Edit tour

Windows Analysis Report
https://login.ghx.com/

Overview

General Information

Sample URL:	https://login.ghx.com/
Analysis ID:	1523770
Tags:	urlscan
Infos:

Detection

Score:	21
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Phishing site detected (based on favicon image match)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 --field-trial-handle=2024,i,15088900136356208611,1996870493610398911,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4188 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://login.ghx.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Phishing site detected (based on favicon image match)

Source: https://site.com

Matcher: Template: salesforce matched with high similarity

Source: https://login.ghx.com/login

HTTP Parser: Number of links: 0

Source: https://www.ghx.com/support/

HTTP Parser: Base64 decoded: eyJub25jZSI6IktGTmNRSnBrWHNKOHVYZ3J1N0lhYVMyd1dpbkhodkIxanNkaEkyamJLc2tcdTAwM2QiLCJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiIsImtpZCI6IntcInRcIjpcIjAwREEwMDAwMDAwYWgwQlwiLFwidlwiOlwiMDJHMU0wMDAwMDBnV2NTXCIsXCJhXCI6XCJ2ZnNpZ25pbmdrZXlcIixcInVcIjpcIjAwNUcwMDAwMDAzYT...

Source: https://login.ghx.com/login

HTTP Parser: <input type="password" .../> found

Source: https://www.ghx.com/support/	HTTP Parser: No favicon
Source: https://www.ghx.com/support/	HTTP Parser: No favicon
Source: https://www.ghx.com/support/	HTTP Parser: No favicon
Source: https://www.ghx.com/support/	HTTP Parser: No favicon
Source: https://www.ghx.com/support/	HTTP Parser: No favicon
Source: https://www.ghx.com/support/	HTTP Parser: No favicon
Source: https://ghx.my.site.com/s/	HTTP Parser: No favicon
Source: https://ghx.my.site.com/s/	HTTP Parser: No favicon
Source: https://ghx.my.site.com/s/	HTTP Parser: No favicon

Source: https://login.ghx.com/login

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:58485 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:58598 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.6:58463 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: login.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /portal/ HTTP/1.1Host: login.ghx.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=2qz4GJx+PzN1f0vucQOveW0GigisBJ3HgIoYbAtDSL8QgUr/J5lFqJ1rC1V1cihwGXODx/BjL6PAqChas43GJmI1D7yvvJ2bLGw7S0X7OnF+H0pUYPtFGL6Bf8eJ; AWSALBCORS=2qz4GJx+PzN1f0vucQOveW0GigisBJ3HgIoYbAtDSL8QgUr/J5lFqJ1rC1V1cihwGXODx/BjL6PAqChas43GJmI1D7yvvJ2bLGw7S0X7OnF+H0pUYPtFGL6Bf8eJ; SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb
Source: global traffic	HTTP traffic detected: GET /portal/openid_connect_login HTTP/1.1Host: login.ghx.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=b93a8c0b-d3e5-4c51-afd4-2b6d8fa5357e; SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=0Q6bpbxy4zpq25OFvgXQtPFoM1muUGMZjZkpwfY00w5hzYzeWvXwFZVmL3nJAgcxtTeaCnM2pH+C1L7ovR+xY5CPS601N6tbYq7FiaTdZZN5V5Vb97MUAPFHzCOT; AWSALBCORS=0Q6bpbxy4zpq25OFvgXQtPFoM1muUGMZjZkpwfY00w5hzYzeWvXwFZVmL3nJAgcxtTeaCnM2pH+C1L7ovR+xY5CPS601N6tbYq7FiaTdZZN5V5Vb97MUAPFHzCOT
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /identity-service/authorize?response_type=code&client_id=3866ac18423d7a6245fd718524eae15f&scope=openid+profile+offline_access+roles+product_roles&redirect_uri=https%3A%2F%2Flogin.ghx.com%2Fportal%2Fopenid_connect_login&nonce=7ff8c42acbb4&state=35dd79cadb1dc HTTP/1.1Host: login.ghx.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=xuXdEc1eGF+T3IW+jfumJxrGSYWCRJOm01LxM/By3l7uGoPFK8NkRcOo/SY0vGAMFzxnHfBDZ61Q/f0ceYXBWjuhU5/u8Zp4AGX2NT+tZN1pkEQrYTE83mRncVZa; AWSALBCORS=xuXdEc1eGF+T3IW+jfumJxrGSYWCRJOm01LxM/By3l7uGoPFK8NkRcOo/SY0vGAMFzxnHfBDZ61Q/f0ceYXBWjuhU5/u8Zp4AGX2NT+tZN1pkEQrYTE83mRncVZa
Source: global traffic	HTTP traffic detected: GET /login HTTP/1.1Host: login.ghx.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=cSZP2HtXWZ3ipk3NcD42Jx7eWauWuJ0oitOveJPZHlIO2H2rThrlPABIYL1Du1cOLEVmiGk8KCcIFh2qa0vTqH/QFzNsFVzLp7CRP/cypGaiT1Lz035cj2U20FrL; AWSALBCORS=cSZP2HtXWZ3ipk3NcD42Jx7eWauWuJ0oitOveJPZHlIO2H2rThrlPABIYL1Du1cOLEVmiGk8KCcIFh2qa0vTqH/QFzNsFVzLp7CRP/cypGaiT1Lz035cj2U20FrL
Source: global traffic	HTTP traffic detected: GET /css/sp-layout.css HTTP/1.1Host: login.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login.ghx.com/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=QJyBjIoCjb3+i4Z5/tMlfFUHOgO/9ewrmYEe0l4IaRRif1TJbsCe87oQC6YVqhcNQdkzYfKJaOQdgD2g+fCkw/DfJM5s0K0WzUBZMFANYnc7/ZX7YsVSK5/69ULw; AWSALBCORS=QJyBjIoCjb3+i4Z5/tMlfFUHOgO/9ewrmYEe0l4IaRRif1TJbsCe87oQC6YVqhcNQdkzYfKJaOQdgD2g+fCkw/DfJM5s0K0WzUBZMFANYnc7/ZX7YsVSK5/69ULw
Source: global traffic	HTTP traffic detected: GET /css/bootstrap.1.96.0.min.css HTTP/1.1Host: login.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login.ghx.com/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=QJyBjIoCjb3+i4Z5/tMlfFUHOgO/9ewrmYEe0l4IaRRif1TJbsCe87oQC6YVqhcNQdkzYfKJaOQdgD2g+fCkw/DfJM5s0K0WzUBZMFANYnc7/ZX7YsVSK5/69ULw; AWSALBCORS=QJyBjIoCjb3+i4Z5/tMlfFUHOgO/9ewrmYEe0l4IaRRif1TJbsCe87oQC6YVqhcNQdkzYfKJaOQdgD2g+fCkw/DfJM5s0K0WzUBZMFANYnc7/ZX7YsVSK5/69ULw
Source: global traffic	HTTP traffic detected: GET /css/identity-service.1.96.0.css HTTP/1.1Host: login.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login.ghx.com/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=QJyBjIoCjb3+i4Z5/tMlfFUHOgO/9ewrmYEe0l4IaRRif1TJbsCe87oQC6YVqhcNQdkzYfKJaOQdgD2g+fCkw/DfJM5s0K0WzUBZMFANYnc7/ZX7YsVSK5/69ULw; AWSALBCORS=QJyBjIoCjb3+i4Z5/tMlfFUHOgO/9ewrmYEe0l4IaRRif1TJbsCe87oQC6YVqhcNQdkzYfKJaOQdgD2g+fCkw/DfJM5s0K0WzUBZMFANYnc7/ZX7YsVSK5/69ULw
Source: global traffic	HTTP traffic detected: GET /resources/js/lib/spscripts.js HTTP/1.1Host: login.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.ghx.com/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=QJyBjIoCjb3+i4Z5/tMlfFUHOgO/9ewrmYEe0l4IaRRif1TJbsCe87oQC6YVqhcNQdkzYfKJaOQdgD2g+fCkw/DfJM5s0K0WzUBZMFANYnc7/ZX7YsVSK5/69ULw; AWSALBCORS=QJyBjIoCjb3+i4Z5/tMlfFUHOgO/9ewrmYEe0l4IaRRif1TJbsCe87oQC6YVqhcNQdkzYfKJaOQdgD2g+fCkw/DfJM5s0K0WzUBZMFANYnc7/ZX7YsVSK5/69ULw
Source: global traffic	HTTP traffic detected: GET /images/ghx-logo.png HTTP/1.1Host: login.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.ghx.com/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=VmzAse0w5M7L7AA2CiyODNdm4N84v++YvU4wkx40gYNxp83nUZsRpg59XMAfhjPaGinYAbTVTAhyQDsWShMS1mZDg/1GGBBJqKa9YsVSzEvYgSDEs0NHT6QhiD1s; AWSALBCORS=VmzAse0w5M7L7AA2CiyODNdm4N84v++YvU4wkx40gYNxp83nUZsRpg59XMAfhjPaGinYAbTVTAhyQDsWShMS1mZDg/1GGBBJqKa9YsVSzEvYgSDEs0NHT6QhiD1s
Source: global traffic	HTTP traffic detected: GET /images/login-loader.gif HTTP/1.1Host: login.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.ghx.com/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=VmzAse0w5M7L7AA2CiyODNdm4N84v++YvU4wkx40gYNxp83nUZsRpg59XMAfhjPaGinYAbTVTAhyQDsWShMS1mZDg/1GGBBJqKa9YsVSzEvYgSDEs0NHT6QhiD1s; AWSALBCORS=VmzAse0w5M7L7AA2CiyODNdm4N84v++YvU4wkx40gYNxp83nUZsRpg59XMAfhjPaGinYAbTVTAhyQDsWShMS1mZDg/1GGBBJqKa9YsVSzEvYgSDEs0NHT6QhiD1s
Source: global traffic	HTTP traffic detected: GET /font-awesome/css/font-awesome.1.96.0.min.css HTTP/1.1Host: login.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login.ghx.com/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=KnVzZ1eBDCooH1NcHAkMaXXo+ZG3RRJQt2nWeyIKXgB5am2ZvJcg2xzJrdAhPvSceVn2qIou8My+Vbsm1KeZbJ9W3lhbGAEt1MdmK0X6sg3MDB0vlEN4qa9/0uyc; AWSALBCORS=KnVzZ1eBDCooH1NcHAkMaXXo+ZG3RRJQt2nWeyIKXgB5am2ZvJcg2xzJrdAhPvSceVn2qIou8My+Vbsm1KeZbJ9W3lhbGAEt1MdmK0X6sg3MDB0vlEN4qa9/0uyc
Source: global traffic	HTTP traffic detected: GET /images/background-image.jpg HTTP/1.1Host: login.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.ghx.com/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=KnVzZ1eBDCooH1NcHAkMaXXo+ZG3RRJQt2nWeyIKXgB5am2ZvJcg2xzJrdAhPvSceVn2qIou8My+Vbsm1KeZbJ9W3lhbGAEt1MdmK0X6sg3MDB0vlEN4qa9/0uyc; AWSALBCORS=KnVzZ1eBDCooH1NcHAkMaXXo+ZG3RRJQt2nWeyIKXgB5am2ZvJcg2xzJrdAhPvSceVn2qIou8My+Vbsm1KeZbJ9W3lhbGAEt1MdmK0X6sg3MDB0vlEN4qa9/0uyc
Source: global traffic	HTTP traffic detected: GET /images/ghx-logo.png HTTP/1.1Host: login.ghx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=KnVzZ1eBDCooH1NcHAkMaXXo+ZG3RRJQt2nWeyIKXgB5am2ZvJcg2xzJrdAhPvSceVn2qIou8My+Vbsm1KeZbJ9W3lhbGAEt1MdmK0X6sg3MDB0vlEN4qa9/0uyc; AWSALBCORS=KnVzZ1eBDCooH1NcHAkMaXXo+ZG3RRJQt2nWeyIKXgB5am2ZvJcg2xzJrdAhPvSceVn2qIou8My+Vbsm1KeZbJ9W3lhbGAEt1MdmK0X6sg3MDB0vlEN4qa9/0uyc
Source: global traffic	HTTP traffic detected: GET /images/login-loader.gif HTTP/1.1Host: login.ghx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=KnVzZ1eBDCooH1NcHAkMaXXo+ZG3RRJQt2nWeyIKXgB5am2ZvJcg2xzJrdAhPvSceVn2qIou8My+Vbsm1KeZbJ9W3lhbGAEt1MdmK0X6sg3MDB0vlEN4qa9/0uyc; AWSALBCORS=KnVzZ1eBDCooH1NcHAkMaXXo+ZG3RRJQt2nWeyIKXgB5am2ZvJcg2xzJrdAhPvSceVn2qIou8My+Vbsm1KeZbJ9W3lhbGAEt1MdmK0X6sg3MDB0vlEN4qa9/0uyc
Source: global traffic	HTTP traffic detected: GET /images/background-image.jpg HTTP/1.1Host: login.ghx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; AWSALB=z6rtCZF6BPVD3Mv+mwVLweWpIrMr2evMa6ck1AEg+G/GHzqhAHoIj/cAI7kBH9Di27fAXCQ7RkIGcK3W11oYNK9jdp/oVwHTaZ0c8aTlYDxDVUfdEtT7yk/acrH6; AWSALBCORS=z6rtCZF6BPVD3Mv+mwVLweWpIrMr2evMa6ck1AEg+G/GHzqhAHoIj/cAI7kBH9Di27fAXCQ7RkIGcK3W11oYNK9jdp/oVwHTaZ0c8aTlYDxDVUfdEtT7yk/acrH6
Source: global traffic	HTTP traffic detected: GET /images/login-loader.gif HTTP/1.1Host: login.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.ghx.com/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; AWSALB=kJPiuYtkwCpo4ilSDm4S4VPN6SmrCjKWDcUaf26Dus20S3AQ6zeB0Y/vq+cehV/XrztRBcnCjRJMkQ7X6Vncr8rC8JqG+pGEmshjm/ypUQOREQNVhfDsO0KXzDo9; AWSALBCORS=kJPiuYtkwCpo4ilSDm4S4VPN6SmrCjKWDcUaf26Dus20S3AQ6zeB0Y/vq+cehV/XrztRBcnCjRJMkQ7X6Vncr8rC8JqG+pGEmshjm/ypUQOREQNVhfDsO0KXzDo9; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0
Source: global traffic	HTTP traffic detected: GET /resources/js/lib/spscripts.js HTTP/1.1Host: login.ghx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; AWSALB=kJPiuYtkwCpo4ilSDm4S4VPN6SmrCjKWDcUaf26Dus20S3AQ6zeB0Y/vq+cehV/XrztRBcnCjRJMkQ7X6Vncr8rC8JqG+pGEmshjm/ypUQOREQNVhfDsO0KXzDo9; AWSALBCORS=kJPiuYtkwCpo4ilSDm4S4VPN6SmrCjKWDcUaf26Dus20S3AQ6zeB0Y/vq+cehV/XrztRBcnCjRJMkQ7X6Vncr8rC8JqG+pGEmshjm/ypUQOREQNVhfDsO0KXzDo9; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/login-loader.gif HTTP/1.1Host: login.ghx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0; AWSALB=6qeuSQvntlUC5sqWnBc8hCEJTfjgzvoZnNa39UWUwCltay6WPd2zMmo8KHyzWscd3ObOc0Ie4ZfD9QFYojXDs7YPXEayECbk4jwrgASgRF1Mu7l0G1Gmum8+HAAQ; AWSALBCORS=6qeuSQvntlUC5sqWnBc8hCEJTfjgzvoZnNa39UWUwCltay6WPd2zMmo8KHyzWscd3ObOc0Ie4ZfD9QFYojXDs7YPXEayECbk4jwrgASgRF1Mu7l0G1Gmum8+HAAQ
Source: global traffic	HTTP traffic detected: GET /resources/images/favicon.ico HTTP/1.1Host: login.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.ghx.com/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0; AWSALB=6qeuSQvntlUC5sqWnBc8hCEJTfjgzvoZnNa39UWUwCltay6WPd2zMmo8KHyzWscd3ObOc0Ie4ZfD9QFYojXDs7YPXEayECbk4jwrgASgRF1Mu7l0G1Gmum8+HAAQ; AWSALBCORS=6qeuSQvntlUC5sqWnBc8hCEJTfjgzvoZnNa39UWUwCltay6WPd2zMmo8KHyzWscd3ObOc0Ie4ZfD9QFYojXDs7YPXEayECbk4jwrgASgRF1Mu7l0G1Gmum8+HAAQ
