Play interactive tour

Edit tour

Analysis Report http://www.casella.com/

Overview

General Information

Sample URL:	http://www.casella.com/
Analysis ID:	404292
Infos:
Most interesting Screenshot:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Classification

Startup

System is w10x64

iexplore.exe (PID: 5488 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 5840 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5488 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://secure3.i-doxs.net/casella/default.asp	HTTP Parser: Number of links: 0
Source: https://secure3.i-doxs.net/casella/default.asp	HTTP Parser: Number of links: 0

Source: https://secure3.i-doxs.net/casella/default.asp	HTTP Parser: Title: Login does not match URL
Source: https://secure3.i-doxs.net/casella/default.asp	HTTP Parser: Title: Login does not match URL

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Source: unknown	HTTPS traffic detected: 169.50.137.179:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.50.137.179:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.162:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.162:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.88.192.45:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.88.192.45:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.2.69:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.2.69:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.215.226.121:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.215.226.121:443 -> 192.168.2.4:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.242.18:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.242.18:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.31.47:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.31.47:443 -> 192.168.2.4:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.75.237.118:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.75.237.118:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.57.10.248:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.110:443 -> 192.168.2.4:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.110:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.57.10.248:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.73.36:443 -> 192.168.2.4:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.73.36:443 -> 192.168.2.4:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.159.8:443 -> 192.168.2.4:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.4:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.159.8:443 -> 192.168.2.4:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.228.48:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.228.48:443 -> 192.168.2.4:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.162:443 -> 192.168.2.4:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.15:443 -> 192.168.2.4:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.162:443 -> 192.168.2.4:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.15:443 -> 192.168.2.4:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.248.118.22:443 -> 192.168.2.4:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.248.118.22:443 -> 192.168.2.4:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.228.139.221:443 -> 192.168.2.4:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.228.139.221:443 -> 192.168.2.4:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.10:443 -> 192.168.2.4:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.10:443 -> 192.168.2.4:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.66.19:443 -> 192.168.2.4:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.66.19:443 -> 192.168.2.4:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.66.19:443 -> 192.168.2.4:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.66.19:443 -> 192.168.2.4:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.4:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.4:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.229.1:443 -> 192.168.2.4:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.229.1:443 -> 192.168.2.4:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.229.1:443 -> 192.168.2.4:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.229.1:443 -> 192.168.2.4:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.229.1:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.229.1:443 -> 192.168.2.4:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.66.19:443 -> 192.168.2.4:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.66.19:443 -> 192.168.2.4:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.220.14:443 -> 192.168.2.4:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.220.14:443 -> 192.168.2.4:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.19.26:443 -> 192.168.2.4:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.19.26:443 -> 192.168.2.4:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.18.19:443 -> 192.168.2.4:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.18.19:443 -> 192.168.2.4:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.14.19:443 -> 192.168.2.4:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.14.19:443 -> 192.168.2.4:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.112.4.23:443 -> 192.168.2.4:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.112.4.23:443 -> 192.168.2.4:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.112.4.23:443 -> 192.168.2.4:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.112.4.23:443 -> 192.168.2.4:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.112.4.23:443 -> 192.168.2.4:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.112.4.23:443 -> 192.168.2.4:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.133.52:443 -> 192.168.2.4:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.133.52:443 -> 192.168.2.4:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.234.234.58:443 -> 192.168.2.4:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.234.234.58:443 -> 192.168.2.4:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.200.157.96:443 -> 192.168.2.4:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.200.157.96:443 -> 192.168.2.4:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.210.171.182:443 -> 192.168.2.4:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.210.171.182:443 -> 192.168.2.4:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 65.9.66.129:443 -> 192.168.2.4:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.50.137.179:443 -> 192.168.2.4:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.50.137.179:443 -> 192.168.2.4:49942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.64.218:443 -> 192.168.2.4:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.64.218:443 -> 192.168.2.4:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:49954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.162.133.149:443 -> 192.168.2.4:49957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.162.133.149:443 -> 192.168.2.4:49958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.227.248.159:443 -> 192.168.2.4:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.227.248.159:443 -> 