Windows Analysis Report
https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$

Overview

General Information

Sample URL: https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$
Analysis ID: 1544655
Infos:

Detection

Score: 0
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

Detected non-DNS traffic on DNS port

Classification

Source: https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$ HTTP Parser: No favicon
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:55180 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:55183 version: TLS 1.2
Source: global traffic TCP traffic: 192.168.2.4:49819 -> 1.1.1.1:53
Source: global traffic TCP traffic: 192.168.2.4:55178 -> 1.1.1.1:53
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic HTTP traffic detected: GET /mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$ HTTP/1.1Host: portal.csr24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: portal.csr24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=4oa4Htyqf91DCEbZ0RLo0bzUcVBXso4j1SXyDPz4oQk-1730214372-1.0.1.1-YevTUHQ51SbfwgfOcwlvi2Ls3DJeMCTHu98L9cFIvHyGNqvG.zVE_ceQKEbvSpbOoC1bj707OH5k1GmFw2WNUw
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic DNS traffic detected: DNS query: portal.csr24.com
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 15:06:13 GMTContent-Type: text/htmlContent-Length: 1245Connection: closep3p: CP="CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"CF-Cache-Status: HITAge: 257Expires: Tue, 29 Oct 2024 19:06:13 GMTCache-Control: public, max-age=14400Server: cloudflareCF-RAY: 8da411786cb4e5b9-DFW
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 55195 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55246 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55281 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55197
Source: unknown Network traffic detected: HTTP traffic on port 55269 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55303 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55199
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55193
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55194
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55195
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55196
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55190
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55191
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55192
Source: unknown Network traffic detected: HTTP traffic on port 55217 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55211 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55228 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55263 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55189 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55200 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55252 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55298 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55235 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55258 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55241 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55264 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55270 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55222 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55190 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55297 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55184 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55309 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55205 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55230 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55286 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55247 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55304 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55275 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55216 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55292 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55233 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55279 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55191 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55267
Source: unknown Network traffic detected: HTTP traffic on port 55285 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55268
Source: unknown Network traffic detected: HTTP traffic on port 55262 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55269
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55274
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55275
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55276
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55277
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55270
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55271
Source: unknown Network traffic detected: HTTP traffic on port 55201 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55272
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55273
Source: unknown Network traffic detected: HTTP traffic on port 55310 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55213 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55291 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55207 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55196 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55224 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55278
Source: unknown Network traffic detected: HTTP traffic on port 55267 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55279
Source: unknown Network traffic detected: HTTP traffic on port 55280 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55285
Source: unknown Network traffic detected: HTTP traffic on port 55185 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55286
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55287
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55288
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55281
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55282
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55283
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55284
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55280
Source: unknown Network traffic detected: HTTP traffic on port 55273 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55218 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55239 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55256 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55206 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55212 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55197 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55229 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55289
Source: unknown Network traffic detected: HTTP traffic on port 55245 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55296
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55297
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55298
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55299
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55292
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55293
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55294
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55295
Source: unknown Network traffic detected: HTTP traffic on port 55305 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55251 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55290
Source: unknown Network traffic detected: HTTP traffic on port 55180 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55291
Source: unknown Network traffic detected: HTTP traffic on port 55274 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55257 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55234 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55240 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55186
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55187
Source: unknown Network traffic detected: HTTP traffic on port 55268 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55188
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55189
Source: unknown Network traffic detected: HTTP traffic on port 55223 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55296 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55182
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55183
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55184
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55185
Source: unknown Network traffic detected: HTTP traffic on port 55311 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55180
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55181
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown Network traffic detected: HTTP traffic on port 55208 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55227
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55228
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55229
Source: unknown Network traffic detected: HTTP traffic on port 55289 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55300 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55223
Source: unknown Network traffic detected: HTTP traffic on port 55266 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55224
Source: unknown Network traffic detected: HTTP traffic on port 55243 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55225
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55226
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55230
Source: unknown Network traffic detected: HTTP traffic on port 55186 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55220 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55231
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55232
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55233
Source: unknown Network traffic detected: HTTP traffic on port 55295 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55272 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55232 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55238
Source: unknown Network traffic detected: HTTP traffic on port 55192 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55203 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55239
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55234
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55235
Source: unknown Network traffic detected: HTTP traffic on port 55284 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55236
Source: unknown Network traffic detected: HTTP traffic on port 55249 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55237
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55241
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55242
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55243
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55244
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55240
Source: unknown Network traffic detected: HTTP traffic on port 55306 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55277 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55181 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55214 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55290 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55283 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55249
Source: unknown Network traffic detected: HTTP traffic on port 55202 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55193 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55225 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55245
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55246
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55247
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55248
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55252
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55219 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55253
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55254
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55255
Source: unknown Network traffic detected: HTTP traffic on port 55301 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55250
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55251
Source: unknown Network traffic detected: HTTP traffic on port 55278 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55238 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55255 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55256
Source: unknown Network traffic detected: HTTP traffic on port 55261 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55257
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55258
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55259
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55263
Source: unknown Network traffic detected: HTTP traffic on port 55244 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55264
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55265
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55266
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55260
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55261
Source: unknown Network traffic detected: HTTP traffic on port 55187 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55262
Source: unknown Network traffic detected: HTTP traffic on port 55250 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55199 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55210 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55308
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55309
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55304
Source: unknown Network traffic detected: HTTP traffic on port 55227 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55305
Source: unknown Network traffic detected: HTTP traffic on port 55204 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55306
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55307
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55300
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55301
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55302
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55303
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55310
Source: unknown Network traffic detected: HTTP traffic on port 55307 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55276 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55299 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55182 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55236 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55259 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55253 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55288 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55242 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55311
Source: unknown Network traffic detected: HTTP traffic on port 55221 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55294 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55200
Source: unknown Network traffic detected: HTTP traffic on port 55302 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55231 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55209
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55205
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55206
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55207
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55208
Source: unknown Network traffic detected: HTTP traffic on port 55287 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55201
Source: unknown Network traffic detected: HTTP traffic on port 55248 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55202
Source: unknown Network traffic detected: HTTP traffic on port 55260 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55203
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55204
Source: unknown Network traffic detected: HTTP traffic on port 55293 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55210
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55211
Source: unknown Network traffic detected: HTTP traffic on port 55188 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55215 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55282 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55209 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55194 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55216
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55217
Source: unknown Network traffic detected: HTTP traffic on port 55226 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55218
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55219
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55212
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55213
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55214
Source: unknown Network traffic detected: HTTP traffic on port 55265 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55215
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55220
Source: unknown Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55221
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 55222
Source: unknown Network traffic detected: HTTP traffic on port 55183 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55308 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55254 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55237 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 55271 -> 443
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:55180 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:55183 version: TLS 1.2
Source: classification engine Classification label: clean0.win@16/2@4/6
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1936,i,453894502974441255,17825873918836266513,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://portal.csr24.com/mvc/1170006399__;!!DBRq3IFYHOmqRdv5!bBc_3bg0X5ss1Bdd_p-1s2qY-1LZIcSGeOvtPpw4Jr7WZl6WaZMmQE_6DKoZ-pleP7ZSNziyH56QcsGe-uYedNBeB40Vvga6$"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=1936,i,453894502974441255,17825873918836266513,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs