Windows Analysis Report
https://phrmacompliance-my.sharepoint.com/:b:/g/personal/jjessen_pharma-compliance_net/EQZ_BD-NnrNInOz6x58pqAABLCZuVkxMtPHJVQGDMcKQDA?e=as678X

Overview

General Information

Sample URL: https://phrmacompliance-my.sharepoint.com/:b:/g/personal/jjessen_pharma-compliance_net/EQZ_BD-NnrNInOz6x58pqAABLCZuVkxMtPHJVQGDMcKQDA?e=as678X
Analysis ID: 1428972
Infos:

Detection

HtmlDropper, HTMLPhisher
Score: 76
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Antivirus / Scanner detection for submitted sample
Yara detected Html Dropper
Yara detected HtmlPhish10
Phishing site detected (based on image similarity)
Phishing site detected (based on logo match)
Phishing site or detected (based on various text indicators)
Drops files with a non-matching file extension (content does not match file extension)
HTML body contains low number of good links
HTML page contains hidden URLs or javascript code
HTML title does not match URL
Invalid 'sign-in options' or 'sign-up' link found

Classification

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: https://phrmacompliance-my.sharepoint.com/:b:/g/personal/jjessen_pharma-compliance_net/EQZ_BD-NnrNInOz6x58pqAABLCZuVkxMtPHJVQGDMcKQDA?e=as678X SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing
barindex
Yara detected HtmlPhish10
Source: Yara match File source: 5.13.pages.csv, type: HTML
Phishing site detected (based on image similarity)
Source: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221 Matcher: Found strong image similarity, brand: MICROSOFT
Phishing site detected (based on logo match)
Source: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221 Matcher: Template: microsoft matched
Phishing site or detected (based on various text indicators)
Source: Chrome DOM: 1.6 OCR Text: : Verifying... CLOUDFLARE Microsoft
Source: Chrome DOM: 2.5 OCR Text: Verifying.. CLOUDFLARE Microsoft
Source: Chrome DOM: 4.10 OCR Text: Verifying... CLOUDFLARE Microsoft
HTML body contains low number of good links
Source: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221 HTTP Parser: Number of links: 0
HTML page contains hidden URLs or javascript code
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/oyrx9/0x4AAAAAAAXUBMNlbEBfiUqo/auto/normal HTTP Parser: Base64 decoded: http://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/oyrx9/0x4AAAAAAAXUBMNlbEBfiUqo/auto/normal
HTML title does not match URL
Source: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221 HTTP Parser: Title: 57c987753e408980f093d2cae2dfab116622e85ade1f5 does not match URL
Invalid 'sign-in options' or 'sign-up' link found
Source: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221 HTTP Parser: Invalid link: get a new Microsoft account
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/oyrx9/0x4AAAAAAAXUBMNlbEBfiUqo/auto/normal HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/oyrx9/0x4AAAAAAAXUBMNlbEBfiUqo/auto/normal HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hr5q8/0x4AAAAAAAXoCu1Au7AJ3X9g/auto/normal HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hr5q8/0x4AAAAAAAXoCu1Au7AJ3X9g/auto/normal HTTP Parser: No favicon
Source: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221 HTTP Parser: No favicon
Source: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221 HTTP Parser: No <meta name="author".. found
Source: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221 HTTP Parser: No <meta name="copyright".. found
Source: unknown HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:50097 version: TLS 1.2
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic HTTP traffic detected: GET /:b:/g/personal/jjessen_pharma-compliance_net/EQZ_BD-NnrNInOz6x58pqAABLCZuVkxMtPHJVQGDMcKQDA?e=as678X HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /personal/jjessen_pharma-compliance_net/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments%2FKath%20Whalen%20Shared%20a%20Folder%20with%20you%2Epdf&parent=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments&ga=1 HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /personal/jjessen_pharma-compliance_net/_api/v2.1/graphql HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://phrmacompliance-my.sharepoint.com/personal/jjessen_pharma-compliance_net/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments%2FKath%20Whalen%20Shared%20a%20Folder%20with%20you%2Epdf&parent=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /personal/jjessen_pharma-compliance_net/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments%27&TryNewExperienceSingle=TRUE HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /personal/jjessen_pharma-compliance_net/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments%27&TryNewExperienceSingle=TRUE HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%5D%7D&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%5D&list=v2&defaultBrotli=true&authenticateFast=true&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099649,3]&spStartApplicationWebBundle=true&enableIntegrities=true HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-aliveCache-Control: max-age=0Accept: */*Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://phrmacompliance-my.sharepoint.com/personal/jjessen_pharma-compliance_net/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments%2FKath%20Whalen%20Shared%20a%20Folder%20with%20you%2Epdf&parent=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments&ga=1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XUlDGUGtw3odhHV&MD=2hXhNx+Y HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-aliveAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://phrmacompliance-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%5D%7D&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%5D&list=v2&defaultBrotli=true&authenticateFast=true&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099649,3]&spStartApplicationWebBundle=true&enableIntegrities=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22spfx%22]&languages=%5B%5D HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-aliveAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://phrmacompliance-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%5D%7D&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%5D&list=v2&defaultBrotli=true&authenticateFast=true&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099649,3]&spStartApplicationWebBundle=true&enableIntegrities=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /transform/thumbnail?provider=spo&inputFormat=pdf&cs=fFNQTw&docid=https%3A%2F%2Fphrmacompliance-my.sharepoint.com%3A443%2F_api%2Fv2.0%2Fdrives%2Fb!dAJ_zjqL0kWArkuZZ9bJ8DttStVNdJpOrGKYvKo5gKlysYHVOYW4RaoY748KlGOE%2Fitems%2F016LOJERYGP4CD7DM6WNEJZ3H2Y6PSTKAA%3Fversion%3DPublished&access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.8wIKRUyWYSk8t1rGuxTjM4pQag1dWpNvVvypWLYz_wA&cTag=%22c%3A%7B3F047F06-9E8D-48B3-9CEC-FAC79F29A800%7D%2C1%22&encodeFailures=1&width=1280&height=859&srcWidth=&srcHeight= HTTP/1.1Host: eastus1-mediap.svc.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://phrmacompliance-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /transform/thumbnail?provider=spo&inputFormat=pdf&cs=fFNQTw&docid=https%3A%2F%2Fphrmacompliance-my.sharepoint.com%3A443%2F_api%2Fv2.0%2Fdrives%2Fb!dAJ_zjqL0kWArkuZZ9bJ8DttStVNdJpOrGKYvKo5gKlysYHVOYW4RaoY748KlGOE%2Fitems%2F016LOJERYGP4CD7DM6WNEJZ3H2Y6PSTKAA%3Fversion%3DPublished&access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.8wIKRUyWYSk8t1rGuxTjM4pQag1dWpNvVvypWLYz_wA&cTag=%22c%3A%7B3F047F06-9E8D-48B3-9CEC-FAC79F29A800%7D%2C1%22&encodeFailures=1&width=1280&height=859&srcWidth=&srcHeight= HTTP/1.1Host: eastus1-mediap.svc.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_layouts/15/odspserviceworkerproxy.aspx?swManifestName=odbmspdfwebworker&debug=false&bypass=false HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://phrmacompliance-my.sharepoint.com/personal/jjessen_pharma-compliance_net/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments%2FKath%20Whalen%20Shared%20a%20Folder%20with%20you%2Epdf&parent=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; MicrosoftApplicationsTelemetryDeviceId=d95f1d5a-59de-4cb4-8549-71386c36b7f0
Source: global traffic HTTP traffic detected: GET /transform/passthrough?provider=spo&inputFormat=pdf&cs=fFNQTw&docid=https%3A%2F%2Fphrmacompliance-my.sharepoint.com%3A443%2F_api%2Fv2.0%2Fdrives%2Fb!dAJ_zjqL0kWArkuZZ9bJ8DttStVNdJpOrGKYvKo5gKlysYHVOYW4RaoY748KlGOE%2Fitems%2F016LOJERYGP4CD7DM6WNEJZ3H2Y6PSTKAA%3Fversion%3DPublished&access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.8wIKRUyWYSk8t1rGuxTjM4pQag1dWpNvVvypWLYz_wA&cTag=%22c%3A%7B3F047F06-9E8D-48B3-9CEC-FAC79F29A800%7D%2C1%22 HTTP/1.1Host: eastus1-mediap.svc.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://phrmacompliance-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://phrmacompliance-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /transform/passthrough?provider=spo&inputFormat=pdf&cs=fFNQTw&docid=https%3A%2F%2Fphrmacompliance-my.sharepoint.com%3A443%2F_api%2Fv2.0%2Fdrives%2Fb!dAJ_zjqL0kWArkuZZ9bJ8DttStVNdJpOrGKYvKo5gKlysYHVOYW4RaoY748KlGOE%2Fitems%2F016LOJERYGP4CD7DM6WNEJZ3H2Y6PSTKAA%3Fversion%3DPublished&access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAvcGhybWFjb21wbGlhbmNlLW15LnNoYXJlcG9pbnQuY29tQGRiNzg2NGYwLTM5NmMtNDE1MC05MWM2LTMyYTgzNjYxM2U2NCIsImNhY2hla2V5IjoiMGguZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jYjQxMjYzMGQwNjI5YWU4YTYwZTVjYWZlZWQ1YWI2MjY0Y2E0MzRiNDM4ZjQ4OGMxMjU3OTA2ZGNlYjc3YjRkMyIsImVuZHBvaW50dXJsIjoiSVdrQzRTVmhsem80OC9oTVlCVWJHbVdpT2Vrd04zSFV6eEhnbkZFZmY0VT0iLCJlbmRwb2ludHVybExlbmd0aCI6IjEyNSIsImV4cCI6IjE3MTM1ODIwMDAiLCJpcGFkZHIiOiI4MS4xODEuNTcuNTIiLCJpc2xvb3BiYWNrIjoiVHJ1ZSIsImlzcyI6IjAwMDAwMDAzLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCIsImlzdXNlciI6InRydWUiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiNiNDEyNjMwZDA2MjlhZThhNjBlNWNhZmVlZDVhYjYyNjRjYTQzNGI0MzhmNDg4YzEyNTc5MDZkY2ViNzdiNGQzIiwibmJmIjoiMTcxMzU2MDQwMCIsIm5paSI6Im1pY3Jvc29mdC5zaGFyZXBvaW50Iiwic2hhcmluZ2lkIjoiYXViZStPMEJ4VWVVWXlVa1VrcmErZyIsInNpdGVpZCI6IlkyVTNaakF5TnpRdE9HSXpZUzAwTldReUxUZ3dZV1V0TkdJNU9UWTNaRFpqT1dZdyIsInNuaWQiOiI2Iiwic3RwIjoidCIsInR0IjoiMCIsInZlciI6Imhhc2hlZHByb29mdG9rZW4ifQ.8wIKRUyWYSk8t1rGuxTjM4pQag1dWpNvVvypWLYz_wA&cTag=%22c%3A%7B3F047F06-9E8D-48B3-9CEC-FAC79F29A800%7D%2C1%22 HTTP/1.1Host: eastus1-mediap.svc.