IOC Report
https://ouryahoo.service-now.com/helpcentral/my_requests.do

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
Web Open Font Format (Version 2), CFF, length 42632, version 2.0
downloaded
Chrome Cache Entry: 101
Unicode text, UTF-8 text, with very long lines (1060)
downloaded
Chrome Cache Entry: 102
ASCII text
downloaded
Chrome Cache Entry: 103
ASCII text, with very long lines (7276)
downloaded
Chrome Cache Entry: 104
ASCII text, with very long lines (65460)
downloaded
Chrome Cache Entry: 105
ASCII text, with very long lines (65489)
dropped
Chrome Cache Entry: 106
Unicode text, UTF-8 text, with very long lines (49026), with LF, NEL line terminators
dropped
Chrome Cache Entry: 107
Web Open Font Format, TrueType, length 45160, version 1.0
downloaded
Chrome Cache Entry: 108
ASCII text
downloaded
Chrome Cache Entry: 109
ASCII text
downloaded
Chrome Cache Entry: 110
Algol 68 source, ASCII text, with very long lines (37497)
downloaded
Chrome Cache Entry: 111
Web Open Font Format (Version 2), TrueType, length 25320, version 1.0
downloaded
Chrome Cache Entry: 112
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 113
ASCII text, with very long lines (407)
dropped
Chrome Cache Entry: 114
ASCII text
downloaded
Chrome Cache Entry: 115
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 116
ASCII text
dropped
Chrome Cache Entry: 117
ASCII text
dropped
Chrome Cache Entry: 118
ASCII text
downloaded
Chrome Cache Entry: 119
ASCII text
downloaded
Chrome Cache Entry: 120
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 121
ASCII text
downloaded
Chrome Cache Entry: 122
ASCII text, with very long lines (65489)
downloaded
Chrome Cache Entry: 123
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
downloaded
Chrome Cache Entry: 124
JPEG image data, progressive, precision 8, 2400x1599, components 3
downloaded
Chrome Cache Entry: 125
HTML document, ASCII text, with very long lines (451), with no line terminators
downloaded
Chrome Cache Entry: 126
ASCII text, with very long lines (407)
downloaded
Chrome Cache Entry: 127
ASCII text
dropped
Chrome Cache Entry: 128
ASCII text
downloaded
Chrome Cache Entry: 129
PNG image data, 351 x 120, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 130
Web Open Font Format (Version 2), TrueType, length 98868, version 1.0
downloaded
Chrome Cache Entry: 131
ASCII text, with very long lines (389)
downloaded
Chrome Cache Entry: 132
ASCII text, with very long lines (2323)
downloaded
Chrome Cache Entry: 133
ASCII text, with very long lines (51741)
downloaded
Chrome Cache Entry: 134
ASCII text
dropped
Chrome Cache Entry: 135
ASCII text
dropped
Chrome Cache Entry: 136
ASCII text
downloaded
Chrome Cache Entry: 137
ASCII text, with very long lines (40099)
downloaded
Chrome Cache Entry: 138
ASCII text
dropped
Chrome Cache Entry: 139
Unicode text, UTF-8 text, with very long lines (49026), with LF, NEL line terminators
downloaded
Chrome Cache Entry: 140
ASCII text
dropped
Chrome Cache Entry: 141
ASCII text, with very long lines (2323)
dropped
Chrome Cache Entry: 142
ASCII text
downloaded
Chrome Cache Entry: 82
Web Open Font Format (Version 2), TrueType, length 105804, version 1.0
downloaded
Chrome Cache Entry: 83
ASCII text
dropped
Chrome Cache Entry: 84
ASCII text
dropped
Chrome Cache Entry: 85
