Windows Analysis Report
http://lingos.netdimensions.com/lingos

Overview

General Information

Sample URL:	http://lingos.netdimensions.com/lingos
Analysis ID:	1432133
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Submit button contains javascript call

Classification

Signatures

HTML body contains low number of good links

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: Number of links: 1
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: Number of links: 0
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: Number of links: 1

HTML title does not match URL

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: Title: Learning Platform does not match URL
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: Title: Reset user password: PeopleFluent LMS does not match URL
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: Title: Learning Platform does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: Has password / email / username input fields
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: Has password / email / username input fields
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: Has password / email / username input fields

Submit button contains javascript call

Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: On click: self.history.back();
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: On click: self.history.back();

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: <input type="password" .../> found
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: <input type="password" .../> found

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: No <meta name="author".. found
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: No <meta name="author".. found
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: No <meta name="author".. found
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: No <meta name="author".. found

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: No <meta name="copyright".. found
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: No <meta name="copyright".. found
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: No <meta name="copyright".. found
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49743 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 13:13:53 GMTServer: ApacheLast-Modified: Fri, 11 Mar 2022 19:39:54 GMTAccept-Ranges: bytesVary: Accept-Encoding,User-AgentContent-Encoding: gzipContent-Length: 2018Keep-Alive: timeout=5, max=98Connection: Keep-AliveContent-Type: image/x-iconData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5b 6b 6c 14 55 14 9e f2 12 7c f1 b2 a9 d6 95 6e 67 ee ce ce bd 5b b5 a1 a1 b5 ed ce 4c d5 68 e4 fd 5c 76 96 48 e2 2b 8a 51 13 f1 15 7f f8 40 8d fc 30 9a f8 48 7c a0 a2 31 31 3e 62 7c 60 34 44 05 02 18 05 04 05 ac 01 81 76 67 a6 95 2a 28 8a 0a 12 29 5d bf 4b 97 42 b7 9d 76 76 77 76 d7 84 fd 92 93 59 a6 73 ef f9 ce b9 e7 9e 7b e7 dc 41 10 4a 84 a1 c2 98 31 02 ae 7e 61 d1 30 41 a8 15 04 c1 ef ef fe b7 32 56 10 96 e3 5e 75 75 f2 ef b2 20 7c 55 2a 08 0a 9e 19 c3 9f 13 ba ef e7 0a 4c 8d 2f 0a a9 71 83 d4 ed f6 65 d2 3e a4 59 ab aa 74 2b 81 6b 17 e4 4b 1a 6e 5f 48 c8 ee 33 5c eb d7 ac a7 79 fb 5e a2 99 fb 98 66 3f a9 e8 66 bd 50 b3 79 f8 c9 a7 97 0c 61 aa c5 a8 6a de ab d4 b6 8f e7 77 a8 66 4e 81 de 6f ab 74 fb 68 9f 7e 38 2f dd 3a 12 d2 4c 8b 4b 95 66 1d 3e 71 3f a8 9b 97 9f ca 43 a9 dd 31 9e 85 ad 9b f1 b7 6f b8 2d fd f5 75 aa 30 d5 bc dd d1 27 ba 3d 09 76 bd 10 d2 cd 8e be b6 59 07 d0 ff eb ac d1 0a b9 f1 4f 20 6c 89 54 6b d5 b8 28 e1 76 44 47 62 88 5b df 9e 0a a3 32 38 cf 08 b0 ad b1 00 fb db 20 74 8b 41 82 33 dc b6 8d 92 60 04 6d ba d0 36 d1 23 84 1e 8b 8a ca 34 37 ed f1 ec f6 5e 6d 93 82 3e 37 b8 6c ff 4f 7f ed 63 01 ba df 4d 7b 43 a2 db 1c f4 7f ed a6 3d ec 9c c3 ed 4d b1 bf 33 2a c9 93 dd b4 e7 98 2f c9 b3 d0 66 33 c6 e0 37 f0 de 38 5f 94 a7 b8 6d 9b 4b f0 3c e3 87 34 09 b9 cd 33 45 64 07 e4 8c 95 c8 8b bf 20 8f 6d c0 ef 97 90 07 af 25 ea ee d2 7c e9 67 ba f5 6c df 3c 68 1f 45 9e fb 8c 69 e6 82 74 72 7e 46 fa b5 d6 9b 07 cc c9 9a bd 8f e9 f6 52 d6 d8 32 21 17 fa 95 06 b3 7e b0 35 a1 c7 27 aa f9 01 d3 db 90 1b 12 43 33 d1 15 6c b4 cb cb 2e f9 f9 ac de f7 f6 9f 83 71 3f e6 8e 43 cf da d7 c1 d7 21 a6 da 33 89 da e1 18 2b 7e 7f 7c 64 f7 9a 65 df 8d 36 ab d1 b6 33 a4 b7 5f 9e fa 1c 62 2f 9e 8e fe 5e 5c f8 fe 00 7c 92 eb eb 17 e8 6b 15 ae 1b b1 46 9a fd ad dd 88 b7 3b 52 f5 63 dd 9f 0a df 3e ce e7 02 da ff 99 29 17 37 02 bf bd 38 d0 18 31 d6 3c 02 31 77 35 e4 55 f0 39 e8 b5 7e f8 6a bd db 78 e1 b1 12 52 cd 9b b0 b7 d8 e2 66 ef e2 72 bc 0e b8 d5 df cb 2f e1 b6 3a 70 7f 0d f2 77 c6 fa 35 f3 5f f8 ff 1d a1 26 31 7c 70 8d fd 23 d8 b8 f3 1c 1a b6 16 32 dd 7c 1f b1 32 f8 f8 40 67 48 b3 d7 61 2f bc 98 4d 8a 9f 9f a9 de fe 91 18 1a 54 db 2e 61 5a db 02 f8 e5 be 90 6a 3f 8a f1 7a 94 69 f1 fb 59 38 7e bd a2 99 0d a9 f3 fd 74 40 ac 5c 3e cf 08 d0 07 b1 2f da c0 f7 72 d8 8f ed 33 08 fb 32 2a d1 7b 23 a2 38 3a 97 ba 0d 49 9e 1d 23 ec 40 ff fb ca e3 7b c3 0e 43 94 af cc 8d 6e 3a 9b ef 1f 9d 74 f7 70 08 d0 23 f3 a5 60 9f 3c 9c 0d 22 84 94 0e 64 77 3f 1c da 23 a5 a5 67 7b a5 df 20 ca c3 6e 75 9f 90 a8 a4 38 be 6b a5 0b be 07 4f 57 3f fc b5 d2 2b fd 88 ab 3f d2 d6 1f a0 3b bd d2 0f 5b 7e 2f a4 7e 43 62 9b d2 d5 0f 9f 7d ea 9d fe e
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 13:13:56 GMTServer: ApacheLast-Modified: Fri, 11 Mar 2022 19:39:54 GMTAccept-Ranges: bytesVary: Accept-Encoding,User-AgentContent-Encoding: gzipContent-Length: 2018Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: image/x-iconData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5b 6b 6c 14 55 14 9e f2 12 7c f1 b2 a9 d6 95 6e 67 ee ce ce bd 5b b5 a1 a1 b5 ed ce 4c d5 68 e4 fd 5c 76 96 48 e2 2b 8a 51 13 f1 15 7f f8 40 8d fc 30 9a f8 48 7c a0 a2 31 31 3e 62 7c 60 34 44 05 02 18 05 04 05 ac 01 81 76 67 a6 95 2a 28 8a 0a 12 29 5d bf 4b 97 42 b7 9d 76 76 77 76 d7 84 fd 92 93 59 a6 73 ef f9 ce b9 e7 9e 7b e7 dc 41 10 4a 84 a1 c2 98 31 02 ae 7e 61 d1 30 41 a8 15 04 c1 ef ef fe b7 32 56 10 96 e3 5e 75 75 f2 ef b2 20 7c 55 2a 08 0a 9e 19 c3 9f 13 ba ef e7 0a 4c 8d 2f 0a a9 71 83 d4 ed f6 65 d2 3e a4 59 ab aa 74 2b 81 6b 17 e4 4b 1a 6e 5f 48 c8 ee 33 5c eb d7 ac a7 79 fb 5e a2 99 fb 98 66 3f a9 e8 66 bd 50 b3 79 f8 c9 a7 97 0c 61 aa c5 a8 6a de ab d4 b6 8f e7 77 a8 66 4e 81 de 6f ab 74 fb 68 9f 7e 38 2f dd 3a 12 d2 4c 8b 4b 95 66 1d 3e 71 3f a8 9b 97 9f ca 43 a9 dd 31 9e 85 ad 9b f1 b7 6f b8 2d fd f5 75 aa 30 d5 bc dd d1 27 ba 3d 09 76 bd 10 d2 cd 8e be b6 59 07 d0 ff eb ac d1 0a b9 f1 4f 20 6c 89 54 6b d5 b8 28 e1 76 44 47 62 88 5b df 9e 0a a3 32 38 cf 08 b0 ad b1 00 fb db 20 74 8b 41 82 33 dc b6 8d 92 60 04 6d ba d0 36 d1 23 84 1e 8b 8a ca 34 37 ed f1 ec f6 5e 6d 93 82 3e 37 b8 6c ff 4f 7f ed 63 01 ba df 4d 7b 43 a2 db 1c f4 7f ed a6 3d ec 9c c3 ed 4d b1 bf 33 2a c9 93 dd b4 e7 98 2f c9 b3 d0 66 33 c6 e0 37 f0 de 38 5f 94 a7 b8 6d 9b 4b f0 3c e3 87 34 09 b9 cd 33 45 64 07 e4 8c 95 c8 8b bf 20 8f 6d c0 ef 97 90 07 af 25 ea ee d2 7c e9 67 ba f5 6c df 3c 68 1f 45 9e fb 8c 69 e6 82 74 72 7e 46 fa b5 d6 9b 07 cc c9 9a bd 8f e9 f6 52 d6 d8 32 21 17 fa 95 06 b3 7e b0 35 a1 c7 27 aa f9 01 d3 db 90 1b 12 43 33 d1 15 6c b4 cb cb 2e f9 f9 ac de f7 f6 9f 83 71 3f e6 8e 43 cf da d7 c1 d7 21 a6 da 33 89 da e1 18 2b 7e 7f 7c 64 f7 9a 65 df 8d 36 ab d1 b6 33 a4 b7 5f 9e fa 1c 62 2f 9e 8e fe 5e 5c f8 fe 00 7c 92 eb eb 17 e8 6b 15 ae 1b b1 46 9a fd ad dd 88 b7 3b 52 f5 63 dd 9f 0a df 3e ce e7 02 da ff 99 29 17 37 02 bf bd 38 d0 18 31 d6 3c 02 31 77 35 e4 55 f0 39 e8 b5 7e f8 6a bd db 78 e1 b1 12 52 cd 9b b0 b7 d8 e2 66 ef e2 72 bc 0e b8 d5 df cb 2f e1 b6 3a 70 7f 0d f2 77 c6 fa 35 f3 5f f8 ff 1d a1 26 31 7c 70 8d fd 23 d8 b8 f3 1c 1a b6 16 32 dd 7c 1f b1 32 f8 f8 40 67 48 b3 d7 61 2f bc 98 4d 8a 9f 9f a9 de fe 91 18 1a 54 db 2e 61 5a db 02 f8 e5 be 90 6a 3f 8a f1 7a 94 69 f1 fb 59 38 7e bd a2 99 0d a9 f3 fd 74 40 ac 5c 3e cf 08 d0 07 b1 2f da c0 f7 72 d8 8f ed 33 08 fb 32 2a d1 7b 23 a2 38 3a 97 ba 0d 49 9e 1d 23 ec 40 ff fb ca e3 7b c3 0e 43 94 af cc 8d 6e 3a 9b ef 1f 9d 74 f7 70 08 d0 23 f3 a5 60 9f 3c 9c 0d 22 84 94 0e 64 77 3f 1c da 23 a5 a5 67 7b a5 df 20 ca c3 6e 75 9f 90 a8 a4 38 be 6b a5 0b be 07 4f 57 3f fc b5 d2 2b fd 88 ab 3f d2 d6 1f a0 3b bd d2 0f 5b 7e 2f a4 7e 43 62 9b d2 d5 0f 9f 7d ea 9d fe

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8V3UfxChVSUFNRL&MD=Hgns8Zo6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8V3UfxChVSUFNRL&MD=Hgns8Zo6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /lingos HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/ HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/servlet/ekp/login HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://lingos.netdimensions.com/lingos/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/jquery-1.4.2.min.js HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/jquery.innerfade.js HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/js/jquery.prettyPhoto.js HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/loader.gif HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/loader.gif HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/favicon.ico HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/servlet/resetpassword HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/favicon.ico HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles_core/base.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/jsutility.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/netd-namespaces.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/messagebar/css/jquery.messagebar.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles_core/base-plugin-custom.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/main.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /versions/0.10/fluenticons.css HTTP/1.1Host: ui.peoplefluent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /versions/0.10/peoplefluent-vendors.css HTTP/1.1Host: ui.peoplefluent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /versions/0.10/peoplefluent-components.css HTTP/1.1Host: ui.peoplefluent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/jQuery/jquery-3.5.1.min.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/jQuery/jquery-migrate-3.3.0.min.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/jqueryInit.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/conditionizr/conditionizr.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/jQuery/ui/jquery-ui-1.12.1.min.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/alternaterows/jquery.alternaterows.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/accessibility.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/component/netd-component.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/hyphenator/Hyphenator.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/messagebar/jquery.messagebar.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/common.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/base-plugin-custom.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/BaseView.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/DropDownMenus.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/InlineUniversalSearch.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/bg-body-frameless.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/main.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/logo.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/main.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/servlet/ekp/login HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/logo.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/bg-body-frameless.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/logo.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/servlet/resetpassword HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: lingos.netdimensions.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ui.peoplefluent.com

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49743 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@19/90@8/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2312,i,5904013108374987392,6537605645107527373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://lingos.netdimensions.com/lingos"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2312,i,5904013108374987392,6537605645107527373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.178.50.36	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.173.166.51	d11mswrjgd8r5y.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
18.196.219.159	lingos.netdimensions.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.5

Contacted Domains

Name	IP	Active
d11mswrjgd8r5y.cloudfront.net	18.173.166.51	true
lingos.netdimensions.com	18.196.219.159	true
www.google.com	192.178.50.36	true
fp2e7a.wpc.phicdn.net	192.229.211.108	true
ui.peoplefluent.com	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/jquery-1.4.2.min.js	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/styles_core/base.css	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/accessibility.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/common.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/js/jquery.prettyPhoto.js	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/alternaterows/jquery.alternaterows.js?22.03.1	false	high
http://ui.peoplefluent.com/versions/0.10/fluenticons.css	false	high
http://ui.peoplefluent.com/versions/0.10/peoplefluent-components.css	false	high
http://lingos.netdimensions.com/lingos/servlet/resetpassword	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/jQuery/jquery-3.5.1.min.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/main.css	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/hyphenator/Hyphenator.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/jQuery/jquery-migrate-3.3.0.min.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/jQuery/ui/jquery-ui-1.12.1.min.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/images/customize/bg-body-frameless.png	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/messagebar/jquery.messagebar.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	false	high
http://lingos.netdimensions.com/lingos/servlet/ekp/login	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.css	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/loader.gif	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/jsutility.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/netd-namespaces.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/conditionizr/conditionizr.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/InlineUniversalSearch.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/BaseView.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/jquery.innerfade.js	false	high
http://lingos.netdimensions.com/favicon.ico	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png	false	high
http://ui.peoplefluent.com/versions/0.10/peoplefluent-vendors.css	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/component/netd-component.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/styles_core/base-plugin-custom.css	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/DropDownMenus.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/images/customize/logo.png	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/base-plugin-custom.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos	false	high
http://lingos.netdimensions.com/lingos/favicon.ico	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/jqueryInit.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/messagebar/css/jquery.messagebar.css	false	high

