Edit tour

Windows Analysis Report
http://188.114.96.0

Overview

General Information

Sample URL:	http://188.114.96.0
Analysis ID:	1638492
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected Powershell download and execute

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7036 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,5363823251278856501,7346493287806295510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2000 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7516 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,5363823251278856501,7346493287806295510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4984 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1968,i,5363823251278856501,7346493287806295510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6608 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7724 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://188.114.96.0" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_375	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-14T12:55:08.455317+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	49827	162.159.140.229	443	TCP
2025-03-14T12:55:08.530815+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	49828	172.66.0.227	443	TCP
2025-03-14T12:55:08.840053+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	49834	104.18.26.193	443	TCP

HTTP traffic detected: POST /api/v1/event HTTP/1.1Host: sparrow.cloudflare.comConnection: keep-aliveContent-Length: 87sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonSparrow-Source-Key: c771f0e4b54944bebf4261d44bd79a1esec-ch-ua-mobile: ?0Accept: */*Origin: http://188.114.96.0Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=686306150.1741953308&gtm=45je53d0v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719&z=250140150
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=2123646762008;npa=0;auiddc=1429355581.1741953306;u1=page_load;u2=www.cloudflare.com;u3=%2F5xx-error-landing%2F;u4=en-US;u5=1741953306044;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1665865020;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_cli0;cat=2_cta;ord=1;num=2457295612771;npa=0;auiddc=1429355581.1741953306;u1=click_key_interaction;u2=www.cloudflare.com;u3=%2F5xx-error-landing%2F;u4=en-US;u5=1741953306044;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=bladeHeroAnimation;ps=1;pcor=1749136694;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=7156634677255;npa=0;auiddc=1429355581.1741953306;u1=virtual_page_view;u2=www.cloudflare.com;u3=%2Fwhat-is-cloudflare%2F;u4=en-US;u5=1741953311443;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=bladeHeroAnimation;ps=1;pcor=573042705;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_cli0;cat=2_cta;ord=1;num=6574064682861;npa=0;auiddc=1429355581.1741953306;u1=click_key_interaction;u2=www.cloudflare.com;u3=%2Fwhat-is-cloudflare%2F;u4=en-US;u5=1741953311443;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=2134484709;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=592531911986;npa=0;auiddc=1429355581.1741953306;u1=virtual_page_view;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1741953328055;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=597990539;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=686306150.1741953308&gtm=45je53d0v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719&z=250140150
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=2123646762008;npa=0;auiddc=1429355581.1741953306;u1=page_load;u2=www.cloudflare.com;u3=%2F5xx-error-landing%2F;u4=en-US;u5=1741953306044;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1665865020;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_cli0;cat=2_cta;ord=1;num=2457295612771;npa=0;auiddc=1429355581.1741953306;u1=click_key_interaction;u2=www.cloudflare.com;u3=%2F5xx-error-landing%2F;u4=en-US;u5=1741953306044;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=bladeHeroAnimation;ps=1;pcor=1749136694;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=7156634677255;npa=0;auiddc=1429355581.1741953306;u1=virtual_page_view;u2=www.cloudflare.com;u3=%2Fwhat-is-cloudflare%2F;u4=en-US;u5=1741953311443;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=bladeHeroAnimation;ps=1;pcor=573042705;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_cli0;cat=2_cta;ord=1;num=6574064682861;npa=0;auiddc=1429355581.1741953306;u1=click_key_interaction;u2=www.cloudflare.com;u3=%2Fwhat-is-cloudflare%2F;u4=en-US;u5=1741953311443;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=2134484709;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=592531911986;npa=0;auiddc=1429355581.1741953306;u1=virtual_page_view;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1741953328055;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=597990539;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=686306150.1741953308&gtm=45je53d0v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719&z=250140150
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=2123646762008;npa=0;auiddc=1429355581.1741953306;u1=page_load;u2=www.cloudflare.com;u3=%2F5xx-error-landing%2F;u4=en-US;u5=1741953306044;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1665865020;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_cli0;cat=2_cta;ord=1;num=2457295612771;npa=0;auiddc=1429355581.1741953306;u1=click_key_interaction;u2=www.cloudflare.com;u3=%2F5xx-error-landing%2F;u4=en-US;u5=1741953306044;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=bladeHeroAnimation;ps=1;pcor=1749136694;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=7156634677255;npa=0;auiddc=1429355581.1741953306;u1=virtual_page_view;u2=www.cloudflare.com;u3=%2Fwhat-is-cloudflare%2F;u4=en-US;u5=1741953311443;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=bladeHeroAnimation;ps=1;pcor=573042705;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_cli0;cat=2_cta;ord=1;num=6574064682861;npa=0;auiddc=1429355581.1741953306;u1=click_key_interaction;u2=www.cloudflare.com;u3=%2Fwhat-is-cloudflare%2F;u4=en-US;u5=1741953311443;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=2134484709;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=592531911986;npa=0;auiddc=1429355581.1741953306;u1=virtual_page_view;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1741953328055;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=597990539;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=5115836193901;npa=0;auiddc=1429355581.1741953306;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1741953328055;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=1758236895;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_eng0;cat=3_timer;ord=367659578660;npa=0;auiddc=1429355581.1741953306;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1741953328055;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=1522969981;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_for0;cat=2_start;ord=7261815106876;npa=0;auiddc=1429355581.1741953306;u1=form_submission_start;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1741953328055;u6=US;u7=false;u8=Inbound%20-%20Under%20Attack%20Web%20Form;u9=1639;u10=call_to_action;u12=undefined;ps=1;pcor=1368854971;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d0v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102640600~102717422~102788824~102791784~102813109~102814060~102825837~102879719;epver=2?

Source: http://188.114.96.0/	HTTP Parser: No favicon
Source: http://188.114.96.0/	HTTP Parser: No favicon
Source: http://188.114.96.0/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/5xx-error-landing/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/5xx-error-landing/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/what-is-cloudflare/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/what-is-cloudflare/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/what-is-cloudflare/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/what-is-cloudflare/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: No favicon

Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: No <meta name="author".. found

Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.186.36:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.0:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.31.78:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.2.57:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.3.57:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.30.78:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.112.115:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.31.19:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.46.4:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.30.19:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.105.89:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.26.57:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.26.57:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.6:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.71.105:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.140:443 -> 192.168.2.5:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.5:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.115.208:443 -> 192.168.2.5:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.65.88:443 -> 192.168.2.5:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.164.104:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.46.22:443 -> 192.168.2.5:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.22.242.136:443 -> 192.168.2.5:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 146.75.120.157:443 -> 192.168.2.5:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.68:443 -> 192.168.2.5:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.140:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.6:443 -> 192.168.2.5:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.206.41.94:443 -> 192.168.2.5:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.5:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.68:443 -> 192.168.2.5:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.233.184.156:443 -> 192.168.2.5:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.194.53.123:443 -> 192.168.2.5:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.62.27:443 -> 192.168.2.5:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.249.12.92:443 -> 192.168.2.5:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.5:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.96.71.22:443 -> 192.168.2.5:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.5:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.22.242.136:443 -> 192.168.2.5:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.102.75:443 -> 192.168.2.5:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.200.1.178:443 -> 192.168.2.5:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.220.103.163:443 -> 192.168.2.5:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.5:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.5:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.146.215:443 -> 192.168.2.5:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.146.215:443 -> 192.168.2.5:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.198.23.205:443 -> 192.168.2.5:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.5:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.193:443 -> 192.168.2.5:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.146.215:443 -> 192.168.2.5:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.100:443 -> 192.168.2.5:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.194.21.120:443 -> 192.168.2.5:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.62.27:443 -> 192.168.2.5:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.0.248:443 -> 192.168.2.5:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.5:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.28.144.124:443 -> 192.168.2.5:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.144.138:443 -> 192.168.2.5:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.5:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.22.242.97:443 -> 192.168.2.5:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.22.242.136:443 -> 192.168.2.5:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.226:443 -> 192.168.2.5:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.205.94:443 -> 192.168.2.5:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.102.98:443 -> 192.168.2.5:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.232.142.33:443 -> 192.168.2.5:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.0.248:443 -> 192.168.2.5:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.27.193:443 -> 192.168.2.5:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.161.75.215:443 -> 192.168.2.5:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.144.139:443 -> 192.168.2.5:49872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.205.94:443 -> 192.168.2.5:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.230:443 -> 192.168.2.5:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.230:443 -> 192.168.2.5:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.0.248:443 -> 192.168.2.5:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.62.222:443 -> 192.168.2.5:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.161.75.185:443 -> 192.168.2.5:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.102:443 -> 192.168.2.5:49895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.230:443 -> 192.168.2.5:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.0.248:443 -> 192.168.2.5:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.230:443 -> 192.168.2.5:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.51:443 -> 192.168.2.5:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.226:443 -> 192.168.2.5:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.62.222:443 -> 192.168.2.5:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.34:443 -> 192.168.2.5:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.94.114:443 -> 192.168.2.5:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.226:443 -> 192.168.2.5:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.233.184.156:443 -> 192.168.2.5:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.233.184.156:443 -> 192.168.2.5:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.51:443 -> 192.168.2.5:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.230:443 -> 192.168.2.5:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.233.184.156:443 -> 192.168.2.5:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.96.114:443 -> 192.168.2.5:49939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.51:443 -> 192.168.2.5:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.130:443 -> 192.168.2.5:49937 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.198:443 -> 192.168.2.5:49942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.95.114:443 -> 192.168.2.5:49954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.51:443 -> 192.168.2.5:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.230.6:443 -> 192.168.2.5:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.230.6:443 -> 192.168.2.5:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.5.50:443 -> 192.168.2.5:49981 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.5.50:443 -> 192.168.2.5:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.95.114:443 -> 192.168.2.5:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.95.114:443 -> 192.168.2.5:49985 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.199.35:443 -> 192.168.2.5:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.95.114:443 -> 192.168.2.5:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.95.114:443 -> 192.168.2.5:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.200.35:443 -> 192.168.2.5:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.93.114:443 -> 192.168.2.5:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.93.114:443 -> 192.168.2.5:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.4.50:443 -> 192.168.2.5:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.150.247.37:443 -> 192.168.2.5:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.150.247.38:443 -> 192.168.2.5:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 163.171.132.119:443 -> 192.168.2.5:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.186.31:443 -> 192.168.2.5:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.186.31:443 -> 192.168.2.5:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.5:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.201:443 -> 192.168.2.5:50053 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.5:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.201:443 -> 192.168.2.5:50060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.30.78:443 -> 192.168.2.5:50062 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.230:443 -> 192.168.2.5:50061 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.230:443 -> 192.168.2.5:50064 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.5:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.230:443 -> 192.168.2.5:50089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.230:443 -> 192.168.2.5:50100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.31.78:443 -> 192.168.2.5:50114 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.5:50119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:50124 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.70:443 -> 192.168.2.5:50122 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:50152 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.166:443 -> 192.168.2.5:50177 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.16.198:443 -> 192.168.2.5:50176 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.198.23.205:443 -> 192.168.2.5:50194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.198:443 -> 192.168.2.5:50200 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.5:49896 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:49741 -> 1.1.1.1:53

