Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
(No subject).eml

Overview

General Information

Sample name:(No subject).eml
Analysis ID:1606858
MD5:e358abbf9aa3919df98e1b9f3ad9179f
SHA1:9fb6381d8fdf8b1b20833344ede8234b31694769
SHA256:6261029a36e6fc20d6c965a2eab692b18e261397370957517dc7de3bfee90975
Infos:

Detection

Score:48
Range:0 - 100
Confidence:100%

Signatures

AI detected suspicious elements in Email content
AI detected suspicious elements in Email header
Detected suspicious crossdomain redirect
Form action URLs do not match main URL
HTML page contains hidden javascript code
HTML title does not match URL
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
Queries the volume information (name, serial number etc) of a device
Sigma detected: Office Autorun Keys Modification
Sigma detected: Suspicious Office Outbound Connections
Stores files to the Windows start menu directory

Classification

  • System is w10x64_ra
  • OUTLOOK.EXE (PID: 7012 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\(No subject).eml" MD5: 91A5292942864110ED734005B7E005C0)
    • ai.exe (PID: 6956 cmdline: "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "EEEB85CA-DB3B-4131-93C5-D5EEBD8E3750" "D76F5409-673D-49AD-A1E1-9E3E32A39C74" "7012" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD)
    • chrome.exe (PID: 7068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Funsubscribe.convertkit-mail2.com%2Fe5un23qozwi0ux3ex3s8h8r5g222tl&data=05%7C02%7Ccchen%40santaclaraca.gov%7C2f175bbde0cb4dd6698d08dd453c1356%7C28ea354810694e81aa0b6e4b3271a5cb%7C0%7C0%7C638742846533587816%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=ARckK8%2Fl%2F%2FuTQZmzoO%2FBikp3MoHUYM%2FeRpAjnnp%2Fylk%3D&reserved=0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
      • chrome.exe (PID: 3020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1848,i,15045262125360936786,12949802775050556742,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
      • chrome.exe (PID: 4612 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4264 --field-trial-handle=1848,i,15045262125360936786,12949802775050556742,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • chrome.exe (PID: 7104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdahua.ai%2F%23planspricing-3&data=05%7C02%7Ccchen%40santaclaraca.gov%7C2f175bbde0cb4dd6698d08dd453c1356%7C28ea354810694e81aa0b6e4b3271a5cb%7C0%7C0%7C638742846533573362%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=SXuB79XzXnT5GmX6GcQgv5NIpPnBmXPlCzacgA4ZQBA%3D&reserved=0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
      • chrome.exe (PID: 5208 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1944,i,5425232066704483673,14907584803828711265,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • chrome.exe (PID: 5292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdahua.ai%2Fzh-tw%2F2024%2F12%2F28%2F10%25E5%2588%2586%25E9%2590%2598%25E3%2580%258110%25E5%2580%258B%25E6%25AD%25A5%25E9%25A9%259F%25EF%25BC%258C%25E8%25AE%2593%25E4%25BD%25A0%25E5%25AE%258C%25E6%2588%2590%25E7%25B9%25AA%25E6%259C%25AC%25E6%2595%2599%25E6%259D%2590%2F%3Futm_source%3DSnovio%26utm_medium%3Demail%26utm_campaign%3Dsequence20250101%26utm_term%3Dpicture_book%26utm_content%3Dtutorial&data=05%7C02%7Ccchen%40santaclaraca.gov%7C2f175bbde0cb4dd6698d08dd453c1356%7C28ea354810694e81aa0b6e4b3271a5cb%7C0%7C0%7C638742846532712089%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Iae2dHDSv4WT50Q%2Bt%2F%2BEHfN2gfiKURytAs1qJi8NcZs%3D&reserved=0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
      • chrome.exe (PID: 5612 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1996,i,18195954039706702655,10105236784905110724,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • cleanup
No configs have been found
No yara matches
Source: Registry Key setAuthor: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 , EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 7012, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin\1
Source: Network ConnectionAuthor: X__Junior (Nextron Systems): Data: DestinationIp: 192.168.2.16, DestinationIsIpv6: false, DestinationPort: 50119, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, Initiated: true, ProcessId: 7012, Protocol: tcp, SourceIp: 104.17.63.238, SourceIsIpv6: false, SourcePort: 443
No Suricata rule has matched