192.168.2.4:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.243.60.138:443 -> 192.168.2.4:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.243.60.138:443 -> 192.168.2.4:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.86.139.89:443 -> 192.168.2.4:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.94.180.125:443 -> 192.168.2.4:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.94.180.125:443 -> 192.168.2.4:49969 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.86.139.89:443 -> 192.168.2.4:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.13.182:443 -> 192.168.2.4:49974 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.13.182:443 -> 192.168.2.4:49973 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.197.81.144:443 -> 192.168.2.4:49975 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.197.81.144:443 -> 192.168.2.4:49976 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.254.47:443 -> 192.168.2.4:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.254.47:443 -> 192.168.2.4:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.252.166.236:443 -> 192.168.2.4:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.252.166.236:443 -> 192.168.2.4:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.246.207.243:443 -> 192.168.2.4:49981 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.246.207.243:443 -> 192.168.2.4:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.251.14.14:443 -> 192.168.2.4:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 96.46.186.57:443 -> 192.168.2.4:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 96.46.186.57:443 -> 192.168.2.4:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.251.14.14:443 -> 192.168.2.4:49959 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.89.7.199:443 -> 192.168.2.4:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.89.7.199:443 -> 192.168.2.4:49995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.176.232.241:443 -> 192.168.2.4:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.176.232.241:443 -> 192.168.2.4:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.194.226.253:443 -> 192.168.2.4:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.194.226.253:443 -> 192.168.2.4:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.81.208.30:443 -> 192.168.2.4:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.81.208.30:443 -> 192.168.2.4:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.108.245:443 -> 192.168.2.4:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.108.245:443 -> 192.168.2.4:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.58.206.142:443 -> 192.168.2.4:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.58.206.142:443 -> 192.168.2.4:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.241.59.199:443 -> 192.168.2.4:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.241.59.199:443 -> 192.168.2.4:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.209.93.152:443 -> 192.168.2.4:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.209.93.152:443 -> 192.168.2.4:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.123.96.39:443 -> 192.168.2.4:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.123.96.39:443 -> 192.168.2.4:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.243.60.138:443 -> 192.168.2.4:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.243.60.138:443 -> 192.168.2.4:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:50048 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199
Source: unknown	TCP traffic detected without corresponding DNS query: 51.89.7.199

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:00 GMTContent-Type: text/cssContent-Length: 481X-Content-Type-Options: nosniffLast-Modified: Mon, 20 May 2019 22:03:40 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:00 GMTX-Request-ID: v-00caa2de-a54e-11eb-89e1-eb240ed5032bX-AH-Environment: prodAge: 853620Via: varnishX-Cache: HITX-Cache-Hits: 3632Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 95 53 4d 8f d3 30 10 bd e7 57 8c 16 55 b0 15 f9 a0 b4 c0 ba 42 42 42 e2 c4 09 ed 0d 71 70 62 27 1d d6 b1 ad b1 c3 76 17 ed 7f 67 dc 84 96 8d b6 08 94 44 f1 d8 e3 37 cf 6f 9e cb e5 32 83 25 7c 68 d1 e8 34 b8 de 91 ab 6b 4d 05 07 65 96 15 f2 bb dc e7 9e 5c 47 3a 04 f8 99 01 28 0c de c8 3b 01 68 0d 5a 9d d7 c6 35 37 5b 5e f0 52 29 b4 9d 80 57 7e 0f 1b fe 56 e3 7f 9b 3d 64 5f 15 d2 fb 0b 8a e6 e2 1b 3c 81 d9 1a 27 a3 00 c2 6e 17 53 fa e3 94 3c 4e a4 a0 38 8e 9e 60 72 8e 43 9a af 65 73 d3 91 1b ac 12 10 49 da e0 25 69 1b 61 20 f3 a2 28 ca f1 c5 5e 76 3a 94 8d 23 5d fe 2e 94 cb 26 e2 0f 5d 74 d8 5e 82 75 39 69 af 65 84 0a 1a de ae e9 af 64 7b 0e 19 f1 ff b8 3e 64 91 e0 df ce df 4b ea d0 0a 26 33 ed 9c 6d ab e5 98 77 8b 2a ee b8 cc 1b dd a7 ac ac 5c c2 a7 c1 18 08 0d 69 6d e1 88 c9 0d 9f 21 b4 9c 36 65 25 20 ef 02 46 74 5c b2 c5 bd 56 e9 10 f7 39 5a a5 f7 8c 5e 55 55 9a 88 ce 0b 58 bf 2b 36 8b 14 71 a9 8f d2 3e 8f a0 dc a4 98 d8 54 0b e8 51 29 a3 05 f0 f8 25 04 07 d2 73 c9 3d eb 1f 35 60 84 d6 11 48 88 77 1e 1b 69 98 be 55 ee 16 02 de eb 22 71 04 30 ba 65 b7 ac af 16 db 54 e0 f3 f5 97 71 7a 3a e7 6a 3d f6 7c a7 93 9d 4e f1 51 ef 29 76 5e 36 18 b9 25 55 71 75 f0 88 23 c5 0d 27 a9 70 08 02 de ce 9d 93 37 ce 38 12 f0 6c f5 3a 3d b3 c5 83 79 c4 79 43 b1 c3 53 f5 3c f4 d2 98 83 9d 66 00 a3 b3 c4 c9 64 b3 f5 93 f8 a3 90 7f 38 f0 fc ed 9a 77 90 46 49 92 74 47 1d e5 10 5d 42 f9 05 97 23 43 43 0b 04 00 00 Data Ascii: SM0WUBBBqpb'vgD7o2%\|h4kMe\G:(;hZ57[^R)W~V=d_<'nS<N8`rCesI%ia (^v:#].&]t^u9ied{>dK&3mw*\im!6e% Ft\V9Z^UUX+6q>TQ)%s=5`HwiU"q0eTqz:j=\|NQ)v^6%Uqu#'p78l:=yyCS<fd8wFItG]B#CC
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:00 GMTContent-Type: text/cssContent-Length: 216X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:00 GMTX-Request-ID: v-00cab24c-a54e-11eb-94a8-7ba532eca2aaX-AH-Environment: prodAge: 853620Via: varnishX-Cache: HITX-Cache-Hits: 3597Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 90 41 0e 82 30 10 45 f7 3d c5 2c 95 08 ec 61 a3 47 a9 65 8a d5 81 2a 1d 88 c4 70 77 29 60 40 60 d5 e6 f5 4d 7f fe c4 41 20 20 80 b3 36 84 fe 72 21 93 97 05 96 0c 8a a4 73 e8 40 db 0a 18 df 0c b2 cc e0 4a 56 3d 80 b0 41 02 24 f4 a2 8b fa b9 58 88 c8 4b a1 f4 f3 21 a1 66 f8 08 80 99 25 e0 61 2a ba 3f b1 32 f9 6d 6b 0e 74 ad aa 3e 0b ab 8d 3b e2 b5 7c af 1d 1b dd 6e ec 89 7b 5d c4 63 f5 fd c6 7b 45 e1 60 0a 99 a3 3b 41 63 32 b4 fd 39 58 af da b2 87 c8 2a 3a 0e bb 88 56 5b d0 64 25 2f 16 b0 ee 3e bd cf b5 37 8d 33 e3 9e 24 db 64 4c 4c 7b 52 c8 2a 37 d3 27 09 c8 9a ed 82 fa a4 1f ec c4 17 09 be 93 c2 e4 01 00 00 Data Ascii: mA0E=,aGepw)`@`MA 6r!s@JV=A$XK!f%a?2mkt>;\|n{]c{E`;Ac29X:V[d%/>73$dLL{R7'
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:00 GMTContent-Type: text/cssContent-Length: 95X-Content-Type-Options: nosniffLast-Modified: Mon, 20 May 2019 22:03:40 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:00 GMTX-Request-ID: v-010dba24-a54e-11eb-aad2-0faa45a4573cX-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3592Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 d3 d7 d2 e2 52 d0 52 70 48 cb cc 49 05 31 dc 32 53 73 52 d2 8b f2 4b 0b 14 92 f2 8b 52 52 8b 14 8a 52 8b 53 4b f4 80 72 fa 5c 5c 7a 69 08 e9 6a 2e 05 85 82 c4 94 94 cc bc 74 2b 05 03 6b 20 0f a2 41 b7 3c 33 a5 24 03 2c 54 cb 05 00 a8 d2 67 e5 5f 00 00 00 Data Ascii: RRpHI12SsRKRRRSKr\\zij.t+k A<3$,Tg_
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:00 GMTContent-Type: text/cssContent-Length: 154X-Content-Type-Options: nosniffLast-Modified: Mon, 27 Aug 2018 05:27:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:00 GMTX-Request-ID: v-010df37c-a54e-11eb-993c-0baeb16a0399X-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3588Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 8e 3d 0e 02 21 10 85 7b 4e f1 6a e2 b2 bd 36 16 36 1e 63 58 c6 84 38 02 01 e2 66 b3 f1 ee 82 54 46 bb 99 f7 33 df cc 5a 2b 68 9c 6f 5e b8 0f d7 20 3e 30 7c e5 47 31 4d 98 95 32 4b 0c 95 9a 9a 27 3f 5c e7 9f 87 3f b2 90 65 c1 ae d0 02 25 09 6d 47 0c e7 a4 5e 6a d6 b8 70 cb 4b 41 2f 72 a8 05 24 2b 6d 05 81 d9 a1 46 58 46 e6 e0 38 b7 95 0a ac c4 e5 6e fa 0b bf 28 e3 c6 ad 69 cd 94 12 e7 6f ea a7 d9 a1 6f 88 ae 38 bc de 00 00 00 Data Ascii: m=!{Nj66cX8fTF3Z+ho^ >0\|G1M2K'?\?e%mG^jpKA/r$+mFXF8n(ioo8
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:00 GMTContent-Type: text/cssContent-Length: 251X-Content-Type-Options: nosniffLast-Modified: Mon, 20 May 2019 22:03:40 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:00 GMTX-Request-ID: v-010da854-a54e-11eb-97f4-4bec2387c9d1X-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3594Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 90 cf 4a 03 31 10 c6 ef fb 14 43 a1 a0 0b 9b d4 eb 16 c1 07 f0 24 d2 8b 78 c8 66 67 e3 68 36 13 92 89 20 e2 bb bb db 56 6a 0b 85 22 42 0e 5f e6 cf 2f 5f 3e 5d d7 15 d4 70 37 90 c7 59 6c 28 17 e3 21 cb 87 c7 0c 03 27 30 81 46 23 d8 83 bc 24 ee 3a 4c 6a 9a db ee 64 44 30 45 d8 f2 18 3d 0a aa d7 3c d5 75 55 4d 02 28 c4 22 6a 02 8c cd ef 19 f8 ac 00 3a 63 df 5c e2 12 fa 66 62 3b 6c a1 24 7f a5 94 de 9d 6d 2d 6b cb 09 f5 cf a3 0d 05 63 85 de 51 c5 e0 ae d7 c7 90 84 11 8d b4 10 78 2f 4f fa 91 33 09 71 68 e1 66 b5 5a 82 c5 20 98 d6 a0 6b b8 7f 7c 98 1d 7f cd 96 9f 7a 4a b7 8b 24 7e f1 7c a9 fb 03 f8 80 dd c1 ce 11 54 a1 a3 7b e3 d9 f4 14 dc 9f 73 d9 a7 e2 68 38 4d e5 df 7e 7d a9 e7 33 69 7c 03 24 18 42 09 63 02 00 00 Data Ascii: J1C$xfgh6 Vj"B_/_>]p7Yl(!'0F#$:LjdD0E=<uUM("j:c\fb;l$m-kcQx/O3qhfZ k\|zJ$~\|T{sh8M~}3i\|$Bc
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:00 GMTContent-Type: text/cssContent-Length: 221X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:00 GMTX-Request-ID: v-010df1e2-a54e-11eb-9b7f-7713e84d7c0aX-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3578Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 35 8e b1 6e c3 30 0c 44 77 7d c5 21 a3 d1 c4 bb b2 04 1d da ad ff 40 cb b4 25 94 16 0d 89 6d 1a 14 fd f7 ca 0e bc f1 0e 77 bc d7 77 9d 43 87 db 94 84 b7 e3 4d 94 0c 41 98 4a ca f3 a5 59 9b fb 4a 95 47 68 86 45 c6 92 42 d1 67 64 4a 3f 88 14 3e 31 3c f0 91 82 0a 55 bc 93 08 cd 91 cb 0b ee c9 e2 5e f1 03 4f 5a f6 81 b5 f2 d7 a8 a8 2c 1c 4c 0b 0a 2f fa dd 9e 9b a2 15 f5 8e ac 65 21 69 7a c5 42 65 4e 19 ed af 50 eb 1d 34 b7 ca 8c 68 b6 fa be cf cf d5 f9 18 bd 04 5d fa 9d f0 7c 10 9e 37 c2 d6 eb 9d bb 1c 9e a7 c9 b8 e0 d7 01 63 aa ab d0 c3 c3 68 10 be 36 67 0f 79 0c 6a 71 97 9a 8d b3 79 9c 4e 57 f7 e7 fe 01 78 3c dc c3 32 01 00 00 Data Ascii: 5n0Dw}!@%mwwCMAJYJGhEBgdJ?>1<U^OZ,L/e!izBeNP4h]\|7ch6gyjqyNWx<2
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:00 GMTContent-Type: text/cssContent-Length: 121X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:00 GMTX-Request-ID: v-010eee30-a54e-11eb-8d3c-3f0008e36828X-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3563Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 35 8a c1 0a c2 30 10 05 ef fb 15 ef a8 01 d3 7b bd 08 fd 8c e2 21 b6 4f 88 2c c9 d2 2d 88 88 ff 6e ac 7a 1b 66 a6 0b 41 10 70 ba 66 e5 07 86 aa 9a cc f3 45 89 99 6b ca ea b1 f9 ed 71 12 d3 b7 33 de bc b9 4e a4 c1 7f ec 4b 5d 77 63 35 96 f3 1e f1 27 0f f7 25 99 71 c1 53 80 39 bb 69 7a f4 28 b5 f0 28 2f 79 03 d9 43 b2 8a 7f 00 00 00 Data Ascii: 50{!O,-nzfApfEkq3NK]wc5'%qS9iz((/yC
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:00 GMTContent-Type: text/cssContent-Length: 649X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:00 GMTX-Request-ID: v-010efe16-a54e-11eb-a60e-4bf4bf7b37dfX-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3560Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 7d 54 c1 72 9b 30 10 bd fb 2b b6 39 25 19 c7 9e 5e 9d 4b 7b 6b 8f 9d 69 3f 40 c0 62 b6 16 12 95 04 98 e9 e4 df fb 56 40 6d a7 49 0f 30 48 5e bd 7d ef ed 93 f7 8f 8f 1b 7a a4 4f b5 58 d6 8f 1f 49 ac a4 89 4a 6b 62 e4 48 c9 53 23 15 13 5b 6e d9 a5 48 e2 a8 92 ba e6 80 15 8d 66 8a 3b 1c db 6f 36 fb 19 e8 cb 4d 71 1d 7c 4b c6 5a ea 23 87 5c 99 7b 44 ae a8 f6 e1 52 37 36 52 36 14 1b df db 8a 9c 4f 54 30 49 db 72 25 26 b1 9d d0 31 76 d6 4c 38 06 3e c6 4d 19 6f 47 9f 9d c2 f1 d9 b4 9d 65 1a f3 69 9c 2c bd b5 a6 8b 52 60 b3 e2 64 c4 42 47 63 40 57 40 05 05 7c ee 8c ab 80 36 4a 6a c8 40 ac 94 27 85 9a f9 2e e8 df 1b 54 42 69 99 c8 d7 00 90 38 bb 42 a5 71 8a 92 fc f1 68 57 90 84 e2 9f df 7a 0e 93 ca 18 ef 1f 14 0e 4d b2 7b f7 0f 54 f7 ae 4c e2 dd 62 d7 0e db 15 3b fa bd a1 55 dc 01 c2 1d 3f 6f 5e de f1 72 90 d8 c3 ca 69 4b 45 9f e8 c4 dc 69 53 d0 1d 20 d0 a8 56 b5 34 96 81 81 1b d8 54 6f 39 2e 0e ef d6 28 13 d4 fc ea 25 2c 3f dc 9c 9b c7 a5 5e f7 4e 61 92 0a d1 07 fb 0a a7 62 a3 24 58 de 20 07 0b b3 55 07 c1 27 3d 16 25 28 ab 1d 7d bd ea d9 05 3f 88 3a 8f 18 a9 a3 8a d6 1a e7 d0 73 99 3e 8c 3d 71 97 30 44 57 4a e4 6d 9e f8 e0 05 cd 51 56 72 8c 06 1e 17 7d 50 fb bc cb 5c f2 bc 14 ea ee 83 b4 9d 0f e0 9b ee 32 8f 38 47 a6 0b 3c 68 5e 7b 27 2e e1 03 54 40 d8 0f 1c 02 d8 ac 33 59 1d 7e ba 1a 4e e7 21 14 e5 07 32 45 f4 b6 87 e8 4b 8f 67 14 28 48 6d fd 78 a0 f9 94 ee 21 4f dd 01 5e 96 e9 fe 63 77 de d2 cd eb 41 2b 46 a9 52 73 d0 a5 ae 1a 96 63 93 fe 2e 47 1f aa a7 31 98 4e 23 01 e7 ec 75 28 34 95 bb da 97 7d cc 33 9f 13 c9 67 a8 aa 62 36 e3 1f 19 73 89 da 68 c1 73 9d df 92 2b dd 2f 34 3a 2b 20 46 ea c8 99 41 8e b8 7a d9 bc 41 4c 3e 71 e2 a9 f0 26 54 6f bb 75 e1 74 30 48 fa c0 db ff 95 e4 af 57 06 23 66 49 ca 77 ed 05 98 de e8 8b bf a6 4f fe ca cb 75 b9 9a 39 af 5f dd a6 95 51 4e 73 be ed b7 17 66 be 5c ad 41 4c f0 10 e2 ec fb b4 08 16 b7 50 c8 bc f3 77 fe af bc 4c fe 65 f3 07 d2 e7 62 88 4f 05 00 00 Data Ascii: }Tr0+9%^K{ki?@bV@mI0H^}zOXIJkbHS#[nHf;o6Mq\|KZ#\{DR76R6OT0Ir%&1vL8>MoGei,R`dBGc@W@\|6Jj@'.TBi8BqhWzM{TLb;U?o^riKEiS V4To9.(%,?^Nab$X U'=%(}?:s>=q0DWJmQVr}P\28G<h^{'.T@3Y~N!2EKg(Hmx!O^cwA+FRsc.G1N#u(4}3gb6s
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:01 GMTContent-Type: text/cssContent-Length: 154X-Content-Type-Options: nosniffLast-Modified: Mon, 27 Aug 2018 05:27:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:01 GMTX-Request-ID: v-01625fde-a54e-11eb-9a1d-eff885528ebdX-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3554Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 7d cb 3b 0e c3 20 10 04 d0 9e 53 ac 5c 22 7f 52 e3 26 77 c8 01 2c c4 c7 59 69 01 cb 6c 63 59 b9 7b 80 3a a4 9b 99 dd b7 48 29 40 c2 d3 23 b9 1a 5e 7c 91 cb e0 d3 09 c8 2e 00 61 e6 b9 1c 16 21 e6 3a 4c 75 d8 36 93 42 d0 2d 8f 9d bd 48 b8 05 80 c5 7c 90 be 14 60 24 8c 6e 15 9f 1e a8 df 41 9f 3b 46 05 8f b5 94 43 5b 8b 71 6f ad ab 08 95 f6 ec ce c6 4d 8a ec 22 2b 18 46 18 fe 23 d2 99 27 f3 46 b2 3f 7d d3 5f 35 41 f4 a9 1d 01 00 00 Data Ascii: }; S\"R&w,YilcY{:H)@#^\|.a!:Lu6B-H\|`$nA;FC[qoM"+F#'F?}_5A
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:01 GMTContent-Type: text/cssContent-Length: 94X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:01 GMTX-Request-ID: v-0164dc46-a54e-11eb-b1e8-0f8b9eac5528X-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3540Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 d3 d7 e2 52 d0 52 70 48 cb cc 49 05 31 9c f3 f3 4a 12 33 f3 14 0a f2 8b 33 4b 32 f3 f3 52 53 14 52 73 52 73 53 f3 4a 8a f5 80 f2 fa 5c 5c 7a 30 29 dd 64 88 da d4 22 85 6a 2e 05 b8 0e 2b 85 a2 d4 9c c4 92 cc b2 54 6b ae 5a 2e 00 d3 59 78 2d 5f 00 00 00 Data Ascii: RRpHI1J33K2RSRsRsSJ\\z0)d"j.+TkZ.Yx-_
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:01 GMTContent-Type: text/cssContent-Length: 232X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:01 GMTX-Request-ID: v-01648b24-a54e-11eb-92ad-e76ab464ca78X-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3558Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 85 8e 3d 6a c4 40 0c 85 7b 9f e2 d5 26 bb ee 93 26 55 8a 6d 43 0e 20 cf 8c d7 ca 0e 92 b1 64 1b 13 72 f7 78 6c 12 08 59 48 21 78 88 f7 f3 35 75 5d a1 c6 73 c7 39 15 f1 e6 9c d9 57 84 4c 66 c9 e0 8a 4d b0 39 16 f6 1e 17 9a c9 c2 c8 83 a3 9b 24 38 ab 50 f1 9f b7 6c 53 55 cd d1 f6 a2 23 48 56 ef 59 ae 58 75 c2 42 e2 a5 aa e7 98 a0 82 81 ae 09 59 29 62 e9 93 e0 f2 0a 36 24 a1 36 a7 f8 00 d3 52 e2 3d f9 1e 0e 24 98 2c 6d 8f 54 9c 5b 4d 50 f1 51 33 66 36 6e 0f 5e 92 08 9a 95 23 ba cc e1 96 c6 83 e8 fc 6e d8 ee b4 0f 7f 54 40 64 1b 32 ad 8f 10 95 f4 54 7d fe cf 6c bd 2e bf 99 55 f2 7a 07 fc 67 f1 b4 47 ee ae 7d f3 fc 75 b4 59 c3 ad 58 be 00 fa 38 9e 79 92 01 00 00 Data Ascii: =j@{&&UmC drxlYH!x5u]s9WLfM9$8PlSU#HVYXuBY)b6$6R=$,mT[MPQ3f6n^#nT@d2T}l.UzgG}uYX8y
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:01 GMTContent-Type: text/cssContent-Length: 104X-Content-Type-Options: nosniffLast-Modified: Mon, 27 Aug 2018 05:27:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:01 GMTX-Request-ID: v-01648db8-a54e-11eb-901c-c7d9075757efX-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3555Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 25 ca 41 0a 80 20 10 46 e1 fd 9c e2 5f 0b e5 be 36 5d a2 03 88 4c 35 20 2a 39 64 11 dd bd a4 dd e3 e3 59 63 08 06 d3 22 81 5b cc 2a 41 f4 82 0f ae 14 68 42 de f9 e0 a8 50 3e 15 75 77 39 4b 5c fb 6f b5 44 7d 4c 4d 70 13 50 37 51 ee 4a 76 9e 07 fc 3e d2 43 2f 83 ce 84 04 60 00 00 00 Data Ascii: %A F_6]L5 9dYc"[AhBP>uw9K\oD}LMpP7QJv>C/`
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:01 GMTContent-Type: text/cssContent-Length: 352X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:01 GMTX-Request-ID: v-0164f906-a54e-11eb-a964-e359332a548eX-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3528Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 92 d1 4a c3 30 14 86 ef fb 14 87 89 37 c5 76 75 52 27 1d 82 0f e0 85 88 77 22 23 6b 4e db 68 d6 84 93 b8 0d 65 ef 6e 92 ad d8 95 6d 7a 53 9a 3f ff c9 f7 9f e4 8c e3 38 82 18 1e 2a 21 d1 ff 3c 91 aa 09 8d 81 05 36 6c 25 14 a5 4e 0d 0e 83 08 7a bf 9b be 1b a7 8d a3 28 ed 14 f8 8e 00 b4 32 c2 0a d5 16 40 28 99 15 2b 9c 45 db 5f cf 7c 6e 89 95 1f c1 ba 14 6d b2 16 dc 36 05 5c 67 99 de cc bc c6 36 3d ed d2 4b 0d 8a ba b1 6e 7d db 59 a8 76 95 56 e9 02 f2 9d b4 50 c4 91 9c 45 6f c0 28 29 78 10 1d a7 26 f5 d9 f2 a4 54 52 b9 ed 8b aa aa 06 69 16 8c 42 96 3d f3 26 10 7b c1 f6 c2 99 54 69 8e cb 13 b8 2c cb 06 38 8e a6 24 a1 fd 05 5d f5 75 8d 54 62 6b 59 8d 21 8d 5a 21 55 52 ad 0b 68 04 e7 d8 0e db ce d2 c9 0e da 91 f2 3c f7 cb 4a b5 36 31 e2 0b bd e5 6e 1a 92 9d e2 07 90 83 30 d7 84 c4 ca ce 60 1c c3 e3 cb b3 7f d3 6d f4 ca 05 dd 8f c8 ca d1 1b fc 5d 4f fe 2e 06 a8 41 4b 07 ce ff a0 8e d7 87 a4 7d 50 92 98 25 93 12 8e 4e 58 f7 48 53 3f 26 e7 8b ba 41 38 28 39 78 d5 dd bd 4e dc a0 86 8f 3f f0 07 aa 2e 21 88 3a 03 00 00 Data Ascii: J07vuR'w"#kNhenmzS?8*!<6l%Nz(2@(+E_\|nm6\g6=Kn}YvVPEo()x&TRiB=&{Ti,8$]uTbkY!Z!URh<J61n0`m]O.AK}P%NXHS?&A8(9xN?.!:
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:01 GMTContent-Type: text/cssContent-Length: 189X-Content-Type-Options: nosniffLast-Modified: Mon, 20 May 2019 22:03:40 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:01 GMTX-Request-ID: v-01652d5e-a54e-11eb-82a9-9f0b755804d2X-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3528Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 8d 41 6e c2 40 0c 45 f7 73 0a af 11 81 ae d3 4d 2f d1 03 38 c9 27 b1 98 d8 23 8f 01 a5 88 bb 13 10 42 95 da 9d df fb d2 f3 7e 93 68 43 5f 07 c9 78 1c df 21 59 62 a1 3e 73 ad 14 46 8e d9 ce a0 ce ed 52 e1 54 63 c9 a8 5b 42 2d e8 85 73 5e e8 60 4e dd 29 c2 74 b7 16 f6 29 ed 1c 15 d1 70 29 60 67 ed 41 d7 44 34 b3 8f a2 2d 7d 7c ae 50 78 18 44 c7 17 75 e6 03 7c 05 52 53 3c 0d f7 c7 d1 ed a4 43 4b b1 36 6a 61 87 c6 63 ca a2 68 26 c8 38 45 4b a2 13 5c 9e be b9 a0 3b ca ef b7 ed 3b d7 cc f6 f3 ef f0 d7 dd d2 1d 63 fb b5 07 12 01 00 00 Data Ascii: mAn@EsM/8'#B~hC_x!Yb>sFRTc[B-s^`N)t)p)`gAD4-}\|PxDu\|RS<CK6jach&8EK\;;c
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 04 May 2021 19:47:01 GMTContent-Type: text/javascript; charset=utf-8Content-Length: 10205Connection: keep-aliveServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Cache-Control: privateVary: Accept-Encoding,User-AgentContent-Encoding: gzipSet-Cookie: twine_session=8ece61096b8a53f6438313f1e352c5e0:4a9bec3bbf5b2c5e7dc464e29f5188572e2b403c; expires=Thu, 03-Jun-2021 19:47:01 GMT; Max-Age=2592000; path=/; domain=.twinesocial.com;HttpOnly;Secure;SameSite=LaxData Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 3d 6b 77 db 36 b2 9f ed 5f 81 70 7b 43 b2 a1 28 3f d2 6c 2b 47 cd c9 73 eb de a4 c9 c6 e9 63 37 71 73 28 12 92 18 53 a4 96 a4 6c ab 8e fe fb 9d 19 3c 08 52 94 2c 3b 4e 9b 7b ef 9e 6e 2c 12 c0 60 30 18 0c 66 06 33 60 3c 64 4e 39 9f f2 6c c8 de 9c c5 29 3f 7a f2 df ac df 67 f6 2c 8d f8 10 9e 23 db 65 17 db db 5b 54 c8 fa ec 62 71 c0 ba 5d 36 4a b2 41 90 b0 6c f0 81 87 25 0b b3 b4 0c a0 3c 97 f5 fc 61 1e 4c f8 c3 3c 0f e6 d0 24 e5 67 8c 7e 3b ee 01 40 3a 0d 72 a3 2b 02 be 05 10 a1 bb 60 96 94 ac cc 58 30 2b b3 e7 59 10 b1 72 cc d9 78 36 38 60 05 a7 82 61 90 14 1c 7f 4c 82 74 16 24 c9 9c 25 50 0d da ab 16 3d 56 e6 33 ee 35 40 42 eb 32 4e 47 05 1b 66 39 60 53 9e 65 f9 49 21 aa 04 29 e3 e7 c1 64 9a f0 1e bc 50 65 3d 18 a6 02 92 28 44 04 05 00 1d 36 2b 00 1a bc 8b 0b 56 4c 79 18 0f e3 90 95 c1 80 c5 91 68 12 63 97 69 54 e0 0f 40 16 1b 0f e3 bc 80 07 02 11 13 75 58 96 52 c9 34 18 71 d1 2c cd d8 19 10 0c 5a 60 6b 6c 1c a7 48 0d 78 04 02 47 2b db 9d 71 98 80 59 12 c9 66 29 b4 98 06 58 b5 e4 39 34 22 40 05 be cc b3 41 c2 27 d0 08 49 f5 26 18 3c 9a 1f 02 c5 86 b3 34 2c 63 80 ea c0 18 0e 23 9c ee ad ad ad 28 0b 67 13 9e 96 fe 88 97 4f a1 15 fc c4 ea 8e 4d 63 e8 08 5c 3a 36 bb c3 9a 33 fe 76 e7 d8 8f d3 a2 0c d2 90 03 38 1f 99 03 5a ff 1a a7 51 76 e6 4f b3 a2 7c c1 8b 02 b0 77 7e 3c 7a f9 93 5f 94 39 50 33 1e ce 9d 8b 53 9e 0f 7a cc 42 8a 77 00 17 cb 8b 82 32 e8 31 42 6b e1 7a cc fa da 02 0e da da 12 73 03 b3 7a f8 0c 7b 3d ca c3 6a 14 4e 3a cb 13 2f a6 82 c3 27 72 30 40 04 e7 d6 aa 11 e9 ba 7e 91 87 b2 c1 d6 46 95 91 b7 a1 37 44 69 6b a1 f1 e2 e7 3c 9c 95 fc f1 9b 87 4f 4f a1 99 81 1a 4f 24 78 5c 02 81 20 7a 9f 7d f8 e7 8c e7 73 2c f4 83 b2 cc 1d 1b 47 dd 09 e1 ff a2 8a ed 7a 84 d2 16 bc 7a 1f 47 6b 5b c4 91 ae 3d e1 51 bc a2 be 45 f5 a9 02 b4 b0 68 55 6e 6d 9d 89 09 ca a6 3c 75 da 5b 94 41 0e e4 e8 c0 90 2d 97 26 62 0b d7 80 9f 64 23 35 58 c7 0e 93 38 3c 79 5f 8e f3 6c 36 1a db 5e 3b 20 81 aa e5 7a 0a 49 63 5a 69 c9 c1 5a 8d 38 88 94 a4 60 a7 31 88 8f 00 18 7b 1c 97 05 2d 27 c2 82 01 16 b4 9e a1 6b 5c cb 06 12 06 c5 51 b2 79 82 6e 55 5f 42 e4 10 53 60 39 8a 3b ab 18 67 67 ef 45 97 d6 65 3c f0 27 2c 01 44 19 46 f4 de 44 4b ac 86 0b 4b 8d c3 ea a9 5f 9e 25 86 68 f5 c4 df 85 b9 58 b6 16 8c a3 d4 ac 0d b7 36 4b 5f d2 80 eb 88 7d e2 90 c5 a8 00 97 22 4b 38 b2 a9 63 fd 9c 16 b3 e9 34 cb 4b 1e 21 e7 30 8e 0c 83 bc 06 db 18 8f 7c f6 70 00 65 80 9b af Data Ascii: =kw6_p{C(?l+Gs
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:02 GMTContent-Type: text/cssContent-Length: 155X-Content-Type-Options: nosniffLast-Modified: Mon, 20 May 2019 22:03:40 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:02 GMTX-Request-ID: v-01bdcc16-a54e-11eb-9d1f-7ba31ca5707eX-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3528Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 7d 8e 31 0e c2 30 0c 45 77 9f c2 0b 4b a4 b4 85 31 5d 38 03 37 48 c1 10 4b 69 22 a5 16 ad 8a 7a f7 12 50 21 0b 6c f6 ff ef 59 ae 95 02 54 78 bc b2 a7 3c 9c 68 e0 d9 76 9e 50 68 12 9b c8 0e d5 33 af 01 aa 94 2b d2 21 06 c2 07 20 be 77 83 39 68 61 f9 00 77 4a c2 67 eb 5f 50 cf 41 3b e2 9b 13 83 07 ea db c2 db b8 d2 75 31 f1 1c 83 6c b6 9d f4 c8 17 71 06 f7 4d b3 2b ed 2f 59 fa 5d 14 f7 cb fc f3 4a d6 f2 99 15 40 64 38 b4 0e 01 00 00 Data Ascii: }10EwK1]87HKi"zP!lYTx<hvPh3+! w9hawJg_PA;u1lqM+/Y]J@d8
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:02 GMTContent-Type: text/cssContent-Length: 144X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:02 GMTX-Request-ID: v-01be4434-a54e-11eb-bc5d-9f87e560a80dX-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3516Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 45 8b 4b 0e 02 21 10 44 f7 7d 8a 4e dc 91 c0 cc c6 0d b3 f1 10 5e 80 4f 33 83 83 60 00 8d 9f 78 77 19 34 71 57 f5 ea d5 c0 18 20 c3 83 f3 81 b6 70 54 3a 10 2e a4 2c 65 d4 b4 a8 9b 4f 59 b4 a5 5b 85 08 eb 66 7c 05 71 2a 0d 0f 00 9d 89 52 bd 59 1f fc 77 7e 01 e2 93 fb 68 e9 2e 71 3f 8e 53 eb 35 5d 24 f6 74 56 79 f6 91 ff 81 56 66 9d 73 ba 46 cb 4d 0a 29 4b dc 39 e7 26 78 c3 07 fa d8 7c 45 a3 00 00 00 Data Ascii: EK!D}N^O3`xw4qW pT:.,eOY[f\|q*RYw~h.q?S5]$tVyVfsFM)K9&x\|E
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:02 GMTContent-Type: text/cssContent-Length: 307X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:02 GMTX-Request-ID: v-01be98d0-a54e-11eb-b533-ef8072c79ec7X-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3519Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 50 cb 6a c3 30 10 bc fb 2b 96 9c 5a 83 2c 63 13 42 9d 4b fe a1 1f 10 64 79 63 2f 91 25 23 c9 49 dd 92 7f af fc 20 75 7b 4a 09 08 b4 a3 19 cd ec 2e 8f e3 08 62 38 9c 48 e1 58 bc fb 41 a1 83 93 b1 e0 1b 04 37 38 8f 2d 38 2f 7c ef 40 9a 5e 7b b4 e1 6e 3b a3 51 fb 24 7c e1 51 94 cc 32 36 cb d8 22 3b 1e 17 4c d2 68 f8 8a 00 2a 72 9d 12 43 01 a4 15 69 64 a5 32 f2 bc 0f c4 95 2a df 14 90 6d bb 8f 11 36 48 75 e3 7f f0 05 ad 27 29 14 13 8a 6a 5d 40 4b 55 a5 70 1f dd 1e 49 2e 4a 0c d3 e0 ef 06 ee c9 41 e0 c3 20 05 6c 36 23 2c 85 3c d7 36 b8 54 cc 62 87 22 10 da 2c e5 1f be 33 8e 3c 05 7f 90 38 6d 25 9b 9b 5d 49 1c 7d 62 98 22 1d 89 db 43 6b 62 0c ad 35 76 dd f3 ca 8f 5a 51 07 c3 de aa 97 24 e1 f3 99 de 1c 97 41 ce 47 07 c7 31 cf 76 69 ca 27 a3 c4 5d ea d7 07 17 c5 d8 55 58 4d ba 7e 2e 3d 7b 1b d3 17 ab ff e5 cb 06 e5 19 ab a7 f2 77 79 99 6f b7 7c b2 ba a7 7f 03 27 27 61 41 e6 02 00 00 Data Ascii: Pj0+Z,cBKdyc/%#I u{J.b8HXA78-8/\|@^{n;Q$\|Q26";LhrCid2m6Hu')j]@KUpI.JA l6#,<6Tb",3<8m%]I}b"Ckb5vZQ$AG1vi']UXM~.={wyo\|''aA
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:02 GMTContent-Type: text/cssContent-Length: 305X-Content-Type-Options: nosniffLast-Modified: Mon, 20 May 2019 22:03:40 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:02 GMTX-Request-ID: v-01bf232c-a54e-11eb-8701-7f213eabd09bX-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3518Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 95 90 4d 6a c3 30 10 85 f7 3a c5 6c 02 49 a8 1c 97 b4 81 ca 9b dc a1 07 08 b2 35 b6 d5 ea c7 48 13 1c 53 72 f7 4a b6 b3 2b 2d 05 2d 46 8f 37 6f be 99 c3 7e cf 60 0f e7 56 1b cc c5 3b 4d 06 23 b4 3e 00 f5 08 71 8a 84 16 22 49 ba 46 08 38 f8 40 d0 f8 ab 23 0c b1 48 0d 07 c6 8a c5 c4 17 13 5f 4c fc 61 ba 5c 74 4e f8 62 00 a3 56 d4 0b 78 2e cb 4d 95 be 56 86 4e 3b 5e 7b 22 6f 05 94 c5 2b da ac 0f 52 29 ed ba 55 81 32 6b 84 37 e2 d2 e8 ce 09 68 30 07 67 75 ec 53 36 8f 83 6c 50 80 f3 63 90 43 96 6b d9 7c 76 21 cd 57 89 c2 f8 20 20 74 b5 dc 96 4f b0 be a2 3c 1d 77 15 bb 33 76 b6 a8 b4 84 d8 04 44 07 d2 29 d8 da c4 b4 92 9e 4a b4 bb 19 fd f7 1d 67 0b 80 d2 71 30 72 12 d0 1a bc 55 b3 94 2b 9e b9 04 3c e8 00 3e ae 91 74 3b a5 f6 d4 ed 48 c0 bc 01 af 91 c6 44 91 3d f7 3f 47 2e 67 e5 bc 97 a6 5d 70 57 88 15 fd e5 6d f3 bf 20 ea 75 50 3f 25 1d 8f 6b d2 9d 7d 03 95 62 2b ff 2d 02 00 00 Data Ascii: Mj0:lI5HSrJ+--F7o~`V;M#>q"IF8@#H_La\tNbVx.MVN;^{"o+R)U2k7h0guS6lPcCk\|v!W tO<w3vD)Jgq0rU+<>t;HD=?G.g]pWm uP?%k}b+-
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:02 GMTContent-Type: text/cssContent-Length: 173X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:02 GMTX-Request-ID: v-01bf824a-a54e-11eb-bd65-47395411ce16X-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3518Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 8d 4d 0e 82 30 14 84 f7 3d c5 24 ee 48 8a ba 85 8d 0b 6f c0 01 48 a1 af d8 a4 3f a4 7d 24 12 e3 dd a5 a8 3b 17 ee 26 5f be 99 39 56 95 40 85 8b b1 8e 4a b8 92 51 8b 63 64 5e 1d 65 98 98 c0 37 42 b7 66 26 8f 8e 15 2f 19 13 05 4a ca c1 06 13 eb ad 75 14 a2 ce bb 21 f3 6e c8 8f 21 8b d1 f7 b6 74 1f 02 f0 2a 4d 36 48 8e 73 83 33 f9 76 43 b3 d2 da 86 a9 c1 a9 90 2f 1d 62 d2 94 36 69 be 23 47 67 35 0e e3 38 b6 e2 f9 c7 93 64 cb 8e f6 bf f7 8c 1c 22 73 f4 bf d6 5e a3 db 3a f9 ff 00 00 00 Data Ascii: M0=$HoH?}$;&_9V@JQcd^e7Bf&/Ju!n!t*M6Hs3vC/b6i#Gg58d"s^:
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:02 GMTContent-Type: text/cssContent-Length: 636X-Content-Type-Options: nosniffLast-Modified: Mon, 20 May 2019 22:03:40 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:02 GMTX-Request-ID: v-01bf978a-a54e-11eb-a348-ebd2b9de22c7X-AH-Environment: prodAge: 853619Via: varnishX-Cache: HITX-Cache-Hits: 3508Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 9d 94 5f 6f d3 30 10 c0 df fb 29 4e 43 48 50 61 27 2d d9 46 33 21 f1 01 78 42 7b 43 68 72 e3 ab 63 e6 d8 91 e3 b4 9b 10 df 1d db 49 d7 b8 6b 37 a0 ad 92 da be 3f bf 3b df 5d 36 9f cf 60 0e 5f 36 52 61 f8 73 cb d6 0a 81 5b 26 60 8d 35 db 4a 63 a9 df 8f 32 1d 22 b8 70 1e 8e e9 cf ce 6f 66 b3 d9 da f0 47 1a 15 7e cd 00 aa de 76 c6 96 d0 98 2d de cc 7e cf 9c a5 16 85 34 9a 38 e9 bc e5 20 b3 31 da 91 1d 4a 51 bb 12 d6 46 f1 54 b0 c1 ae 63 62 10 ad 8c 0a d6 de ac 56 ab 54 a8 35 6d af 98 43 1e c5 b8 ec 5a c5 1e 4b d0 46 ef dd 32 ce 89 c6 1d d0 27 64 52 d5 4c 8b 73 2a 31 06 11 c3 67 13 1d af c2 f7 dc ca 30 4f ac 70 e3 6e 20 9b c3 d7 db 6f 21 03 00 3e 56 eb 0f 77 25 d4 92 73 d4 37 7e af 1e e3 5b d0 6b 6c c2 46 c3 ac 90 9a 04 ed 12 c8 c2 6f 26 36 d2 c4 01 38 7c 70 84 63 65 2c 73 3e e0 03 e7 77 2e ed e7 0b eb d4 c5 0f f8 6b 66 1b 60 26 14 76 80 8b 18 c7 6c 79 f0 f2 dc 5c 59 87 30 a3 d1 b3 6c 27 20 e8 04 66 27 b9 ab 7d 4a 8a f6 21 49 d1 b8 1e 28 3c 55 4e 0b 6c 20 a7 97 e1 19 4e 5a 7f 99 52 0b cf 46 8b e5 fe 28 1c ac 59 75 2f ac e9 35 2f a1 b7 ea 1d a5 d9 f0 93 8d 2f a1 2e f3 88 98 c9 ca e8 2e bb fe 14 be 59 c8 2f ed b6 e2 bd 87 26 16 5b 64 0e ae da 07 b8 0e 0c 2f c4 3d c6 f1 e1 94 c4 c6 54 7d 97 44 7a e0 22 91 e4 55 ba 3c 7e 0e 74 b1 22 9d e9 ab 1a b7 a8 5d 37 bd 6a 37 54 f0 21 29 b0 c8 07 fa 73 1a b4 41 dd 13 e9 b0 b9 bb 53 52 df a7 1d 20 b5 df 43 b2 56 a6 ba 4f b2 1d cc 0e e5 90 18 3e 53 6a e3 ed 16 79 7a bb 45 71 82 ed 95 42 d9 eb 2e 17 83 ad 49 3a 5b d3 c9 a1 e8 8a fc 2d 2c 56 5e 60 d2 47 47 ed 11 5d be e6 ec a4 f1 d8 20 d1 85 33 ed e0 e6 7c 7e 87 f1 f7 3f 6e 2e bd 03 f2 71 b9 b7 fe a4 ef 8c 10 0a c7 21 49 76 96 b5 ed b4 f7 98 92 62 0f f9 52 f8 ff 68 2f 4e b6 00 22 b5 9f 62 2e 36 f7 cb 93 6f bc f3 e5 d1 9d 1f 0d bd 49 4b 87 ee 1d 17 c3 2b b5 f7 ac d1 0f 1d 7f 95 ca 1e 85 7a 86 f8 68 ee 95 a9 ef 04 eb f4 9c b9 8a cf 61 11 52 f3 07 e8 d9 75 76 30 07 00 00 Data Ascii: _o0)NCHPa'-F3!xB{ChrcIk7?;]6`_6Ras[&`5Jc2"pofG~v-~48 1JQFTcbVT5mCZKF2'dRLs*1g0Opn o!>Vw%s7~[klFo&68\|pce,s>w.kf`&vly\Y0l' f'}J!I(<UNl NZRF(Yu/5//..Y/&[d/=T}Dz"U<~t"]7j7T!)sASR CVO>SjyzEqB.I:[-,V^`GG] 3\|~?n.q!IvbRh/N
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:02 GMTContent-Type: text/cssContent-Length: 212X-Content-Type-Options: nosniffLast-Modified: Mon, 20 May 2019 22:03:40 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:02 GMTX-Request-ID: v-021384c6-a54e-11eb-815d-1794cb1df233X-AH-Environment: prodAge: 853618Via: varnishX-Cache: HITX-Cache-Hits: 3509Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 8e 4d 6e c3 20 10 46 f7 9c 62 36 95 52 4b 40 ba 69 ab 64 d3 43 f4 02 18 26 78 14 02 16 83 e3 fc a8 77 2f 38 52 12 75 5d c1 82 99 f7 f4 7d e8 ae 13 d0 c1 d7 8e 02 b6 c7 b7 e9 03 02 a7 5c 80 a2 23 6b 4a ca aa 82 45 62 44 28 4d 68 5c 3e f8 50 0e 41 95 99 7c b5 b4 10 ea ee c0 55 00 38 e2 31 98 f3 a6 06 06 8a 28 fb 90 ec 7e 5b c1 4c ae 0c 1b 78 7b 1f 4f 6d 1c 90 fc 50 1e 73 6f ec de e7 34 45 27 99 2e 58 c1 7a fd b2 15 3f 4f f9 52 1a b6 4b c9 93 4c 07 e3 ab 3d e5 b0 52 4a df ee b2 63 6d 53 46 4d 36 45 d6 1f 9f ed e8 fa 6b 2e 84 d2 a5 39 2a 3e fa d7 bf 05 0e ff a9 61 1a ef f9 bf 52 4c 92 59 75 01 00 00 Data Ascii: Mn Fb6RK@idC&xw/8Ru]}\#kJEbD(Mh\>PA\|U81(~[Lx{OmPso4E'.Xz?ORKL=RJcmSFM6Ek.9*>aRLYu
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:02 GMTContent-Type: text/cssContent-Length: 223X-Content-Type-Options: nosniffLast-Modified: Mon, 27 Aug 2018 05:27:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:02 GMTX-Request-ID: v-02145806-a54e-11eb-bf64-9767313d366dX-AH-Environment: prodAge: 853618Via: varnishX-Cache: HITX-Cache-Hits: 3507Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 90 cd 4a 04 41 0c 84 ef f3 14 c5 9e 74 b0 bb d9 83 1e 56 04 1f c0 93 88 17 f1 d0 3b 9d 9d 0d f6 76 86 74 46 fc c1 77 77 46 0f fe 22 8a 90 43 a8 24 7c a9 0a 6d db a0 c5 e9 86 33 cd cd 25 d7 31 66 54 bb cf 54 b1 11 45 44 a1 6a 94 60 4a 84 6e cb 39 f9 69 33 34 4d e2 5b 3f 8b ee 45 c4 63 03 ac 63 77 d3 ab 8c 25 ad 30 6a de f3 3e bc 16 ef 62 4f 35 74 a2 14 e6 1b 3f 94 7e 1f 45 9c d2 40 d1 b0 5c 0e 77 e8 a8 18 e9 31 42 8b b3 8b f3 99 f1 f4 09 e2 72 ac f6 37 92 5b 8b 99 ec 7e 0d bc 4a ac 27 0b b5 bc b8 c6 47 f8 c1 0f b3 ef 1e 73 83 54 36 96 b2 82 3b 3a 7c c3 7d 75 b5 15 e5 07 29 36 25 ff af 14 dd 7b 57 13 e6 19 11 55 ba 3e de 01 00 00 Data Ascii: JAtV;vtFwwF"C$\|m3%1fTTEDj`Jn9i34M[?Eccw%0j>bO5t?~E@\w1Br7[~J'GsT6;:\|}u)6%{WU>
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:02 GMTContent-Type: text/cssContent-Length: 170X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:02 GMTX-Request-ID: v-021464cc-a54e-11eb-abf2-93b190e5ddabX-AH-Environment: prodAge: 853618Via: varnishX-Cache: HITX-Cache-Hits: 3488Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 8e 3d 0e c2 30 0c 85 f7 9c c2 23 54 24 19 41 65 e1 0e 9c 20 75 dd 34 22 3f 28 4e 2a 21 c4 dd 49 25 24 c4 d4 01 79 b1 9e bf f7 9e 75 d7 09 e8 e0 32 39 4f eb 72 2d 0f 4f 0c 53 ca 80 06 67 9a 7c e5 19 cc 18 5c 84 40 b1 aa 06 69 21 54 49 c9 0f 26 4b 87 29 ca 2f 29 ef 99 98 0a f7 03 b5 08 82 a7 00 18 0c de 6c 4e 35 8e d2 05 63 a9 87 9a fd 4e 63 bb eb e0 18 f5 9a c1 fa 78 5a a7 c9 56 f1 62 f7 67 f1 da 6e 31 58 dc 42 9f b2 c3 26 af 1c cb 1f cb 9f ff bd 01 8d 35 a8 41 3d 01 00 00 Data Ascii: =0#T$Ae u4"?(N*!I%$yu29Or-OSg\|\@i!TI&K)/)lN5cNcxZVbgn1XB&5A=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:02 GMTContent-Type: text/cssContent-Length: 8567X-Content-Type-Options: nosniffLast-Modified: Mon, 22 Feb 2021 16:42:59 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:02 GMTX-Request-ID: v-0214a068-a54e-11eb-b86e-2f66225fa057X-AH-Environment: prodAge: 853618Via: varnishX-Cache: HITX-Cache-Hits: 3490Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 3d 69 57 e3 48 92 9f e1 57 68 ab de 6e 75 55 cb 46 be 6d d8 99 1d 63 1b ca 35 1c 85 cd 51 d0 d3 af 9e 2e db 02 59 72 4b 32 c6 f0 f8 ef 1b 79 48 ca 94 52 b2 38 7a 76 76 a0 ab b1 53 79 c6 95 91 91 11 a1 9d 2f db 57 a6 e6 5b 81 29 9d a8 73 73 57 fa 6a 4d 67 d2 77 53 bd f3 a5 91 e9 bb 5e b0 dd 37 7d dd b3 16 81 e5 3a bb d2 a1 ed 6a aa bd 73 68 3a a6 a7 da 92 1f ac 6d d3 9f 99 66 b0 7d 69 7a 3e ae 52 29 2b db dd 65 30 73 bd 5d a9 6b ac 5c ef ce 9f b9 0b 5a 24 5d 8c 86 bb d2 2c 08 16 bb 3b 3b ab d5 aa ac 46 35 ca ba 3b df fe b2 b3 bd bd f3 45 fa cb eb 7e 24 68 0e ad e1 e7 e0 f4 e4 7c 2c bd f0 87 b4 7e c3 d8 d2 df 26 ae 13 94 26 aa 6e 4a 4f db 5b f4 cb dc b2 d7 bb d2 a7 43 37 98 a9 f3 d2 be ad ea 77 9f f6 b6 b7 7c 4f df 95 96 9e fd cb a7 72 79 07 fe 43 b5 fd 1d b6 56 d9 74 83 4f 9f 0b 57 fd 9f 8f 96 39 b1 1e 3e 7d 96 26 ae 37 57 83 5f 3e 99 73 cd 34 0c d3 28 b9 0b d3 09 d6 0b f3 d3 67 79 7b 6b 2b bf a7 95 3b 99 54 99 4e e8 f7 62 0d 13 ed 8a 34 0b 02 b6 55 e0 2d cd a2 33 f5 ef a7 1f 39 a8 c6 dd c0 23 0c 39 8c 82 95 09 44 1d ec 4a 0e 7a 68 87 a5 98 76 e3 c2 e7 ed ed 22 d8 73 6d 63 33 f2 a0 52 41 dc d1 9a 6f 47 1d ea e8 35 98 0b db bd 0c 71 a8 d5 ab f0 86 1a b2 68 43 e0 fc 27 60 0d 51 c7 30 50 6d 4b 2f c6 79 a4 ee 0b f8 2f 6e f0 3e 5c 48 fb 7b 2d 2f 32 cd 5f ce 91 b4 f1 ab f9 92 b6 4f 72 27 85 ff 1b b1 5d 48 c4 ba 6e 01 09 0b 95 8a 32 a9 fb 4e f2 15 75 f4 2a 26 75 5f 23 5d 51 ab d7 31 a9 cb cb 56 04 ce 37 a2 ed 1d f6 f4 d1 60 3c 38 7f e9 96 fe f6 3d 7d 16 cc 6d 59 73 8d b5 6c 58 f7 b2 bf 50 1d 59 5d 2c 6c 33 90 5d ed d6 d4 03 d9 9a 78 a0 39 c9 b3 8a 3c ab ca b3 9a 3c ab cb b3 86 3c 6b ca 0b 59 b3 5d fd ee 8f a5 1b 98 f2 c2 33 65 55 56 35 cd 93 55 dd 73 9d f5 5c 56 0d c3 33 7d 5f d6 ac a9 ac 83 06 26 eb ae 61 ca 86 69 cb c6 c4 91 cd b9 6c cd a7 b2 e5 f8 f2 9d 66 c8 7f c8 be ec ab f3 85 ec 03 48 6d d9 0f 3c eb ce 44 7f 5c 67 2a fb 4b 0d fe 2d e4 20 90 ef 55 4f d6 e4 a5 6c c9 3a 90 a4 e9 c9 06 74 17 c8 86 21 bb b6 bc b4 65 db 92 27 96 69 1b 3e 2c 00 61 54 b6 55 0d 46 b4 cd a9 e9 18 72 a0 6a 36 cc 43 c5 da 9e 1c e0 65 07 13 d7 0d e4 60 66 aa f0 dc 83 0f 72 60 c8 aa 17 58 3a 54 55 7d cb 40 0d 9c 7b d5 87 a9 07 aa 65 fb 32 66 0b 18 66 ba 84 45 c3 9f b0 3f d4 11 cc 08 f5 84 fe 4c 3d 17 e6 3c 37 9d a5 ec a8 f7 b2 bb 0c 16 cb 40 f6 96 da 5a f6 01 b0 a8 85 bf 9c cf 55 0f e6 60 01 84 e1 d3 9d ac 2e 0d cb 95 ef 61 54 f7 09 0a a6 96 b3 ab ec 2d 00 94 96 33 85 4f 9a eb 41 df f0 81 d0 a1 f5 68 ee 56 14 e5 3f f1 d7 5d cb 99 99 9e 15 ec dd 9b
