 ec 59 a9 85 5b b7 c0 2a 57 ab 3c ca 86 07 f0 32 8f 7e c8 9c 74 0a f2 57 9f 78 dd 2a 60 2f 75 cd 65 63 b3 34 90 23 5c 50 83 e3 4c 54 dc 58 70 93 b8 73 f3 e4 97 98 a5 f9 f0 a6 72 ae 4d e0 63 27 97 93 f8 4a 37 0e 1a 97 90 ba 98 89 Data Ascii: Xn6>WOS4Z'AufWt(Q!lO}^3hb+r7Y[*W<2~tWx*`/uec4#\PLTXpsrMc'J7

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: proposal-request.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@sqs/polyfiller/1.6/modern.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/styles-compressed/user-account-core-b6e8cafbf34b05da5c2b-min.en-US.css HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/66fed1bfcc18be6b088cd2f3/cba35225-caf4-455c-a010-2c2b92c9f8b5/fgjhfhr.PNG?format=1500w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/versioned-site-css/66fed1bfcc18be6b088cd2f3/7/5c5a519771c10ba3470d8101/66fed1bfcc18be6b088cd2fc/1568/site.css HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/vta/5c5a519771c10ba3470d8101/versioned-assets/1728323017363-DJXHB6OU0T8MXWKJTQH4/static.css HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@sqs/polyfiller/1.6/modern.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/66fed1bfcc18be6b088cd2f3/cba35225-caf4-455c-a010-2c2b92c9f8b5/fgjhfhr.PNG?format=1500w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-runtime-10b3da92d80fb56aa773-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-moment-js-vendor-6c569122bfa66a51a056-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-runtime-10b3da92d80fb56aa773-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/cldr-resource-pack-e755ccfc180e7a2ab623-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-stable-61293f01d648eef165fc-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-bfa4951cbb922ca49214-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-39639704f1ed87ea96a7-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/vta/5c5a519771c10ba3470d8101/scripts/site-bundle.65e26242174e7f2d8845e29aa884ad31.js HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/user-account-core-1b83efa22aebb0ef2c94-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/66fed1bfcc18be6b088cd2f3/ecbdaef0-0f0c-4286-9a9b-80b0121f6b35/fgjhfhr.PNG?format=1500w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-moment-js-vendor-6c569122bfa66a51a056-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/performance-be9599e0923b14e6f074-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/66fed1bfcc18be6b088cd2f3/ecbdaef0-0f0c-4286-9a9b-80b0121f6b35/fgjhfhr.PNG?format=1500w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/user-account-core-1b83efa22aebb0ef2c94-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/vta/5c5a519771c10ba3470d8101/scripts/site-bundle.65e26242174e7f2d8845e29aa884ad31.js HTTP/1.1Host: static1.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-stable-61293f01d648eef165fc-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/performance-be9599e0923b14e6f074-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-bfa4951cbb922ca49214-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-39639704f1ed87ea96a7-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/vta/5c5a519771c10ba3470d8101/scripts/floating-cart.11c2f1b3c1cb2ba0d418.js HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/66fed1bfcc18be6b088cd2f3/3ff2cde4-13e6-4919-bba4-dfb028b8f437/favicon.ico?format=100w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/vta/5c5a519771c10ba3470d8101/scripts/floating-cart.11c2f1b3c1cb2ba0d418.js HTTP/1.1Host: static1.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/66fed1bfcc18be6b088cd2f3/3ff2cde4-13e6-4919-bba4-dfb028b8f437/favicon.ico?format=100w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ddN9YUuK51MGbgd&MD=kv8UkSx3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sYyRdjOU HTTP/1.1Host: or4t.iednationusa.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.example.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.example.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.example.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /domains/example HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.example.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_css/2022/iana_website.css HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/jquery.js HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/iana.js HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/iana-logo-header.svg HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/iana.js HTTP/1.1Host: www.iana.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/iana-logo-header.svg HTTP/1.1Host: www.iana.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/jquery.js HTTP/1.1Host: www.iana.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/fonts/NotoSans-Regular.woff HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.iana.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.iana.org/_css/2022/iana_website.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/fonts/NotoSans-Bold.woff HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.iana.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.iana.org/_css/2022/iana_website.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/bookmark_icon.ico HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/bookmark_icon.ico HTTP/1.1Host: www.iana.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ddN9YUuK51MGbgd&MD=kv8UkSx3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /help/example-domains HTTP/1.1Host: www.iana.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: https://www.example.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_113.1.dr

String found in binary or memory: <html xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml" lang="en-US" > equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: proposal-request.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: images.squarespace-cdn.com
Source: global traffic	DNS traffic detected: DNS query: assets.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: static1.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: or4t.iednationusa.com
Source: global traffic	DNS traffic detected: DNS query: performance.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: www.example.com
Source: global traffic	DNS traffic detected: DNS query: www.iana.org

Source: unknown

HTTP traffic detected: POST /api/v1/records HTTP/1.1Host: performance.squarespace.comConnection: keep-aliveContent-Length: 3214sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://proposal-request.squarespace.comSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 386365Cache-Control: max-age=604800Content-Type: text/html; charset=UTF-8Date: Tue, 08 Oct 2024 05:46:22 GMTExpires: Tue, 15 Oct 2024 05:46:22 GMTLast-Modified: Thu, 03 Oct 2024 18:26:58 GMTServer: ECAcc (nyd/D157)Vary: Accept-EncodingX-Cache: 404-HITContent-Length: 1256Connection: close

Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: http://brm.io/matter-js/
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: http://id.wikisource.org/wiki/Pedoman_Umum_Ejaan_Bahasa_Indonesia_yang_Disempurnakan
Source: chromecache_113.1.dr	String found in binary or memory: http://opengraphprotocol.org/schema/
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: http://praleska.pro/
Source: chromecache_113.1.dr	String found in binary or memory: http://static1.squarespace.com/static/66fed1bfcc18be6b088cd2f3/t/67047683e2f86c04995cea9f/1728345731
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_115.1.dr, chromecache_103.1.dr	String found in binary or memory: http://yuilibrary.com/license/
Source: chromecache_101.1.dr	String found in binary or memory: https://easings.net/en#easeOutExpo)
Source: chromecache_127.1.dr, chromecache_120.1.dr	String found in binary or memory: https://feross.org
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Almarai:wght
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tssoApxBaigK_hnnS-agtn-Wow.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tssoApxBaigK_hnnS-agtnqWo572.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tsstApxBaigK_hnnQ12Fow.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tsstApxBaigK_hnnQ1iFo0C3.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKhZrc3Hgbbcjq75U4uslyuy4kn0qNcWx8QDP2V.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKhZrc3Hgbbcjq75U4uslyuy4kn0qNcWxEQDA.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcA.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY5KcCsww.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNXaxMICA.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2)
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/Amine27
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/B0k0
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/BYK
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/DevelopmentIL
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ElFadiliY
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/IrakliJani
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/JanisE
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/Kaushik1987
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/MadMG
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/Manfre98
Source: chromecache_119.1.dr	String found in binary or memory: https://github.com/Oire
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/Quenty31
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ShahramMebashar
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/TalAter
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/Viktorminator
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/WikiDiscoverer
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ZackVision
Source: chromecache_119.1.dr	String found in binary or memory: https://github.com/abdelsaid
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/adambrunner
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/alesma
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/aliem
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/amaranthrose
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/andela-batolagbe
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/andrewhood125
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/anthonylau
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/armendarabyan
Source: chromecache_95.1.dr	String found in binary or memory: https://github.com/ashima/webgl-noise
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ashwoolford
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/askpt
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/atamyratabdy
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/avaly
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/bangnk
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/baryon
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ben-lin
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/bkyceh
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/bleadof
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/bmarkovic
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/boyaq
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/bustta
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/caio-ribeiro-pereira
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/cepem
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/chienkira
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/chriscartlidge
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/chrisgedrim
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/chrisrodz
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/chyngyz
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/colindean
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/crnjakovic
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/demidov91
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ebraminio
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/eillarra
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/erhangundogan
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/estellecomment
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/evoL
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/fadsel
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/flakerimi
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/floydpink
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/forabi
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/frontyard
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/gaspard
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/gholadr
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/gurdiga
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/hagmandan
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/harpreetkhalsagtbit
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/hehachris
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/hinrik
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ibnesayeed
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jalex79
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jarcoal
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jatinag22
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/javkhaanj7
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jawish
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jbleduigou
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jcfranco
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jfroffice
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/johnideal
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jonashdown
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jonbca
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jorisroling
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/joshbrooks
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/juanghurtado
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/julionc
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/k2s
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kalehv
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/karamell
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kaushikgandhi
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kcthota
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kikoanis
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kraz
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kruyvanna
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kwisatz
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kyungw00k
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/lantip
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/le0tan
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: https://github.com/liabru/matter-wrap
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/lluchs
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/lukemcgregor
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/madhenry
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/majdal
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/marobo
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/matthewdeeco
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mayanksinghal
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mechuwind
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mehiel
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mergehez
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/middagj
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/miestasmia
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mik01aj
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/milan-j
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/miodragnikac
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mirontoli
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mmozuras
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mrbase
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/muminoff
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mweimerskirch
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/naderio
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/narainsagar
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/nicolaidavies
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/nostalgiaz
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/noureddinem
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/nurlan
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/nusretparlak
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/oerd
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/orif-jr
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/passatgt
Source: chromecache_119.1.dr	String found in binary or memory: https://github.com/petrbela
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ragnar123
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ragulka
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/rajeevnaikte
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/rasidre
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/rexxars
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/robgallen
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/robin0van0der0v
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ryangreaves
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ryanhart2
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/sakarisson
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/sampathsris
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/sedovsek
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/sigurdga
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/sirn
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/skakri
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/skfd
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/socketpair
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/soniasimoes
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/sschueller
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/stephenramthun
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/suupic
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/suvash
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/techdimension
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/thanyawzinmin
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/tk120404
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/tomer
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/topchiyev
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/tyok
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ulmus
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/uu109
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/vajradog
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/vnathalye
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/weldan
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/wernerm
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/xfh
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/xsoh
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/zemlanin
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/zenozeng
Source: chromecache_106.1.dr, chromecache_111.1.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_106.1.dr, chromecache_111.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.26.0/LICENSE
Source: chromecache_113.1.dr	String found in binary or memory: https://images.squarespace-cdn.com
Source: chromecache_113.1.dr	String found in binary or memory: https://images.squarespace-cdn.com/content/v1/66fed1bfcc18be6b088cd2f3/3ff2cde4-13e6-4919-bba4-dfb02
Source: chromecache_113.1.dr	String found in binary or memory: https://images.squarespace-cdn.com/content/v1/66fed1bfcc18be6b088cd2f3/ecbdaef0-0f0c-4286-9a9b-80b01
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_113.1.dr	String found in binary or memory: https://or4t.iednationusa.com/sYyRdjOU
Source: chromecache_113.1.dr	String found in binary or memory: https://proposal-request.squarespace.com
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/1e26032716f9ddabcd618c7b5
Source: chromecache_114.1.dr, chromecache_98.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/1f40df38f76ddb520857fbc20
Source: chromecache_92.1.dr, chromecache_129.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/34b27b07f88d77b43ccdab3e6
Source: chromecache_127.1.dr, chromecache_120.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/3978c0c2aa2735b7412720c37
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/7b318b5ff90f74fe7b3ad4f9d
Source: chromecache_134.1.dr, chromecache_122.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/a9a33b896c4058bdfcf978098
Source: chromecache_115.1.dr, chromecache_103.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/ae41d9b0bb0674c5af2363e92
Source: chromecache_113.1.dr	String found in binary or memory: https://static1.squarespace.com/static/vta/5c5a519771c10ba3470d8101/scripts/site-bundle.65e26242174e
Source: chromecache_113.1.dr	String found in binary or memory: https://static1.squarespace.com/static/vta/5c5a519771c10ba3470d8101/versioned-assets/1728323017363-D
Source: chromecache_100.1.dr, chromecache_112.1.dr	String found in binary or memory: https://www.iana.org/domains/example

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49773 version: TLS 1.2

Source: classification engine

Classification label: sus22.win@20/83@30/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1876,i,10167124012260493082,16431478365616821536,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://proposal-request.squarespace.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1876,i,10167124012260493082,16431478365616821536,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: https://proposal-request.squarespace.com/

LLM: Page contains button: 'VIEW PROPOSAL' Source: '0.0.pages.csv'

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.0.46.8	unknown	United States	16876	ICANN-DCUS	false
192.0.33.8	ianawww.vip.icann.org	United States	40528	ICANN-LAXUS	false
151.101.0.237	static.squarespace.map.fastly.net	United States	54113	FASTLYUS	false
151.101.0.238	prod.squarespace.map.fastly.net	United States	54113	FASTLYUS	false
151.101.128.238	squarespace.map.fastly.net	United States	54113	FASTLYUS	false
198.185.159.177	proposal-request.squarespace.com	United States	53831	SQUARESPACEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	or4t.iednationusa.com	European Union	13335	CLOUDFLARENETUS	false
93.184.215.14	www.example.com	European Union	15133	EDGECASTUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
35.186.236.0	performance.squarespace.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
performance.squarespace.com	35.186.236.0	true
proposal-request.squarespace.com	198.185.159.177	true
or4t.iednationusa.com	188.114.97.3	true
static.squarespace.map.fastly.net	151.101.0.237	true
www.google.com	172.217.16.196	true
squarespace.map.fastly.net	151.101.128.238	true
prod.squarespace.map.fastly.net	151.101.0.238	true
www.example.com	93.184.215.14	true
ianawww.vip.icann.org	192.0.33.8	true
images.squarespace-cdn.com	unknown	unknown
www.iana.org	unknown	unknown
assets.squarespace.com	unknown	unknown
static1.squarespace.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.iana.org/_img/bookmark_icon.ico	false	0%, Virustotal, Browse	unknown
https://assets.squarespace.com/universal/scripts-compressed/common-vendors-stable-61293f01d648eef165fc-min.en-US.js	false	0%, Virustotal, Browse	unknown
https://assets.squarespace.com/@sqs/polyfiller/1.6/modern.js	false	0%, Virustotal, Browse	unknown
https://performance.squarespace.com/api/v1/records	false		unknown
https://assets.squarespace.com/universal/scripts-compressed/extract-css-runtime-10b3da92d80fb56aa773-min.en-US.js	false		unknown
https://www.iana.org/_js/jquery.js	false		unknown
https://assets.squarespace.com/universal/styles-compressed/user-account-core-b6e8cafbf34b05da5c2b-min.en-US.css	false		unknown
https://static1.squarespace.com/static/vta/5c5a519771c10ba3470d8101/scripts/site-bundle.65e26242174e7f2d8845e29aa884ad31.js	false		unknown
https://www.example.com/	false		unknown
https://www.iana.org/_img/2022/fonts/NotoSans-Bold.woff	false		unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 8 04:45:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	FE5FC84B61E7B54FEEA2A4B0358F7726	164BA0712976CC97C57E97A071FD256255BF52EF	599F58EC902F8E3582BFEE04397BE35CF8F7FB99E598D63CF8C20B9B3E0CD7B8
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 8 04:45:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	D86F7241863FDAA15F5D06B0D102A017	41547C4D1DEAFA50F5EE326E16814C3D2455CB01	1C6279F471D3E7A5EB67398E4C14A74720ED9B849E4E33EECA373F89AE387D32
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	26769615C2F0FA22212D9C4082ABF037	A547C946174AD4B7B947A86C55765150AEF59E7E	5DAE89C3ADE03FF28966B23F24CD1325740B841BAFA5ADEC133CB67F8A8E8BAA