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:49827 -> 162.159.140.229:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:49834 -> 104.18.26.193:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:49828 -> 172.66.0.227:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 188.114.96.0
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.65.132
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_215.4.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-11d13664-8b2c-4407-88f8-d18ae924793f%5C%22))%7D%22%2C%22order-id%22%3A%2211d13664-8b2c-4407-88f8-d18ae924793f%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);}})(window,document)"],"f":[["https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-landing%2F&time=1741953306269&pid=28851&conversionId=13043044",{"credentials":"include","keepalive":true,"mode":"no-cors"}],["https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1741953306269&uuid=50103b13-9506-406f-8b63-562e5c4942b3&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280",{"mode":"no-cors","keepalive":true,"credentials":"include"}]]})})(window,document)}catch(e){throw fetch("/static/z/t"),e;} equals www.linkedin.com (Linkedin)
Source: chromecache_215.4.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-11d13664-8b2c-4407-88f8-d18ae924793f%5C%22))%7D%22%2C%22order-id%22%3A%2211d13664-8b2c-4407-88f8-d18ae924793f%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);}})(window,document)"],"f":[["https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-landing%2F&time=1741953306269&pid=28851&conversionId=13043044",{"credentials":"include","keepalive":true,"mode":"no-cors"}],["https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1741953306269&uuid=50103b13-9506-406f-8b63-562e5c4942b3&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280",{"mode":"no-cors","keepalive":true,"credentials":"include"}]]})})(window,document)}catch(e){throw fetch("/static/z/t"),e;} equals www.twitter.com (Twitter)
Source: chromecache_310.4.dr, chromecache_231.4.dr, chromecache_247.4.dr	String found in binary or memory: return f}BG.K="internal.enableAutoEventOnTimer";var bc=wa(["data-gtm-yt-inspected-"]),DG=["www.youtube.com","www.youtube-nocookie.com"],EG,FG=!1; equals www.youtube.com (Youtube)
Source: chromecache_231.4.dr	String found in binary or memory: var QF=function(a,b,c,d,e){var f=MC("fsl",c?"nv.mwt":"mwt",0),g;g=c?MC("fsl","nv.ids",[]):MC("fsl","ids",[]);if(!g.length)return!0;var k=RC(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!zB(k,BB(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: performance.radar.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: sparrow.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cf-assets.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ot.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.logr-ingest.com
Source: global traffic	DNS traffic detected: DNS query: p29.cedexis-test.com
Source: global traffic	DNS traffic detected: DNS query: benchmarks.cdn.compute-pipe.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: benchmark.1e100cdn.net
Source: global traffic	DNS traffic detected: DNS query: fastly.cedexis-test.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: scout-cdn.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: cdn.bizible.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: scout.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cloudflareinc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: di.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bizibly.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: r.logr-ingest.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: 713-xsc-918.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: serverless-benchmarks-js.compute-pipe.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: d37vlkgj6jn9t1.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: edge.adobedc.net
Source: global traffic	DNS traffic detected: DNS query: serverless-benchmarks-rust.compute-pipe.com
Source: global traffic	DNS traffic detected: DNS query: uniquely-peaceful-hagfish.edgecompute.app
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: embed.cloudflarestream.com
Source: global traffic	DNS traffic detected: DNS query: iframe.cloudflarestream.com
Source: global traffic	DNS traffic detected: DNS query: exactly-huge-arachnid.edgecompute.app
Source: global traffic	DNS traffic detected: DNS query: customer-eq7kiuol0tk9chox.cloudflarestream.com
Source: global traffic	DNS traffic detected: DNS query: valid.rpki.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: invalid.rpki.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: platform.dash.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: videodelivery.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: p16999.cedexis-test.com
Source: global traffic	DNS traffic detected: DNS query: jsdelivr.b-cdn.net
Source: global traffic	DNS traffic detected: DNS query: p36.cedexis-test.com
Source: global traffic	DNS traffic detected: DNS query: testingcf.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: fastly.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: ptcfc.com
Source: global traffic	DNS traffic detected: DNS query: api.www.cloudflare.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 14 Mar 2025 11:54:32 GMTContent-Type: text/html; charset=UTF-8Content-Length: 7745Connection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()referrer-policy: same-originserver-timing: chlray;desc="920393af2d480f70"x-content-options: nosniffx-frame-options: SAMEORIGIN
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 33da7d58-a7de-4e81-824c-ac5a7205c366vary: Origindate: Fri, 14 Mar 2025 11:55:08 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 49cf13e9-8bf4-4ebd-8b0d-e8f4bb3854e2vary: Origindate: Fri, 14 Mar 2025 11:55:11 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 3918c063-94df-4cc9-8f59-54ca6a9ae003vary: Origindate: Fri, 14 Mar 2025 11:55:12 GMTx-konductor: 25.3.5-HEAD-SNAPSHOT:f1eeb5cdbx-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 9453fd76-f226-493d-9fcb-f62ea294da9cvary: Origindate: Fri, 14 Mar 2025 11:55:13 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 8b9ce35c-7ad7-4340-983b-528bbe014d5fvary: Origindate: Fri, 14 Mar 2025 11:55:14 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: af3d054b-4bdc-4f14-a276-8aae91d6084evary: Origindate: Fri, 14 Mar 2025 11:55:15 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 9f90fec4-8354-4219-a9c9-2b7163ff8ddbvary: Origindate: Fri, 14 Mar 2025 11:55:17 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: bcc43855-8e14-4724-b0d5-160a225de356vary: Origindate: Fri, 14 Mar 2025 11:55:18 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 55ff5b45-ce41-47fd-9762-3b9433e00638vary: Origindate: Fri, 14 Mar 2025 11:55:27 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: a524f639-d986-4083-8ab6-eee1d62e6af2vary: Origindate: Fri, 14 Mar 2025 11:55:29 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 14 Mar 2025 11:55:30 GMTContent-Type: application/json; charset=UTF-8Content-Length: 24Connection: closeAccess-Control-Allow-Origin: https://www.cloudflare.comAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: Content-Type,AcceptAccess-Control-Allow-Methods: GET,POST,OPTIONSX-Robots-Tag: noindexReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U9BldonAfz0uAePcKjsQLFIqpZTpdc2Q%2Bz%2Bu4y4l%2BVgBLRGRafZprnx%2FFdFn8QSZY6Hgr3kO6kTK6h2u4jFEG0Fygl2mfVQCnBNKeGIFcmuPzYB%2Bd0by39Uyc6U9sMaPYpXUExv9K4M%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9203951c8eab42b8-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 14 Mar 2025 11:55:30 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 13Connection: closeAccess-Control-Allow-Origin: access-control-allow-headers: access-control-allow-methods: timing-allow-origin: Strict-Transport-Security: max-age=15552000; includeSubDomainsX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 9203951c8b1b0c74-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: fa794dc3-5a4e-4c39-9ae6-2944d47b02a1vary: Origindate: Fri, 14 Mar 2025 11:55:30 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 14 Mar 2025 11:55:31 GMTContent-Type: application/json; charset=UTF-8Content-Length: 24Connection: closeAccess-Control-Allow-Origin: https://www.cloudflare.comAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: Content-Type,AcceptAccess-Control-Allow-Methods: GET,POST,OPTIONSX-Robots-Tag: noindexReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aM1ZYZivLBzyrIfzyGuYrmj7zrLah7JZ5KJynxQxHZ30j9tSuIANxr0gPU6CrVa4MJByARwZu1IrRigNfdbKK08mwORFpE2zOkaL1luXIxTjVLrFZGIGzEFOj2%2BSKgvurAZ%2BEvJcFB0%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 920395208fb95e82-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 005e2e1b-2bdc-4bb8-b338-501eddda1cb5vary: Origindate: Fri, 14 Mar 2025 11:55:31 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: d8ce37df-813b-46a6-9f88-1d6ba3c8e8bdvary: Origindate: Fri, 14 Mar 2025 11:55:33 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 4bb50cd7-eba7-4557-92b1-c731897fe0acvary: Origindate: Fri, 14 Mar 2025 11:55:40 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 14 Mar 2025 11:54:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMTVary: Accept-EncodingServer: cloudflareCF-RAY: 920393ab0ccaefa7-EWRContent-Encoding: gzipData Raw: 38 33 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c5 58 e9 6f 1b 37 16 ff ae bf e2 85 0b 68 25 40 d4 68 64 f9 88 34 52 d1 75 5c c4 bb 69 63 34 0e da a0 28 0c ce f0 8d c4 98 43 4e 49 4a b2 90 f5 ff be e0 1c f2 e8 b0 9b 60 77 51 7d d0 f0 7c 7c c7 ef 1d 64 f4 ea cd fb cb db 4f 37 57 b0 70 99 9c b5 a2 57 94 fe 26 52 90 0e ae af e0 fc f7 19 44 7e 02 12 c9 ac 9d 12 a5 e9 67 0b 02 cf 40 4b 2e 90 80 64 6a 3e 25 a8 e8 c7 0f 64 06 d1 ab df 50 71 91 fe 4e e9 13 a9 8a 0e c0 71 52 e7 df 46 ea e2 05 52 17 df 40 6a ee 2a 6a 7e e0 98 94 87 54 28 dd a5 b4 40 c6 67 ad c8 09 27 71 f6 46 18 4c 1c 5c df 00 4b 12 b4 16 94 76 c0 a4 d4 6b e4 f0 6f b8 94 7a c9 53 c9 0c 46 41 b9 a1 15 65 e8 18 24 0b 66 2c ba 29 f9 78 fb 03 bd 20 10 d4 13 0b e7 72 8a 7f 2c c5 6a 4a 2e b5 72 a8 1c bd dd e4 48 20 29 7b 53 e2 f0 c1 05 9e f1 c9 96 cc 4b 54 7e a5 1f bf a7 97 3a cb 99 13 b1 6c 12 ba be 9a 5e f1 39 36 f6 29 96 e1 94 18 1d 6b 67 1b 0b 95 16 8a e3 43 0f 94 4e b5 17 ee 60 cb 4a e0 3a d7 c6 35 36 ad 05 77 8b 29 c7 95 48 90 16 9d 9e 50 c2 09 26 a9 4d 98 c4 69 58 52 91 42 dd 83 41 39 25 d6 6d 24 da 05 a2 23 20 f8 94 24 e9 5d 39 44 13 6b 09 2c 0c a6 53 12 24 5c d1 64 2e 82 72 2a c8 98 50 fd 62 3e 98 b5 5a ad c8 26 46 e4 6e d6 ea a4 4b 95 38 a1 55 a7 fb 45 a4 1d ae 93 65 86 ca f5 19 e7 57 2b 54 ee 9d b0 0e 15 9a 76 7b 2d 14 d7 eb fe af 3f be 7b eb 5c fe 33 fe b1 44 eb da ed 7f 7e 78 ff 53 f9 df b7 ce 08 35 17 e9 a6 fb 65 c5 0c e0 74 4b 9b 95 23 c9 74 4b 7f 8e ee 4a a2 6f fe 63 73 cd 3b 04 8d d1 86 a6 88 3c 66 c9 3d b5 4b b3 c2 0d e9 f6 f8 37 6c 29 a0 45 ba bd 78 aa 70 0d bb 8c 4e d8 f4 0b 7a 81 c6 a4 de 01 89 14 c9 3d 72 d2 cb 8d ce d1 38 81 76 fc a5 a0 7a a9 39 8e c3 c1 e0 a4 b7 40 99 a7 4b 39 66 bd 15 1a 2b b4 1a 87 8f 8f 93 b8 af 73 54 1d 72 f3 fe c3 2d e9 11 8f 23 3b 0e 02 9b 33 63 f4 ba 9f 6c f1 dc 4f 74 16 b0 5c 04 ab 30 28 8e 27 dd 49 dc b7 e8 2a b6 de 22 e3 68 3a bb 18 ee 11 96 e7 52 24 cc eb 2e f8 6c b5 7a 66 d7 87 f2 3c fa 41 2f 4d 82 f4 5f b8 21 3d 92 9c 9f 87 e9 00 47 f1 e9 e8 f5 68 14 63 9c 8e 86 67 21 1f 8d 62 7e fe 9a 85 48 ba 93 96 27 a6 78 67 d7 6a 1d d6 ed 4e 92 7e e1 e6 de ec 1e 03 9d ad b6 e8 42 70 8e 9e 13 de 58 62 30 d3 2b 3c b2 ea 71 f2 2c 94 3a e4 cd fb 1f 2b 81 df 69 c6 bd 05 1a 28 f4 40 61 5f 6b 75 d2 ed bd 00 aa 2d 57 f1 d2 39 ad e8 06 ed cb 90 da df a0 34 e9 4e c8 56 5c 22 14 b0 76 bb c3 be 46 03 bd e4 88 e4 05 e4 76 c4 c5 ce ab 41 f7 b1 db e3 5f bb Data Ascii: 833Xo7h%@hd4Ru\ic4(CNIJ`wQ}\|\|dO7WpW&RD~g@K.dj>%dPqNqRF
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 14 Mar 2025 11:54:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMTVary: Accept-EncodingServer: cloudflareCF-RAY: 920393b01a1803d5-EWRContent-Encoding: gzipData Raw: 38 33 34 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c5 58 5b 6f 1b 37 16 7e d7 af 38 e1 02 5a 09 10 35 1a 59 76 1c 69 a4 a2 eb b8 88 77 d3 c6 68 1c b4 41 51 18 9c e1 19 89 31 87 9c 92 94 64 c1 eb ff be e0 5c e4 d1 c5 6e 82 dd 45 f5 a0 e1 f5 f0 5c be 73 21 a3 57 6f 3f 5c dc 7c be be 84 85 cb e4 ac 15 bd a2 f4 37 91 82 74 70 75 09 af 7f 9f 41 e4 27 20 91 cc da 29 51 9a 7e b1 20 f0 0c b4 e4 02 09 48 a6 e6 53 82 8a 7e fa 48 66 10 bd fa 0d 15 17 e9 ef 94 3e 91 aa e8 00 1c 27 f5 fa db 48 9d bf 40 ea fc 1b 48 cd 5d 45 cd 0f 1c 93 f2 90 0a a5 bb 94 16 c8 f8 ac 15 39 e1 24 ce de 0a 83 89 83 ab 6b 60 49 82 d6 82 d2 0e 98 94 7a 8d 1c fe 0d 17 52 2f 79 2a 99 c1 28 28 37 b4 a2 0c 1d 83 64 c1 8c 45 37 25 9f 6e 7e a0 e7 04 82 7a 62 e1 5c 4e f1 8f a5 58 4d c9 85 56 0e 95 a3 37 9b 1c 09 24 65 6f 4a 1c de bb c0 33 3e d9 92 79 89 ca af f4 d3 f7 f4 42 67 39 73 22 96 4d 42 57 97 d3 4b 3e c7 c6 3e c5 32 9c 12 a3 63 ed 6c 63 a1 d2 42 71 bc ef 81 d2 a9 f6 c2 1d 6c 59 09 5c e7 da b8 c6 a6 b5 e0 6e 31 e5 b8 12 09 d2 a2 d3 13 4a 38 c1 24 b5 09 93 38 0d 4b 2a 52 a8 3b 30 28 a7 c4 ba 8d 44 bb 40 74 04 04 9f 92 24 bd 2d 87 68 62 2d 81 85 c1 74 4a 82 84 2b 9a cc 45 50 4e 05 19 13 aa 5f cc 07 b3 56 ab 15 d9 c4 88 dc cd 5a 9d 74 a9 12 27 b4 ea 74 1f 44 da e1 3a 59 66 a8 5c 9f 71 7e b9 42 e5 de 0b eb 50 a1 69 b7 d7 42 71 bd ee ff fa e3 fb 77 ce e5 3f e3 1f 4b b4 ae dd fe e7 c7 0f 3f 95 ff 7d eb 8c 50 73 91 6e ba 0f 2b 66 00 a7 5b da ac 1c 49 a6 5b fa 73 74 97 12 7d f3 1f 9b 2b de 21 68 8c 36 34 45 e4 31 4b ee a8 5d 9a 15 6e 48 b7 c7 bf 61 4b 01 2d d2 ed c5 53 85 6b d8 65 74 c2 a6 0f e8 05 1a 93 7a 07 24 52 24 77 c8 49 2f 37 3a 47 e3 04 da f1 43 41 f5 42 73 1c 87 83 c1 49 6f 81 32 4f 97 72 cc 7a 2b 34 56 68 35 0e 1f 1f 27 71 5f e7 a8 3a e4 fa c3 c7 1b d2 23 1e 47 76 1c 04 36 67 c6 e8 75 3f d9 e2 b9 9f e8 2c 60 b9 08 56 61 50 1c 4f ba 93 b8 6f d1 55 6c bd 43 c6 d1 74 76 31 dc 23 2c cf a5 48 98 d7 5d f0 c5 6a f5 cc ae 8f e5 79 f4 a3 5e 9a 04 e9 bf 70 43 7a 24 79 fd 3a 4c 07 38 8a 4f 47 6f 46 a3 18 e3 74 34 3c 0b f9 68 14 f3 d7 6f 58 88 a4 3b 69 79 62 8a 77 76 ad d6 61 dd ee 24 e9 17 6e ee cd ee 31 d0 d9 6a 8b 2e 04 e7 e8 39 e1 8d 25 06 33 bd c2 23 ab 1e 27 cf 42 a9 43 de 7e f8 b1 12 f8 bd 66 dc 5b a0 81 42 0f 14 f6 b5 56 27 dd de 0b a0 da 72 15 2f 9d d3 8a 6e d0 be 0c a9 fd 0d 4a 93 ee 84 6c c5 25 42 01 6b b7 3b ec 6b 34 d0 4b 8e 48 5e 40 6e 47 5c ec bc 1a 74 1f bb 3d fe b5 Data Ascii: 834X[o7~8Z5YviwhAQ1d\nE\s!Wo?\\|7tpuA' )Q~ HS~Hf>'H

