Windows Analysis Report
https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/

Overview

General Information

Sample URL:	https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/
Analysis ID:	1431463
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Classification

Signatures

HTML body contains low number of good links

Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: Number of links: 1
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: Number of links: 1
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: Number of links: 0

HTML body contains password input but no form action

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: <input type="password" .../> found but no <form action="...

HTML title does not match URL

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: Title: Einloggen does not match URL
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: Title: Passwort vergessen does not match URL
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: Title: Einloggen does not match URL
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: Title: Kontowiederherstellung does not match URL

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: <input type="password" .../> found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: <input type="password" .../> found
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: <input type="password" .../> found

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: No <meta name="author".. found

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49747 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /shares/folder/k11NnLCmDNb/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0
Source: global traffic	HTTP traffic detected: GET /static/gen/main.ed99ea6b.min.css HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /custom/styles.css?v=3.6.0.117 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/js/translations/de.js?v=3.6.0.117 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/gen/main_header.cf07ee37.min.js HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/themes/default/images/svg/right-arrow.png HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/themes/default/images/svg/lottie.js HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /static/themes/default/images/svg/custom_script.js HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/themes/default/images/svg/right-arrow.png HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/themes/default/images/svg/sidebar.js HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/gen/main.52b56941.min.js HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/vendor/select2-4.0.3/dist/js/i18n/de.js?v=3.6.0.117 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/bootstrap/dist/fonts/sourcesanspro-semibold.woff2 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://web.leitz-cloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/bootstrap/dist/fonts/axcient-iconfont.ttf?avds6c HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://web.leitz-cloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/bootstrap/dist/fonts/sourcesanspro-regular.woff2 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://web.leitz-cloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /matomo.js HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=ToyWF0&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/icon/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/icon/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /auth/forgot/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/forgot/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /static/bootstrap/dist/fonts/sourcesanspro-light.woff2 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://web.leitz-cloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/forgot/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=z99seb&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /auth/login/?clear_cookie=1 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /auth/login/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/login/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/login/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=SwQQnj&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /auth/forgot/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/forgot/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=0eVsvC&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/forgot/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /auth/login/?clear_cookie=1 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /auth/login/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/login/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=WgIqI3&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/login/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /auth/login/recovery/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/login/recovery/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/login/recovery/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=RUPzzJ&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2Frecovery%2F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /auth/forgot/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/forgot/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/forgot/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=TvJd9S&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000

Source: chromecache_90.2.dr

String found in binary or memory: }}catch(ag){}function af(){try{aj.apply(window,[].slice.call(arguments,0));ah()}catch(ak){ah();throw ak}}window[ai]=af}function ac(){return"object"===typeof YT&&YT&&YT.Player}function Z(){if(!ac()){return}var af=ae.getElementsByTagName("iframe");for(var ag=0;ag<af.length;ag++){if(p.isMediaIgnored(af[ag])){continue}var ah=p.getAttribute(af[ag],"src");if(ah&&(ah.indexOf("youtube.com")>0||ah.indexOf("youtube-nocookie.com")>0)){if(af[ag].setAttribute){af[ag].setAttribute("enablejsapi","true")}new w(af[ag],g.VIDEO)}}}if(Y&&Y.length){if(ac()){Z()}else{if(G.onYouTubeIframeAPIReady){X("onYouTubeIframeAPIReady",Z);ab(false)}else{if(G.onYouTubePlayerAPIReady){X("onYouTubePlayerAPIReady",Z);ab(false)}else{G.onYouTubeIframeAPIReady=Z;ab(true)}}}}function ab(ah){if(!ah&&(typeof G.YT==="object"||t.querySelectorAll('script[src="https://www.youtube.com/iframe_api"]').length>0)){return}var ag=t.createElement("script");ag.src="https://www.youtube.com/iframe_api";var af=t.getElementsByTagName("script");if(af&&af.length){var ai=af[0]; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: web.leitz-cloud.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: analytics.vboxx.eu

Source: unknown

HTTP traffic detected: POST /matomo.php?action_name=Einloggen&idsite=33&rec=1&r=448950&h=8&m=23&s=3&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F&_id=1d7f1cb1d782f35f&_idn=1&send_image=0&_refts=0&pv_id=s2EsOK&fa_pv=1&fa_fp[0][fa_vid]=pv5G4q&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=328&pf_tfr=2&pf_dm1=4480&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1Host: analytics.vboxx.euConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=utf-8Accept: */*Origin: https://web.leitz-cloud.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_97.2.dr	String found in binary or memory: http://jqueryui.com)
Source: chromecache_90.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_90.2.dr	String found in binary or memory: https://developer.matomo.org/api-reference/tracking-javascript
Source: chromecache_90.2.dr	String found in binary or memory: https://developer.matomo.org/guides/tracking-javascript-guide#multiple-piwik-trackers
Source: chromecache_90.2.dr	String found in binary or memory: https://github.com/matomo-org/matomo/blob/master/js/piwik.js
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: chromecache_77.2.dr	String found in binary or memory: https://gravatar.com/avatar/
Source: chromecache_90.2.dr	String found in binary or memory: https://piwik.org
Source: chromecache_90.2.dr	String found in binary or memory: https://piwik.org/free-software/bsd/
Source: chromecache_90.2.dr	String found in binary or memory: https://w.soundcloud.com/player/api.js
Source: chromecache_90.2.dr	String found in binary or memory: https://www.innocraft.com/
Source: chromecache_90.2.dr	String found in binary or memory: https://www.innocraft.com/license
Source: chromecache_90.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49747 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@22/57@8/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1988,i,5874812371822322334,2225953221869786979,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1988,i,5874812371822322334,2225953221869786979,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
2.58.164.9	web.leitz-cloud.com	Netherlands	207843	VBOXXNL	false
2.58.165.70	analytics.vboxx.eu	Netherlands	207843	VBOXXNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.105.103	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4

Contacted Domains

Name	IP	Active
www.google.com	142.250.105.103	true
web.leitz-cloud.com	2.58.164.9	true
analytics.vboxx.eu	2.58.165.70	true
fp2e7a.wpc.phicdn.net	192.229.211.108	true

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	false		unknown
https://web.leitz-cloud.com/api/2/person	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/themes/default/images/svg/sidebar.js	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/auth/login/	false		unknown
https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.css	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.js	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=0eVsvC&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/bootstrap/dist/fonts/sourcesanspro-light.woff2	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/sites/1/branding/logo	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php?action_name=Passwort%20vergessen&idsite=33&rec=1&r=724701&h=8&m=23&s=58&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=9zYqZ8&fa_pv=1&fa_fp[0][fa_vid]=McZrQa&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=525&pf_srv=463&pf_tfr=2&pf_dm1=544&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php?action_name=Einloggen&idsite=33&rec=1&r=204970&h=8&m=23&s=34&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=TCHRDo&fa_pv=1&fa_fp[0][fa_vid]=e65TJF&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=249&pf_tfr=36&pf_dm1=541&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/sites/1/branding/icon/	