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 8 04:45:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	D94591A3E4B2D43D86712129847CB65E	AF11EFC0F79D1594AB67846AADCBD56E14244F38	B7256389FBAE8555CE64DB30881B7E9D21A942A516395D62BD64516389BEE0EB
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 8 04:45:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	A3DE4CEEB02354EC4193AF0BCB2A740B	D40C847677EBA3D3C3B7C5DA0562C6563021311F	33588AA6D0F80D66C1A4CA248C1D4D62C4BD68F52DC0F2D5C12A350D898D2334
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 8 04:45:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	7FB5464C830FBD2D0AC0A62C18E1294A	0E840DB577A0508584B62E17473E9B56BA9A3FA2	F1B1985AD0F0F3A51587248E455FB2C0B1BFA2D82CCBE6C77EE3E9A17E8071C1
Chrome Cache Entry: 100	HTML document, ASCII text	84238DFC8092E5D9C0DAC8EF93371A07	4A3CE8EE11E091DD7923F4D8C6E5B5E41EC7C047	EA8FAC7C65FB589B0D53560F5251F74F9E9B243478DCB6B3EA79B5E36449C8D9
Chrome Cache Entry: 101	ASCII text	B2F3557DF29A26B404DAB856C8E40E92	59BBB3E41ED276D8DDE11E3A38CA0C178E51248D	6F1DA2B12196AAC342E5491F067C2ADD99A335C7515BC021AF4DAAB30D7F34B0
Chrome Cache Entry: 102	ASCII text, with very long lines (451), with no line terminators	4D6A40A696D1ABBDF25CD121AA88B10E	F6288297D9CD2BD6FB5024E8B116B83C0C2050BE	A61DDD7C4DB00FA694A870C95E1D2AFA9FA3BF7034D92C8F68A341FC21EDB053
Chrome Cache Entry: 103	ASCII text, with very long lines (53553)	37F6C6A4F3E12B7931F736432A135726	5B0D94016AC3DB1C7DB1E372EEA9DC0054891398	6F8EC5CD511FB4B96C8B573F86B1A62D8322C0286268EECC224C0AA2F30BE18E
Chrome Cache Entry: 104	ASCII text, with very long lines (65447)	8FB8FEE4FCC3CC86FF6C724154C49C42	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
Chrome Cache Entry: 105	Unicode text, UTF-8 text, with very long lines (7601)	850267DB771BB0D73B078A69C0E515F5	A7A0E12E74981239191E016672FAA47BC1C29245	94749A9A2A419C6962EA8C3634AEE02DA5FC8FC73054DC956EEADF710EC90BD5
Chrome Cache Entry: 106	Unicode text, UTF-8 text, with very long lines (43878), with NEL line terminators	93A2AEA230D421D550375C528B22583E	E8D88B00DB1C30510928A7C6618F0F7CFFA9B4C2	54E832663426C696B1F603379026E5E15720E8C812BBBC60D63AA2AD8A479F75
Chrome Cache Entry: 107	gzip compressed data, from Unix, original size modulo 2^32 4747	A4D3A029428859C989B9144EF91C95A7	968CEE1221DE99445307365EA2B5F24DEA7C96B3	B57EDCA2DE1923384FD84209E44DF9AD844F5786E4A1A63684D8DAF3105DF75F
Chrome Cache Entry: 108	ASCII text, with very long lines (2356), with no line terminators	8CE53E2F88B67E05B5ABA3466DE8BE07	98A6016346A586057FDC84E3BCABECFEED43B59F	8E815DE943351493B2D3859DA2D958F71F6D7E46D7BA2AED29FB6D2BC0C2B08A
Chrome Cache Entry: 109	PNG image data, 513 x 171, 8-bit/color RGBA, non-interlaced	96B86BACA7B5DC9C27E86CA678CD02C4	D6409EB81E6B9BB6DCF2B7C475C08A7CBC1B5F8B	1EA1F28BCC6ADF78002CCD1B1C14876FED9028617DF1C43731B7D61A25D695D5
Chrome Cache Entry: 110	MS Windows icon resource - 3 icons, 16x16, 8 bits/pixel, 32x32, 8 bits/pixel	E14A2530B3E9141D357AFAF2314D2E49	79B6F05AC4FE930DFC574C9E24B5A5FC11B936FF	24BFB441173C83B8184B0C19CC8695615B5A3878A00E63E3DC52B3C430B18AB3
Chrome Cache Entry: 111	Unicode text, UTF-8 text, with very long lines (43878), with NEL line terminators	93A2AEA230D421D550375C528B22583E	E8D88B00DB1C30510928A7C6618F0F7CFFA9B4C2	54E832663426C696B1F603379026E5E15720E8C812BBBC60D63AA2AD8A479F75
Chrome Cache Entry: 112	HTML document, ASCII text	84238DFC8092E5D9C0DAC8EF93371A07	4A3CE8EE11E091DD7923F4D8C6E5B5E41EC7C047	EA8FAC7C65FB589B0D53560F5251F74F9E9B243478DCB6B3EA79B5E36449C8D9