Source: global traffic	HTTP traffic detected: GET /resources/images/favicon.ico HTTP/1.1Host: login.ghx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=bf6a3565-9c00-4d24-8a43-e0ad6c2a5feb; _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0; AWSALB=odrcDPq1OlKytGMkkFgRTaivZPtLhRI0AXYsb/AKHC+PXzW77dbO0JWJECcWkgB/c8YyfEa/nsZRM9TnHuzb6n6OyU2+F6FSKm4rDidZHsykQAAESob/neigea95; AWSALBCORS=odrcDPq1OlKytGMkkFgRTaivZPtLhRI0AXYsb/AKHC+PXzW77dbO0JWJECcWkgB/c8YyfEa/nsZRM9TnHuzb6n6OyU2+F6FSKm4rDidZHsykQAAESob/neigea95
Source: global traffic	HTTP traffic detected: GET /customer-care/ HTTP/1.1Host: www.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0
Source: global traffic	HTTP traffic detected: GET /?support=true HTTP/1.1Host: www.ghx.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.ghx.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.ghx.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Themes/GHXDesign2021/Assets/css/style.min.css HTTP/1.1Host: www.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.ghx.com/?support=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0
Source: global traffic	HTTP traffic detected: GET /scripts/jquery.cookie.js HTTP/1.1Host: www.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ghx.com/?support=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0
Source: global traffic	HTTP traffic detected: GET /App_Plugins/UmbracoForms/Assets/themes/default/style.min.css HTTP/1.1Host: www.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.ghx.com/?support=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0
Source: global traffic	HTTP traffic detected: GET /AzZmVzTHFjDTS38M/7d608ddc-7872-411b-abc2-33e077b46189/osano.js HTTP/1.1Host: cmp.osano.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ghx.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/idymwae2/ghx-marketplace-banner.jpg HTTP/1.1Host: www.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ghx.com/?support=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0
Source: global traffic	HTTP traffic detected: GET /media/f4vo2wet/nav_cta_standardizesupplies.jpg HTTP/1.1Host: www.ghx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ghx.com/?support=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/jquery.cookie.js HTTP/1.1Host: www.ghx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0
Source: global traffic	HTTP traffic detected: GET /AzZmVzTHFjDTS38M/7d608ddc-7872-411b-abc2-33e077b46189/osano.js HTTP/1.1Host: cmp.osano.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/idymwae2/ghx-marketplace-banner.jpg HTTP/1.1Host: www.ghx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1512108219.1727824978; _gid=GA1.2.865959041.1727824978; _gat=1; _ga_HJP985NW7Q=GS1.2.1727824980.1.0.1727824980.0.0.0; osano_consentmanager_uuid=f5807495-214a-43c7-90f7-1da2ec81bb1f; osano_consentmanager=iCFnemF_GhR1hvxEzvrHOy_VQkssrevUGAIWZjGL1wjmI3_fVy_uPOmzEbH7ibxTepWwOhKosv5Vqc26zEpVkUPBDNBslQX2SlsWQR4RvfugF29xku6JDBSIzgSUgP4OTx09Z5HRwDh0aLrulBSewAWiq9S3o5BvaHnRMNgNB5Nx_RKkIQPkyPuHZI_2rgNXzn_UMSplGvkhRNC

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report
https://login.ghx.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://login.ghx.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

Windows Analysis Report
https://login.ghx.com/