ASCII text, with very long lines (65460)
dropped
Chrome Cache Entry: 86
Web Open Font Format, CFF, length 20600, version 1.0
downloaded
Chrome Cache Entry: 87
Algol 68 source, ASCII text, with very long lines (37497)
dropped
Chrome Cache Entry: 88
ASCII text
downloaded
Chrome Cache Entry: 89
ASCII text
downloaded
Chrome Cache Entry: 90
ASCII text
downloaded
Chrome Cache Entry: 91
ASCII text, with very long lines (40099)
dropped
Chrome Cache Entry: 92
ASCII text, with very long lines (18692), with no line terminators
downloaded
Chrome Cache Entry: 93
PNG image data, 351 x 120, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 94
JSON data
dropped
Chrome Cache Entry: 95
ASCII text
dropped
Chrome Cache Entry: 96
ASCII text, with very long lines (18692), with no line terminators
dropped
Chrome Cache Entry: 97
ASCII text
dropped
Chrome Cache Entry: 98
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 99
JPEG image data, progressive, precision 8, 2400x1599, components 3
dropped
There are 52 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2272,i,15800723297966843906,6007666250798350404,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ouryahoo.service-now.com/helpcentral/my_requests.do"

URLs

Name
IP
Malicious
https://ouryahoo.service-now.com/helpcentral/my_requests.do
http://typingdna.com
unknown
https://ouryahoo.service-now.com/
unknown
https://ouryahoo.service-now.com/scripts/js_includes_list_edit_doctype.jsx?v=10-03-2024_2059&lp=Sat_Oct_05_17_10_03_PDT_2024&c=29_292
149.96.18.110
https://ok14static.oktacdn.com/assets/loginpage/font/assets/Inter-Regular.c8ba52b05a9ef10f4758.woff2
18.245.86.120
https://login.okta.com/discovery/iframe.html
108.138.7.41
http://jquery.org/license
unknown
https://ouryahoo.service-now.com/styles/now_icons/now-icons.woff?1b83226fe70623e32efcda1aaf0a6462
149.96.18.110
https://ouryahoo.service-now.com/styles/polarisberg/fonts/lato/lato-v17-latin-ext_latin-regular.woff2
149.96.18.110
https://ouryahoo.service-now.com/legacy_date_time_choices_processor.do?lang=en
149.96.18.110
https://github.com/zloirock/core-js
unknown
https://ouryahoo.service-now.com/scripts/js_includes_customer.jsx?v=10-03-2024_2059&lp=Sat_Oct_05_17_10_03_PDT_2024&c=29_292
149.96.18.110
https://ouryahoo.service-now.com/scripts/doctype/history_across_tabs.jsx?v=10-03-2024_2059
149.96.18.110
https://ok14static.oktacdn.com/assets/loginpage/css/loginpage-theme.c8c15f6857642c257bcd94823d968bb1.css
18.245.86.120
https://ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.24.1/js/okta-sign-in.min.js
18.245.86.120
https://ok14static.oktacdn.com/fs/bcg/4/gfs5eegpd8mCOyMHl697
18.245.86.120
https://ok14static.oktacdn.com/assets/js/mvc/loginpage/initLoginPage.pack.58de3be0c9b511a0fdfd7ea4f69b56fc.js
18.245.86.120
https://ouryahoo.service-now.com/scripts/app.guided_tours/js_guided_tours_includes.jsx?v=10-03-2024_2059
149.96.18.110
https://ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.24.1/css/okta-sign-in.min.css
18.245.86.120
https://ouryahoo.service-now.com/scripts/ui_page_footer.jsx?v=10-03-2024_2059
149.96.18.110
http://www.opensource.org/licenses/mit-license.html
unknown
https://ouryahoo.service-now.com/styles/css_includes_doctype_polaris.cssx?v=10-03-2024_2059&c=d946ae7f931d16109b1abc527cba102e&theme=Polaris
149.96.18.110