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_api/v2.0/drive/apps?select=*%2Cpromoted%2CbuiltIn&%24expand=actions HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonAccept-Language: en-USsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://phrmacompliance-my.sharepoint.com/personal/jjessen_pharma-compliance_net/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments%2FKath%20Whalen%20Shared%20a%20Folder%20with%20you%2Epdf&parent=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments&ga=1Accept-Encoding: gzip, deflate, brCookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2I0MTI2MzBkMDYyOWFlOGE2MGU1Y2FmZWVkNWFiNjI2NGNhNDM0YjQzOGY0ODhjMTI1NzkwNmRjZWI3N2I0ZDMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jYjQxMjYzMGQwNjI5YWU4YTYwZTVjYWZlZWQ1YWI2MjY0Y2E0MzRiNDM4ZjQ4OGMxMjU3OTA2ZGNlYjc3YjRkMywxMzM1ODAzNzUzNzAwMDAwMDAsMCwxMzM1ODEyMzYzNzMzODk1NjAsMC4wLjAuMCwyNTgsZGI3ODY0ZjAtMzk2Yy00MTUwLTkxYzYtMzJhODM2NjEzZTY0LCwsNmVhODIwYTEtZTBkYy01MDAwLTJiZjUtZWU3MzdlOGY3ODU2LDZlYTgyMGExLWUwZGMtNTAwMC0yYmY1LWVlNzM3ZThmNzg1NixhdWJlK08wQnhVZVVZeVVrVWtyYStnLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTMyODEsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LHJXaVZnV2dYNTMyRDVYSHhtZkVZeWNDbDRPck1oelpBTVQ1V0dHZit1VmI4NmNjaWR5OUFUc1c1SkQyTjFjeU1pNVlpTXBpWTRkZHo0SjYxTnZHK2w1N0hPQWhqZS9ra2t3WmpXTUVvemdTSFFCTHFUejlPYWQyWm5XcjBkRU1tMnNhLzgwait4YTFxWDA5c3Jya05kTU1hNGZGYS9tZi8rUDBvbHBNMjAxRk9LTmFzb20rOTRYeklkVmJyYnVmV1g3UVQ2dUNCME1lZk5tR1FCMkxXdEZZNldwUm1zeVFTOVhicTdFVDlBZWs5cmJDV1JHRkxHQ1F4UUZObll3ZHEwRmxaTkpEbnpvUGd6RFlOdjZKR3BUYWdZOXBlSXBRQ3dFSTI5TUJRUlJjY0VreFBIeFN3R0NyK1BBVE9lTUlYOU5hc05qV2twV2RCT1hJNWhGQkhTQT09PC9TUD4=; MicrosoftApplicationsTelemetryDeviceId=d95f1d5a-59de-4cb4-8549-71386c36b7f0; ai_session=h0TkHhPtAzSXfDKMV4UR33|1713563668504|1713563668504
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: soncoworldwide.immorest-renodent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /style.css HTTP/1.1Host: soncoworldwide.immorest-renodent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://soncoworldwide.immorest-renodent.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e59792b2d736387744cc18bbdbd6b7f
Source: global traffic HTTP traffic detected: GET /logo.svg HTTP/1.1Host: soncoworldwide.immorest-renodent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://soncoworldwide.immorest-renodent.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e59792b2d736387744cc18bbdbd6b7f
Source: global traffic HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://soncoworldwide.immorest-renodent.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://soncoworldwide.immorest-renodent.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /turnstile/v0/b/471dc2adc340/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://soncoworldwide.immorest-renodent.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /logo.svg HTTP/1.1Host: soncoworldwide.immorest-renodent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e59792b2d736387744cc18bbdbd6b7f
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/oyrx9/0x4AAAAAAAXUBMNlbEBfiUqo/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://soncoworldwide.immorest-renodent.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XUlDGUGtw3odhHV&MD=2hXhNx+Y HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=877022a04e4253f4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/oyrx9/0x4AAAAAAAXUBMNlbEBfiUqo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/oyrx9/0x4AAAAAAAXUBMNlbEBfiUqo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/265744392:1713561049:ssomEjl4YDz1kmjKX8y7FPDWdcuTYnf_lCLI2nJvBlA/877022a04e4253f4/65b526dd49c291d HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/877022a04e4253f4/1713563690638/598c428e94992dc7aa7efdc6ceb31095d888208a55d006cd1c3c0c0ca1bd648d/7mzqDKXLBwpWA1E HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/oyrx9/0x4AAAAAAAXUBMNlbEBfiUqo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/877022a04e4253f4/1713563690639/h5d4hax_Tt2PzjY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/oyrx9/0x4AAAAAAAXUBMNlbEBfiUqo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/877022a04e4253f4/1713563690639/h5d4hax_Tt2PzjY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/265744392:1713561049:ssomEjl4YDz1kmjKX8y7FPDWdcuTYnf_lCLI2nJvBlA/877022a04e4253f4/65b526dd49c291d HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /personal/jjessen_pharma-compliance_net/_layouts/15/AccessDenied.aspx?correlation=80a820a1%2D307f%2D5000%2D516b%2De90062ac1f7a HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; MicrosoftApplicationsTelemetryDeviceId=d95f1d5a-59de-4cb4-8549-71386c36b7f0; ai_session=h0TkHhPtAzSXfDKMV4UR33|1713563668504|1713563668504; MSFPC=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/265744392:1713561049:ssomEjl4YDz1kmjKX8y7FPDWdcuTYnf_lCLI2nJvBlA/877022a04e4253f4/65b526dd49c291d HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/rc/877022a04e4253f4 HTTP/1.1Host: soncoworldwide.immorest-renodent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e59792b2d736387744cc18bbdbd6b7f; cf_clearance=co.NIqkMYw2XU9L0eX2UvQnY8SMA1Tp1yKWfCtMD7Io-1713563712-1.0.1.1-dmgxcW5ats6iyuOhw81.pV3RqXAwP_nGRr.KGDgNQw3fk4rknjilfZW03QACzTHssnXPw0nY1ShGuXCE9YuaMQ
Source: global traffic HTTP traffic detected: GET /API.php HTTP/1.1Host: soncoworldwide.immorest-renodent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e59792b2d736387744cc18bbdbd6b7f; cf_clearance=co.NIqkMYw2XU9L0eX2UvQnY8SMA1Tp1yKWfCtMD7Io-1713563712-1.0.1.1-dmgxcW5ats6iyuOhw81.pV3RqXAwP_nGRr.KGDgNQw3fk4rknjilfZW03QACzTHssnXPw0nY1ShGuXCE9YuaMQ
Source: global traffic HTTP traffic detected: GET // HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://soncoworldwide.immorest-renodent.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET //captcha/style.css HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://articulumgeneralstorecapitaltechnology.com//Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6
Source: global traffic HTTP traffic detected: GET //captcha/logo.svg HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://articulumgeneralstorecapitaltechnology.com//Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6
Source: global traffic HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://articulumgeneralstorecapitaltechnology.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://articulumgeneralstorecapitaltechnology.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /turnstile/v0/b/471dc2adc340/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://articulumgeneralstorecapitaltechnology.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET //captcha/logo.svg HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hr5q8/0x4AAAAAAAXoCu1Au7AJ3X9g/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://articulumgeneralstorecapitaltechnology.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=877023489ddf12ee HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hr5q8/0x4AAAAAAAXoCu1Au7AJ3X9g/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hr5q8/0x4AAAAAAAXoCu1Au7AJ3X9g/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/119103237:1713561213:C5d3w3zqSa1yVuVCn4UDiOcmupBwWjjEGtOyvx9N_0c/877023489ddf12ee/9e9730fa8da86df HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/877023489ddf12ee/1713563717469/9Co4oA0z5RgL21F HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hr5q8/0x4AAAAAAAXoCu1Au7AJ3X9g/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/877023489ddf12ee/1713563717469/9Co4oA0z5RgL21F HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/877023489ddf12ee/1713563717472/0b95020a4089a0124dd5e3bd19fec6fb0baacc8a08b986ee507325ae17cc4763/c_rBZNsrvS6uXVw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hr5q8/0x4AAAAAAAXoCu1Au7AJ3X9g/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/119103237:1713561213:C5d3w3zqSa1yVuVCn4UDiOcmupBwWjjEGtOyvx9N_0c/877023489ddf12ee/9e9730fa8da86df HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/119103237:1713561213:C5d3w3zqSa1yVuVCn4UDiOcmupBwWjjEGtOyvx9N_0c/877023489ddf12ee/9e9730fa8da86df HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/rc/877023489ddf12ee HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET // HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://articulumgeneralstorecapitaltechnology.com//Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //CAPVXlqeGtNNkNKYzVxMmd4 HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221 HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://articulumgeneralstorecapitaltechnology.com//Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //jq/5044df03c7089983074468706a86c2546622e85b3a5a5 HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //boot/5044df03c7089983074468706a86c2546622e85b3a5ad HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //js/5044df03c7089983074468706a86c2546622e85b3a5ae HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //1 HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //1 HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //APP-5044df03c7089983074468706a86c2546622e85ca4c99/5044df03c7089983074468706a86c2546622e85ca4c9a HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //o/5044df03c7089983074468706a86c2546622e85ca4cba HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //ASSETS/img/m_.svg HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //ASSETS/img/sig-op.svg HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //x/5044df03c7089983074468706a86c2546622e85ca4c9f HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //ASSETS/img/sig-op.svg HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //ASSETS/img/m_.svg HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //x/5044df03c7089983074468706a86c2546622e85ca4c9f HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: global traffic HTTP traffic detected: GET //o/5044df03c7089983074468706a86c2546622e85ca4cba HTTP/1.1Host: articulumgeneralstorecapitaltechnology.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7e9ef18f5b448b918ebcf266e763c7e6; cf_clearance=qo3.M.2TJQ_KIKVJ5.L8oQb3a2aqmN9MZorlohHGdBw-1713563737-1.0.1.1-vcRR3Dp4t0JZpqsuetHT4VZiWv2g1lwg9meaGIwIdyMuSSTjq4v97C0_lPdnfjd3aqtQZvH1jIg0iPA1w84cBA
Source: unknown DNS traffic detected: queries for: phrmacompliance-my.sharepoint.com
Source: unknown HTTP traffic detected: POST /personal/jjessen_pharma-compliance_net/_api/v2.1/graphql HTTP/1.1Host: phrmacompliance-my.sharepoint.comConnection: keep-aliveContent-Length: 507sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/json;odata=verboseContent-Type: application/json;odata=verboseX-ServiceWorker-Strategy: CacheFirstsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://phrmacompliance-my.sharepoint.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://phrmacompliance-my.sharepoint.com/personal/jjessen_pharma-compliance_net/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments%2FKath%20Whalen%20Shared%20a%20Folder%20with%20you%2Epdf&parent=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2I0MTI2MzBkMDYyOWFlOGE2MGU1Y2FmZWVkNWFiNjI2NGNhNDM0YjQzOGY0ODhjMTI1NzkwNmRjZWI3N2I0ZDMsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jYjQxMjYzMGQwNjI5YWU4YTYwZTVjYWZlZWQ1YWI2MjY0Y2E0MzRiNDM4ZjQ4OGMxMjU3OTA2ZGNlYjc3YjRkMywxMzM1ODAzNzUzNzAwMDAwMDAsMCwxMzM1ODEyMzYzNzMzODk1NjAsMC4wLjAuMCwyNTgsZGI3ODY0ZjAtMzk2Yy00MTUwLTkxYzYtMzJhODM2NjEzZTY0LCwsNmVhODIwYTEtZTBkYy01MDAwLTJiZjUtZWU3MzdlOGY3ODU2LDZlYTgyMGExLWUwZGMtNTAwMC0yYmY1LWVlNzM3ZThmNzg1NixhdWJlK08wQnhVZVVZeVVrVWtyYStnLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTMyODEsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LHJXaVZnV2dYNTMyRDVYSHhtZkVZeWNDbDRPck1oelpBTVQ1V0dHZit1VmI4NmNjaWR5OUFUc1c1SkQyTjFjeU1pNVlpTXBpWTRkZHo0SjYxTnZHK2w1N0hPQWhqZS9ra2t3WmpXTUVvemdTSFFCTHFUejlPYWQyWm5XcjBkRU1tMnNhLzgwait4YTFxWDA5c3Jya05kTU1hNGZGYS9tZi8rUDBvbHBNMjAxRk9LTmFzb20rOTRYeklkVmJyYnVmV1g3UVQ2dUNCME1lZk5tR1FCMkxXdEZZNldwUm1zeVFTOVhicTdFVDlBZWs5cmJDV1JHRkxHQ1F4UUZObll3ZHEwRmxaTkpEbnpvUGd6RFlOdjZKR3BUYWdZOXBlSXBRQ3dFSTI5TUJRUlJjY0VreFBIeFN3R0NyK1BBVE9lTUlYOU5hc05qV2twV2RCT1hJNWhGQkhTQT09PC9TUD4=
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 21:55:40 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachex-turbo-charged-by: LiteSpeedCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tnyWOg%2BYyk0Z6mBqLNwZoL%2BA5Wy7h5soerClO%2Bpq4a5hOdOHbW%2FUPkty1aBzxjDfZxSmGE7lzfTH6nNgfH9fXfxToJFzLHRrT7nsvYuledKTiPV%2B%2B8GM%2BLzgKTprTapHNZC8rZ1Y27ShN%2FUcVC%2FZv%2FzwJ1zrxHgfkMd%2FtdY%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 877023e2e9b7673d-ATLalt-svc: h3=":443"; ma=86400
Source: chromecache_1562.2.dr String found in binary or memory: http://linkless.header/
Source: chromecache_1141.2.dr, chromecache_1608.2.dr, chromecache_1377.2.dr String found in binary or memory: http://scripts.sil.org/OFLThis
Source: chromecache_1191.2.dr, chromecache_1188.2.dr, chromecache_1539.2.dr, chromecache_1148.2.dr String found in binary or memory: http://www.contoso.com
Source: chromecache_1235.2.dr String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_1492.2.dr String found in binary or memory: http://www.unicode.org/copyright.html
Source: chromecache_1193.2.dr String found in binary or memory: https://1drv.com/
Source: chromecache_1294.2.dr String found in binary or memory: https://apps.test.powerapps.com/sdk/preload
Source: chromecache_1193.2.dr String found in binary or memory: https://centralus1-mediad.svc.ms
Source: chromecache_1625.2.dr, chromecache_1694.2.dr String found in binary or memory: https://facebook.github.io/react/docs/more-about-refs.html#the-ref-callback-attribute
Source: chromecache_1435.2.dr String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_1435.2.dr String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_1435.2.dr String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_1320.2.dr String found in binary or memory: https://lists.live.com/
Source: chromecache_1193.2.dr String found in binary or memory: https://livefilestore.com/
Source: chromecache_1110.2.dr, chromecache_1408.2.dr String found in binary or memory: https://make.powerautomate.com
Source: chromecache_1110.2.dr String found in binary or memory: https://make.preprod.powerautomate.com
Source: chromecache_1110.2.dr String found in binary or memory: https://make.test.powerautomate.com
Source: chromecache_1478.2.dr, chromecache_1193.2.dr, chromecache_1674.2.dr String found in binary or memory: https://media.cloudapp.net
Source: chromecache_1478.2.dr, chromecache_1193.2.dr, chromecache_1674.2.dr String found in binary or memory: https://northcentralus1-medias.svc.ms
Source: chromecache_1653.2.dr String found in binary or memory: https://odspwebdevdeploy.blob.core.windows.net
Source: chromecache_1693.2.dr, chromecache_1653.2.dr String found in binary or memory: https://onedrive.live.com/?gologin=1
Source: chromecache_1531.2.dr, chromecache_1424.2.dr, chromecache_1548.2.dr, chromecache_1352.2.dr, chromecache_1129.2.dr String found in binary or memory: https://outlook.office.com/search