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 12:13:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	AB457DE9A76B601DCCC1276A425DD214	1F05FFC4D59346B7096210AC88C3A9D5A40E235F	38C0730C3C7FB3075CB1B1D3151CD475B6EE6A46AD57483C2D39B96199664198
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 12:13:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	92B90BC6A2996255FF20D17A90AE7CCD	60E68AED526141E17E06C843500B9ACF4163C7D7	F5F88C168C5D403E6567C68E7A091942CABE00435E2E0752F8EF5CD0D9EEDFD3
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	8724488B7466F517676B0BAFFB0AD18D	E21588CFF04BF20D59B764D6E1378EE47342B8A5	BED4AEF0C4825B4004DDA7D01869C19FA000117B42E80E59AF83984D3012FEDD
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 12:13:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	D918DAE13C5ACC980E2C4FF0026923B5	1B44A0BCD870DE3086C4B12263B04CF60526CEA8	45DBFD32F0962231BCAC03E0CCB346133A15C2314D4BBFD75595A2490990A278
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 12:13:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	12761C215404E3320CD990638E40A9D8	7DEEA89FCCF2137C82991FAA676DD786ED3A9D7A	BBF7F48417F140EACA9A7D8E4BFA7AE91C3558BDFCE0D7E9EDDAACAD08E702F0
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 12:13:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	B1DA85A1D9267BD267B7A91C1E6925BB	422835CF9E4A553AC204B68BB1044EEE3C0BE0A1	A30BB449899293EED2DD901CF6CA2FC1F281993FE781EFBD7E0A44CF60125D7C
Chrome Cache Entry: 100	gzip compressed data, from Unix, original size modulo 2^32 5350	1E6F4FDCA623855A40316E87930ED1D3	B30B27BF7B8106F1C81EE15952E746397CA44B86	16E27EB7836C32A72C3ECE9D7E4C6D0A0F27CF34748772DEF87826122D73EEAD
Chrome Cache Entry: 101	gzip compressed data, from Unix, original size modulo 2^32 8238	C4C315E4DE25AADBEE81A86FD61C59A0	50B98434DDDC164FAA4DE0399D0F18673BCA8BD6	47487A6F6FCFCA0BBEC1F899A02279FD0C0B5DFFC03727E1E5CE183FB1817B32
Chrome Cache Entry: 102	gzip compressed data, from Unix, original size modulo 2^32 144901	0FA88A4A114BE346D6F990282AAEFB45	C95D0FD87E139CF7489644F6634A81D63B1D7A45	56BD80261145A470F3995F82FF13D5DE2F00E0D4D908AB67FF4D3A37DDAAEB92
Chrome Cache Entry: 103	gzip compressed data, from Unix, original size modulo 2^32 107697	534FDB11C94C298EEC063A4A3EA1F000	DBC05F9E0A271033B479F905A254E1F60F906351	50CB193A9CB8E29C24D1B93F081F3D62E16D35C03785D721FCADC301874970D0
Chrome Cache Entry: 104	gzip compressed data, from Unix, original size modulo 2^32 11015	25B2F2CC0ABFAF6514FABF9B5752A808	0E1115FCC42690C389D368DABDF62D7BB0EFD9FB	46068FFEB318E19579CFC6488F70557E8A676383688ABF136BB35F7F26E888BD
Chrome Cache Entry: 105	gzip compressed data, from Unix, original size modulo 2^32 292	6A9AFB0636306A84714177FFA3C5286A	38A72EA1787BBFB4C65D6264D78D9104FF11439A	DAADF14B401FD0B42AB4EA977C878775FB5848CB81F1386D26B0FFEE57C1F06C
Chrome Cache Entry: 106	gzip compressed data, from Unix, original size modulo 2^32 2409	71302BF63ACB6001C7CF38E5DD3A3DA2	EC27EA1ED551C14B214FBD45F2D4DBBE1AE17553	A16F8A901C4B837791C07F94B9A1A81A8D5C44504ECD7057F40C052622CBD21A
Chrome Cache Entry: 107	gzip compressed data, from Unix, original size modulo 2^32 7326	0E334218E1D35FE518A46ECE1B925509	82D003946760A00C12EA8178F5E8AC48CF1C0299	0C0385C8DEFBB583EF06E426E44D795DC4F604826C2629EF6031D34710E923C6
Chrome Cache Entry: 108	GIF image data, version 89a, 24 x 24	DF46993044576F83F2C2CC1A64E18F31	1E0D02A9DD841F94D68BC0A1DA91F858AC9874D7	68255B5E88E8C44694211D8D86C3460BE92BB6F3D1DD252DC0BF783E833CB067
Chrome Cache Entry: 109	PNG image data, 130 x 100, 8-bit/color RGBA, non-interlaced	68864373D6162E3865ADB6D749DCA094	9C05FE4509FA5F312525FBD2542FC992534504B3	88B5F19B2693B090014A3BAD3E163BAAF828BB8DE513C31D95DEE5FA8D406A4B
Chrome Cache Entry: 110	PNG image data, 992 x 1121, 8-bit/color RGB, non-interlaced	884BED887BCC0EA1C9F53A4494F0DE32	5E4771575F5877944CE083DC20E88846FC5A79D2	1AA71888C47B3E0F9ACE52CFF2CCC2D4E26CE0F0A09E9B3A6738820C0E03DD20
Chrome Cache Entry: 111	gzip compressed data, from Unix, original size modulo 2^32 608	AE3EC7C8450D794C0A91463629A59B8C	EC69A7F4C440B6662D762004AA132CBDF7CBE551	A3968AB5B34F00A5E361CF4A64B38CE3FCF1C6B2D0AEC234B92BCBD9EA364A7B
Chrome Cache Entry: 112	gzip compressed data, from Unix, original size modulo 2^32 19353	20486E6299AAEA40DFEF5240378A5D4E	4EBD13EA17E5FC17C52F1B84576D042556B650D1	65C9E153BF0960681D1411295128DA3F0FC9B96419F14833F65E7F71DCA7526B
Chrome Cache Entry: 113	gzip compressed data, from Unix, original size modulo 2^32 89476	888C5FA4504182A0224B264A1FDA0E73	65F058A7DEAD59A8063362241865526EB0148F16	7D757E510B1F0C4D44FD98CC0121DA8CA4F44793F8583DEBDEF300FB1DBD3715
Chrome Cache Entry: 114	PNG image data, 130 x 100, 8-bit/color RGBA, non-interlaced	68864373D6162E3865ADB6D749DCA094	9C05FE4509FA5F312525FBD2542FC992534504B3	88B5F19B2693B090014A3BAD3E163BAAF828BB8DE513C31D95DEE5FA8D406A4B
Chrome Cache Entry: 115	gzip compressed data, from Unix, original size modulo 2^32 910	5CA948AB538AEECD1AF47AF0702B7C93	33DABDD26310B7BAE9282FDA907F92E927BC29A2	B16CB38D06EDDCB3885A9356F79A5119C538FC9CA4698B777E67BF857BC3ED8F
Chrome Cache Entry: 116	gzip compressed data, from Unix, original size modulo 2^32 2230	C88B56EAA6074C6AE47FFCA5A10FB404	C322E34401174BA0C16E525BC6063BA111138198	833CAA5785F7CF8947AD1B460CCA24FA03F2123D5B7D40B1E9194FB65D2F88FA
Chrome Cache Entry: 117	Unicode text, UTF-8 text, with very long lines (11001)	274C935AF16AF79D6F2B17A6A2311D88	323F99CA60E6D327BBE5C12DC726A507E2676BBF	53E4F94DEFF5D0ADB371A1CB688367AF93FCB81AB0BDEBC19D435F8B42E0A689
Chrome Cache Entry: 118	gzip compressed data, from Unix, original size modulo 2^32 72174	73F29C18C6BF146E10CF6FF96F721AA9	E9A49D93652C5FC57E053B142A95E4F02EA45DC3	6FF79B2E46EEB50A24C422CF2E2D1E5389959FE564B8CB53784A00A8394857D8
Chrome Cache Entry: 119	ASCII text, with no line terminators	085215790719244F70816D9CCE3BB42D	9F1B9756545F54D6615450EE3B3972749B4BB039	B396A8E2C4BDD559DF8D14E24807A016E40C3E314B273C3DBE2BF19E68A482D3
Chrome Cache Entry: 120	gzip compressed data, from Unix, original size modulo 2^32 15406	3AE1CBC0434A789C635F0C71BC36C1C5	DFD62260172A9647A2F59A8020A13E7056AD70A6	4708594AED5595A19D36814F0C74D5460B00348C091D83F418A5E547EF5482E3
Chrome Cache Entry: 121	Unicode text, UTF-8 text, with very long lines (65466)	C42437B3253A8C5EFC35401012706E5B	3D753AD6B3843DA667D4F060719343B7B761E786	BA613A1BC5467AAEEF5859B48160C1FBB973369549D2B3B32F94D736154A56DF
Chrome Cache Entry: 122	gzip compressed data, from Unix, original size modulo 2^32 74074	B1B70EAAECB8D9431DF9731618D1C6D0	3BCE94DAD0DC8D41D1E3B6DAEF31A73123EA8BAA	B4945ECFA08EE434D9050174819E6D615017867E7B5F792CE9456ADDDD0E77FC
Chrome Cache Entry: 123	gzip compressed data, from Unix, original size modulo 2^32 23523	1BE7C44280538BF259174D9B597B5546	63D5A95225DFBD55D5FF075BDB95A0743D9B2111	BDE95DCE5B774012BC704B81D447ECD9ED9373BA2CDCB15CE9CEABD0EB6937E3
Chrome Cache Entry: 124	PNG image data, 226 x 80, 8-bit/color RGBA, non-interlaced	000469BDD4D2E6CFB315DCC1C676348A	0A4B1439589DC0812AB1B3D67BFF21B60E700CB3	34C689187341C53CACA1B84F98B8941A61B0807DCA7F7E1FBAE129217B2D7BB6
Chrome Cache Entry: 125	gzip compressed data, from Unix, original size modulo 2^32 14208	8CBE53BAA1423E2EB669C5585E3C7D6A	A3EB95D1E69F54A684D81F37E4D929443916AC93	5B160BD8809796A70657A72BC4FD147B3F94841103A569B95B66A525F0E2B857
Chrome Cache Entry: 126	gzip compressed data, from Unix, original size modulo 2^32 10572	BAD3F62F0F43212ED2F07F627AA784A8	3D26DEAAA24B3E85C1D8095F2595A8A69B3C3163	00024F3C1EC57425A54EB40D0C5A165F0D111ED214931E0321B1CD396BBA31FB
Chrome Cache Entry: 127	gzip compressed data, from Unix, original size modulo 2^32 15406	3AE1CBC0434A789C635F0C71BC36C1C5	DFD62260172A9647A2F59A8020A13E7056AD70A6	4708594AED5595A19D36814F0C74D5460B00348C091D83F418A5E547EF5482E3
Chrome Cache Entry: 128	gzip compressed data, from Unix, original size modulo 2^32 18921	9F11E50532DDA1992522B16CEC8F8279	A9E71ECF8A860F43A7A78BFB81C70726ADB4D0FE	88F0387C1DB92BC89F7A547906A7091B4CFBD2D8CCF77E481F16CFA982B9B7F1
Chrome Cache Entry: 129	gzip compressed data, from Unix, original size modulo 2^32 15406	3AE1CBC0434A789C635F0C71BC36C1C5	DFD62260172A9647A2F59A8020A13E7056AD70A6	4708594AED5595A19D36814F0C74D5460B00348C091D83F418A5E547EF5482E3
Chrome Cache Entry: 130	gzip compressed data, from Unix, original size modulo 2^32 5054	5A09F242F6D520CA2645CABBC94994E3	BC872DC4DE9A2F4D54A4B2C1CA45FFE532F86701	4686A837CB72AB3C5B903B2F19104C68E6103D6614B3C24305480D4E55B04B19
Chrome Cache Entry: 131	gzip compressed data, from Unix, original size modulo 2^32 1348	8331F459704C7CA0FAB77C59AB3CAFCC	B2EBEF8B94781FD0107AD6992909BB11C2D027A1	670CCBF5A4EC4B315CF3FD0788A1DD8DBA134917FB9EBF964FC280B88D6EEE31
Chrome Cache Entry: 132	gzip compressed data, from Unix, original size modulo 2^32 11054	F4A6357F0EED53813178F6A1568D4522	3EEBB7937D8181A77A74897CD0A3BCD22B956281	151B4816D7210616D78949A809395B54D69FB3C2FB90CA40B17D91A2CAFF2B9F
Chrome Cache Entry: 133	gzip compressed data, from Unix, original size modulo 2^32 5032	15D88D55885F2EA90A5A9425A5BE5392	CB0CADEA54A7F7D93F67370BCF6008E11CA016D3	775925F46A270741BD0E1236E670513C99C76D33AA1F4BD701CB72CCAC0D24D2
Chrome Cache Entry: 134	gzip compressed data, from Unix, original size modulo 2^32 15406	3AE1CBC0434A789C635F0C71BC36C1C5	DFD62260172A9647A2F59A8020A13E7056AD70A6	4708594AED5595A19D36814F0C74D5460B00348C091D83F418A5E547EF5482E3
Chrome Cache Entry: 135	PNG image data, 226 x 80, 8-bit/color RGBA, non-interlaced	000469BDD4D2E6CFB315DCC1C676348A	0A4B1439589DC0812AB1B3D67BFF21B60E700CB3	34C689187341C53CACA1B84F98B8941A61B0807DCA7F7E1FBAE129217B2D7BB6
Chrome Cache Entry: 136	gzip compressed data, from Unix, original size modulo 2^32 1401	CDEAB9E01885432A978735DD53CEC579	1D8E1ABE8C3107F427E85ECF937CE95E2DB7DD66	221FDA02DD891FC2FA739C26646286189352626BB3A34A5F82D3CEC5EAB3C58C
Chrome Cache Entry: 137	GIF image data, version 89a, 24 x 24	DF46993044576F83F2C2CC1A64E18F31	1E0D02A9DD841F94D68BC0A1DA91F858AC9874D7	68255B5E88E8C44694211D8D86C3460BE92BB6F3D1DD252DC0BF783E833CB067
Chrome Cache Entry: 93	gzip compressed data, from Unix, original size modulo 2^32 13808	1A936401FE24A0C683E366670B1665F6	5475BE32F80B44A724EB64784C276BC360FBC461	B4F3D8F03D7F864513DD5BADAEA31FBB9A4D24C31F14162172301C2015C11D4B
Chrome Cache Entry: 94	gzip compressed data, from Unix, original size modulo 2^32 253669	C10ED8605CD3A62D30D6BFD0FE981487	6854BE66391CE424BEE775D8EABBD134053F2E98	1BCA88E4A548C9976A5DEB5A87843DD55274E361A0EBB966E1DCF0DF271D0876
Chrome Cache Entry: 95	gzip compressed data, from Unix, original size modulo 2^32 22827	A7343C33B83829FF0CE7951897EBA7A5	1317130945072103BAA854EE176341D8BC7EC241	EC47D96B4434AF2995D02B9F43B8F18C5A18D1F3DA1318ABDBAB6911E8A06FB9
Chrome Cache Entry: 96	gzip compressed data, from Unix, original size modulo 2^32 573743	516809D8C0956C826193E7813C086C5A	28FC9DCCFD16D172F5FD94A62B8295A4BA048491	EBD2D3535B28825CE097990D44E1528E9540F9443FC0954C0CB4E6D6A51BD293
Chrome Cache Entry: 97	ASCII text, with no line terminators	496D5D9A0FFA08B2687114CCCE51B41E	AA523FB1C3211A9E571B675EB43CB6F7F930C95E	8BAD46EC1E5C52007B0DB73259B0DA6EF28C8CE68FDA3CD4AE0FE14A0F772F1C
Chrome Cache Entry: 98	Unicode text, UTF-8 text, with very long lines (55300)	FE0353CE42289417AC5A99BF338C9FBB	7FB1590FF88A61B87C46B2DA43DBD278DE010F43	21DAFCA9A4A64F73404F86C61D112DA1DA785BB69256233DA8117CACFAE5CF19
Chrome Cache Entry: 99	PNG image data, 992 x 1121, 8-bit/color RGB, non-interlaced	884BED887BCC0EA1C9F53A4494F0DE32	5E4771575F5877944CE083DC20E88846FC5A79D2	1AA71888C47B3E0F9ACE52CFF2CCC2D4E26CE0F0A09E9B3A6738820C0E03DD20

HTML body contains low number of good links

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: Number of links: 1
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: Number of links: 0
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: Number of links: 1

HTML title does not match URL

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: Title: Learning Platform does not match URL
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: Title: Reset user password: PeopleFluent LMS does not match URL
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: Title: Learning Platform does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: Has password / email / username input fields
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: Has password / email / username input fields
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: Has password / email / username input fields

Submit button contains javascript call

Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: On click: self.history.back();
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: On click: self.history.back();

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: <input type="password" .../> found
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: <input type="password" .../> found

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: No <meta name="author".. found
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: No <meta name="author".. found
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: No <meta name="author".. found
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: No <meta name="author".. found

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: No <meta name="copyright".. found
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: No <meta name="copyright".. found
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: No <meta name="copyright".. found
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49743 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 13:13:53 GMTServer: ApacheLast-Modified: Fri, 11 Mar 2022 19:39:54 GMTAccept-Ranges: bytesVary: Accept-Encoding,User-AgentContent-Encoding: gzipContent-Length: 2018Keep-Alive: timeout=5, max=98Connection: Keep-AliveContent-Type: image/x-iconData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5b 6b 6c 14 55 14 9e f2 12 7c f1 b2 a9 d6 95 6e 67 ee ce ce bd 5b b5 a1 a1 b5 ed ce 4c d5 68 e4 fd 5c 76 96 48 e2 2b 8a 51 13 f1 15 7f f8 40 8d fc 30 9a f8 48 7c a0 a2 31 31 3e 62 7c 60 34 44 05 02 18 05 04 05 ac 01 81 76 67 a6 95 2a 28 8a 0a 12 29 5d bf 4b 97 42 b7 9d 76 76 77 76 d7 84 fd 92 93 59 a6 73 ef f9 ce b9 e7 9e 7b e7 dc 41 10 4a 84 a1 c2 98 31 02 ae 7e 61 d1 30 41 a8 15 04 c1 ef ef fe b7 32 56 10 96 e3 5e 75 75 f2 ef b2 20 7c 55 2a 08 0a 9e 19 c3 9f 13 ba ef e7 0a 4c 8d 2f 0a a9 71 83 d4 ed f6 65 d2 3e a4 59 ab aa 74 2b 81 6b 17 e4 4b 1a 6e 5f 48 c8 ee 33 5c eb d7 ac a7 79 fb 5e a2 99 fb 98 66 3f a9 e8 66 bd 50 b3 79 f8 c9 a7 97 0c 61 aa c5 a8 6a de ab d4 b6 8f e7 77 a8 66 4e 81 de 6f ab 74 fb 68 9f 7e 38 2f dd 3a 12 d2 4c 8b 4b 95 66 1d 3e 71 3f a8 9b 97 9f ca 43 a9 dd 31 9e 85 ad 9b f1 b7 6f b8 2d fd f5 75 aa 30 d5 bc dd d1 27 ba 3d 09 76 bd 10 d2 cd 8e be b6 59 07 d0 ff eb ac d1 0a b9 f1 4f 20 6c 89 54 6b d5 b8 28 e1 76 44 47 62 88 5b df 9e 0a a3 32 38 cf 08 b0 ad b1 00 fb db 20 74 8b 41 82 33 dc b6 8d 92 60 04 6d ba d0 36 d1 23 84 1e 8b 8a ca 34 37 ed f1 ec f6 5e 6d 93 82 3e 37 b8 6c ff 4f 7f ed 63 01 ba df 4d 7b 43 a2 db 1c f4 7f ed a6 3d ec 9c c3 ed 4d b1 bf 33 2a c9 93 dd b4 e7 98 2f c9 b3 d0 66 33 c6 e0 37 f0 de 38 5f 94 a7 b8 6d 9b 4b f0 3c e3 87 34 09 b9 cd 33 45 64 07 e4 8c 95 c8 8b bf 20 8f 6d c0 ef 97 90 07 af 25 ea ee d2 7c e9 67 ba f5 6c df 3c 68 1f 45 9e fb 8c 69 e6 82 74 72 7e 46 fa b5 d6 9b 07 cc c9 9a bd 8f e9 f6 52 d6 d8 32 21 17 fa 95 06 b3 7e b0 35 a1 c7 27 aa f9 01 d3 db 90 1b 12 43 33 d1 15 6c b4 cb cb 2e f9 f9 ac de f7 f6 9f 83 71 3f e6 8e 43 cf da d7 c1 d7 21 a6 da 33 89 da e1 18 2b 7e 7f 7c 64 f7 9a 65 df 8d 36 ab d1 b6 33 a4 b7 5f 9e fa 1c 62 2f 9e 8e fe 5e 5c f8 fe 00 7c 92 eb eb 17 e8 6b 15 ae 1b b1 46 9a fd ad dd 88 b7 3b 52 f5 63 dd 9f 0a df 3e ce e7 02 da ff 99 29 17 37 02 bf bd 38 d0 18 31 d6 3c 02 31 77 35 e4 55 f0 39 e8 b5 7e f8 6a bd db 78 e1 b1 12 52 cd 9b b0 b7 d8 e2 66 ef e2 72 bc 0e b8 d5 df cb 2f e1 b6 3a 70 7f 0d f2 77 c6 fa 35 f3 5f f8 ff 1d a1 26 31 7c 70 8d fd 23 d8 b8 f3 1c 1a b6 16 32 dd 7c 1f b1 32 f8 f8 40 67 48 b3 d7 61 2f bc 98 4d 8a 9f 9f a9 de fe 91 18 1a 54 db 2e 61 5a db 02 f8 e5 be 90 6a 3f 8a f1 7a 94 69 f1 fb 59 38 7e bd a2 99 0d a9 f3 fd 74 40 ac 5c 3e cf 08 d0 07 b1 2f da c0 f7 72 d8 8f ed 33 08 fb 32 2a d1 7b 23 a2 38 3a 97 ba 0d 49 9e 1d 23 ec 40 ff fb ca e3 7b c3 0e 43 94 af cc 8d 6e 3a 9b ef 1f 9d 74 f7 70 08 d0 23 f3 a5 60 9f 3c 9c 0d 22 84 94 0e 64 77 3f 1c da 23 a5 a5 67 7b a5 df 20 ca c3 6e 75 9f 90 a8 a4 38 be 6b a5 0b be 07 4f 57 3f fc b5 d2 2b fd 88 ab 3f d2 d6 1f a0 3b bd d2 0f 5b 7e 2f a4 7e 43 62 9b d2 d5 0f 9f 7d ea 9d fe e
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 13:13:56 GMTServer: ApacheLast-Modified: Fri, 11 Mar 2022 19:39:54 GMTAccept-Ranges: bytesVary: Accept-Encoding,User-AgentContent-Encoding: gzipContent-Length: 2018Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: image/x-iconData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5b 6b 6c 14 55 14 9e f2 12 7c f1 b2 a9 d6 95 6e 67 ee ce ce bd 5b b5 a1 a1 b5 ed ce 4c d5 68 e4 fd 5c 76 96 48 e2 2b 8a 51 13 f1 15 7f f8 40 8d fc 30 9a f8 48 7c a0 a2 31 31 3e 62 7c 60 34 44 05 02 18 05 04 05 ac 01 81 76 67 a6 95 2a 28 8a 0a 12 29 5d bf 4b 97 42 b7 9d 76 76 77 76 d7 84 fd 92 93 59 a6 73 ef f9 ce b9 e7 9e 7b e7 dc 41 10 4a 84 a1 c2 98 31 02 ae 7e 61 d1 30 41 a8 15 04 c1 ef ef fe b7 32 56 10 96 e3 5e 75 75 f2 ef b2 20 7c 55 2a 08 0a 9e 19 c3 9f 13 ba ef e7 0a 4c 8d 2f 0a a9 71 83 d4 ed f6 65 d2 3e a4 59 ab aa 74 2b 81 6b 17 e4 4b 1a 6e 5f 48 c8 ee 33 5c eb d7 ac a7 79 fb 5e a2 99 fb 98 66 3f a9 e8 66 bd 50 b3 79 f8 c9 a7 97 0c 61 aa c5 a8 6a de ab d4 b6 8f e7 77 a8 66 4e 81 de 6f ab 74 fb 68 9f 7e 38 2f dd 3a 12 d2 4c 8b 4b 95 66 1d 3e 71 3f a8 9b 97 9f ca 43 a9 dd 31 9e 85 ad 9b f1 b7 6f b8 2d fd f5 75 aa 30 d5 bc dd d1 27 ba 3d 09 76 bd 10 d2 cd 8e be b6 59 07 d0 ff eb ac d1 0a b9 f1 4f 20 6c 89 54 6b d5 b8 28 e1 76 44 47 62 88 5b df 9e 0a a3 32 38 cf 08 b0 ad b1 00 fb db 20 74 8b 41 82 33 dc b6 8d 92 60 04 6d ba d0 36 d1 23 84 1e 8b 8a ca 34 37 ed f1 ec f6 5e 6d 93 82 3e 37 b8 6c ff 4f 7f ed 63 01 ba df 4d 7b 43 a2 db 1c f4 7f ed a6 3d ec 9c c3 ed 4d b1 bf 33 2a c9 93 dd b4 e7 98 2f c9 b3 d0 66 33 c6 e0 37 f0 de 38 5f 94 a7 b8 6d 9b 4b f0 3c e3 87 34 09 b9 cd 33 45 64 07 e4 8c 95 c8 8b bf 20 8f 6d c0 ef 97 90 07 af 25 ea ee d2 7c e9 67 ba f5 6c df 3c 68 1f 45 9e fb 8c 69 e6 82 74 72 7e 46 fa b5 d6 9b 07 cc c9 9a bd 8f e9 f6 52 d6 d8 32 21 17 fa 95 06 b3 7e b0 35 a1 c7 27 aa f9 01 d3 db 90 1b 12 43 33 d1 15 6c b4 cb cb 2e f9 f9 ac de f7 f6 9f 83 71 3f e6 8e 43 cf da d7 c1 d7 21 a6 da 33 89 da e1 18 2b 7e 7f 7c 64 f7 9a 65 df 8d 36 ab d1 b6 33 a4 b7 5f 9e fa 1c 62 2f 9e 8e fe 5e 5c f8 fe 00 7c 92 eb eb 17 e8 6b 15 ae 1b b1 46 9a fd ad dd 88 b7 3b 52 f5 63 dd 9f 0a df 3e ce e7 02 da ff 99 29 17 37 02 bf bd 38 d0 18 31 d6 3c 02 31 77 35 e4 55 f0 39 e8 b5 7e f8 6a bd db 78 e1 b1 12 52 cd 9b b0 b7 d8 e2 66 ef e2 72 bc 0e b8 d5 df cb 2f e1 b6 3a 70 7f 0d f2 77 c6 fa 35 f3 5f f8 ff 1d a1 26 31 7c 70 8d fd 23 d8 b8 f3 1c 1a b6 16 32 dd 7c 1f b1 32 f8 f8 40 67 48 b3 d7 61 2f bc 98 4d 8a 9f 9f a9 de fe 91 18 1a 54 db 2e 61 5a db 02 f8 e5 be 90 6a 3f 8a f1 7a 94 69 f1 fb 59 38 7e bd a2 99 0d a9 f3 fd 74 40 ac 5c 3e cf 08 d0 07 b1 2f da c0 f7 72 d8 8f ed 33 08 fb 32 2a d1 7b 23 a2 38 3a 97 ba 0d 49 9e 1d 23 ec 40 ff fb ca e3 7b c3 0e 43 94 af cc 8d 6e 3a 9b ef 1f 9d 74 f7 70 08 d0 23 f3 a5 60 9f 3c 9c 0d 22 84 94 0e 64 77 3f 1c da 23 a5 a5 67 7b a5 df 20 ca c3 6e 75 9f 90 a8 a4 38 be 6b a5 0b be 07 4f 57 3f fc b5 d2 2b fd 88 ab 3f d2 d6 1f a0 3b bd d2 0f 5b 7e 2f a4 7e 43 62 9b d2 d5 0f 9f 7d ea 9d fe