Click to jump to signature section

Show All Signature Results

Phishing

barindex
Source: EmailJoe Sandbox AI: Detected potential phishing email: Suspicious sender domain 'dahuachinese.com' doesn't match the signature domain 'dahua.ai'. Multiple tracking links and redirects through convertkit-mail2.com. Generic subject line 'AI10' with repetitive AI-related content suggests automated spam
Source: EmailJoe Sandbox AI: Detected suspicious elements in Email header: Suspicious return-path domain 'ckespa.dahuachinese.com' doesn't match the message-id domain 'convertkit-mail2.com'. Bulk email precedence with suspicious Chinese-related domain in return path. Message originated from 'unknown' sender in the received header. While the email claims to be from ConvertKit (a legitimate email service), the return path domain suggests potential spoofing. The x-forefront-antispam-report shows Chinese language (LANG:zh-tw) which is inconsistent with the claimed US origin. Multiple authentication and security headers present but showing mixed signals between legitimacy and suspicion. Unusual combination of legitimate mail service indicators with suspicious routing and domain patterns
Source: https://dahua.ai/#planspricing-3HTTP Parser: Form action: https://18.236.155.101/ dahua 155
Source: https://dahua.ai/#planspricing-3HTTP Parser: Form action: https://app.kit.com/forms/7490065/subscriptions dahua kit
Source: https://dahua.ai/#planspricing-3HTTP Parser: Form action: https://18.236.155.101/ dahua 155
Source: https://dahua.ai/#planspricing-3HTTP Parser: Form action: https://18.236.155.101/ dahua 155
Source: https://dahua.ai/#planspricing-3HTTP Parser: Form action: https://app.kit.com/forms/7490065/subscriptions dahua kit
Source: https://dahua.ai/#planspricing-3HTTP Parser: Form action: https://18.236.155.101/ dahua 155
Source: https://dahua.ai/#planspricing-3HTTP Parser: Form action: https://18.236.155.101/ dahua 155
Source: https://dahua.ai/#planspricing-3HTTP Parser: Form action: https://app.kit.com/forms/7490065/subscriptions dahua kit
Source: https://dahua.ai/#planspricing-3HTTP Parser: Form action: https://18.236.155.101/ dahua 155
Source: https://dahua.ai/#planspricing-3HTTP Parser: Form action: https://18.236.155.101/ dahua 155
Source: https://dahua.ai/#planspricing-3HTTP Parser: Form action: https://app.kit.com/forms/7490065/subscriptions dahua kit
Source: https://dahua.ai/#planspricing-3HTTP Parser: Form action: https://18.236.155.101/ dahua 155
Source: https://dahua.ai/#planspricing-3HTTP Parser: Base64 decoded: 1738703700.000000
Source: https://dahua.ai/#planspricing-3HTTP Parser: Title: DAHUA.ai Make language learning your way, anywhere, anytime. does not match URL
Source: EmailClassification: Credential Stealer
Source: https://dahua.ai/#planspricing-3HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5RQ6MCLC
Source: https://dahua.ai/#planspricing-3HTTP Parser: Iframe src: https://www.canva.com/design/DAGdFUWjNek/nIM-BwE4sLJ5xEhc5DsjTg/view?embed
Source: https://dahua.ai/#planspricing-3HTTP Parser: Iframe src: https://embed-v2.testimonial.to/carousel/all/dahua?theme=light&autoplay=on&showmore=off&one-row=on&hideDate=on&same-height=off&tag=all&arrowColor=9BA9B4
Source: https://dahua.ai/#planspricing-3HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5RQ6MCLC
Source: https://dahua.ai/#planspricing-3HTTP Parser: Iframe src: https://www.canva.com/design/DAGdFUWjNek/nIM-BwE4sLJ5xEhc5DsjTg/view?embed
Source: https://dahua.ai/#planspricing-3HTTP Parser: Iframe src: https://embed-v2.testimonial.to/carousel/all/dahua?theme=light&autoplay=on&showmore=off&one-row=on&hideDate=on&same-height=off&tag=all&arrowColor=9BA9B4
Source: https://dahua.ai/#planspricing-3HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5RQ6MCLC
Source: https://dahua.ai/#planspricing-3HTTP Parser: Iframe src: https://www.canva.com/design/DAGdFUWjNek/nIM-BwE4sLJ5xEhc5DsjTg/view?embed
Source: https://dahua.ai/#planspricing-3HTTP Parser: Iframe src: https://embed-v2.testimonial.to/carousel/all/dahua?theme=light&autoplay=on&showmore=off&one-row=on&hideDate=on&same-height=off&tag=all&arrowColor=9BA9B4
Source: https://dahua.ai/#planspricing-3HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5RQ6MCLC
Source: https://dahua.ai/#planspricing-3HTTP Parser: Iframe src: https://www.canva.com/design/DAGdFUWjNek/nIM-BwE4sLJ5xEhc5DsjTg/view?embed
Source: https://dahua.ai/#planspricing-3HTTP Parser: Iframe src: https://embed-v2.testimonial.to/carousel/all/dahua?theme=light&autoplay=on&showmore=off&one-row=on&hideDate=on&same-height=off&tag=all&arrowColor=9BA9B4
Source: https://dahua.ai/#planspricing-3HTTP Parser: No favicon
Source: https://dahua.ai/#planspricing-3HTTP Parser: No favicon
Source: https://dahua.ai/#planspricing-3HTTP Parser: No <meta name="author".. found
Source: https://dahua.ai/#planspricing-3HTTP Parser: No <meta name="author".. found
Source: https://dahua.ai/#planspricing-3HTTP Parser: No <meta name="author".. found
Source: https://dahua.ai/#planspricing-3HTTP Parser: No <meta name="author".. found