Source: chromecache_1167.2.dr String found in binary or memory: https://outlook.office365.com
Source: chromecache_1167.2.dr String found in binary or memory: https://outlook.office365.com/SchedulingB2/api/v1.0/me/findmeetinglocations
Source: chromecache_1424.2.dr, chromecache_1406.2.dr, chromecache_1193.2.dr, chromecache_1266.2.dr, chromecache_1408.2.dr, chromecache_1129.2.dr, chromecache_1409.2.dr String found in binary or memory: https://portal.office.com/
Source: chromecache_1193.2.dr String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_1693.2.dr String found in binary or memory: https://res-1.cdn.office.net
Source: chromecache_1190.2.dr, chromecache_1436.2.dr String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-05.007/
Source: chromecache_1190.2.dr, chromecache_1436.2.dr String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-05.007/spwebworker.js
Source: chromecache_1185.2.dr, chromecache_1693.2.dr String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-05.011/
Source: chromecache_1185.2.dr String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-05.011/pdfwebworkers/mspdf/index.worker.js
Source: chromecache_1693.2.dr String found in binary or memory: https://res-2.cdn.office.net/files/odsp-web-prod_2024-04-05.011/
Source: chromecache_1674.2.dr String found in binary or memory: https://sharepoint.uservoice.com/forums/329214-sites-and-collaboration
Source: chromecache_1693.2.dr String found in binary or memory: https://shell.cdn.office.net
Source: chromecache_1693.2.dr String found in binary or memory: https://shell.cdn.office.net/api/ShellBootstrapper/business/OneShell
Source: chromecache_1674.2.dr String found in binary or memory: https://shellppe.msocdn.com
Source: chromecache_1674.2.dr String found in binary or memory: https://shellprod.msocdn.com
Source: chromecache_1414.2.dr String found in binary or memory: https://soncoworldwide.immorest-renodent.com/)
Source: chromecache_1693.2.dr String found in binary or memory: https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/leelawadeeui-thai/leelawadeeui-bold.w
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/leelawadeeui-thai/leelawadeeui-regula
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/leelawadeeui-thai/leelawadeeui-semili
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-bold.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-bold.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-light.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-light.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-regular.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-regular.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-semibold.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-semibold.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-semilight.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-bold.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-bold.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-light.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-light.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-regular.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-semibold.wof
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-semilight.wo
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-bold.wof
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-light.wo
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-regular.
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-semibold
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-semiligh
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-bold.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-bold.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-light.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-light.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-regular.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-regular.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-semibold.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-semibold.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-semilight.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-semilight.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-bold.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-bold.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-light.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-light.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-regular.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-regular.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-semibold.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-semibold.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-semilight.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-bold.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-bold.woff2
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-light.woff
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-regular.wo
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-semibold.w
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-semilight.
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-bold.wof
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.wo
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold
Source: chromecache_1393.2.dr String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semiligh
Source: chromecache_1461.2.dr String found in binary or memory: https://substrate.office.com
Source: chromecache_1260.2.dr, chromecache_1630.2.dr String found in binary or memory: https://support.office.com/en-us/article/Manage-lists-and-libraries-with-many-items-b8588dae-9387-48
Source: chromecache_1653.2.dr String found in binary or memory: https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2F$
Source: chromecache_1693.2.dr String found in binary or memory: https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2Fonedrive
Source: chromecache_1653.2.dr String found in binary or memory: https://www.office.com/login?ru=%2Flaunch%2F$
Source: chromecache_1693.2.dr String found in binary or memory: https://www.office.com/login?ru=%2Flaunch%2Fonedrive
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 50383 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown Network traffic detected: HTTP traffic on port 50388 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50371 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown Network traffic detected: HTTP traffic on port 50354 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50348 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50373
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50372
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50379
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50380
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50384
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50383
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50386
Source: unknown Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50385
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50388
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50387
Source: unknown Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50393
Source: unknown Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50394
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50396
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50398
Source: unknown Network traffic detected: HTTP traffic on port 50265 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown Network traffic detected: HTTP traffic on port 50398 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50363 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50380 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown Network traffic detected: HTTP traffic on port 50385 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown Network traffic detected: HTTP traffic on port 50393 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown Network traffic detected: HTTP traffic on port 50379 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50238 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50123 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50373 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown Network traffic detected: HTTP traffic on port 50361 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50228 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50344 -> 443
Source: unknown HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:50097 version: TLS 1.2
Source: classification engine Classification label: mal76.phis.troj.win@21/1083@42/10
Source: chromecache_1414.2.dr Initial sample: https://soncoworldwide.immorest-renodent.com/
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2012,i,9215197648941825463,14552143542034759190,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://phrmacompliance-my.sharepoint.com/:b:/g/personal/jjessen_pharma-compliance_net/EQZ_BD-NnrNInOz6x58pqAABLCZuVkxMtPHJVQGDMcKQDA?e=as678X"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2012,i,9215197648941825463,14552143542034759190,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected

Data Obfuscation
barindex
Yara detected Html Dropper
Source: Yara match File source: 5.13.pages.csv, type: HTML
Drops files with a non-matching file extension (content does not match file extension)
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: Chrome Cache Entry: 1335
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: Chrome Cache Entry: 1414 Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: Chrome Cache Entry: 1335 Jump to dropped file
Source: chromecache_1595.2.dr, chromecache_1536.2.dr, chromecache_1485.2.dr Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_1595.2.dr, chromecache_1536.2.dr, chromecache_1485.2.dr Binary or memory string: ",DisconnectVirtualMachine:"
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1428972 URL: https://phrmacompliance-my.... Startdate: 19/04/2024 Architecture: WINDOWS Score: 76 24 Antivirus / Scanner detection for submitted sample 2->24 26 Yara detected Html Dropper 2->26 28 Yara detected HtmlPhish10 2->28 30 3 other signatures 2->30 6 chrome.exe 1 2->6         started        9 chrome.exe 2->9         started        process3 dnsIp4 14 192.168.2.4, 138, 443, 49735 unknown unknown 6->14 16 239.255.255.250 unknown Reserved 6->16 11 chrome.exe 6->11         started        process5 dnsIp6 18 dual-spo-0005.spo-msedge.net 13.107.136.10, 443, 49735, 49736 MICROSOFT-CORP-MSN-AS-BLOCKUS United States 11->18 20 www.google.com 64.233.185.106, 443, 49748, 50145 GOOGLEUS United States 11->20 22 14 other IPs or domains 11->22
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
13.107.136.10
 dual-spo-0005.spo-msedge.net United States
8068 MICROSOFT-CORP-MSN-AS-BLOCKUS false
151.101.130.137
 code.jquery.com United States
54113 FASTLYUS false
104.17.3.184
 unknown United States
13335 CLOUDFLARENETUS false
104.21.6.144
 articulumgeneralstorecapitaltechnology.com United States
13335 CLOUDFLARENETUS false
172.67.200.232
 soncoworldwide.immorest-renodent.com United States
13335 CLOUDFLARENETUS false
239.255.255.250
 unknown Reserved
unknown unknown false
104.21.44.153
 unknown United States
13335 CLOUDFLARENETUS false
64.233.185.106
 www.google.com United States
15169 GOOGLEUS false
104.17.2.184
 challenges.cloudflare.com United States
13335 CLOUDFLARENETUS false

Private

IP
192.168.2.4

Contacted Domains

Name IP Active
dual-spo-0005.spo-msedge.net 13.107.136.10 true
code.jquery.com 151.101.130.137 true
challenges.cloudflare.com 104.17.2.184 true
www.google.com 64.233.185.106 true
soncoworldwide.immorest-renodent.com 172.67.200.232 true
articulumgeneralstorecapitaltechnology.com 104.21.6.144 true
fp2e7a.wpc.phicdn.net 192.229.211.108 true
eastus1-mediap.svc.ms unknown unknown
m365cdn.nel.measure.office.net unknown unknown
phrmacompliance-my.sharepoint.com unknown unknown
spo.nel.measure.office.net unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/877023489ddf12ee/1713563717469/9Co4oA0z5RgL21F false
    		high
    https://articulumgeneralstorecapitaltechnology.com/cdn-cgi/challenge-platform/h/b/rc/877023489ddf12ee false
      		unknown
      https://code.jquery.com/jquery-3.6.0.min.js false
        		high