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,5363823251278856501,7346493287806295510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2000 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,5363823251278856501,7346493287806295510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4984 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://188.114.96.0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1968,i,5363823251278856501,7346493287806295510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6608 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,5363823251278856501,7346493287806295510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2000 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,5363823251278856501,7346493287806295510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4984 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1968,i,5363823251278856501,7346493287806295510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6608 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/f9b4aa59b4a2fc5799f1232241000056/video/360/seg_1.mp4?p=eyJ0eXBlIjoic2VnbWVudCIsInZpZGVvSUQiOiJmOWI0YWE1OWI0YTJmYzU3OTlmMTIzMjI0MTAwMDA1NiIsIm93bmVySUQiOjM3ODczOTcsImNyZWF0b3JJRCI6IiIsInNlZ21lbnREdXJhdGlvblNlY3MiOjQsInVzZVZPRE9URkUiOmZhbHNlLCJmcm9tTWV6emFuaW5lIjpmYWxzZSwic3RvcmFnZVByb3ZpZGVyIjoyLCJ0cmFjayI6IjA2NWFiOGU5MjFmZjEyMTAwY2MxYzU5YTBhOTY1ZGVkIiwicmVuZGl0aW9uIjoiMTM2ODUyOTEzIiwibXV4aW5nIjoiMTg3MzkwNjU0In0&s=w7wPexjCmFoOX8OMw6E1w5LDsyTCvEPDsjXDm8O9Qgk7w61nwqsJw4XDqMOUeic	0%	Avira URL Cloud	safe
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/f9b4aa59b4a2fc5799f1232241000056/audio/131/seg_1.mp4?p=eyJ0eXBlIjoic2VnbWVudCIsInZpZGVvSUQiOiJmOWI0YWE1OWI0YTJmYzU3OTlmMTIzMjI0MTAwMDA1NiIsIm93bmVySUQiOjM3ODczOTcsImNyZWF0b3JJRCI6IiIsInNlZ21lbnREdXJhdGlvblNlY3MiOjQuMDEwNjY2NjY2NjY2NjY2LCJ1c2VWT0RPVEZFIjpmYWxzZSwiZnJvbU1lenphbmluZSI6ZmFsc2UsInN0b3JhZ2VQcm92aWRlciI6MiwidHJhY2siOiJiNWJkNGRlOTNlZGVmYjYzM2YyOTZiNTM4MDEyNzVlOSIsInJlbmRpdGlvbiI6IjEzNjg1Mjg5NyIsIm11eGluZyI6IjE4NzM5MDYzOCJ9&s=w4MUwrXDq2rCvsKscMOnw4hTwrxywqdvwrHCvzXDrXQ6w5PDncKDAMKWCxzDn0PDnMO2	0%	Avira URL Cloud	safe
https://tobiasahlin.com/blog/layered-smooth-box-shadows/	0%	Avira URL Cloud	safe
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/embed/sdk-iframe-integration.fla9.latest.js?video=f9b4aa59b4a2fc5799f1232241000056	0%	Avira URL Cloud	safe
http://188.114.96.0/favicon.ico	0%	Avira URL Cloud	safe
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/f9b4aa59b4a2fc5799f1232241000056/thumbnails/thumbnail.jpg?time=0.000s&duration=12.450s&height=108&imageCount=60	0%	Avira URL Cloud	safe
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/f9b4aa59b4a2fc5799f1232241000056/manifest/video.mpd?parentOrigin=https%3A%2F%2Fwww.cloudflare.com	0%	Avira URL Cloud	safe
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/f9b4aa59b4a2fc5799f1232241000056/lifecycle	0%	Avira URL Cloud	safe