https://ok14static.oktacdn.com/fs/bco/1/fs0dqxgmgbmh0gELv696
18.245.86.120
https://api.typingdna.com/scripts/typingdna.js
unknown
https://ouryahoo.service-now.com/auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fouryahoo.okta.com%2Fapp%2Fservicenow_ud%2Fexksml59lzSa0Y9Xw696%2Fsso%2Fsaml%3FSAMLRequest%3DlVLRbptAEPwVdO%252FAgY0xJ2OJ2qpqKU1RcKqmL9UW1vEpxx29PeykX1%252BMHTWV2kR9vZ2dmZ25BUGr4k4UvdvrG%252FzRIznvsVWaxHmSs95qYYAkCQ0tknC1qIqPVyIOuOiscaY2inkFEVonjV4ZTX2LtkJ7kDXe3lzlbO9cRyIMTW%252BfYG9MQOehr80xqE0bajh0cI9BY5i3HixIDSeuv2yaBwfjCnRdeKEZWL71TYiPD9SqJFM%252FK%252BB32ZfjLJuFRCY8XcK898bWON6Zsx0oQuZt1jmrrld8ngDU8yRNeD2f8jRtpnwCGa93cTSZNDAAqQQiecDfq0Q9bjQ50C5nMY%252BnfsT9eLrlmZhEIkmDlM%252B%252BMq%252B8JPRO6kbq%252B9fj%252FH4Gkfiw3ZZ%252B%252BanajgQH2aC9HtD%252FmeRntDSmOHCz5WIsVIzG7cuOX%252FcEz8Wy5Vvii%252FClxEWwEyfnm3VplKyfvEIpc1xZBDdc42yPYzEtuH%252B7iIJofJGNvxuhAluQqmgai0QsXF50%252F%252FzFy18%253D%26RelayState%3Dhttps%253A%252F%252Fouryahoo.service-now.com%252Fhelpcentral%252Fmy_requests.do
149.96.18.110
https://ouryahoo.okta.com/app/servicenow_ud/exksml59lzSa0Y9Xw696/sso/saml?SAMLRequest=lVLRbptAEPwVdO%2FAgY0xJ2OJ2qpqKU1RcKqmL9UW1vEpxx29PeykX1%2BMHTWV2kR9vZ2dmZ25BUGr4k4UvdvrG%2FzRIznvsVWaxHmSs95qYYAkCQ0tknC1qIqPVyIOuOiscaY2inkFEVonjV4ZTX2LtkJ7kDXe3lzlbO9cRyIMTW%2BfYG9MQOehr80xqE0bajh0cI9BY5i3HixIDSeuv2yaBwfjCnRdeKEZWL71TYiPD9SqJFM%2FK%2BB32ZfjLJuFRCY8XcK898bWON6Zsx0oQuZt1jmrrld8ngDU8yRNeD2f8jRtpnwCGa93cTSZNDAAqQQiecDfq0Q9bjQ50C5nMY%2BnfsT9eLrlmZhEIkmDlM%2B%2BMq%2B8JPRO6kbq%2B9fj%2FH4Gkfiw3ZZ%2B%2BanajgQH2aC9HtD%2FmeRntDSmOHCz5WIsVIzG7cuOX%2FcEz8Wy5Vvii%2FClxEWwEyfnm3VplKyfvEIpc1xZBDdc42yPYzEtuH%2B7iIJofJGNvxuhAluQqmgai0QsXF50%2F%2FzFy18%3D&RelayState=https%3A%2F%2Fouryahoo.service-now.com%2Fhelpcentral%2Fmy_requests.do
https://ok14static.oktacdn.com/assets/loginpage/font/assets/Aeonik-Regular.c672e6fbaa411f5719f3.woff2
18.245.86.120
http://www.webcolors.freeserve.co.uk/names140.htm
unknown
https://github.com/zloirock/core-js/blob/v3.37.1/LICENSE
unknown
https://ouryahoo.service-now.com/scripts/polaris_theme_refresh_observer.jsx?v=10-03-2024_2059
149.96.18.110
https://ouryahoo.okta.com/api/internal/brand/theme/style-sheet?touch-point=SIGN_IN_PAGE&v=8d189360ca36f42bdcf354ef1d76bdf2dd3b2e798e7d9c265a1293921a0bee343c6ae891d39500c709c7fa0285d18e7e
76.223.94.4
https://ouryahoo.service-now.com/scripts/doctype/js_includes_doctype.jsx?v=10-03-2024_2059&lp=Sat_Oct_05_17_10_03_PDT_2024&c=29_292
149.96.18.110
https://ouryahoo.service-now.com/scripts/transaction_scope_includes.jsx?v=10-03-2024_2059
149.96.18.110
http://pki-crl.symauth.com/ca_7a5c3a0c73117406add19312bc1bc23f/LatestCRL.crl07
unknown
http://www.apache.org/licenses/LICENSE-2.0
unknown
https://developers.google.com/open-source/licenses/bsd
unknown
https://ouryahoo.service-now.com/scripts/doctype/js_includes_legacy.jsx?v=10-03-2024_2059&lp=Sat_Oct_05_17_10_03_PDT_2024&c=29_292
149.96.18.110
https://ouryahoo.service-now.com/scripts/doctype/js_includes_last_doctype.jsx?v=10-03-2024_2059&lp=Sat_Oct_05_17_10_03_PDT_2024&c=29_292
149.96.18.110
https://ouryahoo.service-now.com/helpcentral/my_requests.do
149.96.18.110
https://ok14static.oktacdn.com/assets/loginpage/font/assets/Inter-SemiBold.b5f0f109bc88052d4000.woff2
18.245.86.120
http://www.apache.org/licenses/LICENSE-2.0.
unknown
https://ok14static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.24.1/font/okticon.woff
18.245.86.120
https://ouryahoo.service-now.com/polarisberg_theme_variables.do?c=falseAdOcIY%2FW03MtawZedh1zGC2JDdM%3D
149.96.18.110
http://github.com/kriskowal/q/raw/master/LICENSE
unknown
https://ouryahoo.okta.com/idp/idx/introspect
76.223.94.4
https://ouryahoo.okta.com/favicon.ico
76.223.94.4
http://cv.iptc.org/newscodes/digitalsourcetype/compositeWithTrainedAlgorithmicMedia
unknown
https://jquery.org/license
unknown
https://jquery.com/
unknown
https://ouryahoo.service-now.com/ConditionalFocus.jsdbx?v=10-03-2024_2059&c=29_292
149.96.18.110
http://pki-ocsp.symauth.com0
unknown
https://ok14static.oktacdn.com/fs/bco/7/fs0kf9n2h17tlZzX8697
18.245.86.120
https://ouryahoo.service-now.com/scripts/thirdparty/dom_purify/purify.jsx?v=10-03-2024_2059&sysparm_substitute=false
149.96.18.110
https://ouryahoo.service-now.com/scripts/doctype/z_last_include.jsx?v=10-03-2024_2059
149.96.18.110
https://ouryahoo.service-now.com/styles/polarisberg/css_includes_polarisberg.cssx?v=10-03-2024_2059&c=d946ae7f931d16109b1abc527cba102e&theme=Polaris
149.96.18.110
http://qtip2.com
unknown
https://typingdna.com/scripts/typingdna.js
unknown
https://github.com/js-cookie/js-cookie
unknown
https://ouryahoo.service-now.com/scripts/heisenberg/heisenberg_all.jsx?v=10-03-2024_2059
149.96.18.110
http://mths.be/placeholder
unknown
https://sizzlejs.com/
unknown
https://js.foundation/
unknown
https://login.okta.com/lib/discoveryIframe-a869d3b07ebd94f8cfae.min.js
108.138.7.41
https://github.com/endtwist/fontcustom/blob/master/lib/fontcustom/templates/fontcustom.css
unknown
There are 53 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
a95f94dcbb67173ac.awsglobalaccelerator.com
76.223.94.4
bg.microsoft.map.fastly.net
199.232.214.172
s-part-0044.t-0009.fb-t-msedge.net
13.107.253.72
www.google.com
142.250.185.164
ouryahoo.service-now.com
149.96.18.110
d2r9kt6kpl1mzg.cloudfront.net
18.245.86.120
fp2e7a.wpc.phicdn.net
192.229.221.95
d37qf8t9pe6csu.cloudfront.net
108.138.7.41
ouryahoo.okta.com
unknown
ok14static.oktacdn.com
unknown
login.okta.com
unknown
There are 1 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
76.223.94.4
a95f94dcbb67173ac.awsglobalaccelerator.com
United States
18.245.86.120
d2r9kt6kpl1mzg.cloudfront.net
United States
108.138.7.41
d37qf8t9pe6csu.cloudfront.net
United States
149.96.18.110
ouryahoo.service-now.com
United States
192.168.2.4
unknown
unknown
239.255.255.250
unknown
Reserved
142.250.185.164
www.google.com
United States
192.168.2.23
unknown
unknown
108.138.7.126
unknown
United States

DOM / HTML

URL
Malicious
https://ouryahoo.okta.com/app/servicenow_ud/exksml59lzSa0Y9Xw696/sso/saml?SAMLRequest=lVLRbptAEPwVdO%2FAgY0xJ2OJ2qpqKU1RcKqmL9UW1vEpxx29PeykX1%2BMHTWV2kR9vZ2dmZ25BUGr4k4UvdvrG%2FzRIznvsVWaxHmSs95qYYAkCQ0tknC1qIqPVyIOuOiscaY2inkFEVonjV4ZTX2LtkJ7kDXe3lzlbO9cRyIMTW%2BfYG9MQOehr80xqE0bajh0cI9BY5i3HixIDSeuv2yaBwfjCnRdeKEZWL71TYiPD9SqJFM%2FK%2BB32ZfjLJuFRCY8XcK898bWON6Zsx0oQuZt1jmrrld8ngDU8yRNeD2f8jRtpnwCGa93cTSZNDAAqQQiecDfq0Q9bjQ50C5nMY%2BnfsT9eLrlmZhEIkmDlM%2B%2BMq%2B8JPRO6kbq%2B9fj%2FH4Gkfiw3ZZ%2B%2BanajgQH2aC9HtD%2FmeRntDSmOHCz5WIsVIzG7cuOX%2FcEz8Wy5Vvii%2FClxEWwEyfnm3VplKyfvEIpc1xZBDdc42yPYzEtuH%2B7iIJofJGNvxuhAluQqmgai0QsXF50%2F%2FzFy18%3D&RelayState=https%3A%2F%2Fouryahoo.service-now.com%2Fhelpcentral%2Fmy_requests.do
https://ouryahoo.okta.com/app/servicenow_ud/exksml59lzSa0Y9Xw696/sso/saml?SAMLRequest=lVLRbptAEPwVdO%2FAgY0xJ2OJ2qpqKU1RcKqmL9UW1vEpxx29PeykX1%2BMHTWV2kR9vZ2dmZ25BUGr4k4UvdvrG%2FzRIznvsVWaxHmSs95qYYAkCQ0tknC1qIqPVyIOuOiscaY2inkFEVonjV4ZTX2LtkJ7kDXe3lzlbO9cRyIMTW%2BfYG9MQOehr80xqE0bajh0cI9BY5i3HixIDSeuv2yaBwfjCnRdeKEZWL71TYiPD9SqJFM%2FK%2BB32ZfjLJuFRCY8XcK898bWON6Zsx0oQuZt1jmrrld8ngDU8yRNeD2f8jRtpnwCGa93cTSZNDAAqQQiecDfq0Q9bjQ50C5nMY%2BnfsT9eLrlmZhEIkmDlM%2B%2BMq%2B8JPRO6kbq%2B9fj%2FH4Gkfiw3ZZ%2B%2BanajgQH2aC9HtD%2FmeRntDSmOHCz5WIsVIzG7cuOX%2FcEz8Wy5Vvii%2FClxEWwEyfnm3VplKyfvEIpc1xZBDdc42yPYzEtuH%2B7iIJofJGNvxuhAluQqmgai0QsXF50%2F%2FzFy18%3D&RelayState=https%3A%2F%2Fouryahoo.service-now.com%2Fhelpcentral%2Fmy_requests.do
https://ouryahoo.okta.com/app/servicenow_ud/exksml59lzSa0Y9Xw696/sso/saml?SAMLRequest=lVLRbptAEPwVdO%2FAgY0xJ2OJ2qpqKU1RcKqmL9UW1vEpxx29PeykX1%2BMHTWV2kR9vZ2dmZ25BUGr4k4UvdvrG%2FzRIznvsVWaxHmSs95qYYAkCQ0tknC1qIqPVyIOuOiscaY2inkFEVonjV4ZTX2LtkJ7kDXe3lzlbO9cRyIMTW%2BfYG9MQOehr80xqE0bajh0cI9BY5i3HixIDSeuv2yaBwfjCnRdeKEZWL71TYiPD9SqJFM%2FK%2BB32ZfjLJuFRCY8XcK898bWON6Zsx0oQuZt1jmrrld8ngDU8yRNeD2f8jRtpnwCGa93cTSZNDAAqQQiecDfq0Q9bjQ50C5nMY%2BnfsT9eLrlmZhEIkmDlM%2B%2BMq%2B8JPRO6kbq%2B9fj%2FH4Gkfiw3ZZ%2B%2BanajgQH2aC9HtD%2FmeRntDSmOHCz5WIsVIzG7cuOX%2FcEz8Wy5Vvii%2FClxEWwEyfnm3VplKyfvEIpc1xZBDdc42yPYzEtuH%2B7iIJofJGNvxuhAluQqmgai0QsXF50%2F%2FzFy18%3D&RelayState=https%3A%2F%2Fouryahoo.service-now.com%2Fhelpcentral%2Fmy_requests.do
https://ouryahoo.okta.com/app/servicenow_ud/exksml59lzSa0Y9Xw696/sso/saml?SAMLRequest=lVLRbptAEPwVdO%2FAgY0xJ2OJ2qpqKU1RcKqmL9UW1vEpxx29PeykX1%2BMHTWV2kR9vZ2dmZ25BUGr4k4UvdvrG%2FzRIznvsVWaxHmSs95qYYAkCQ0tknC1qIqPVyIOuOiscaY2inkFEVonjV4ZTX2LtkJ7kDXe3lzlbO9cRyIMTW%2BfYG9MQOehr80xqE0bajh0cI9BY5i3HixIDSeuv2yaBwfjCnRdeKEZWL71TYiPD9SqJFM%2FK%2BB32ZfjLJuFRCY8XcK898bWON6Zsx0oQuZt1jmrrld8ngDU8yRNeD2f8jRtpnwCGa93cTSZNDAAqQQiecDfq0Q9bjQ50C5nMY%2BnfsT9eLrlmZhEIkmDlM%2B%2BMq%2B8JPRO6kbq%2B9fj%2FH4Gkfiw3ZZ%2B%2BanajgQH2aC9HtD%2FmeRntDSmOHCz5WIsVIzG7cuOX%2FcEz8Wy5Vvii%2FClxEWwEyfnm3VplKyfvEIpc1xZBDdc42yPYzEtuH%2B7iIJofJGNvxuhAluQqmgai0QsXF50%2F%2FzFy18%3D&RelayState=https%3A%2F%2Fouryahoo.service-now.com%2Fhelpcentral%2Fmy_requests.do
https://ouryahoo.okta.com/app/servicenow_ud/exksml59lzSa0Y9Xw696/sso/saml?SAMLRequest=lVLRbptAEPwVdO%2FAgY0xJ2OJ2qpqKU1RcKqmL9UW1vEpxx29PeykX1%2BMHTWV2kR9vZ2dmZ25BUGr4k4UvdvrG%2FzRIznvsVWaxHmSs95qYYAkCQ0tknC1qIqPVyIOuOiscaY2inkFEVonjV4ZTX2LtkJ7kDXe3lzlbO9cRyIMTW%2BfYG9MQOehr80xqE0bajh0cI9BY5i3HixIDSeuv2yaBwfjCnRdeKEZWL71TYiPD9SqJFM%2FK%2BB32ZfjLJuFRCY8XcK898bWON6Zsx0oQuZt1jmrrld8ngDU8yRNeD2f8jRtpnwCGa93cTSZNDAAqQQiecDfq0Q9bjQ50C5nMY%2BnfsT9eLrlmZhEIkmDlM%2B%2BMq%2B8JPRO6kbq%2B9fj%2FH4Gkfiw3ZZ%2B%2BanajgQH2aC9HtD%2FmeRntDSmOHCz5WIsVIzG7cuOX%2FcEz8Wy5Vvii%2FClxEWwEyfnm3VplKyfvEIpc1xZBDdc42yPYzEtuH%2B7iIJofJGNvxuhAluQqmgai0QsXF50%2F%2FzFy18%3D&RelayState=https%3A%2F%2Fouryahoo.service-now.com%2Fhelpcentral%2Fmy_requests.do
https://ouryahoo.okta.com/app/servicenow_ud/exksml59lzSa0Y9Xw696/sso/saml?SAMLRequest=lVLRbptAEPwVdO%2FAgY0xJ2OJ2qpqKU1RcKqmL9UW1vEpxx29PeykX1%2BMHTWV2kR9vZ2dmZ25BUGr4k4UvdvrG%2FzRIznvsVWaxHmSs95qYYAkCQ0tknC1qIqPVyIOuOiscaY2inkFEVonjV4ZTX2LtkJ7kDXe3lzlbO9cRyIMTW%2BfYG9MQOehr80xqE0bajh0cI9BY5i3HixIDSeuv2yaBwfjCnRdeKEZWL71TYiPD9SqJFM%2FK%2BB32ZfjLJuFRCY8XcK898bWON6Zsx0oQuZt1jmrrld8ngDU8yRNeD2f8jRtpnwCGa93cTSZNDAAqQQiecDfq0Q9bjQ50C5nMY%2BnfsT9eLrlmZhEIkmDlM%2B%2BMq%2B8JPRO6kbq%2B9fj%2FH4Gkfiw3ZZ%2B%2BanajgQH2aC9HtD%2FmeRntDSmOHCz5WIsVIzG7cuOX%2FcEz8Wy5Vvii%2FClxEWwEyfnm3VplKyfvEIpc1xZBDdc42yPYzEtuH%2B7iIJofJGNvxuhAluQqmgai0QsXF50%2F%2FzFy18%3D&RelayState=https%3A%2F%2Fouryahoo.service-now.com%2Fhelpcentral%2Fmy_requests.do