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8V3UfxChVSUFNRL&MD=Hgns8Zo6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8V3UfxChVSUFNRL&MD=Hgns8Zo6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /lingos HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/ HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/servlet/ekp/login HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://lingos.netdimensions.com/lingos/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/jquery-1.4.2.min.js HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/jquery.innerfade.js HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/js/jquery.prettyPhoto.js HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/loader.gif HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/loader.gif HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/favicon.ico HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/servlet/resetpassword HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/favicon.ico HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles_core/base.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/jsutility.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/netd-namespaces.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/messagebar/css/jquery.messagebar.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles_core/base-plugin-custom.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/main.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /versions/0.10/fluenticons.css HTTP/1.1Host: ui.peoplefluent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /versions/0.10/peoplefluent-vendors.css HTTP/1.1Host: ui.peoplefluent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /versions/0.10/peoplefluent-components.css HTTP/1.1Host: ui.peoplefluent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/jQuery/jquery-3.5.1.min.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/jQuery/jquery-migrate-3.3.0.min.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/jqueryInit.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/conditionizr/conditionizr.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/jQuery/ui/jquery-ui-1.12.1.min.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/alternaterows/jquery.alternaterows.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/accessibility.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/component/netd-component.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/hyphenator/Hyphenator.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/messagebar/jquery.messagebar.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/common.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/base-plugin-custom.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/BaseView.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/DropDownMenus.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/InlineUniversalSearch.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/bg-body-frameless.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/main.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/logo.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/main.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/servlet/ekp/login HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/logo.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/bg-body-frameless.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/logo.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/servlet/resetpassword HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: lingos.netdimensions.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ui.peoplefluent.com

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49743 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@19/90@8/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2312,i,5904013108374987392,6537605645107527373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://lingos.netdimensions.com/lingos"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2312,i,5904013108374987392,6537605645107527373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

ID:	1432133
Product:	CloudBasic
Start time:	15:12:53
Start date:	26.04.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
http://lingos.netdimensions.com/lingos

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report http://lingos.netdimensions.com/lingos

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
http://lingos.netdimensions.com/lingos