Source: chromecache_180.4.dr, chromecache_356.4.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_231.4.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_310.4.dr, chromecache_231.4.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_247.4.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_215.4.dr	String found in binary or memory: https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1741953306269&uuid=50103b13-9506-406
Source: chromecache_236.4.dr, chromecache_394.4.dr	String found in binary or memory: https://api.www.cloudflare.com/api/v1
Source: chromecache_224.4.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.js
Source: chromecache_313.4.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti
Source: chromecache_191.4.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC392ad6d4bbf94c7283b4eda6cbf689a
Source: chromecache_337.4.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC55904e5e1abc4d38a5f1ac3dea0edaa
Source: chromecache_387.4.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js
Source: chromecache_310.4.dr, chromecache_231.4.dr, chromecache_247.4.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/0NY0QZdcIB62VMnG5JGH0/c3ed0daeb44e594adfd2ae259728
Source: chromecache_264.4.dr, chromecache_229.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/1qyDEBnfSjGjDAj5V6Zo1g/f8c8126789bc16fa0329943b0d4
Source: chromecache_264.4.dr, chromecache_229.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/1rVmRBDX3KhZOe2FREoYOz/24f44a8dbe53111346d97dc59b7
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/201dX43zvXI17sQ3nI6OXz/29703f9fd2b3970392bf03c9429
Source: chromecache_264.4.dr, chromecache_229.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2iaZGHR7NSRdBzpq8wiboE/de2d9d0f908ec37deea865b055a
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/30BqoxmJzq5iWu5Bb3Mbir/9206f60e10de0620653d76087fa
Source: chromecache_264.4.dr, chromecache_229.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/35yeieyQns5B8WsFes9Z20/8bf36cbf9edf546c30cc9e3e082
Source: chromecache_264.4.dr, chromecache_229.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/3KPlWZN5s1sQQeavuAaMa4/cb02c2544821d099f24ee3270c3
Source: chromecache_264.4.dr, chromecache_229.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dc
Source: chromecache_264.4.dr, chromecache_229.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/3mYUDEjNlXbjQaceoFUhzU/378a4b79f7b51e7677fd6ab442e
Source: chromecache_190.4.dr, chromecache_187.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/42XkFj9Uywkm8Jahf62RtP/0563d91cc1fa54da2bf2c50bad8
Source: chromecache_190.4.dr, chromecache_187.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab
Source: chromecache_204.4.dr, chromecache_373.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/53qCYhQbir5WtIU0VDWESo/954a48bfb17f429acf469e5f143
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/5V0mrvP2VBMtDDdjsBJJ7j/74022aa20c43d043b1378514d44
Source: chromecache_188.4.dr, chromecache_388.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6i8d186tH2iueYvgwVRaJf/ab27fd31033bdd31aea69065480
Source: chromecache_264.4.dr, chromecache_229.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6wvLylL1UDvEfh7N5WBd32/b05450aa05d6c40af93bf04309e
Source: chromecache_204.4.dr, chromecache_373.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/Rb6WR9vSmgEyzSIEFrCCX/7edd51d0c52a3a656192dc104b66
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/Til1jVHCvDVprSIJemrh1/8113304640f5500d43c1e01ba687
Source: chromecache_188.4.dr, chromecache_388.4.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/mJZqOomHta2MLLB73P8Hs/9378861761815b3adf7bcb7734d6
Source: chromecache_274.4.dr	String found in binary or memory: https://customer-eq7kiuol0tk9chox.cloudflarestream.com/embed/sdk-iframe-integration.fla9.latest.js?v
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://dash.cloudflare.com/sign-up
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://dash.cloudflare.com/sign-up/teams
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://dash.cloudflare.com/sign-up/workers
Source: chromecache_192.4.dr, chromecache_281.4.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_222.4.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1757850908&external_user_id=7ecf3b1
Source: chromecache_376.4.dr	String found in binary or memory: https://github.com/jonsuh/hamburgers
Source: chromecache_375.4.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_247.4.dr	String found in binary or memory: https://google.com
Source: chromecache_247.4.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_274.4.dr	String found in binary or memory: https://iframe.cloudflarestream.com/oembed?url=https%3A%2F%2Fiframe.cloudflarestream.com%2Ff9b4aa59b
Source: chromecache_376.4.dr	String found in binary or memory: https://jonsuh.com/hamburgers
Source: chromecache_345.4.dr	String found in binary or memory: https://larsenwork.com/easing-gradients/#editor
Source: chromecache_345.4.dr	String found in binary or memory: https://medium.com/
Source: chromecache_247.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_310.4.dr, chromecache_231.4.dr, chromecache_247.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_222.4.dr	String found in binary or memory: https://partners.tremorhub.com/sync?UIDM=7ecf3b10-8fda-40ff-9146-613393b29e85
Source: chromecache_222.4.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?nid=5578&put=7ecf3b10-8fda-40ff-9146-613393b29e85&v
Source: chromecache_215.4.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-lan
Source: chromecache_215.4.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif
Source: chromecache_215.4.dr	String found in binary or memory: https://scout-cdn.salesloft.com/sl.js
Source: chromecache_195.4.dr, chromecache_320.4.dr	String found in binary or memory: https://scout.us4.salesloft.com
Source: chromecache_238.4.dr	String found in binary or memory: https://shadows.brumm.af/
Source: chromecache_215.4.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_345.4.dr	String found in binary or memory: https://stackoverflow.com/questions/3683211/ipad-safari-mobile-seems-to-ignore-z-indexing-position-f
Source: chromecache_211.4.dr	String found in binary or memory: https://staging.mrk.cfdata.org/mrk/redwood-blade-repository/
Source: chromecache_215.4.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_247.4.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_247.4.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_215.4.dr	String found in binary or memory: https://tag.demandbase.com/1be41a80498a5b73.min.js
Source: chromecache_310.4.dr, chromecache_231.4.dr, chromecache_247.4.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_238.4.dr	String found in binary or memory: https://tobiasahlin.com/blog/layered-smooth-box-shadows/
Source: chromecache_274.4.dr	String found in binary or memory: https://videodelivery.net/f9b4aa59b4a2fc5799f1232241000056/thumbnails/thumbnail.jpg?time=4s&height=7
Source: chromecache_236.4.dr, chromecache_394.4.dr	String found in binary or memory: https://www.cloudflare.com
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://www.cloudflare.com/network-services/solutions/enterprise-network-security/)
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://www.cloudflare.com/network/
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://www.cloudflare.com/plans/)
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://www.cloudflare.com/plans/enterprise/
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://www.cloudflare.com/plans/enterprise/contact/
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://www.cloudflare.com/privacy-and-compliance/
Source: chromecache_328.4.dr, chromecache_223.4.dr	String found in binary or memory: https://www.cloudflare.com/saas/)
Source: chromecache_245.4.dr, chromecache_355.4.dr	String found in binary or memory: https://www.cloudflare.com/security/
Source: chromecache_247.4.dr	String found in binary or memory: https://www.google.com
Source: chromecache_310.4.dr, chromecache_231.4.dr	String found in binary or memory: https://www.google.com/gmp/conversion;
Source: chromecache_247.4.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_247.4.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_310.4.dr, chromecache_231.4.dr, chromecache_247.4.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_310.4.dr, chromecache_231.4.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_310.4.dr, chromecache_231.4.dr, chromecache_247.4.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_247.4.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
benchmark.1e100cdn.net	35.190.26.57	true	false	high
prod-default.lb.logrocket.network	104.198.23.205	true	false	high
s.dsp-prod.demandbase.com	34.96.71.22	true	false	high
e10776.b.akamaiedge.net	2.23.65.88	true	false	high
scout.us1.salesloft.com	52.206.41.94	true	false	high
platform.twitter.map.fastly.net	146.75.120.157	true	false	high
stats.g.doubleclick.net	64.233.184.156	true	false	high
ot.www.cloudflare.com	104.16.123.96	true	false	high
l-0005.l-msedge.net	13.107.42.14	true	false	high
t.co	162.159.140.229	true	false	high
performance.radar.cloudflare.com	104.18.31.78	true	false	high
serverless-benchmarks-js.compute-pipe.com	104.18.0.248	true	false	high
www.google.com	142.250.186.36	true	false	high
serverless-benchmarks-rust.compute-pipe.com	104.18.0.248	true	false	high
cs482.wpc.edgecastcdn.net	192.229.220.19	true	false	high
partners-1864332697.us-east-1.elb.amazonaws.com	44.194.21.120	true	false	high
cf-assets.www.cloudflare.com	104.16.123.96	true	false	high
id.rlcdn.com	35.244.174.68	true	false	high
a798.dscd.akamai.net	2.22.242.136	true	false	high
platform.dash.cloudflare.com	104.18.5.50	true	false	high
s.twitter.com	172.66.0.227	true	false	high
videodelivery.net	104.16.199.35	true	false	high
cm.everesttech.net.akadns.net	18.200.1.178	true	false	high
valid.rpki.cloudflare.com	104.17.230.6	true	false	high
di.rlcdn.com	35.244.174.68	true	false	high
www.linkedin.com.cdn.cloudflare.net	172.64.146.215	true	false	high
p36.cedexis-test.com.wsoversea.com	163.171.132.119	true	false	high
cdn.logr-ingest.com	104.21.112.1	true	false	high
reddit.map.fastly.net	151.101.193.140	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
cs481.wpc.edgecastcdn.net	152.195.34.116	true	false	high
td.doubleclick.net	142.250.184.226	true	false	high
embed.cloudflarestream.com	104.16.94.114	true	false	high
a1916.dscg2.akamai.net	2.16.164.104	true	false	high
pixel.rubiconproject.net.akadns.net	69.173.144.138	true	false	high
iframe.cloudflarestream.com	104.16.96.114	true	false	high
benchmarks.cdn.compute-pipe.com	104.18.31.19	true	false	high
testingcf.jsdelivr.net.cdn.cloudflare.net	104.18.186.31	true	false	high