Chrome Cache Entry: 113	HTML document, ASCII text, with very long lines (18630)	2FCA255BB8F6FF01159B4CD48C098BD8	2DCBD1627979F1D954CC18AE510FA4D4904C15AB	94F6D3FA85FD3AC3D382F4EF99C7572D291BD98DBCB52C1E5867BAE74457C7D5
Chrome Cache Entry: 114	ASCII text, with very long lines (41931)	3852D2F87B395B9429A293E7D449B441	547864FCBE7508B826D1B36051190927939B5A79	564747C710369BE2914090F9EDCA8EBB836F4294D9855636D54A5C4DC6077F21
Chrome Cache Entry: 115	ASCII text, with very long lines (53553)	37F6C6A4F3E12B7931F736432A135726	5B0D94016AC3DB1C7DB1E372EEA9DC0054891398	6F8EC5CD511FB4B96C8B573F86B1A62D8322C0286268EECC224C0AA2F30BE18E
Chrome Cache Entry: 116	ASCII text, with very long lines (53025)	93EBEADA02AF32CE458CC26E3517D31A	8EC4ED8682E75956B5D60C3A8C6C911379C071F0	4E0B9AEADEC5C059AFC230FAD4048F15DDE68405E86C11FFDBE0F7C762160161
Chrome Cache Entry: 117	ASCII text, with very long lines (65536), with no line terminators	A03A9C34A6F9AF02342219C5E3E550F4	998DA3A587D371E11979D44F244C9F45962D44C6	DE5B8F2971060C4F657A4EFE53E3D2525E33446A4D9A2191FE00B22E6AE07AFA
Chrome Cache Entry: 118	Unicode text, UTF-8 text	E57630C9471CA1DF5ACFE39720D616D5	038003806DFA912AC27A28DAA1A19347C0F46020	9AA975D9E792847BA5441113AA34AA2AB0B7A274B3FB5BB5B69F9B4AC87C61BF
Chrome Cache Entry: 119	Unicode text, UTF-8 text, with very long lines (7601)	850267DB771BB0D73B078A69C0E515F5	A7A0E12E74981239191E016672FAA47BC1C29245	94749A9A2A419C6962EA8C3634AEE02DA5FC8FC73054DC956EEADF710EC90BD5
Chrome Cache Entry: 120	ASCII text, with very long lines (65536), with no line terminators	5AF41E7B4416873B171E4ACCB4B60B1D	2C8D91BDEE42AAC24EE4BFB80A59DA955FD99DC3	0C0A365C16D896348DF4DE6DA13178A97B72C35CED08BF51C455D2886AD4BB25
Chrome Cache Entry: 121	ASCII text	BA2525002CEDBA259221570E88406E52	B1BBBD7E1220F145C43A176A5232C7FA2593D236	4328256D40CDAA047D99460B43F6D77366982975E891A932EF8E00736FD82E1A
Chrome Cache Entry: 122	HTML document, ASCII text, with very long lines (65536), with no line terminators	743E6A06A894198F596C5A65C66C7720	7A026079D316D0E8375066D346BC20CAAC90F19A	0599606C02FBC7E77D26090F71D6A84E80F13268D76B10FAD379D2899E418D79
Chrome Cache Entry: 123	ASCII text, with very long lines (451), with no line terminators	4D6A40A696D1ABBDF25CD121AA88B10E	F6288297D9CD2BD6FB5024E8B116B83C0C2050BE	A61DDD7C4DB00FA694A870C95E1D2AFA9FA3BF7034D92C8F68A341FC21EDB053
Chrome Cache Entry: 124	ASCII text, with very long lines (634)	9DF482A64C6EDB8581A9F5A9F455667D	42F4633263D3ADC0DFD410356E646AEE3D89EC76	509C6BE1644A710BC44AE4BAE8BC2ABD0A85CC68566CE8AEA51C3FFDA5CF3629
Chrome Cache Entry: 125	ASCII text	BA2525002CEDBA259221570E88406E52	B1BBBD7E1220F145C43A176A5232C7FA2593D236	4328256D40CDAA047D99460B43F6D77366982975E891A932EF8E00736FD82E1A
Chrome Cache Entry: 126	Web Open Font Format (Version 2), TrueType, length 17468, version 1.0	967E63E5EB1F4D90CAA096C7B9622847	B15DC8CBFD223C4AA780BB90FE172D62C92FDCCB	6F289856F002502EA9CC6AA85C2FD509F8AA6C3A17B5ADF08F2CCC148CFEEA4F
Chrome Cache Entry: 127	ASCII text, with very long lines (65536), with no line terminators	5AF41E7B4416873B171E4ACCB4B60B1D	2C8D91BDEE42AAC24EE4BFB80A59DA955FD99DC3	0C0A365C16D896348DF4DE6DA13178A97B72C35CED08BF51C455D2886AD4BB25
Chrome Cache Entry: 128	ASCII text, with very long lines (65447)	8FB8FEE4FCC3CC86FF6C724154C49C42	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
Chrome Cache Entry: 129	ASCII text, with very long lines (40035)	31F89F7C3FCADC7AC9482862D28B2318	DB44A5BA2659381CE35B7BD28EB34BC46FAA4EE3	B6E030AD2D4B16E1B747179F64E90A646D32D746986EC428AC26DB321C576B50
Chrome Cache Entry: 130	Web Open Font Format (Version 2), TrueType, length 27976, version 1.0	22907CE040431644B934B72A7C431A36	78863DFB62414FE1A73F64D7F7FBFF63EBCCB322	658CBF469E751ADE6D30B701FC7CA00B3403329481955D30ACB721CA38B45D99
Chrome Cache Entry: 131	ASCII text, with very long lines (65536), with no line terminators	F9D5C7F757F3E86951AF5412F24BB9F8	77807D55E6D4B4FF31422E25050AED8C09CB1569	935FFB91C936DDC64D8F523F7AF7610A4F728759655AF839699395AE627E4CA4
Chrome Cache Entry: 132	PNG image data, 513 x 171, 8-bit/color RGBA, non-interlaced	96B86BACA7B5DC9C27E86CA678CD02C4	D6409EB81E6B9BB6DCF2B7C475C08A7CBC1B5F8B	1EA1F28BCC6ADF78002CCD1B1C14876FED9028617DF1C43731B7D61A25D695D5
Chrome Cache Entry: 133	PNG image data, 100 x 33, 8-bit/color RGBA, non-interlaced	6D6AE637BFCE672556A73DDD4D51780C	C386C0691CD1C15B2A81E053B0BB67599E5FBF43	58D1FB8E1C138B052D9CC7E44AE5B43DAEA104327A3C6CD96C5AB2EAC7A575B2
Chrome Cache Entry: 134	HTML document, ASCII text, with very long lines (65536), with no line terminators	743E6A06A894198F596C5A65C66C7720	7A026079D316D0E8375066D346BC20CAAC90F19A	0599606C02FBC7E77D26090F71D6A84E80F13268D76B10FAD379D2899E418D79
Chrome Cache Entry: 135	MS Windows icon resource - 3 icons, 16x16, 8 bits/pixel, 32x32, 8 bits/pixel	E14A2530B3E9141D357AFAF2314D2E49	79B6F05AC4FE930DFC574C9E24B5A5FC11B936FF	24BFB441173C83B8184B0C19CC8695615B5A3878A00E63E3DC52B3C430B18AB3
Chrome Cache Entry: 136	PNG image data, 513 x 171, 8-bit/color RGBA, non-interlaced	96B86BACA7B5DC9C27E86CA678CD02C4	D6409EB81E6B9BB6DCF2B7C475C08A7CBC1B5F8B	1EA1F28BCC6ADF78002CCD1B1C14876FED9028617DF1C43731B7D61A25D695D5
Chrome Cache Entry: 137	SVG Scalable Vector Graphics image	426B3AC01D3584C820F3B7F5985D6623	6FA7ECC4EB21D4FD7BFD1FD3550F0AAAB0AB43D7	888B41C392A51D5AA6CA6DF224E345F74FFBB97A48422753A3E4F90F305D0004
Chrome Cache Entry: 91	SVG Scalable Vector Graphics image	426B3AC01D3584C820F3B7F5985D6623	6FA7ECC4EB21D4FD7BFD1FD3550F0AAAB0AB43D7	888B41C392A51D5AA6CA6DF224E345F74FFBB97A48422753A3E4F90F305D0004
Chrome Cache Entry: 92	ASCII text, with very long lines (40035)	31F89F7C3FCADC7AC9482862D28B2318	DB44A5BA2659381CE35B7BD28EB34BC46FAA4EE3	B6E030AD2D4B16E1B747179F64E90A646D32D746986EC428AC26DB321C576B50
Chrome Cache Entry: 93	ASCII text, with very long lines (65467)	65E26242174E7F2D8845E29AA884AD31	D4839F4DBDF592B943AB233384D5FD25445447FA	75C0D8550E4EFF9E0B53BDA398AF84ABEA910F72360D54DDD3353ADC2E2E2487
Chrome Cache Entry: 94	Web Open Font Format (Version 2), TrueType, length 27120, version 1.0	43E7D3F1DEC74478587A2B3CFA272631	C065F24AC428353854EBD6715C49966FC4F4C762	6C6C9C3FAD669C3D32227F5CC3467735C8211DDCF4F8C184C2E62E7F3EF7AF44
Chrome Cache Entry: 95	ASCII text, with very long lines (53025)	93EBEADA02AF32CE458CC26E3517D31A	8EC4ED8682E75956B5D60C3A8C6C911379C071F0	4E0B9AEADEC5C059AFC230FAD4048F15DDE68405E86C11FFDBE0F7C762160161
Chrome Cache Entry: 96	PNG image data, 100 x 33, 8-bit/color RGBA, non-interlaced	6D6AE637BFCE672556A73DDD4D51780C	C386C0691CD1C15B2A81E053B0BB67599E5FBF43	58D1FB8E1C138B052D9CC7E44AE5B43DAEA104327A3C6CD96C5AB2EAC7A575B2
Chrome Cache Entry: 97	ASCII text, with very long lines (65467)	65E26242174E7F2D8845E29AA884AD31	D4839F4DBDF592B943AB233384D5FD25445447FA	75C0D8550E4EFF9E0B53BDA398AF84ABEA910F72360D54DDD3353ADC2E2E2487
Chrome Cache Entry: 98	ASCII text, with very long lines (41931)	3852D2F87B395B9429A293E7D449B441	547864FCBE7508B826D1B36051190927939B5A79	564747C710369BE2914090F9EDCA8EBB836F4294D9855636D54A5C4DC6077F21
Chrome Cache Entry: 99	PNG image data, 513 x 171, 8-bit/color RGBA, non-interlaced	96B86BACA7B5DC9C27E86CA678CD02C4	D6409EB81E6B9BB6DCF2B7C475C08A7CBC1B5F8B	1EA1F28BCC6ADF78002CCD1B1C14876FED9028617DF1C43731B7D61A25D695D5

HTML page contains hidden javascript code

Source: https://proposal-request.squarespace.com/

HTTP Parser: Base64 decoded: AIzaSyCBTROq6LuvF_IE1r46-T4AeTSV-0d7my8

Source: https://www.example.com/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49773 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic

TCP traffic: 192.168.2.16:49738 -> 1.1.1.1:53

Detected suspicious crossdomain redirect

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: or4t.iednationusa.com to https://www.example.com

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212

Source: global traffic

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: proposal-request.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@sqs/polyfiller/1.6/modern.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/styles-compressed/user-account-core-b6e8cafbf34b05da5c2b-min.en-US.css HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/66fed1bfcc18be6b088cd2f3/cba35225-caf4-455c-a010-2c2b92c9f8b5/fgjhfhr.PNG?format=1500w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/versioned-site-css/66fed1bfcc18be6b088cd2f3/7/5c5a519771c10ba3470d8101/66fed1bfcc18be6b088cd2fc/1568/site.css HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/vta/5c5a519771c10ba3470d8101/versioned-assets/1728323017363-DJXHB6OU0T8MXWKJTQH4/static.css HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@sqs/polyfiller/1.6/modern.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/66fed1bfcc18be6b088cd2f3/cba35225-caf4-455c-a010-2c2b92c9f8b5/fgjhfhr.PNG?format=1500w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-runtime-10b3da92d80fb56aa773-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-moment-js-vendor-6c569122bfa66a51a056-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-runtime-10b3da92d80fb56aa773-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/cldr-resource-pack-e755ccfc180e7a2ab623-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-stable-61293f01d648eef165fc-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-bfa4951cbb922ca49214-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-39639704f1ed87ea96a7-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/vta/5c5a519771c10ba3470d8101/scripts/site-bundle.65e26242174e7f2d8845e29aa884ad31.js HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/user-account-core-1b83efa22aebb0ef2c94-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/66fed1bfcc18be6b088cd2f3/ecbdaef0-0f0c-4286-9a9b-80b0121f6b35/fgjhfhr.PNG?format=1500w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-moment-js-vendor-6c569122bfa66a51a056-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/performance-be9599e0923b14e6f074-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://proposal-request.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/66fed1bfcc18be6b088cd2f3/ecbdaef0-0f0c-4286-9a9b-80b0121f6b35/fgjhfhr.PNG?format=1500w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/user-account-core-1b83efa22aebb0ef2c94-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/vta/5c5a519771c10ba3470d8101/scripts/site-bundle.65e26242174e7f2d8845e29aa884ad31.js HTTP/1.1Host: static1.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-stable-61293f01d648eef165fc-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/performance-be9599e0923b14e6f074-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-bfa4951cbb922ca49214-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-39639704f1ed87ea96a7-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/vta/5c5a519771c10ba3470d8101/scripts/floating-cart.11c2f1b3c1cb2ba0d418.js HTTP/1.1Host: static1.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/66fed1bfcc18be6b088cd2f3/3ff2cde4-13e6-4919-bba4-dfb028b8f437/favicon.ico?format=100w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/vta/5c5a519771c10ba3470d8101/scripts/floating-cart.11c2f1b3c1cb2ba0d418.js HTTP/1.1Host: static1.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/v1/66fed1bfcc18be6b088cd2f3/3ff2cde4-13e6-4919-bba4-dfb028b8f437/favicon.ico?format=100w HTTP/1.1Host: images.squarespace-cdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ddN9YUuK51MGbgd&MD=kv8UkSx3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sYyRdjOU HTTP/1.1Host: or4t.iednationusa.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.example.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://proposal-request.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.example.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.example.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /domains/example HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.example.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_css/2022/iana_website.css HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/jquery.js HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/iana.js HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/iana-logo-header.svg HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/iana.js HTTP/1.1Host: www.iana.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/iana-logo-header.svg HTTP/1.1Host: www.iana.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/jquery.js HTTP/1.1Host: www.iana.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/fonts/NotoSans-Regular.woff HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.iana.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.iana.org/_css/2022/iana_website.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/fonts/NotoSans-Bold.woff HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.iana.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.iana.org/_css/2022/iana_website.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/bookmark_icon.ico HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/bookmark_icon.ico HTTP/1.1Host: www.iana.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ddN9YUuK51MGbgd&MD=kv8UkSx3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /help/example-domains HTTP/1.1Host: www.iana.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: https://www.example.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_113.1.dr

String found in binary or memory: <html xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml" lang="en-US" > equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: proposal-request.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: images.squarespace-cdn.com
Source: global traffic	DNS traffic detected: DNS query: assets.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: static1.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: or4t.iednationusa.com
Source: global traffic	DNS traffic detected: DNS query: performance.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: www.example.com
Source: global traffic	DNS traffic detected: DNS query: www.iana.org

Source: unknown

Source: global traffic

Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: http://brm.io/matter-js/
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: http://id.wikisource.org/wiki/Pedoman_Umum_Ejaan_Bahasa_Indonesia_yang_Disempurnakan
Source: chromecache_113.1.dr	String found in binary or memory: http://opengraphprotocol.org/schema/
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: http://praleska.pro/
Source: chromecache_113.1.dr	String found in binary or memory: http://static1.squarespace.com/static/66fed1bfcc18be6b088cd2f3/t/67047683e2f86c04995cea9f/1728345731
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_115.1.dr, chromecache_103.1.dr	String found in binary or memory: http://yuilibrary.com/license/
Source: chromecache_101.1.dr	String found in binary or memory: https://easings.net/en#easeOutExpo)
Source: chromecache_127.1.dr, chromecache_120.1.dr	String found in binary or memory: https://feross.org
Source: chromecache_113.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Almarai:wght
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tssoApxBaigK_hnnS-agtn-Wow.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tssoApxBaigK_hnnS-agtnqWo572.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tsstApxBaigK_hnnQ12Fow.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/almarai/v13/tsstApxBaigK_hnnQ1iFo0C3.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKhZrc3Hgbbcjq75U4uslyuy4kn0qNcWx8QDP2V.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKhZrc3Hgbbcjq75U4uslyuy4kn0qNcWxEQDA.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcA.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY5KcCsww.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNXaxMICA.woff2)
Source: chromecache_124.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2)
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/Amine27
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/B0k0
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/BYK
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/DevelopmentIL
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ElFadiliY
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/IrakliJani
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/JanisE
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/Kaushik1987
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/MadMG
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/Manfre98
Source: chromecache_119.1.dr	String found in binary or memory: https://github.com/Oire
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/Quenty31
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ShahramMebashar
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/TalAter
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/Viktorminator
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/WikiDiscoverer
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ZackVision
Source: chromecache_119.1.dr	String found in binary or memory: https://github.com/abdelsaid
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/adambrunner
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/alesma
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/aliem
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/amaranthrose
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/andela-batolagbe
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/andrewhood125
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/anthonylau
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/armendarabyan
Source: chromecache_95.1.dr	String found in binary or memory: https://github.com/ashima/webgl-noise
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ashwoolford
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/askpt
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/atamyratabdy
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/avaly
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/bangnk
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/baryon
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ben-lin
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/bkyceh
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/bleadof
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/bmarkovic
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/boyaq
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/bustta
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/caio-ribeiro-pereira
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/cepem
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/chienkira
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/chriscartlidge
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/chrisgedrim
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/chrisrodz
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/chyngyz
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/colindean
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/crnjakovic
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/demidov91
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ebraminio
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/eillarra
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/erhangundogan
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/estellecomment
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/evoL
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/fadsel
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/flakerimi
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/floydpink
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/forabi
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/frontyard
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/gaspard
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/gholadr
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/gurdiga
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/hagmandan
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/harpreetkhalsagtbit
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/hehachris
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/hinrik
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ibnesayeed
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jalex79
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jarcoal
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jatinag22
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/javkhaanj7
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jawish
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jbleduigou
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jcfranco
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jfroffice
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/johnideal
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jonashdown
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jonbca
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/jorisroling
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/joshbrooks
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/juanghurtado
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/julionc
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/k2s
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kalehv
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/karamell
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kaushikgandhi
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kcthota
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kikoanis
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kraz
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kruyvanna
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kwisatz
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/kyungw00k
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/lantip
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/le0tan
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: https://github.com/liabru/matter-wrap
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/lluchs
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/lukemcgregor
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/madhenry
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/majdal
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/marobo
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/matthewdeeco
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mayanksinghal
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mechuwind
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mehiel
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mergehez
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/middagj
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/miestasmia
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mik01aj
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/milan-j
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/miodragnikac
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mirontoli
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mmozuras
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mrbase
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/muminoff
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/mweimerskirch
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/naderio
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/narainsagar
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/nicolaidavies
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/nostalgiaz
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/noureddinem
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/nurlan
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/nusretparlak
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/oerd
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/orif-jr
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/passatgt
Source: chromecache_119.1.dr	String found in binary or memory: https://github.com/petrbela
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ragnar123
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ragulka
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/rajeevnaikte
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/rasidre
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/rexxars
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/robgallen
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/robin0van0der0v
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ryangreaves
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ryanhart2
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/sakarisson
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/sampathsris
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/sedovsek
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/sigurdga
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/sirn
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/skakri
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/skfd
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/socketpair
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/soniasimoes
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/sschueller
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/stephenramthun
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/suupic
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/suvash
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/techdimension
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/thanyawzinmin
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/tk120404
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/tomer
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/topchiyev
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/tyok
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/ulmus
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/uu109
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/vajradog
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/vnathalye
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/weldan
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/wernerm
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/xfh
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/xsoh
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/zemlanin
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/zenozeng
Source: chromecache_106.1.dr, chromecache_111.1.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_106.1.dr, chromecache_111.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.26.0/LICENSE
Source: chromecache_113.1.dr	String found in binary or memory: https://images.squarespace-cdn.com
Source: chromecache_113.1.dr	String found in binary or memory: https://images.squarespace-cdn.com/content/v1/66fed1bfcc18be6b088cd2f3/3ff2cde4-13e6-4919-bba4-dfb02
Source: chromecache_113.1.dr	String found in binary or memory: https://images.squarespace-cdn.com/content/v1/66fed1bfcc18be6b088cd2f3/ecbdaef0-0f0c-4286-9a9b-80b01
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_113.1.dr	String found in binary or memory: https://or4t.iednationusa.com/sYyRdjOU
Source: chromecache_113.1.dr	String found in binary or memory: https://proposal-request.squarespace.com
Source: chromecache_116.1.dr, chromecache_95.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/1e26032716f9ddabcd618c7b5
Source: chromecache_114.1.dr, chromecache_98.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/1f40df38f76ddb520857fbc20
Source: chromecache_92.1.dr, chromecache_129.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/34b27b07f88d77b43ccdab3e6
Source: chromecache_127.1.dr, chromecache_120.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/3978c0c2aa2735b7412720c37
Source: chromecache_105.1.dr, chromecache_119.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/7b318b5ff90f74fe7b3ad4f9d
Source: chromecache_134.1.dr, chromecache_122.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/a9a33b896c4058bdfcf978098
Source: chromecache_115.1.dr, chromecache_103.1.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/ae41d9b0bb0674c5af2363e92
Source: chromecache_113.1.dr	String found in binary or memory: https://static1.squarespace.com/static/vta/5c5a519771c10ba3470d8101/scripts/site-bundle.65e26242174e
Source: chromecache_113.1.dr	String found in binary or memory: https://static1.squarespace.com/static/vta/5c5a519771c10ba3470d8101/versioned-assets/1728323017363-D
Source: chromecache_100.1.dr, chromecache_112.1.dr	String found in binary or memory: https://www.iana.org/domains/example

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49773 version: TLS 1.2

Source: classification engine

Classification label: sus22.win@20/83@30/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1876,i,10167124012260493082,16431478365616821536,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://proposal-request.squarespace.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1876,i,10167124012260493082,16431478365616821536,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: https://proposal-request.squarespace.com/

LLM: Page contains button: 'VIEW PROPOSAL' Source: '0.0.pages.csv'

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

ID:	1528655
Product:	CloudBasic
Start time:	07:45:21
Start date:	08.10.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://proposal-request.squarespace.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://proposal-request.squarespace.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://proposal-request.squarespace.com/