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=WgIqI3&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=TvJd9S&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php?action_name=Einloggen&idsite=33&rec=1&r=448950&h=8&m=23&s=3&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F&_id=1d7f1cb1d782f35f&_idn=1&send_image=0&_refts=0&pv_id=s2EsOK&fa_pv=1&fa_fp[0][fa_vid]=pv5G4q&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=328&pf_tfr=2&pf_dm1=4480&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php?action_name=Kontowiederherstellung&idsite=33&rec=1&r=310271&h=8&m=23&s=46&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2Frecovery%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=LGr2Y2&fa_pv=1&fa_fp[0][fa_vid]=fTrLsE&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=539&pf_srv=453&pf_tfr=1&pf_dm1=745&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/bootstrap/dist/fonts/sourcesanspro-regular.woff2	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/gen/main.52b56941.min.js	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/bootstrap/dist/fonts/sourcesanspro-semibold.woff2	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=RUPzzJ&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2Frecovery%2F	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=SwQQnj&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/auth/login/recovery/	false		unknown
https://web.leitz-cloud.com/static/vendor/select2-4.0.3/dist/js/i18n/de.js?v=3.6.0.117	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/auth/forgot/	false		unknown
https://analytics.vboxx.eu/matomo.php?action_name=Passwort%20vergessen&idsite=33&rec=1&r=562126&h=8&m=23&s=30&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=21iyUu&fa_pv=1&fa_fp[0][fa_vid]=yu2AXf&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=529&pf_srv=482&pf_tfr=3&pf_dm1=477&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/custom/styles.css?v=3.6.0.117	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php?action_name=Passwort%20vergessen&idsite=33&rec=1&r=771846&h=8&m=23&s=14&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=MzNZPV&fa_pv=1&fa_fp[0][fa_vid]=0bnpR5&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=522&pf_srv=497&pf_tfr=2&pf_dm1=251&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/	false		unknown
https://web.leitz-cloud.com/static/bootstrap/dist/fonts/axcient-iconfont.ttf?avds6c	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=ToyWF0&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/themes/default/images/svg/lottie.js	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/themes/default/images/svg/custom_script.js	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/gen/main_header.cf07ee37.min.js	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=z99seb&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F	false	Avira URL Cloud: safe	unknown
https://analytics.vboxx.eu/matomo.php?action_name=Einloggen&idsite=33&rec=1&r=032852&h=8&m=23&s=18&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F&_id=1d7f1cb1d782f35f&_idn=0&send_image=0&_refts=0&pv_id=FK8JTu&fa_pv=1&fa_fp[0][fa_vid]=bf6zEM&fa_fp[0][fa_id]=valid&fa_fp[0][fa_fv]=1&pf_net=0&pf_srv=294&pf_tfr=2&pf_dm1=301&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/auth/login/?clear_cookie=1	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/js/translations/de.js?v=3.6.0.117	false	Avira URL Cloud: safe	unknown
https://web.leitz-cloud.com/static/themes/default/images/svg/right-arrow.png	false	Avira URL Cloud: safe	unknown