scout-cdn.salesloft.com.cdn.cloudflare.net	104.16.71.105	true	false	high
customer-eq7kiuol0tk9chox.cloudflarestream.com	104.16.95.114	true	false	high
d37vlkgj6jn9t1.cloudfront.net	3.161.75.215	true	false	high
adservice.google.com	216.58.206.34	true	false	high
jsdelivr.b-cdn.net	169.150.247.37	true	false	high
sparrow.cloudflare.com	104.18.2.57	true	false	high
tag.demandbase.com	18.245.46.22	true	false	high
demdex.net.ssl.sc.omtrdc.net	63.140.62.27	true	false	high
api.www.cloudflare.com	104.16.123.96	true	false	high
d1inq1x5xtur5k.cloudfront.net	18.66.112.115	true	false	high
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	52.17.115.208	true	false	high
ecp.map.fastly.net	151.101.1.51	true	false	high
tag-logger.demandbase.com	18.173.205.94	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
ad.doubleclick.net	142.250.184.230	true	false	high
invalid.rpki.cloudflare.com	103.21.244.8	true	false	high
prod.cedexis-ssl.map.fastly.net	151.101.2.6	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
www.cloudflare.com	104.16.123.96	true	false	high
dsum-sec.casalemedia.com	104.18.26.193	true	false	high
e7808.dscg.akamaiedge.net	2.19.105.89	true	false	high
ptcfc.com	172.66.0.201	true	false	high
adobedc.net.ssl.sc.omtrdc.net	63.140.62.222	true	false	high
api.company-target.com	18.66.102.75	true	false	high
analytics.google.com	142.250.186.78	true	false	high
713-xsc-918.mktoresp.com	192.28.144.124	true	false	high
alb.reddit.com	unknown	unknown	false	high
static.ads-twitter.com	unknown	unknown	false	high
scout.salesloft.com	unknown	unknown	false	high
scout-cdn.salesloft.com	unknown	unknown	false	high
p36.cedexis-test.com	unknown	unknown	false	high
cm.everesttech.net	unknown	unknown	false	high
testingcf.jsdelivr.net	unknown	unknown	false	high
adobedc.demdex.net	unknown	unknown	false	high
p16999.cedexis-test.com	unknown	unknown	false	high
s.company-target.com	unknown	unknown	false	high
assets.adobedtm.com	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
munchkin.marketo.net	unknown	unknown	false	high
r.logr-ingest.com	unknown	unknown	false	high
fastly.jsdelivr.net	unknown	unknown	false	high
p29.cedexis-test.com	unknown	unknown	false	high
partners.tremorhub.com	unknown	unknown	false	high
exactly-huge-arachnid.edgecompute.app	unknown	unknown	false	high
cdn.bizibly.com	unknown	unknown	false	high
cloudflareinc.demdex.net	unknown	unknown	false	high
cdn.bizible.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
uniquely-peaceful-hagfish.edgecompute.app	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
fastly.cedexis-test.com	unknown	unknown	false	high
edge.adobedc.net	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://cf-assets.www.cloudflare.com/slt3lc6tev37/2iaZGHR7NSRdBzpq8wiboE/de2d9d0f908ec37deea865b055af42df/cloudflare-spectrum.png	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/6XVeELky7fceWRpfBvN8qr/4e13aa3d8dd73e1f091f3de966fdc9cb/logo_shopify_trusted-by_gray.svg	false		high
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=4a6ba0ab-acbb-402c-98c1-c5b5a0fcb6fe&_u=KGDAAEADQAAAAC%7E&z=2046202146	false		high
https://cloudflareinc.demdex.net/dest5.html?d_nsid=0	false		high
https://cdn.bizible.com/ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-landing%2F&_biz_h=-1777624096&_biz_u=dd48d04c9b7e4e2792d53f98508e9523&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fwhat-is-cloudflare%2F&_biz_t=1741953313018&_biz_i=Why%20Cloudflare%3F%20%7C%20Cloudflare&_biz_n=3&rnd=48980&cdn_o=a&_biz_z=1741953313027	false		high
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=4a6ba0ab-acbb-402c-98c1-c5b5a0fcb6fe&_u=KGDAAEADQAAAAC%7E&z=1617953666	false		high
https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%2F%3Ffmt%3Djs%26v%3D2%26url%3Dhttps%253A%252F%252Fwww.cloudflare.com%252F5xx-error-landing%252F%26time%3D1741953307082%26pid%3D28851%26conversionId%3D10249833%26liSync%3Dtrue	false		high
https://sparrow.cloudflare.com/api/v1/event	false		high
https://www.cloudflare.com/static/z/i.js	false		high
https://www.cloudflare.com/page-data/under-attack-hotline/page-data.json	false		high
https://dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=8AD56F28618A50850A495FB6%40AdobeOrg&d_nsid=0&ts=1741953305839	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/2TfcZ86qvZor2xtI2z4Vvr/ef54112582296119f4296869c34ba025/logo_23andme_color_32px-wrapper.svg	false		high
https://www.cloudflare.com/page-data/plans/page-data.json	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/OMwO1Fr8BxHVum0iBbatc/979c1807f5810edc903d4b07c18e0cb0/logo_ibm_trusted-by_gray.svg	false		high
https://scout.salesloft.com/i	false		high
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/embed/sdk-iframe-integration.fla9.latest.js?video=f9b4aa59b4a2fc5799f1232241000056	false	Avira URL Cloud: safe	unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/3nTpfNMTgcdaABUbQ549ba/37f19f67202ee8a2d13087ae31c46dba/what-makes-cloudflare-different-diagram.svg	false		high
https://embed.cloudflarestream.com/embed/sdk.latest.js	false		high
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=bcc43855-8e14-4724-b0d5-160a225de356	false		high
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/f9b4aa59b4a2fc5799f1232241000056/audio/131/seg_1.mp4?p=eyJ0eXBlIjoic2VnbWVudCIsInZpZGVvSUQiOiJmOWI0YWE1OWI0YTJmYzU3OTlmMTIzMjI0MTAwMDA1NiIsIm93bmVySUQiOjM3ODczOTcsImNyZWF0b3JJRCI6IiIsInNlZ21lbnREdXJhdGlvblNlY3MiOjQuMDEwNjY2NjY2NjY2NjY2LCJ1c2VWT0RPVEZFIjpmYWxzZSwiZnJvbU1lenphbmluZSI6ZmFsc2UsInN0b3JhZ2VQcm92aWRlciI6MiwidHJhY2siOiJiNWJkNGRlOTNlZGVmYjYzM2YyOTZiNTM4MDEyNzVlOSIsInJlbmRpdGlvbiI6IjEzNjg1Mjg5NyIsIm11eGluZyI6IjE4NzM5MDYzOCJ9&s=w4MUwrXDq2rCvsKscMOnw4hTwrxywqdvwrHCvzXDrXQ6w5PDncKDAMKWCxzDn0PDnMO2	false	Avira URL Cloud: safe	unknown
https://api.www.cloudflare.com/api/v1/marketo/form/1639	false		high
https://www.cloudflare.com/page-data/connectivity-cloud/page-data.json	false		high
https://challenges.cloudflare.com/turnstile/v0/b/c8ec7565fab7/api.js	false		high
https://r.logr-ingest.com/i?a=ykolez%2Fcloudflarecom&r=6-01959482-05f4-7abb-86a1-c3c7831fcdf6&t=7e781dea-7c0b-4c81-b316-377f3487e6f5&s=0&rs=0%2Ct&ct=20.29133493063908	false		high
https://cdn.bizibly.com/u?_biz_u=dd48d04c9b7e4e2792d53f98508e9523&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-landing%2F&_biz_t=1741953307015&_biz_i=5xx%20Error%20%7C%20Cloudflare&rnd=701891&cdn_o=a&_biz_z=1741953307015	false		high
https://uniquely-peaceful-hagfish.edgecompute.app/?test=2820656aa63ed5463d0abe7e0520dcbfeabdb8f499c7b5228388cc64e2036749&img=1&r=9525197	false		high
https://scout-cdn.salesloft.com/sl.js	false		high
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.min.js	false		high
https://benchmark.1e100cdn.net/r20-100KB.png?r=50662979	false		high
https://www.cloudflare.com/5xx-error-landing/	false		high
https://www.cloudflare.com/page-data/what-is-cloudflare/page-data.json	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/Hrl9MJuJGcsYRLaNNcCpS/3ca96c403b9a0195da1a8502d79ef76c/performance-cloud-speed.svg	false		high
https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=28851&time=1741953306913&li_adsId=ea498f35-0566-4f3f-9273-9adaed9b1cd2&url=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-landing%2F&liSync=true	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/5YRPa33UFrfL2zoZd2AXTq/658995f16c7ee4818875c254c18573d3/logo_zendesk_gray_32px-wrapper.svg	false		high
https://iframe.cloudflarestream.com/f9b4aa59b4a2fc5799f1232241000056?poster=https%3A%2F%2Fvideodelivery.net%2Ff9b4aa59b4a2fc5799f1232241000056%2Fthumbnails%2Fthumbnail.jpg%3Ftime%3D4s%26height%3D720&defaultTextTrack=en&letterboxColor=transparent&preload=metadata	false		high
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/f9b4aa59b4a2fc5799f1232241000056/video/360/seg_1.mp4?p=eyJ0eXBlIjoic2VnbWVudCIsInZpZGVvSUQiOiJmOWI0YWE1OWI0YTJmYzU3OTlmMTIzMjI0MTAwMDA1NiIsIm93bmVySUQiOjM3ODczOTcsImNyZWF0b3JJRCI6IiIsInNlZ21lbnREdXJhdGlvblNlY3MiOjQsInVzZVZPRE9URkUiOmZhbHNlLCJmcm9tTWV6emFuaW5lIjpmYWxzZSwic3RvcmFnZVByb3ZpZGVyIjoyLCJ0cmFjayI6IjA2NWFiOGU5MjFmZjEyMTAwY2MxYzU5YTBhOTY1ZGVkIiwicmVuZGl0aW9uIjoiMTM2ODUyOTEzIiwibXV4aW5nIjoiMTg3MzkwNjU0In0&s=w7wPexjCmFoOX8OMw6E1w5LDsyTCvEPDsjXDm8O9Qgk7w61nwqsJw4XDqMOUeic	false	Avira URL Cloud: safe	unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=fa794dc3-5a4e-4c39-9ae6-2944d47b02a1	false		high
https://px.ads.linkedin.com/wa/	false		high
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_ActivityMap.min.js	false		high
https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=28851&time=1741953306913&li_adsId=ea498f35-0566-4f3f-9273-9adaed9b1cd2&url=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-landing%2F	false		high
https://cdn.bizible.com/u?mapType=mkto&mapValue=id%3A713-XSC-918%26token%3A_mch-cloudflare.com-b32c2b964e2523cc10d4235fc7782c9&_biz_u=dd48d04c9b7e4e2792d53f98508e9523&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-landing%2F&_biz_t=1741953308071&_biz_i=5xx%20Error%20%7C%20Cloudflare&_biz_n=2&rnd=324966&cdn_o=a&_biz_z=1741953308072	false		high
https://www.cloudflare.com/page-data/sq/d/3199558980.json	false		high
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/f9b4aa59b4a2fc5799f1232241000056/manifest/video.mpd?parentOrigin=https%3A%2F%2Fwww.cloudflare.com	false	Avira URL Cloud: safe	unknown
https://api.company-target.com/api/v3/ip.json?referrer=&page=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-landing%2F&page_title=5xx%20Error%20%7C%20Cloudflare	false		high
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/f9b4aa59b4a2fc5799f1232241000056/thumbnails/thumbnail.jpg?time=0.000s&duration=12.450s&height=108&imageCount=60	false	Avira URL Cloud: safe	unknown
https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-landing%2F&time=1741953307082&pid=28851&conversionId=10249833	false		high
http://188.114.96.0/favicon.ico	false	Avira URL Cloud: safe	unknown
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/embed/sdk-iframe-integration.fla9.latest.js	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/0NY0QZdcIB62VMnG5JGH0/c3ed0daeb44e594adfd2ae2597286d31/compliance-privacy-hero-illustration.svg	false		high
https://ot.www.cloudflare.com/public/vendor/onetrust/scripttemplates/otSDKStub.js	false		high
https://tag-logger.demandbase.com/bg9s?x-amz-cf-id=2mGYGJ51od4Wqvi2XYg6-QxhF6mHGpqCpCIIFuAcPWBILfRR9u3LeQ==&api-version=v3	false		high
https://ot.www.cloudflare.com/public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css	false		high
https://www.cloudflare.com/under-attack-hotline/	false		high
https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-landing%2F&time=1741953336903&pid=28851&conversionId=20071137	false		high
https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-landing%2F&time=1741953306269&pid=28851&conversionId=13043044&cookiesTest=true	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/1AsuJijKk8EMH5s1ae56nx/b13406881aa864b7e17b2233a0d090ef/logo_labcorp_trusted-by_gray.svg	false		high