Source: https://dahua.ai/#planspricing-3HTTP Parser: No <meta name="copyright".. found
Source: https://dahua.ai/#planspricing-3HTTP Parser: No <meta name="copyright".. found
Source: https://dahua.ai/#planspricing-3HTTP Parser: No <meta name="copyright".. found
Source: https://dahua.ai/#planspricing-3HTTP Parser: No <meta name="copyright".. found
Source: unknownHTTPS traffic detected: 104.17.63.238:443 -> 192.168.2.16:50118 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.17.63.238:443 -> 192.168.2.16:50121 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.17.63.238:443 -> 192.168.2.16:50122 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.17.63.238:443 -> 192.168.2.16:50119 version: TLS 1.2
Source: unknownHTTPS traffic detected: 162.159.140.148:443 -> 192.168.2.16:50123 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.17.63.238:443 -> 192.168.2.16:50120 version: TLS 1.2
Source: unknownHTTPS traffic detected: 18.220.225.51:443 -> 192.168.2.16:50124 version: TLS 1.2
Source: C:\Program Files\Google\Chrome\Application\chrome.exeHTTP traffic: Redirect from: gcc02.safelinks.protection.outlook.com to https://unsubscribe.convertkit-mail2.com/e5un23qozwi0ux3ex3s8h8r5g222tl
Source: C:\Program Files\Google\Chrome\Application\chrome.exeHTTP traffic: Redirect from: gcc02.safelinks.protection.outlook.com to https://dahua.ai/#planspricing-3
Source: C:\Program Files\Google\Chrome\Application\chrome.exeHTTP traffic: Redirect from: gcc02.safelinks.protection.outlook.com to https://dahua.ai/zh-tw/2024/12/28/10%e5%88%86%e9%90%98%e3%80%8110%e5%80%8b%e6%ad%a5%e9%a9%9f%ef%bc%8c%e8%ae%93%e4%bd%a0%e5%ae%8c%e6%88%90%e7%b9%aa%e6%9c%ac%e6%95%99%e6%9d%90/?utm_source=snovio&utm_medium=email&utm_campaign=sequence20250101&utm_term=picture_book&utm_content=tutorial
Source: Joe Sandbox ViewIP Address: 108.138.7.16 108.138.7.16
Source: Joe Sandbox ViewIP Address: 216.24.57.4 216.24.57.4
Source: Joe Sandbox ViewIP Address: 216.24.57.4 216.24.57.4
Source: Joe Sandbox ViewIP Address: 192.0.77.48 192.0.77.48
Source: Joe Sandbox ViewJA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknownTCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 20.190.160.5
Source: unknownTCP traffic detected without corresponding DNS query: 20.190.160.5
Source: unknownTCP traffic detected without corresponding DNS query: 20.190.160.5
Source: unknownTCP traffic detected without corresponding DNS query: 20.190.160.5
Source: unknownTCP traffic detected without corresponding DNS query: 20.190.160.5
Source: unknownTCP traffic detected without corresponding DNS query: 20.190.160.5
Source: unknownTCP traffic detected without corresponding DNS query: 20.190.160.5
Source: unknownTCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknownTCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknownTCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknownTCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknownTCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknownTCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknownTCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknownTCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknownTCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknownTCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknownTCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknownTCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknownTCP traffic detected without corresponding DNS query: 20.190.160.5
Source: unknownTCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknownTCP traffic detected without corresponding DNS query: 20.190.160.5
Source: unknownTCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknownTCP traffic detected without corresponding DNS query: 20.190.160.5
Source: unknownTCP traffic detected without corresponding DNS query: 20.190.160.5
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global trafficHTTP traffic detected: GET /?url=https%3A%2F%2Funsubscribe.convertkit-mail2.com%2Fe5un23qozwi0ux3ex3s8h8r5g222tl&data=05%7C02%7Ccchen%40santaclaraca.gov%7C2f175bbde0cb4dd6698d08dd453c1356%7C28ea354810694e81aa0b6e4b3271a5cb%7C0%7C0%7C638742846533587816%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=ARckK8%2Fl%2F%2FuTQZmzoO%2FBikp3MoHUYM%2FeRpAjnnp%2Fylk%3D&reserved=0 HTTP/1.1Host: gcc02.safelinks.protection.outlook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /e5un23qozwi0ux3ex3s8h8r5g222tl HTTP/1.1Host: unsubscribe.convertkit-mail2.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /e5un23qozwi0ux3ex3s8h8r5g222tl HTTP/1.1Host: unsubscribe.convertkit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/runtime-17aef8e76ca97007dc7e.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/styles-c80f7b8858a31df6b989.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/css/styles-d4af4a81.chunk.css HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/fontawesome~admin~app~bulk~layout~pages~workflow~workflow-preview-41ac7018aabe9187e075.