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 68	ASCII text, with very long lines (9090)	CF07EE379B101385F53207F7D724030C	37E28E09D918C7BC9545A67B736B2B6AC61DC5EF	2B1521FD18C73F1CEC43135456A818C475303B4E55B70D7CE52C39F7EDA66C38
Chrome Cache Entry: 69	ASCII text, with no line terminators	72ED9E48E2F15C751644DA0099B4378C	10CFB1BD633C14C3E6B270D3A18A8D1EFCF8E6C7	C66A866A777BFA777CD6939CF0DF82B25B337E002A723F2710788A875A1788A4
Chrome Cache Entry: 70	ASCII text, with no line terminators	0C375088F94D295B2E3BB15043C37A83	287A64E8B09584C081576830DDB6861F948061A2	D0D124E9CBC726C2033633A3BBF475B61CDADC04BF84BF859F95AF2F7A5BD2F9
Chrome Cache Entry: 71	Unicode text, UTF-8 text, with very long lines (685)	366D0AACB55F4929CC50BB977ABEC674	1D4B710A1CCCCC7522874A171F776B965C41F9CE	9AD8C2229988615C3908B7FB2298C15A9E95B45CDD2A1FD8B5916DA487884AD7
Chrome Cache Entry: 72	ASCII text, with no line terminators	74E13A9D698A1D3B0A45F26AEA35D691	0E00103AC0C6F8C616FDD14768772B2101D1A598	91F716CE262DFAE1302F849F79D87B729863EDAF049039D7B5B51D375056EFB0
Chrome Cache Entry: 73	ASCII text, with no line terminators	8B068D499E6F22B2F38E0D392E2241CB	0D5F386322F3AB5F9A23B3EA4FEE82DB7342E7CA	204B5CE9D23D945629BE6876AB815F0A7A63ECAA052B43F0D42E2542C5FBC37B
Chrome Cache Entry: 74	ASCII text, with no line terminators	FEA536AC5F56E676387CBE6AEB070B4D	85A4A6B3742DD2E1E3EA7FFB4000983D2D964979	DEA56855A821E4C3108D57A8CECE6A56C0900C6BF772A49C8FE515D99C69FEAF
Chrome Cache Entry: 75	ASCII text, with very long lines (524)	CD2F2077C6E0036D84383753B4C72D45	2972B0893A34E336AEDB99DC772D214D34E18FCC	74870D1BAB50E52F333B08DEE3170BC191C3336CC3D4DF7733E784E1588D9A63
Chrome Cache Entry: 76	Web Open Font Format (Version 2), TrueType, length 89668, version 3.393	B13C669D61EC35A7682A892456C8D4E9	94FDD2B3352105AA6ED3869F05907DCD6B29B16B	2FBF1609996EF719058D36B3C290B5A63D4327004CFE517E6BADA30B51B742C4
Chrome Cache Entry: 77	ASCII text, with very long lines (7786)	5A3436A950759A27F755BD5E47CF9872	A7C5A9C878094FB39D5B4CC764FAFD17AE5F9215	742CDB2F11D45519FC7EE999C3C4A907EEAE8309AA4B285B1A1CFFA17D905CA0
Chrome Cache Entry: 78	PNG image data, 200 x 50, 8-bit/color RGBA, non-interlaced	36CC41BA70B57205F5DA20AC1B3522F2	B0BB9E394D54557B05471C3FE045930639A6E7CF	F945F51AD9DDAD4B5C43C9E9501BFC74F3F319D0A2A67198859EF60A3FE130DA
Chrome Cache Entry: 79	Web Open Font Format (Version 2), TrueType, length 89676, version 3.393	8BB5B88B2B1B019E3B97B513B2226F3E	B8609AECCE88B584CA1CABD6495823065E738182	D3F2A7C124A4A987CBF255A3579B9866789CC3E561D3AB7CB2D09BEE40B137E0
Chrome Cache Entry: 80	ASCII text, with no line terminators	681B23808A81E27E9A7883E21BBE48A4	46F2A7F7AF58E1F002FB8831D531B57CC6B1C83E	8A8A880C7F752F8CE32E17F918AA81D199D6FAFFE5C61FDC3D204AA15DE801E5
Chrome Cache Entry: 81	PNG image data, 200 x 50, 8-bit/color RGBA, non-interlaced	36CC41BA70B57205F5DA20AC1B3522F2	B0BB9E394D54557B05471C3FE045930639A6E7CF	F945F51AD9DDAD4B5C43C9E9501BFC74F3F319D0A2A67198859EF60A3FE130DA
Chrome Cache Entry: 82	PNG image data, 100 x 100, 8-bit gray+alpha, non-interlaced	519259F1F0DEE25924C42DDE80FFA467	0641664A88126446E08B8A4CCDE7B9BFDC4B0C2D	6E942E547AF3361880610BF7F7C06FAC24779485C40C7520F70A382799B468B7
Chrome Cache Entry: 83	ASCII text, with no line terminators	0325B3C39FAB186C7457A287EEEAE8C1	312BB431FC6ADE586E3CA87D3DAA359BDF721837	0B76E8C0F484B3BE138E316D746A9DFD82D59244717B6F9599B76422486735EC
Chrome Cache Entry: 84	ASCII text, with very long lines (65536), with no line terminators	ED99EA6B138A467F1893E550E94BB694	1AFBBC7D2F9C6A6A2EA0A37FED32AA4F0157AEBF	F6F5C679A576105E6918A2714B25B8480B850F624B0CD8C5827214AE25999FAC
Chrome Cache Entry: 85	ASCII text, with no line terminators	1B1260CBE6B61922717BD483B13360AB	2454D32E97008046373A5FA9C263FB7D86C332F4	1761094876748116BCA8648618765D27ED608BB14BDB4772FA448E68E68D8201
Chrome Cache Entry: 86	ASCII text, with no line terminators	D479B6118C4650D96707547766562FC9	5BFCDED7C1FF1E2F4B7AF70E8DE52E0AC866524B	471F18F4003346A9A97084A8FED543F0BB81819E1016459F4CC72AAF499FC487
Chrome Cache Entry: 87	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced	5E8D6501FB6FC6A034A1484B24E9B6DE	0AADD566F53CA433D47CF33AD4D67DD4B7EE8C29	2628777FADB685F1F92F373EE6ED898D62794659D468E52C430347B6D320EA99
Chrome Cache Entry: 88	PNG image data, 100 x 100, 8-bit gray+alpha, non-interlaced	519259F1F0DEE25924C42DDE80FFA467	0641664A88126446E08B8A4CCDE7B9BFDC4B0C2D	6E942E547AF3361880610BF7F7C06FAC24779485C40C7520F70A382799B468B7
Chrome Cache Entry: 89	HTML document, Unicode text, UTF-8 text, with very long lines (4716), with no line terminators	7E03C5764D2F3135C479AD0AAF302B70	9361606FDE6D15E2CF2C1DEB1FF39698A68E384E	1BF38668ACE55662E84BC5B1A103FB41F443867D033FCFC8950E999F7566C267
Chrome Cache Entry: 90	ASCII text, with very long lines (1601)	BAA6F5924D55CE37D1F12E70A9DF4BF7	6104D9A4127BFD071CF7351536A841ADF153D763	10368E1584BDDFDBB5FBC2F9E64566543C43F0020DBCDE52AD73D58AC1F6F500
Chrome Cache Entry: 91	ASCII text, with no line terminators	D925274463DF83CD655B4AC5370FD050	B98CF6768B21EE7E42D14C59B37C3419EB67BB10	358350D2300A8AFFFA98E9610424F983D159D7519F2A2F19F7552E48231F6055
Chrome Cache Entry: 92	ASCII text, with very long lines (12770), with no line terminators	7044F2412A22AD8523175B3275896FDE	4FC8D613AD5AEB64C1AB25C501EF22BB8809B78A	9943E6EF8AFEDFB7CC1E3AC4084CE7DABAB536B4C2EAC21FCAB95EC9295331D1
Chrome Cache Entry: 93	ASCII text, with very long lines (65536), with no line terminators	C6AEE329EBF74D83F225A130C92EC8D3	7566B7A9EF41D7B300439F67465D537B1D85AD3B	9835B8CEB7AEAEE0BDC165468C7DD94BBE5E4F7328601A66B06F375666C63051
Chrome Cache Entry: 94	TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, axcient-iconfont	E6E668676E49C885A4F55B4F4D81FDAD	A61BE22B94CF07524D47AACBC9861BC8FA76A7E2	52F6798A9D2E06F28CFE9BD75AB8BA5F815B65383E00955A51B0FE453BC6EBFF
Chrome Cache Entry: 95	Web Open Font Format (Version 2), TrueType, length 88732, version 3.393	7DB69E930FFF9EBA1E8EB6FDD41C826E	D8F87055238130980D4E4F82425135FD77C4471D	324D48E48389C06F3DCD0A1E54F8B921ABED9B64E1CEC3085B4CC23442BB2ED9
Chrome Cache Entry: 96	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced	5E8D6501FB6FC6A034A1484B24E9B6DE	0AADD566F53CA433D47CF33AD4D67DD4B7EE8C29	2628777FADB685F1F92F373EE6ED898D62794659D468E52C430347B6D320EA99
Chrome Cache Entry: 97	Unicode text, UTF-8 text, with very long lines (37649)	52B569418D62BE50EE0AFF92F7BA9A06	EC703714C628A661B90D30FAB808049A62ECA912	00169AAAD294F2D5BE6039A00FEE63D54E5B5A21672FB5AE47A492E772E1AF9F

HTML body contains low number of good links

Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: Number of links: 1
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: Number of links: 1
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: Number of links: 0

HTML body contains password input but no form action

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: <input type="password" .../> found but no <form action="...

HTML title does not match URL

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: Title: Einloggen does not match URL
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: Title: Passwort vergessen does not match URL
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: Title: Einloggen does not match URL
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: Title: Kontowiederherstellung does not match URL

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: <input type="password" .../> found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: <input type="password" .../> found
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: <input type="password" .../> found

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: No <meta name="author".. found
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: No <meta name="author".. found

Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/forgot/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/login/	HTTP Parser: No <meta name="copyright".. found
Source: https://web.leitz-cloud.com/auth/login/recovery/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49747 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /shares/folder/k11NnLCmDNb/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0
Source: global traffic	HTTP traffic detected: GET /static/gen/main.ed99ea6b.min.css HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /custom/styles.css?v=3.6.0.117 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/js/translations/de.js?v=3.6.0.117 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/gen/main_header.cf07ee37.min.js HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/themes/default/images/svg/right-arrow.png HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/themes/default/images/svg/lottie.js HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /static/themes/default/images/svg/custom_script.js HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/themes/default/images/svg/right-arrow.png HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/themes/default/images/svg/sidebar.js HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/gen/main.52b56941.min.js HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/vendor/select2-4.0.3/dist/js/i18n/de.js?v=3.6.0.117 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/bootstrap/dist/fonts/sourcesanspro-semibold.woff2 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://web.leitz-cloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/bootstrap/dist/fonts/axcient-iconfont.ttf?avds6c HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://web.leitz-cloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /static/bootstrap/dist/fonts/sourcesanspro-regular.woff2 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://web.leitz-cloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw
Source: global traffic	HTTP traffic detected: GET /matomo.js HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=ToyWF0&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F%3Fdomain%3Dabtax-Steuerberatung%26next%3D%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/icon/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/login/?domain=abtax-Steuerberatung&next=%2Fshares%2Ffolder%2Fk11NnLCmDNb%2F%3FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/icon/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /auth/forgot/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/forgot/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /static/bootstrap/dist/fonts/sourcesanspro-light.woff2 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://web.leitz-cloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://web.leitz-cloud.com/static/gen/main.ed99ea6b.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/forgot/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=z99seb&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /auth/login/?clear_cookie=1 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /auth/login/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/login/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/login/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=SwQQnj&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /auth/forgot/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/forgot/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=0eVsvC&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/forgot/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /auth/login/?clear_cookie=1 HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /auth/login/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/login/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=WgIqI3&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/login/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /auth/login/recovery/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/login/recovery/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/login/recovery/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=RUPzzJ&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Flogin%2Frecovery%2F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /auth/forgot/ HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://web.leitz-cloud.com/auth/forgot/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000
Source: global traffic	HTTP traffic detected: GET /api/2/person HTTP/1.1Host: web.leitz-cloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://web.leitz-cloud.com/auth/forgot/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1
Source: global traffic	HTTP traffic detected: GET /plugins/HeatmapSessionRecording/configs.php?idsite=33&trackerid=TvJd9S&url=https%3A%2F%2Fweb.leitz-cloud.com%2Fauth%2Fforgot%2F HTTP/1.1Host: analytics.vboxx.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://web.leitz-cloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/1/branding/logo HTTP/1.1Host: web.leitz-cloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: logged_in=0; session=v\|zjSv7p1LFy^cGqMtP1m:Fedz_ErYAOuvM3tBfn:`znd$OEeQw6WA0kl:cnr3Oc.8TtbiAILPHqACTkCReAiZE0ee3GSMzf205bV75iy8jw; _pk_id.33.208f=1d7f1cb1d782f35f.1714026184.; _pk_ses.33.208f=1If-Modified-Since: Mon, 07 Aug 2023 14:36:21 -0000

Source: chromecache_90.2.dr

Source: global traffic	DNS traffic detected: DNS query: web.leitz-cloud.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: analytics.vboxx.eu

Source: unknown

Source: chromecache_97.2.dr	String found in binary or memory: http://jqueryui.com)
Source: chromecache_90.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_90.2.dr	String found in binary or memory: https://developer.matomo.org/api-reference/tracking-javascript
Source: chromecache_90.2.dr	String found in binary or memory: https://developer.matomo.org/guides/tracking-javascript-guide#multiple-piwik-trackers
Source: chromecache_90.2.dr	String found in binary or memory: https://github.com/matomo-org/matomo/blob/master/js/piwik.js
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: chromecache_77.2.dr	String found in binary or memory: https://gravatar.com/avatar/
Source: chromecache_90.2.dr	String found in binary or memory: https://piwik.org
Source: chromecache_90.2.dr	String found in binary or memory: https://piwik.org/free-software/bsd/
Source: chromecache_90.2.dr	String found in binary or memory: https://w.soundcloud.com/player/api.js
Source: chromecache_90.2.dr	String found in binary or memory: https://www.innocraft.com/
Source: chromecache_90.2.dr	String found in binary or memory: https://www.innocraft.com/license
Source: chromecache_90.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49747 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@22/57@8/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1988,i,5874812371822322334,2225953221869786979,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1988,i,5874812371822322334,2225953221869786979,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

ID:	1431463
Product:	CloudBasic
Start time:	08:21:59
Start date:	25.04.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://web.leitz-cloud.com/shares/folder/k11NnLCmDNb/