https://munchkin.marketo.net/164/munchkin.js	false		high
https://www.cloudflare.com/page-data/sq/d/1048862057.json	false		high
https://cdn.bizible.com/u?mapType=ecid&mapValue=8AD56F28618A50850A495FB6%40AdobeOrg_48114092620412401671540348388129268725&_biz_u=dd48d04c9b7e4e2792d53f98508e9523&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-landing%2F&_biz_t=1741953307015&_biz_i=5xx%20Error%20%7C%20Cloudflare&_biz_n=1&rnd=304137&cdn_o=a&_biz_z=1741953308072	false		high
https://www.cloudflare.com/static/enablement-background-6de78040ef0acc8d2e8a596988c5f5d8.svg	false		high
http://188.114.96.0/	false		unknown
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/f9b4aa59b4a2fc5799f1232241000056/lifecycle	false	Avira URL Cloud: safe	unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dcd8a97/network-scale.svg	false		high
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=9453fd76-f226-493d-9fcb-f62ea294da9c	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/UYtRs2BhTgknmiXF8HzF3/2be30b3d45367845101614b0b427ba58/logo_lending-tree.svg	false		high
https://customer-eq7kiuol0tk9chox.cloudflarestream.com/embed/233.16ea71e7.chunk.js	false		high
https://pixel.rubiconproject.com/tap.php?nid=5578&put=7ecf3b10-8fda-40ff-9146-613393b29e85&v=1181926	false		high
https://www.cloudflare.com/webpack-runtime-9510a2e22c3debbfcadd.js	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_247.4.dr	false		high
https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif	chromecache_215.4.dr	false		high
https://www.cloudflare.com/saas/)	chromecache_328.4.dr, chromecache_223.4.dr	false		high
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti	chromecache_313.4.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab	chromecache_190.4.dr, chromecache_187.4.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/3mYUDEjNlXbjQaceoFUhzU/378a4b79f7b51e7677fd6ab442e	chromecache_264.4.dr, chromecache_229.4.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/0NY0QZdcIB62VMnG5JGH0/c3ed0daeb44e594adfd2ae259728	chromecache_245.4.dr, chromecache_355.4.dr	false		high
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_192.4.dr, chromecache_281.4.dr	false		high
https://www.cloudflare.com/privacy-and-compliance/	chromecache_245.4.dr, chromecache_355.4.dr	false		high
https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1741953306269&uuid=50103b13-9506-406	chromecache_215.4.dr	false		high
https://tobiasahlin.com/blog/layered-smooth-box-shadows/	chromecache_238.4.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_247.4.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dc	chromecache_264.4.dr, chromecache_229.4.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_375.4.dr	false		high
https://stackoverflow.com/questions/3683211/ipad-safari-mobile-seems-to-ignore-z-indexing-position-f	chromecache_345.4.dr	false		high
https://www.cloudflare.com/plans/)	chromecache_245.4.dr, chromecache_355.4.dr	false		high
https://staging.mrk.cfdata.org/mrk/redwood-blade-repository/	chromecache_211.4.dr	false		high
https://medium.com/	chromecache_345.4.dr	false		high
https://dash.cloudflare.com/sign-up/workers	chromecache_245.4.dr, chromecache_355.4.dr	false		high
https://videodelivery.net/f9b4aa59b4a2fc5799f1232241000056/thumbnails/thumbnail.jpg?time=4s&height=7	chromecache_274.4.dr	false		high
https://www.cloudflare.com/plans/enterprise/	chromecache_245.4.dr, chromecache_355.4.dr	false		high
https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js	chromecache_387.4.dr	false		high
https://dash.cloudflare.com/sign-up	chromecache_245.4.dr, chromecache_355.4.dr	false		high
https://www.cloudflare.com/network/	chromecache_245.4.dr, chromecache_355.4.dr	false		high
https://dash.cloudflare.com/sign-up/teams	chromecache_245.4.dr, chromecache_355.4.dr	false		high
https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2F5xx-error-lan	chromecache_215.4.dr	false		high
https://www.cloudflare.com/plans/enterprise/contact/	chromecache_245.4.dr, chromecache_355.4.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/Rb6WR9vSmgEyzSIEFrCCX/7edd51d0c52a3a656192dc104b66	chromecache_204.4.dr, chromecache_373.4.dr	false		high
https://iframe.cloudflarestream.com/oembed?url=https%3A%2F%2Fiframe.cloudflarestream.com%2Ff9b4aa59b	chromecache_274.4.dr	false		high
https://jonsuh.com/hamburgers	chromecache_376.4.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/201dX43zvXI17sQ3nI6OXz/29703f9fd2b3970392bf03c9429	chromecache_245.4.dr, chromecache_355.4.dr	false		high
https://googleads.g.doubleclick.net	chromecache_247.4.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
18.66.102.98	unknown	United States	3	MIT-GATEWAYSUS	false
192.28.144.124	713-xsc-918.mktoresp.com	United States	15224	OMNITUREUS	false
104.18.0.248	serverless-benchmarks-js.compute-pipe.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.51	ecp.map.fastly.net	United States	54113	FASTLYUS	false
169.150.247.38	unknown	United States	2711	SPIRITTEL-ASUS	false
18.173.205.94	tag-logger.demandbase.com	United States	3	MIT-GATEWAYSUS	false
169.150.247.37	jsdelivr.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
18.200.1.178	cm.everesttech.net.akadns.net	United States	16509	AMAZON-02US	false
2.19.105.89	e7808.dscg.akamaiedge.net	European Union	16625	AKAMAI-ASUS	false
151.101.193.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
192.229.220.19	cs482.wpc.edgecastcdn.net	United States	15133	EDGECASTUS	false
172.64.146.215	www.linkedin.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
44.194.21.120	partners-1864332697.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.18.186.31	testingcf.jsdelivr.net.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
104.17.230.6	valid.rpki.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.198	unknown	United States	15169	GOOGLEUS	false
104.18.4.50	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.26.57	benchmark.1e100cdn.net	United States	15169	GOOGLEUS	false
172.217.23.102	unknown	United States	15169	GOOGLEUS	false
142.250.185.230	unknown	United States	15169	GOOGLEUS	false
104.18.31.78	performance.radar.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.16.95.114	customer-eq7kiuol0tk9chox.cloudflarestream.com	United States	13335	CLOUDFLARENETUS	false
172.66.0.201	ptcfc.com	United States	13335	CLOUDFLARENETUS	false
35.244.174.68	id.rlcdn.com	United States	15169	GOOGLEUS	false
18.66.102.75	api.company-target.com	United States	3	MIT-GATEWAYSUS	false
104.16.200.35	unknown	United States	13335	CLOUDFLARENETUS	false
2.16.164.104	a1916.dscg2.akamai.net	European Union	20940	AKAMAI-ASN1EU	false
34.232.142.33	unknown	United States	14618	AMAZON-AESUS	false
216.58.206.34	adservice.google.com	United States	15169	GOOGLEUS	false
3.220.103.163	unknown	United States	14618	AMAZON-AESUS	false
142.250.181.230	unknown	United States	15169	GOOGLEUS	false
104.18.5.50	platform.dash.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
64.233.184.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.2.6	prod.cedexis-ssl.map.fastly.net	United States	54113	FASTLYUS	false
104.16.199.35	videodelivery.net	United States	13335	CLOUDFLARENETUS	false
104.18.30.19	unknown	United States	13335	CLOUDFLARENETUS	false
52.17.115.208	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.206.41.94	scout.us1.salesloft.com	United States	14618	AMAZON-AESUS	false
104.16.93.114	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.2.57	sparrow.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.26.193	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
188.114.96.0	unknown	European Union	13335	CLOUDFLARENETUS	false
18.245.46.4	unknown	United States	16509	AMAZON-02US	false
151.101.129.140	unknown	United States	54113	FASTLYUS	false
172.66.0.227	s.twitter.com	United States	13335	CLOUDFLARENETUS	false
104.18.3.57	unknown	United States	13335	CLOUDFLARENETUS	false
104.198.23.205	prod-default.lb.logrocket.network	United States	15169	GOOGLEUS	false
2.22.242.97	unknown	European Union	20940	AKAMAI-ASN1EU	false
63.140.62.222	adobedc.net.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
104.18.30.78	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.184.226	td.doubleclick.net	United States	15169	GOOGLEUS	false
104.16.124.96	unknown	United States	13335	CLOUDFLARENETUS	false
162.159.140.229	t.co	United States	13335	CLOUDFLARENETUS	false
142.250.184.230	ad.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
2.22.242.136	a798.dscd.akamai.net	European Union	20940	AKAMAI-ASN1EU	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
104.16.96.114	iframe.cloudflarestream.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
3.161.75.215	d37vlkgj6jn9t1.cloudfront.net	United States	16509	AMAZON-02US	false
13.107.42.14	l-0005.l-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.16.71.105	scout-cdn.salesloft.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
3.161.75.185	unknown	United States	16509	AMAZON-02US	false
146.75.120.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
54.194.53.123	unknown	United States	16509	AMAZON-02US	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
172.217.16.198	unknown	United States	15169	GOOGLEUS	false
216.58.206.70	unknown	United States	15169	GOOGLEUS	false
163.171.132.119	p36.cedexis-test.com.wsoversea.com	European Union	54994	QUANTILNETWORKSUS	false
18.66.112.115	d1inq1x5xtur5k.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.16.94.114	embed.cloudflarestream.com	United States	13335	CLOUDFLARENETUS	false
151.101.129.229	unknown	United States	54113	FASTLYUS	false
69.173.144.139	unknown	United States	26667	RUBICONPROJECTUS	false
69.173.144.138	pixel.rubiconproject.net.akadns.net	United States	26667	RUBICONPROJECTUS	false
63.140.62.27	demdex.net.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
104.21.112.1	cdn.logr-ingest.com	United States	13335	CLOUDFLARENETUS	false
2.23.65.88	e10776.b.akamaiedge.net	European Union	16625	AKAMAI-ASUS	false
18.245.46.22	tag.demandbase.com	United States	16509	AMAZON-02US	false
104.18.27.193	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
34.249.12.92	unknown	United States	16509	AMAZON-02US	false
142.250.185.130	unknown	United States	15169	GOOGLEUS	false
103.21.244.8	invalid.rpki.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.166	unknown	United States	15169	GOOGLEUS	false
104.16.123.96	ot.www.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.31.19	benchmarks.cdn.compute-pipe.com	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638492
Start date and time:	2025-03-14 12:53:29 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://188.114.96.0
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.evad.win@32/365@245/89

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	105521
Entropy (8bit):	7.987330424882781
Encrypted:	false
SSDEEP:	3072:Yj/KoaCmqSCLDGzoRfla+jDAHdcCmRTlgZiq7kvbO:eJDmqSDzQl/kHC1RTlWiqIO
MD5:	BA621ED2234F9585870B16B81773CF85
SHA1:	705B9734634F21199576F8F29BE0D144306FE6F1
SHA-256:	0FD06DF979674825FB23CF94C14C6CB659BB1C210E91DA50B06CBB74E11A1235
SHA-512:	857D2A7E5DDAFB89600781537BEA65F684356EEF1AFC8539A6C956A52BE528956173DC2C54D821FEC7439909BC466F0340182347C9687223D28270593E45B1B6
Malicious:	false
Reputation:	low
Preview:	....stypmsdh....msdhmsix...4sidx..........0....................................hmoof....mfhd...........Ptraf....tfhd...8....................tfdt................trun.......`...p...............................................?.......U.......................................................................................................J.......9.......&.......................................................................................^...............b.......!...............................y.......................................................u...............................q.......................................O.......`.......Q.......................8...............0.......&.......H.......T...............G......._.......C.......x...............N.......{.......5.......B.......?.......P.......m.......L...............K......./.......u.......+.......................a.......%.......[...............p.......R....... ...............d.......}mdat....gM@..P....................h............

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://188.114.96.0

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Windows Analysis Report
http://188.114.96.0