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /assets/tailwind-f30d9d7adc64bd54fff6deaf0e11ca83406ea9ebfcc6dec9eaa1c24ba471fec5.css HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/react~admin~app~bulk~layout~pages~workflow~workflow-preview-c3b5bfc08a2b934ebcb6.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/react~admin~app~bulk~layout~pages~workflow-352f7f681f33d8ea9449.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/2-1c4133ee0d837b804600.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /se-v2.js HTTP/1.1Host: cdn.statuspage.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/9-f5375daa7955d1734ee7.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/46-cc1e1bf9421ca144a4f7.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/react~admin~app~bulk~layout~pages~workflow-352f7f681f33d8ea9449.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/2-1c4133ee0d837b804600.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/runtime-17aef8e76ca97007dc7e.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/fontawesome~admin~app~bulk~layout~pages~workflow~workflow-preview-41ac7018aabe9187e075.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/vendor~admin~app~bulk~layout~pages~workflow~workflow-preview-a79e6d5b9eef1a54b6e1.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/styles-c80f7b8858a31df6b989.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/vendor~admin~app~bulk~layout~pages~workflow-44155a412433262c120c.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/admin~bulk~layout~pages~workflow~workflow-preview-d174a4174050610f1e7b.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/admin~bulk~layout~pages~workflow-e698b0718687c952f0c9.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/react~admin~app~bulk~layout~pages~workflow~workflow-preview-c3b5bfc08a2b934ebcb6.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /se-v2.js HTTP/1.1Host: cdn.statuspage.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/layout-2bf7b40af7a39578c7d1.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/9-f5375daa7955d1734ee7.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/vendor~admin~app~bulk~layout~pages~workflow~workflow-preview-a79e6d5b9eef1a54b6e1.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/8-45f6fc5cd4277e3d9f23.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/vendor~chunk-adventures-show202~chunk-creator-network-customize272~chunk-creator-network-setup-creat~efc7b2f3-ec73a1efb2e997fe64b1.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/46-cc1e1bf9421ca144a4f7.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/vendor~pages-312875a3df3b28f70a35.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/vendor~admin~app~bulk~layout~pages~workflow-44155a412433262c120c.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/pages-697ad9a29e63ebfdc2a7.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/admin~bulk~layout~pages~workflow-e698b0718687c952f0c9.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/admin~bulk~layout~pages~workflow~workflow-preview-d174a4174050610f1e7b.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/8-45f6fc5cd4277e3d9f23.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/layout-2bf7b40af7a39578c7d1.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/vendor~chunk-adventures-show202~chunk-creator-network-customize272~chunk-creator-network-setup-creat~efc7b2f3-ec73a1efb2e997fe64b1.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/chunk-link-tracking-unsubscribe-show492-47510323174408711df9.chunk.js HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/vendor~pages-312875a3df3b28f70a35.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/pages-697ad9a29e63ebfdc2a7.chunk.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /api/v2/summary.json HTTP/1.1Host: convertkit.statuspage.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://unsubscribe.convertkit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /packs/js/chunk-link-tracking-unsubscribe-show492-47510323174408711df9.chunk.js HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /assets/favicon-fec1de03350a05b77c95fef9235c9a7a8c096ae4ff9992a0f2ee2d90115aa705.ico HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://unsubscribe.convertkit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /api/v2/summary.json HTTP/1.1Host: convertkit.statuspage.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /assets/favicon-fec1de03350a05b77c95fef9235c9a7a8c096ae4ff9992a0f2ee2d90115aa705.ico HTTP/1.1Host: cdn.kit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cam20R1MSJoHdv7HEyW3sXdQphE7qn72vF8zhBjD6uk-1738703654-1.0.1.1-YyH9YAWn4TVtQGL2PPELaLe1ZzL0.vXpj2Y.7fJnq9OY6Khy9WNvsqF94oUl2etr5Zll9.9wsxMA_JyW5mccZw
Source: global trafficHTTP traffic detected: GET /packs/js/runtime-17aef8e76ca97007dc7e.js?app HTTP/1.1Host: cdn.kit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://unsubscribe.convertkit.comIf-None-Match: "566daf6674097a06a515a17c6b5112e2"If-Modified-Since: Tue, 04 Feb 2025 19:52:34 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: