Edit tour

Windows Analysis Report
79494226.eml

Overview

General Information

Sample name:	79494226.eml renamed because original name is a hash value
Original sample name:	FW eSignature Required on New Branchprop Contract and Agreement - Important Notices and Disclosures Cbaker eSign 13Mar2024 PN179494226.eml
Analysis ID:	1410993
MD5:	f04a38d58d74ba842ae2df7e99a07021
SHA1:	9c07e76167e9b773259088c4311b59d5ceb81dff
SHA256:	aeb98072bb62906b79f23b963c9a564a5b636bf8dcca5237b34290a0c726c09c
Infos:

Detection

Score:	23
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Phishing site detected (based on OCR NLP Model)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Queries the volume information (name, serial number etc) of a device

Sigma detected: Office Autorun Keys Modification

Stores files to the Windows start menu directory

Tries to load missing DLLs

Classification

Process Tree

System is w10x64_ra

OUTLOOK.EXE (PID: 6340 cmdline: C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\79494226.eml MD5: 91A5292942864110ED734005B7E005C0)

ai.exe (PID: 6904 cmdline: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "B36013A8-6712-469E-86E5-2C4D7C9E323C" "8741F753-D1BD-497F-8194-8638DC55638B" "6340" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx MD5: EC652BEDD90E089D9406AFED89A8A8BD)

chrome.exe (PID: 984 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://kbsu9ilab.cc.rs6.net/tn.jsp?f=001fZq7bqeyRnyHfycECMu6dbIw9dJp6_kueG_i93RQ_rI0EX7lYobNiukZj-9V5EZvRR4JJXm_KJfyMOW2xxjHoCvKXQXPFX9cwSxCzR8l4r9q_rP8uh8hzEaCMmDa5J-05C93Yy9tsOaLCK_2C50pe2KX9779_9-Q&c=&ch=#Y2Jha2VyQGJyYW5jaHByb3AuY29t==mwhs46xy5enuetcfwwr=Z29vZ2xlLmNvbQ== MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1972,i,17880015294982647830,8557834525598168254,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://kbsu9ilab.cc.rs6.net/tn.jsp?f=001fZq7bqeyRnyHfycECMu6dbIw9dJp6_kueG_i93RQ_rI0EX7lYobNiukZj-9V5EZvRR4JJXm_KJfyMOW2xxjHoCvKXQXPFX9cwSxCzR8l4r9q_rP8uh8hzEaCMmDa5J-05C93Yy9tsOaLCK_2C50pe2KX9779_9-Q&c=&ch=#Y2Jha2VyQGJyYW5jaHByb3AuY29t==mwhs46xy5enuetcfwwr=Z29vZ2xlLmNvbQ== MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8084 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=2032,i,10859073210029713389,12247305441348204502,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Sigma Signatures

Sigma detected: Office Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 , EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 6340, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin\1

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Phishing site detected (based on OCR NLP Model)

Source: MSG / EML

ML Model on OCR Text: Matched 99.6% probability on "Carl E. Baker VICE PRESIDENT - DEVELOPMENT 3340 Road, NE C m-.%-G75 Your documents have been completed. VIEW COMPLETE DOCUMENTS The issued policy has been signed by all the required parties. To view or eSign, please click "View Completed Documents" button above. Powered by DocuSign Microsoft "

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49804 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 18.164.124.34 18.164.124.34
Source: Joe Sandbox View	IP Address: 208.75.122.11 208.75.122.11
Source: Joe Sandbox View	IP Address: 199.232.160.157 199.232.160.157
Source: Joe Sandbox View	IP Address: 104.244.42.69 104.244.42.69

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.251.82
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.251.82
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6kPGYdlSoXLsxC5&MD=RmTzEpbF HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /tn.jsp?f=001fZq7bqeyRnyHfycECMu6dbIw9dJp6_kueG_i93RQ_rI0EX7lYobNiukZj-9V5EZvRR4JJXm_KJfyMOW2xxjHoCvKXQXPFX9cwSxCzR8l4r9q_rP8uh8hzEaCMmDa5J-05C93Yy9tsOaLCK_2C50pe2KX9779_9-Q&c=&ch= HTTP/1.1Host: kbsu9ilab.cc.rs6.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /error.jsp?e=5wq87wgbb HTTP/1.1Host: kbsu9ilab.cc.rs6.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dynamic-pages.css HTTP/1.1Host: kbsu9ilab.cc.rs6.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kbsu9ilab.cc.rs6.net/error.jsp?e=5wq87wgbbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /help-center HTTP/1.1Host: community.constantcontact.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://kbsu9ilab.cc.rs6.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4
Source: global traffic	HTTP traffic detected: GET /skins/6420764/117dc249ea630d6f6efcb65d2eaeb115/ctct_community.css HTTP/1.1Host: community.constantcontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://community.constantcontact.com/help-centerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; AWSALB=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; AWSALBCORS=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..
Source: global traffic	HTTP traffic detected: GET /html/assets/CTSans-Regular.otf HTTP/1.1Host: community.constantcontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://community.constantcontact.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://community.constantcontact.com/help-centerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; AWSALB=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; AWSALBCORS=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..
Source: global traffic	HTTP traffic detected: GET /html/assets/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1Host: community.constantcontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://community.constantcontact.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://community.constantcontact.com/help-centerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; AWSALB=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; AWSALBCORS=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..
Source: global traffic	HTTP traffic detected: GET /html/assets/jquery.bxslider.js HTTP/1.1Host: community.constantcontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/help-centerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; AWSALB=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; AWSALBCORS=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..
Source: global traffic	HTTP traffic detected: GET /t5/scripts/EAA19129A1248A19BBE86A06A73AF336/lia-scripts-head-min.js HTTP/1.1Host: community.constantcontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/help-centerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; AWSALB=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; AWSALBCORS=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..
Source: global traffic	HTTP traffic detected: GET /t5/scripts/D60EB96AE5FF670ED274F16ABB044ABD/lia-scripts-head-min.js HTTP/1.1Host: community.constantcontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/help-centerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; AWSALB=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; AWSALBCORS=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..
Source: global traffic	HTTP traffic detected: GET /html/@5D82F3FBF741DCCE3B68B3CE58FBAB80/assets/HorizontalStackLogo.png HTTP/1.1Host: community.constantcontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.constantcontact.com/help-centerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; AWSALB=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; AWSALBCORS=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..
Source: global traffic	HTTP traffic detected: GET /ajax/libs/bootstrap-3-typeahead/4.0.2/bootstrap3-typeahead.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://community.constantcontact.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/corejs-typeahead/1.1.1/bloodhound.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://community.constantcontact.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t5/scripts/BE0032418924EBD91CF51033577A461C/lia-scripts-common-min.js HTTP/1.1Host: community.constantcontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/help-centerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; AWSALB=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; AWSALBCORS=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..; optimizelyEndUserId=oeu1710767994912r0.4663457163439588
Source: global traffic	HTTP traffic detected: GET /t5/scripts/3BB760D8734879CF1803A49A7542DDB8/lia-scripts-body-min.js HTTP/1.1Host: community.constantcontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/help-centerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; AWSALB=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; AWSALBCORS=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..; optimizelyEndUserId=oeu1710767994912r0.4663457163439588
Source: global traffic	HTTP traffic detected: GET /html/@3C20D34B8579978364EBD8994A0181E7/assets/profilehoverv2.js HTTP/1.1Host: community.constantcontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/help-centerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; AWSALB=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; AWSALBCORS=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..; optimizelyEndUserId=oeu1710767994912r0.4663457163439588
Source: global traffic	HTTP traffic detected: GET /ajax/libs/corejs-typeahead/1.1.1/typeahead.bundle.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://community.constantcontact.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /html/@5D82F3FBF741DCCE3B68B3CE58FBAB80/assets/HorizontalStackLogo.png HTTP/1.1Host: community.constantcontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; AWSALB=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; AWSALBCORS=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..
Source: global traffic	HTTP traffic detected: GET /ajax/libs/corejs-typeahead/1.1.1/typeahead.jquery.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://community.constantcontact.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/handlebars.js/4.0.6/handlebars.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://community.constantcontact.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/cc/community/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /html/assets/CTSans-Bold.otf HTTP/1.1Host: community.constantcontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://community.constantcontact.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://community.constantcontact.com/skins/6420764/117dc249ea630d6f6efcb65d2eaeb115/ctct_community.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; AWSALB=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; AWSALBCORS=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..; optimizelyEndUserId=oeu1710767994912r0.4663457163439588
Source: global traffic	HTTP traffic detected: GET /beacon/62310593683_1710767994394.gif HTTP/1.1Host: community.constantcontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.constantcontact.com/help-centerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; AWSALB=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; AWSALBCORS=Zt4M/ferXyZ2uwF+cgdnINSejrvvZ3UKl+H6y75FMS1FxU08wvP/d5dHI7gw+n2K6TYQB0AhW12FYW5uh62y7YGzNbkoO22BnBnjkQnnUes1udaePUCMdKXLJh3V; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..; optimizelyEndUserId=oeu1710767994912r0.4663457163439588
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=374cbb03-a782-4543-a588-eb697599fdb1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=efe5c314-4309-42a1-8d7f-a6ba1fb884a8&tw_document_href=https%3A%2F%2Fcommunity.constantcontact.com%2Fhelp-center&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxxhs&type=javascript&version=2.3.29 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=374cbb03-a782-4543-a588-eb697599fdb1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=efe5c314-4309-42a1-8d7f-a6ba1fb884a8&tw_document_href=https%3A%2F%2Fcommunity.constantcontact.com%2Fhelp-center&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxxhs&type=javascript&version=2.3.29 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/577881999014440?v=2.9.150&r=stable&domain=community.constantcontact.com&hme=8b8eb2472f555e54a8b57f2b720f9bd3b1bc6aed031525376dd772ba51107995&ex_m=63%2C107%2C95%2C99%2C54%2C3%2C89%2C62%2C14%2C87%2C80%2C45%2C47%2C153%2C156%2C167%2C163%2C164%2C166%2C26%2C90%2C46%2C69%2C165%2C148%2C151%2C160%2C161%2C168%2C116%2C13%2C44%2C172%2C171%2C118%2C16%2C30%2C33%2C1%2C37%2C58%2C59%2C60%2C64%2C84%2C15%2C12%2C86%2C83%2C82%2C96%2C98%2C32%2C97%2C27%2C23%2C149%2C152%2C125%2C25%2C9%2C10%2C11%2C5%2C6%2C22%2C19%2C20%2C50%2C55%2C57%2C67%2C91%2C24%2C68%2C8%2C7%2C72%2C42%2C18%2C93%2C92%2C17%2C74%2C79%2C41%2C40%2C78%2C34%2C36%2C77%2C49%2C75%2C29%2C38%2C66%2C0%2C85%2C4%2C81%2C73%2C76%2C2%2C31%2C56%2C35%2C94%2C39%2C71%2C61%2C100%2C53%2C52%2C28%2C88%2C51%2C48%2C43%2C70%2C65%2C21%2C101 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=374cbb03-a782-4543-a588-eb697599fdb1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=efe5c314-4309-42a1-8d7f-a6ba1fb884a8&tw_document_href=https%3A%2F%2Fcommunity.constantcontact.com%2Fhelp-center&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxxhs&type=javascript&version=2.3.29 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_DQgiqIKA+bKtbrIp1OPVFA=="
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=374cbb03-a782-4543-a588-eb697599fdb1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=efe5c314-4309-42a1-8d7f-a6ba1fb884a8&tw_document_href=https%3A%2F%2Fcommunity.constantcontact.com%2Fhelp-center&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxxhs&type=javascript&version=2.3.29 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5393aaaf-6d5e-4cd2-9b97-03024e783fa4
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-138462344-1&cid=1624393789.1710767996&jid=18867602&gjid=259043456&_gid=1934632418.1710767996&_u=YADAAUAAAAAAACAAI~&z=892092790 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-138462344-1&cid=1624393789.1710767996&jid=18867602&_u=YADAAUAAAAAAACAAI~&z=467573827 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /tr/?id=577881999014440&ev=PageView&dl=https%3A%2F%2Fcommunity.constantcontact.com%2Fhelp-center&rl=https%3A%2F%2Fkbsu9ilab.cc.rs6.net%2F&if=false&ts=1710767997480&sw=1280&sh=1024&v=2.9.150&r=stable&ec=0&o=4126&fbp=fb.1.1710767997476.380404588&cs_est=true&ler=other&cdl=API_unavailable&it=1710767996842&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=577881999014440&ev=PageView&dl=https%3A%2F%2Fcommunity.constantcontact.com%2Fhelp-center&rl=https%3A%2F%2Fkbsu9ilab.cc.rs6.net%2F&if=false&ts=1710767997480&sw=1280&sh=1024&v=2.9.150&r=stable&ec=0&o=4126&fbp=fb.1.1710767997476.380404588&cs_est=true&ler=other&cdl=API_unavailable&it=1710767996842&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://community.constantcontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /html/assets/favicon.png HTTP/1.1Host: community.constantcontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.constantcontact.com/help-centerAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ctct-geolocated-country-code=us; ctct-geolocated-state-code=ny; ctct-geolocated-province-code=na; eigi-geolocated-lat=40.71230; eigi-geolocated-long=-74.00680; ctct-device-type=desktop; ctct_locale_pref=en_US_USD; _ga_ctct=2b884f7a-545e-49de-b5e0-7abdfd6dacb4; LiSESSIONID=DEAC3A5F785EC0745613A9D31C415CB6; LithiumVisitor=~2FKGkZjd3JzEwFrNW~CeT7GvmorvyzlwkX4pzGIAGmMkwybE1Kz6LsTrE7vx0xTLHHYZ_DNThmQeUmttmtWn2u22GbWbMsLLU8CLX2TQ..; optimizelyEndUserId=oeu1710767994912r0.4663457163439588; _ga_14T5LGLSQ3=GS1.1.1710767995.1.1.1710767995.60.0.0; utag_main=v_id:018e51b7fc2c001fe2e3df3754d80506f003106700918$_sn:1$_se:1$_ss:1$_st:1710769795949$ses_id:1710767995949%3Bexp-session$_pn:1%3Bexp-session; AWSALB=AN3tXqGVnmansLXNieEU8DecXmTmX6NNWwBSQA7jQ8RQqn2ByxJcM7rBegDaCppCK2J23j4CtuMibEIlxXI4trC75qtkKz5+CJwCnmV+TOfO/u5wLXmFuRAjFsnf; AWSALBCORS=AN3tXqGVnmansLXNieEU8DecXmTmX6NNWwBSQA7jQ8RQqn2ByxJcM7rBegDaCppCK2J23j4CtuMibEIlxXI4trC75qtkKz5+CJwCnmV+TOfO/u5wLXmFuRAjFsnf; VISITOR_BEACON=~2BWJDjs9zKpg2BEbk~RVR7RoW9GAEaYkOCRrLtQat4z5uQMrrIRuL9T3veyI6Wip4kUcMQ6IHvwbsKqzGSsDFmoesLdhk7fSeh-r-L-Q..; _ga=GA1.2.1624393789.1710767996; _gid=GA1.2.1934632418.1710767996; _gat_gtag_UA_138462344_1=1; XSRF-TOKEN=fec061d4-3df4-4ea6-a1b6-6d60c67daf42; cclp_session_partner="ROVING"; cclp_content="lp_uid=20240318_09:19:58.231_DDB928371C9A964270DA8BDB9C69FBAD_p2-prod-landingpages\|"; cclp_partner="prt_01=partner.name::ROVING\|prt_01_ts=1710767998231\|"; cclp_referral="partner.name=ROVING\|pn=ROVING\|partner=ROVING\|sitereferrer=https://community.constantcontact.com/\|"; _fbp=fb.1.1710767997476.380404588
Source: global traffic	HTTP traffic detected: GET /tr/?id=577881999014440&ev=PageView&dl=https%3A%2F%2Fcommunity.constantcontact.com%2Fhelp-center&rl=https%3A%2F%2Fkbsu9ilab.cc.rs6.net%2F&if=false&ts=1710767997480&sw=1280&sh=1024&v=2.9.150&r=stable&ec=0&o=4126&fbp=fb.1.1710767997476.380404588&cs_est=true&ler=other&cdl=API_unavailable&it=1710767996842&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=577881999014440&ev=PageView&dl=https%3A%2F%2Fcommunity.constantcontact.com%2Fhelp-center&rl=https%3A%2F%2Fkbsu9ilab.cc.rs6.net%2F&if=false&ts=1710767997480&sw=1280&sh=1024&v=2.9.150&r=stable&ec=0&o=4126&fbp=fb.1.1710767997476.380404588&cs_est=true&ler=other&cdl=API_unavailable&it=1710767996842&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-138462344-1&cid=1624393789.1710767996&jid=18867602&_u=YADAAUAAAAAAACAAI~&z=467573827 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /tn.jsp?f=001fZq7bqeyRnyHfycECMu6dbIw9dJp6_kueG_i93RQ_rI0EX7lYobNiukZj-9V5EZvRR4JJXm_KJfyMOW2xxjHoCvKXQXPFX9cwSxCzR8l4r9q_rP8uh8hzEaCMmDa5J-05C93Yy9tsOaLCK_2C50pe2KX9779_9-Q&c=&ch= HTTP/1.1Host: kbsu9ilab.cc.rs6.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /error.jsp?e=5wq87wgbb HTTP/1.1Host: kbsu9ilab.cc.rs6.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dynamic-pages.css HTTP/1.1Host: kbsu9ilab.cc.rs6.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kbsu9ilab.cc.rs6.net/error.jsp?e=5wq87wgbbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/5ab79a9e36?a=1784459&v=1.253.0&to=YlIHZhQDWUZQU0xcXlsYL2E2TVJHQ19KG1tGRw%3D%3D&rst=1458&ck=0&s=748852b8cd9cda95&ref=https://kbsu9ilab.cc.rs6.net/error.jsp&hr=0&ap=15&be=823&fe=620&dc=601&fsh=0&perf=%7B%22timing%22:%7B%22of%22:1710768000414,%22n%22:0,%22r%22:24,%22re%22:708,%22f%22:708,%22dn%22:708,%22dne%22:708,%22c%22:708,%22s%22:708,%22ce%22:708,%22rq%22:710,%22rp%22:824,%22rpe%22:1014,%22di%22:1424,%22ds%22:1424,%22de%22:1424,%22dc%22:1441,%22l%22:1441,%22le%22:1443%7D,%22navigation%22:%7B%22rc%22:1%7D%7D&fp=1433&fcp=1433 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6kPGYdlSoXLsxC5&MD=RmTzEpbF HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /events/1/5ab79a9e36?a=1784459&v=1.253.0&to=YlIHZhQDWUZQU0xcXlsYL2E2TVJHQ19KG1tGRw%3D%3D&rst=11990&ck=0&s=748852b8cd9cda95&ref=https://kbsu9ilab.cc.rs6.net/error.jsp&hr=0 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: ~WRS{1DF973DF-4087-4F26-8AA1-5206577206D4}.tmp.1.dr	String found in binary or memory: HYPERLINK "https://www.facebook.com/patrickthompsondesign" \t "_blank" equals www.facebook.com (Facebook)
Source: chromecache_184.12.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_211.12.dr, chromecache_206.12.dr	String found in binary or memory: f\|\|g.length\|\|h.length))return;var n={kh:d,ih:e,jh:f,Uh:g,Vh:h,He:m,yb:b},p=l.YT,q=function(){DD(n)};if(p)return p.ready&&p.ready(q),b;var r=l.onYouTubeIframeAPIReady;l.onYouTubeIframeAPIReady=function(){r&&r();q()};C(function(){for(var t=z.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(GD(w,"iframe_api")\|\|GD(w,"player_api"))return b}for(var x=z.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!xD&&ED(x[B],n.He))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_211.12.dr, chromecache_206.12.dr	String found in binary or memory: return b}uD.D="internal.enableAutoEventOnTimer";var wc=da(["data-gtm-yt-inspected-"]),vD=["www.youtube.com","www.youtube-nocookie.com"],wD,xD=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: kbsu9ilab.cc.rs6.net

Source: unknown

HTTP traffic detected: POST /1/5ab79a9e36?a=1784459&v=1.253.0&to=YlIHZhQDWUZQU0xcXlsYL2E2TVJHQ19KG1tGRw%3D%3D&rst=2603&ck=0&s=748852b8cd9cda95&ref=https://kbsu9ilab.cc.rs6.net/error.jsp&hr=0&ap=13&be=1034&fe=974&dc=599&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1710767973617,%22n%22:0,%22r%22:20,%22re%22:636,%22f%22:636,%22dn%22:637,%22dne%22:637,%22c%22:637,%22s%22:638,%22ce%22:832,%22rq%22:832,%22rp%22:1034,%22rpe%22:1224,%22di%22:1633,%22ds%22:1633,%22de%22:1633,%22dc%22:2004,%22l%22:2004,%22le%22:2008%7D,%22navigation%22:%7B%22rc%22:1%7D%7D&fp=1653&fcp=1653 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://kbsu9ilab.cc.rs6.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://kbsu9ilab.cc.rs6.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_207.12.dr	String found in binary or memory: http://opensource.org/licenses/MIT)
Source: ~WRS{1DF973DF-4087-4F26-8AA1-5206577206D4}.tmp.1.dr	String found in binary or memory: http://patrickthompsondesign.com/
Source: 28073699284.ttf.1.dr	String found in binary or memory: http://scripts.sil.org/OFLCyrillic:
Source: 21143614707.ttf.1.dr	String found in binary or memory: http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLLibre
Source: chromecache_213.12.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: 21143614707.ttf.1.dr	String found in binary or memory: http://www.impallari.com/This
Source: ~WRS{1DF973DF-4087-4F26-8AA1-5206577206D4}.tmp.1.dr	String found in binary or memory: http://www.pciaonline.com/
Source: chromecache_193.12.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: ~WRS{1DF973DF-4087-4F26-8AA1-5206577206D4}.tmp.1.dr	String found in binary or memory: https://branchuploads.blob.core.windows.net/uploads/assets/thumbnail_Signature_Logo_75f36e315c.png?w
Source: chromecache_211.12.dr, chromecache_216.12.dr, chromecache_206.12.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_213.12.dr	String found in binary or memory: https://github.com/bassjobsen/Bootstrap-3-Typeahead
Source: chromecache_204.12.dr	String found in binary or memory: https://github.com/bestiejs/lodash/blob/master/LICENSE.txt
Source: 21143614707.ttf.1.dr	String found in binary or memory: https://github.com/impallari/Libre-Franklin)Libre
Source: chromecache_185.12.dr, chromecache_188.12.dr, chromecache_210.12.dr	String found in binary or memory: https://github.com/twitter/typeahead.js
Source: chromecache_204.12.dr	String found in binary or memory: https://github.com/zaach/jison/issues/291
Source: chromecache_212.12.dr	String found in binary or memory: https://go.constantcontact.com
Source: chromecache_212.12.dr	String found in binary or memory: https://go.l1.constantcontact.com
Source: chromecache_212.12.dr	String found in binary or memory: https://go.s1.constantcontact.com
Source: chromecache_211.12.dr, chromecache_216.12.dr, chromecache_206.12.dr	String found in binary or memory: https://googlesyndication.com
Source: ~WRS{1DF973DF-4087-4F26-8AA1-5206577206D4}.tmp.1.dr	String found in binary or memory: https://kbsu9ilab.cc.rs6.net/tn.jsp?f=001fZq7bqeyRnyHfycECMu6dbIw9dJp6_kueG_i93RQ_rI0EX7lYobNiukZj-9
Source: chromecache_211.12.dr, chromecache_216.12.dr, chromecache_206.12.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_211.12.dr, chromecache_216.12.dr, chromecache_206.12.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_211.12.dr, chromecache_206.12.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_211.12.dr, chromecache_206.12.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_193.12.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: ~WRS{1DF973DF-4087-4F26-8AA1-5206577206D4}.tmp.1.dr	String found in binary or memory: https://support.docusign.com/articles/How-do-I-sign-a-DocuSign-document-Basic-Signing
Source: chromecache_193.12.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_211.12.dr, chromecache_216.12.dr, chromecache_206.12.dr	String found in binary or memory: https://td.doubleclick.net
Source: ~WRS{1DF973DF-4087-4F26-8AA1-5206577206D4}.tmp.1.dr	String found in binary or memory: https://www.docusign.com/features-and-benefits/mobile
Source: ~WRS{1DF973DF-4087-4F26-8AA1-5206577206D4}.tmp.1.dr	String found in binary or memory: https://www.docusign.com/support
Source: chromecache_216.12.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_193.12.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_193.12.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_193.12.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_211.12.dr, chromecache_216.12.dr, chromecache_206.12.dr	String found in binary or memory: https://www.google.com
Source: chromecache_193.12.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_211.12.dr, chromecache_216.12.dr, chromecache_206.12.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_206.12.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_193.12.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: ~WRS{1DF973DF-4087-4F26-8AA1-5206577206D4}.tmp.1.dr	String found in binary or memory: https://www.instagram.com/patrickthompsondesign/
Source: chromecache_211.12.dr, chromecache_206.12.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_211.12.dr, chromecache_206.12.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49804 version: TLS 1.2

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: c2r64.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: gpapi.dll	Jump to behavior

Source: classification engine

Classification label: sus23.phis.winEML@31/108@80/22