        https://soncoworldwide.immorest-renodent.com/cdn-cgi/challenge-platform/h/b/rc/877022a04e4253f4 false
          		unknown
          https://soncoworldwide.immorest-renodent.com/ false
            		unknown
            https://soncoworldwide.immorest-renodent.com/style.css false
              		unknown
              https://phrmacompliance-my.sharepoint.com/_layouts/15/images/odbfavicon.ico?rev=47 false
                		unknown
                https://articulumgeneralstorecapitaltechnology.com//APP-5044df03c7089983074468706a86c2546622e85ca4c99/5044df03c7089983074468706a86c2546622e85ca4c9a false
                  		unknown
                  https://articulumgeneralstorecapitaltechnology.com//captcha/style.css false
                    		unknown
                    https://articulumgeneralstorecapitaltechnology.com//d740c10c7b9cf800d441f265844201e16622e85ade220LOGd740c10c7b9cf800d441f265844201e16622e85ade221 true
                      		unknown
                      https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/oyrx9/0x4AAAAAAAXUBMNlbEBfiUqo/auto/normal false
                        		high
                        https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D false
                          		high
                          https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/877022a04e4253f4/1713563690638/598c428e94992dc7aa7efdc6ceb31095d888208a55d006cd1c3c0c0ca1bd648d/7mzqDKXLBwpWA1E false
                            		high
                            https://articulumgeneralstorecapitaltechnology.com//ASSETS/img/sig-op.svg false
                              		unknown
                              https://phrmacompliance-my.sharepoint.com/personal/jjessen_pharma-compliance_net/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments%2FKath%20Whalen%20Shared%20a%20Folder%20with%20you%2Epdf&parent=%2Fpersonal%2Fjjessen%5Fpharma%2Dcompliance%5Fnet%2FDocuments&ga=1 false
                                		unknown
                                https://phrmacompliance-my.sharepoint.com/_layouts/15/spwebworkerproxy.ashx false
                                  		unknown
                                  https://articulumgeneralstorecapitaltechnology.com//x/5044df03c7089983074468706a86c2546622e85ca4c9f false
                                    		unknown
                                    https://articulumgeneralstorecapitaltechnology.com//js/5044df03c7089983074468706a86c2546622e85b3a5ae false
                                      		unknown
                                      https://articulumgeneralstorecapitaltechnology.com//o/5044df03c7089983074468706a86c2546622e85ca4cba false
                                        		unknown
                                        https://phrmacompliance-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=odbmspdfwebworker&debug=false&bypass=false false
                                          		unknown
                                          https://articulumgeneralstorecapitaltechnology.com//boot/5044df03c7089983074468706a86c2546622e85b3a5ad false
                                            		unknown
                                            https://phrmacompliance-my.sharepoint.com/personal/jjessen_pharma-compliance_net/_api/v2.1/graphql false
                                              		unknown
                                              https://phrmacompliance-my.sharepoint.com/_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D false
                                                		unknown
                                                https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/877022a04e4253f4/1713563690639/h5d4hax_Tt2PzjY false
                                                  		high
                                                  https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hr5q8/0x4AAAAAAAXoCu1Au7AJ3X9g/auto/normal false
                                                    		high
                                                    https://phrmacompliance-my.sharepoint.com/personal/jjessen_pharma-compliance_net/_layouts/15/AccessDenied.aspx?correlation=80a820a1%2D307f%2D5000%2D516b%2De90062ac1f7a false
                                                      		unknown
                                                      https://articulumgeneralstorecapitaltechnology.com//CAPVXlqeGtNNkNKYzVxMmd4 false
                                                        		unknown
                                                        https://phrmacompliance-my.sharepoint.com/_layouts/15/SPComponentRegistry.ashx?projects=[%22spfx%22]&languages=%5B%5D false
                                                          		unknown
                                                          https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/877023489ddf12ee/1713563717472/0b95020a4089a0124dd5e3bd19fec6fb0baacc8a08b986ee507325ae17cc4763/c_rBZNsrvS6uXVw false
                                                            		high
                                                            https://phrmacompliance-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%5D%7D&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%5D&list=v2&defaultBrotli=true&authenticateFast=true&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099649,3]&spStartApplicationWebBundle=true&enableIntegrities=true false
                                                              		unknown
                                                              https://phrmacompliance-my.sharepoint.com/personal/jjessen_pharma-compliance_net/_layouts/15/CSPReporting.aspx false
                                                                		unknown
                                                                https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/265744392:1713561049:ssomEjl4YDz1kmjKX8y7FPDWdcuTYnf_lCLI2nJvBlA/877022a04e4253f4/65b526dd49c291d false
                                                                  		high
                                                                  https://phrmacompliance-my.sharepoint.com/:b:/g/personal/jjessen_pharma-compliance_net/EQZ_BD-NnrNInOz6x58pqAABLCZuVkxMtPHJVQGDMcKQDA?e=as678X true
                                                                    		unknown
                                                                    https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=877023489ddf12ee false
                                                                      		high
                                                                      https://articulumgeneralstorecapitaltechnology.com//captcha/logo.svg false
                                                                        		unknown
                                                                        https://articulumgeneralstorecapitaltechnology.com//1 false
                                                                          		unknown
                                                                          https://articulumgeneralstorecapitaltechnology.com//ASSETS/img/m_.svg false
                                                                            		unknown