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:02 GMTContent-Type: text/cssContent-Length: 6666X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:02 GMTX-Request-ID: v-02149488-a54e-11eb-b374-b7f128a685f7X-AH-Environment: prodAge: 853618Via: varnishX-Cache: HITX-Cache-Hits: 3479Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 5d 4d 8f e4 36 92 bd cf af c8 b5 31 eb ee 41 65 39 a9 fc ae c6 ec 78 76 17 03 18 98 c1 1e 66 0e 7b d8 0b 25 51 99 ec 92 44 99 92 aa 2a bb d1 ff 7d 49 89 41 51 59 8f 1a 2f e0 c3 1a 86 5d 45 3e 52 fc 08 06 23 82 8f ac 1f ff f0 2f bf 5b fd 61 b5 fa 8b aa bb d5 9f 5f 45 ab 2a b1 da 3d 1e 1e b7 ab f4 b6 fa 29 e7 2f e2 c2 eb fc b6 5a af ae 5d d7 3c fd f8 63 61 90 7c 04 3e 4a 65 d2 7f 0a 52 86 ba fe 2a 33 51 b7 22 56 e4 c7 d2 e5 7f b0 1f 7d 5a fd fd e7 bf ae fe eb 2f 7f 5d b1 47 f6 b0 fa 8f bf ff fd 69 f5 b7 9f ff 41 95 7c 34 35 fe 38 7c 61 5d f0 4c 7c 75 3f 55 b2 bc 3d fd 60 cb bb 36 ff f0 a9 d5 d9 53 af cb 0f 3f 3c 3e 0e 1f 6c c3 cf ae 5f 45 6a 7f 7d 14 aa fb d3 cb 1f 87 0e fe f0 f1 ff 50 e6 7b 29 0a f9 f6 af be e8 aa 50 ba e2 dd 87 1f 44 95 8a 3c 17 f9 5a 35 a2 ee 6e 8d f8 e1 e3 c3 3f af f2 55 15 45 f2 a7 f7 b5 0d e9 bf ba 86 48 05 bf aa 7c d7 a1 e2 9d ee c5 af ee 44 fb 72 a1 2a be 0f f2 b5 b8 f4 25 d7 41 ad 06 68 06 7b 98 ba 57 21 2f d7 ee a9 b6 39 e5 98 d4 76 b7 52 b8 94 6f 8f 05 ff 9a cb b6 29 f9 ed 49 d6 a5 ac c5 3a 2d 55 f6 3c 40 1d 68 35 ff 1f db 35 6f 3f b2 55 20 0c ae 5e f9 45 98 3a ae 42 cb ee 53 27 de ba b5 16 75 6e 7e ab 2f 4f bc ef d4 27 db 91 67 69 c4 69 40 57 4a 75 d7 21 af ee 24 2f 25 6f 45 fe 69 5d a9 2f 6b d5 be dd 63 2e 9a df da 8c 97 c2 36 78 5d 5e be 4e 5f 64 8f 5b f7 8f a8 3e 0d 1d b8 8e 7d 7e 3c ee 4d ca 8b d0 9d 34 25 d7 e6 13 97 fa 69 cd f6 bf 1f ea 48 de 82 3a 12 51 0d 89 db 30 71 eb 12 77 61 e2 ce 25 ee c3 c4 bd 4b 2c 5e bf be ca bc bb 9a 36 25 a7 fd 91 ed 92 b3 69 c1 30 14 e3 d7 cd 12 eb 84 1e b0 7d f9 b5 e1 79 6e 3a b7 2e 45 d1 3d 6d 3e 55 5c 5f 64 3d fe 96 3c 9a c2 43 15 43 a7 5a 37 6b 6b 2b 2b 66 56 6a e1 ea f8 b7 52 7e 6d 54 2b 3b a9 ea 27 2d 4a de c9 17 37 46 41 06 4f 5b 55 f6 9d f8 34 d4 bd 9e 55 3e 36 78 96 d4 a9 e6 69 f6 3b ec 40 29 dd 54 8c 95 b2 c7 b1 c7 a7 83 1b 8c 54 69 33 f9 d4 c9 a7 47 33 c6 ab c7 64 6f ff cb ec c4 8c f9 4f a6 65 32 5f 3d 6e 4e 26 e3 7b 21 84 4b 5f 6b 9e cb be 35 ed 70 d5 35 7d 59 0e 63 f3 b5 28 15 ef 9e ec 8f 53 86 b6 33 ee 72 86 9f 6d d6 bc 98 1b 5e 3d ca 86 9b dc bb 0a c2 29 18 21 b1 da 63 cd 79 fc 67 1f 5c fc 9a 69 4d db c8 fa 2b ad 14 5e 4b b3 a0 ed 14 ba 9c 55 d2 ae 64 5d c8 5a 76 62 65 85 9d eb 4f bf 06 44 23 d5 8a 85 ba 59 50 ac ed 44 d3 7e 38 7d 04 b5 23 d8 b7 9f a8 da 67 71 2b 34 af 44 bb a2 ce 6c 7e ef bf d9 69 5e b7 56 4b 3d 69 d5 f1 4e 7c d8 e4 e2 f2 f1 13 4e fe c6 36 4b 45 b7 fb 33 2e ec 32 be 7d fb e9 ff 51 5b ec f8 8f 69 eb f3 e6 eb ba 6a d7 85 2c
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:03 GMTContent-Type: text/cssContent-Length: 3437X-Content-Type-Options: nosniffLast-Modified: Fri, 26 Feb 2021 23:39:46 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:03 GMTX-Request-ID: v-0273679c-a54e-11eb-9dc7-73548d2df8afX-AH-Environment: prodAge: 853618Via: varnishX-Cache: HITX-Cache-Hits: 3494Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 1b 69 6f 1b 37 f6 bb 7e 05 1b a3 48 1b 78 64 59 97 6d 09 5d 74 e3 c4 6d 17 6d 51 c4 d9 ed 87 ed 22 a0 66 28 89 f5 68 38 25 29 db 4a e0 ff be ef f1 98 e1 8c 46 87 1d 25 bb 28 6a 03 3e 66 c8 77 df a4 5a 47 5a 88 74 42 65 44 93 05 cf b8 d2 92 6a 2e 32 f2 a1 45 e0 eb e4 05 f9 75 ce 32 12 a7 42 b1 84 e8 39 93 8c 70 45 32 41 cc 7a e2 76 13 31 9d 2a a6 8f 09 4d 53 71 47 b8 86 17 44 dc 32 99 d2 15 ee 22 73 46 13 26 db e4 c5 89 81 fb 3e e2 59 c2 ee 47 a4 df e9 9c 8e 5b 0f ad d6 b7 0b 96 70 8a fb 09 cd 12 f2 15 00 8f ee 78 a2 e7 23 72 da ed 74 f2 fb af 1d 49 13 91 ac da 9e 68 a0 76 15 89 9c 65 c5 13 c0 a9 79 4c d3 e2 c1 94 df 03 e5 47 33 96 31 49 d3 9f e9 ad 83 83 5f 5a e4 23 d2 bb c8 ef c7 e6 d1 c3 3e 08 e6 42 f2 f7 22 d3 8f 41 71 16 a0 f0 72 bd 5e 4e 14 8b 8d ac 51 50 92 27 4c 79 f1 3c 95 84 36 a3 52 cf 53 3e 65 db a8 e9 78 52 80 98 f6 5c 2c 58 4e 67 2c 52 29 50 20 a3 98 e6 48 53 9b 2d 72 bd 3a 26 6d 9e 69 26 33 9a 36 be 2f ad e4 67 66 cd 83 f0 45 2e a4 a6 59 61 01 c8 98 7d 93 a5 3c 63 44 e9 55 0a 9c d2 3c 4f 39 ec 99 ac c8 9b 6b cf 77 c2 55 0e 16 33 ca 04 2c fc a2 00 65 0c 04 28 49 7e 91 22 59 c6 3a 02 1b 63 f2 12 24 c0 32 1d 49 3e 9b eb 4b 91 46 7c 61 f8 c8 69 cc a4 a1 7c af f5 31 0a 12 08 93 8e 19 4f 03 41 22 1e 67 9a 21 ca 29 a3 7a 29 59 f2 c3 62 56 a2 68 67 a2 7c 13 a8 a5 86 33 30 94 cf c5 75 85 8a 49 2a e2 9b d0 48 54 69 ab eb 76 b5 2e 30 24 e2 47 11 9b 40 12 2d f3 9c c9 ef c0 0a d0 e5 5f a7 6c 81 d4 a4 10 68 dc 76 fc 33 32 46 31 42 50 b1 c5 bb a0 72 c6 b3 11 19 e4 f7 a4 03 df a7 03 f4 20 80 3d 15 72 41 52 3a 61 69 1b ff 8c 24 fb 63 c9 4b 69 c6 22 15 72 44 8e fa f1 45 d2 a5 c5 8e f6 ef 62 82 f8 7f 04 64 3c 9b 45 06 8a 05 40 0d 5f ca ed f7 78 fb 1d 8b d8 40 38 32 d2 02 89 2e 98 52 46 da 4c de f2 98 81 84 1d 93 7e 81 81 d8 00 9c 67 f9 52 d7 50 74 43 14 60 19 d7 e0 28 e0 ca 28 d8 c0 eb ec c3 ab 65 9a 82 5a 17 22 ba 93 14 05 4a 3e e4 34 49 80 15 74 67 88 17 12 7d d3 78 b7 d1 02 40 6c d1 b6 d3 d9 4f 2c 5b be 15 b3 19 48 78 c2 80 2c 46 3e c4 d6 2a 46 e4 d9 6f d3 4e 7c f1 0c 36 34 2c 6f 23 f9 b7 1b 76 75 92 0d bb 1c 9b b9 50 1c 5f 8c 88 64 29 45 38 56 b3 53 00 12 4d e9 82 a7 60 32 cf af e0 bf bf df 31 05 51 e8 79 f0 5e f1 f7 60 0e dd be 0f 9b 18 39 a2 39 43 1b 06 a7 0b 16 de b9 67 19 48 9b a6 e3 8a 0d 74 68 77 d0 73 58 35 bb d7 51 c2 62 61 d3 5b e8 69 00 63 72 c3 35 c6 d9 cc 93 8c be de 1e 28 c2 a8 f2 ab 16 e2 fd ae 25 62 27 0c b5 63 c5 f6 b7 6b 5a 03 cb 39 72 f2 47 b3 69 54 86 97 c6 d9 70 c2 fa bd f1 ce 1d 4e e9 e5 c6 ab ab
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:03 GMTContent-Type: text/cssContent-Length: 2648X-Content-Type-Options: nosniffLast-Modified: Mon, 26 Oct 2020 18:10:15 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:03 GMTX-Request-ID: v-027afa0c-a54e-11eb-ab11-4f90fbc849c1X-AH-Environment: prodAge: 853618Via: varnishX-Cache: HITX-Cache-Hits: 3487Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5b 6d 6f e3 b8 11 fe ac fc 0a 36 41 b1 ed 62 ed c8 b6 1c 27 36 1a 34 d9 4d 7a 41 6f 6f af 97 3b dc 97 7e a1 24 ca 16 22 4b 86 24 c7 9b 3b f8 bf 97 2f 22 4d 49 24 45 39 d9 a2 45 1b ef 8b 23 93 c3 e1 cc 33 0f 87 43 fa fc 3d f8 cb 71 3f e0 fd f9 c9 f9 7b a0 f9 b9 f9 f4 eb 97 9f fe fe f8 dd 97 1f c1 e7 bb 1f 7e 69 37 60 bd 5f 31 f6 09 00 58 c0 e7 cc 8f 13 04 7e 80 cf f1 12 96 71 96 82 9f b3 e5 12 3f c1 2d 00 18 ae e9 c7 b7 65 fa 6b 0e 37 1b 94 83 df f1 d3 4d 56 c4 a4 e9 1c 40 bf c8 92 6d 89 16 f8 69 99 6d e6 60 3c de 7c 25 bf e4 f1 72 55 ce c1 c4 65 bf 26 71 8a 06 2b c4 1e ba e4 c9 1e ff c5 7f e0 70 0d e3 f4 33 4a b7 d5 b0 75 f9 39 4a b0 52 cf 54 7e 94 a5 e5 20 82 eb 38 79 99 83 77 f7 f8 b7 9b 1d 2a b2 35 7a b7 70 a8 2c da a0 88 7f 43 58 0d 4f 31 ee 48 48 d9 55 4f d2 2c 5f c3 84 3c 0e b2 24 cb e7 e0 cc 85 e3 e9 84 4d 07 7d 2d 07 21 0a b2 1c 32 5d d2 2c a5 1f 00 dc dd 7f 8a cb 41 99 c3 54 18 22 49 c0 70 5a 00 04 0b da 68 b0 ce 7e 33 37 c8 3a fa 17 c6 cf 4d 9f 05 78 8a 28 c5 d3 3b fd 67 e4 06 57 a7 8b 13 27 d8 e6 05 99 df 26 8b f1 67 b9 c1 01 73 1f 45 59 8e fd d0 92 a2 e9 30 84 01 f1 10 e9 c0 4c 38 83 7e 34 9e 74 34 57 0f e3 86 da 61 e6 ab ec b9 82 5f db 57 7b da 85 01 1a 07 8e 8c 66 0a e3 14 3e 9f 71 71 e0 77 d2 30 8c 8b 4d 02 5f 2a af 92 7e df c5 21 02 0f 29 b6 29 b6 e7 0b eb b7 81 61 18 a7 cb 0a b2 14 11 30 89 97 d8 e6 09 8a ca 05 11 b4 8b c3 72 35 1f b9 ee 1f 25 a3 92 f1 0a 14 10 05 fe 5d 43 6e 93 21 0c 77 6c 34 79 30 3f c9 82 27 1c 20 f5 f8 70 a9 a0 96 f4 fa 0c 84 c5 1a b2 85 8a 23 1c dd 34 c4 45 9c 6b e6 6f 14 e0 36 7b d7 67 b3 4d ea 7d 5c f5 a4 93 58 3d 6f a0 e5 93 bd 80 cc 60 d0 e6 bf 82 7a a3 3e c0 30 db a0 f4 e3 2a 4e 42 d5 58 5a 62 cc 25 da a3 24 49 df 31 2f 02 6f ca e6 2e 48 aa 72 ab 81 ed ea ae 1c 99 a9 ae 28 5f 70 f0 48 4c a7 21 40 19 0b 01 e2 24 81 43 ae 8c 03 98 f0 4f b0 fa 94 61 b4 74 a2 33 d8 43 9a a2 5c 04 7d 3f 47 c9 14 31 72 27 a7 c2 8e a3 0b 36 75 4e 08 17 de 95 0b a3 ba 7d 46 b3 1a b6 74 fa 29 e8 e5 fe fe 5e d7 71 48 1b 5f 37 01 e1 c3 e0 69 99 67 db 34 c4 dd 23 8f bc 2c 42 ca 4a 1c 5f 7c 88 2c 2b 7d 74 a6 07 2d 83 8e 4f 17 40 9a f6 cd cd cd b1 4a 1b dc dd 58 1c ac a8 e2 cd c6 60 21 3e 4e 43 f0 73 8c e5 41 fc e6 fb 6c 87 df 7d c1 e2 73 4c c2 05 50 44 3b 26 9e 76 cc f3 31 20 84 1c 86 23 03 c0 9a 32 5a 3a 33 1c 4f b0 08 a6 28 97 3f 9d 4e 17 54 27 b5 5b cc a3 48 60 ae 41 b2 52 5a 2f c3 06 d7 75 21 46 f7 59 2b e6 8e 26 c1 45 d0 4f ac 8d ae 2d b9 56 ea 59 40 2c 8a a2 de 96 b4 14 0b 0c 4b d3 23 21 73 d5 ca
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:03 GMTContent-Type: text/cssContent-Length: 288X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:03 GMTX-Request-ID: v-027a83b0-a54e-11eb-a108-4713e1b6d055X-AH-Environment: prodAge: 853618Via: varnishX-Cache: HITX-Cache-Hits: 3486Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 92 d1 6e 83 30 0c 45 df fb 15 91 a6 3d a6 ea 84 ca 03 fb 9a 90 18 62 35 c4 c8 18 a8 3a ed df 17 a0 52 ab 96 95 3e c5 b9 f7 e6 c4 72 b2 af c0 48 cf e0 b4 69 4a 84 28 7a 40 07 a4 7e 76 4a b5 d4 a1 20 c5 42 31 04 23 38 c0 77 52 47 74 e2 0b f5 75 38 7c 4e db 92 d8 01 6b a1 36 69 ed 59 75 14 d0 a9 8f aa aa 66 d7 d8 53 cd d4 47 a7 2d 05 e2 42 09 9b d8 b5 86 d3 55 0f 01 86 36 f5 52 a8 48 d7 f2 c1 37 22 c6 fa 26 1d 2c 54 67 99 42 98 02 7a 84 f2 84 a2 ef 82 1d 5e a0 50 96 06 e0 39 d1 d0 e5 95 4d 2f cc ff 9c df dd 6e bf 3e 39 ad ab 3e 04 ed 01 6b 2f f3 18 97 f2 36 b1 06 a3 be d3 06 ff 1a 47 11 b4 78 64 b7 c6 cc b2 27 64 96 6d 11 bd 09 d5 1a ec f8 dc df 71 b3 3d 19 69 69 af 5b 43 e6 f9 13 32 cf b7 90 26 60 1d b5 4d 0a f0 4c bb 7b 85 db 9f bc fa cb f2 0e 30 7d d1 4d 5a ca bc 83 2a 49 84 9a 4d da 12 9b 80 7f 90 37 08 81 67 03 00 00 Data Ascii: n0E=b5:R>rHiJ(z@~vJ B1#8wRGtu8\|Nk6iYufSG-BU6RH7"&,TgBz^P9M/n>9>k/6Gxd'dmq=ii[C2&`ML{0}MZ*IM7g
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:03 GMTContent-Type: text/cssContent-Length: 3124X-Content-Type-Options: nosniffLast-Modified: Fri, 18 Dec 2020 17:59:34 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:03 GMTX-Request-ID: v-027cf3ac-a54e-11eb-8b8c-67d5dbdebe33X-AH-Environment: prodAge: 853618Via: varnishX-Cache: HITX-Cache-Hits: 3476Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 5b 7b 53 db ca 15 ff 3f 9f 62 cb 9d 0c 84 41 60 c9 8f 10 33 9d a9 01 5f e2 b9 04 52 70 9a a6 8f b9 b3 b6 d6 f6 36 b2 e4 91 e4 00 c9 f0 dd bb bb da 95 f6 29 cb 40 7b 7b 1b 26 09 96 f6 71 ce d9 b3 bf f3 f4 d1 3e 38 1b dc 0c 87 37 e0 e3 e0 62 08 ce ae af c6 c3 ab 31 18 7f f9 38 04 fb 47 af 0e a7 30 45 28 fd 8c c3 7c 01 7e bc 02 e0 8e fe d6 07 7e ab f5 fa e4 d5 e3 2b 32 c0 2b 86 78 5e 0c bf b1 21 ab 24 c3 39 4e e2 3e 98 e1 7b 14 9e 90 47 13 38 fd 3a 4f 93 75 1c f6 c1 4f b3 d9 8c 3e 9b 26 51 92 92 8f 2d 18 74 db e8 44 5a bb fb 9a 7e 5a c2 74 8e 63 2f 42 b3 bc 0f 82 ce ea 9e 3e e4 9f 5a c5 a7 3c 59 d1 0f ec 13 a1 e5 a7 49 94 4c bf 72 7a b2 82 16 18 86 38 9e f7 41 5b 90 5b 10 bb 82 73 04 0e e7 51 32 81 91 83 39 69 72 8b ce 55 a7 e2 38 47 69 0c 23 6f b6 8e 8a 15 3e a6 c9 32 f1 a6 09 79 11 e7 9f 53 b8 5a a1 54 a5 a1 55 b1 45 3e 80 2e 27 a9 5c 6a 09 71 7c 9a 84 0f 6c 11 f2 3b 4a f9 9e 75 cb 58 d8 b2 2f 48 a8 3a 13 eb 1a 0b 92 35 8e f6 65 45 78 3f bc b9 06 a3 0f e4 d7 4a 0b 14 a9 95 0f 17 28 4d d8 7a fc c0 d8 a1 f4 f8 79 55 ba 90 a2 08 e6 f8 1b 92 45 c9 a6 e2 e5 9c 4d 57 74 e4 d8 a7 3f d5 89 b7 d4 f3 f8 03 5e ae 92 34 87 71 5e aa 01 57 09 ed 08 bf 7b 38 0e d1 7d 1f 78 be 22 28 ba b3 e7 e1 25 65 a8 66 f3 05 c2 f3 45 5e 2d d7 80 98 a3 7d 5d ff 89 00 39 8d 7e a7 21 95 1b b4 eb 4c d3 8f e2 60 6a f8 08 71 b6 8a e0 43 1f b0 1b 62 e3 4c a3 48 5c 4e 7e 57 61 84 e7 b1 87 73 b4 cc fa 60 8a 28 75 f4 f1 bf d6 59 8e 67 a5 7a c9 af aa 8b d7 5b dd d7 6b a9 c6 63 8e 60 c6 35 74 46 d6 f5 66 70 89 23 42 fa ee 79 9a e0 10 dc a2 14 cf 76 0f 40 46 ff 3f 11 83 32 fc 1d 55 28 91 a3 fb dc 63 34 f7 d9 91 b1 a3 23 f2 f2 4a ae 0f 03 83 4b f5 86 93 e9 f9 ff 22 8d aa 10 17 be 9b 44 9c 47 85 4e 68 67 c9 36 ce 53 18 67 b3 24 5d f6 c1 9a 02 d5 94 f0 53 68 6f 85 4f 04 a1 08 a9 4c 7b 25 fa bb 5d 17 fd 0c 43 2a 6b 72 33 b8 b8 19 7c 7c 0f 4e 3f 5d 9d 5f 0e 6f a9 35 a1 ef ab 17 d4 d6 0c 46 57 c3 9b 5b f0 e1 fa 74 74 c9 0d 4e 69 4f a6 39 3c 00 f2 67 98 a3 79 92 62 94 29 8f e1 94 30 08 43 ed 29 23 8f 69 3b 79 0c 7d ff 81 08 2c 85 73 02 cb 8b cc cb e1 24 fb f5 d7 3b 09 a3 25 38 95 74 97 aa 6e f7 35 53 61 27 cb 36 4a d8 92 f2 68 71 2f 1c e3 8b 9b a5 10 42 d5 a4 bc 36 96 19 e4 ef d4 40 5d a1 5b d2 71 f9 3d 6e 1c 8f f6 6f 87 67 e3 d1 f5 15 18 8f c6 e4 3c 54 59 67 68 4a 21 4b d2 1a 55 af 2f 92 7c 01 97 de 69 44 f0 65 77 a3 16 49 fb 53 d9 a9 00 a9 28 b9 00 44 c1 b6 82 16 76 ea 0e e7 e4 61 0c 7e 08 b5 7e db 9b 84 41 70 f2 e8 9e 70 b7 20 f2 ad 26 d0 7b 50 33 7a 12 ad a5 c1
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:03 GMTContent-Type: text/cssContent-Length: 1111X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:03 GMTX-Request-ID: v-027cf5d2-a54e-11eb-b7c5-3b6bf5645302X-AH-Environment: prodAge: 853618Via: varnishX-Cache: HITX-Cache-Hits: 2881Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 57 5b 6f db 36 14 7e b6 7f c5 29 86 62 8d 61 39 72 e2 a4 99 0d 0c e8 32 a4 29 30 34 c5 5c ac 6f 05 28 89 96 b8 50 a2 40 51 8e 9d 22 ff 7d bc 48 36 29 d3 89 9d 2e 7e 88 78 ee 87 e7 f2 49 a7 03 58 8e 47 e1 e8 12 06 a7 fd d3 01 5c 33 8e e1 ef 39 5c cf e7 b0 20 14 8f e0 b7 8b b7 c0 16 20 48 8e 61 cd 6a a8 32 56 d3 a4 f8 55 40 9c a1 22 c5 80 8a b5 c8 48 91 42 86 b9 94 97 76 46 9c ad 11 9d 53 92 60 0e 3f fa bd 07 92 88 6c 0a 97 61 58 ae 66 fd 5e 86 49 9a 89 29 4c 9a 73 c9 2a 22 08 2b a6 c0 31 45 82 2c b1 24 26 84 e3 d8 50 a9 e0 b3 fe 93 6b f5 77 18 28 cb 0b ca 90 b4 44 f1 42 28 11 29 53 dd a0 04 cb 7f df 70 74 4f c4 79 02 f2 59 eb 0c 7d 4c 92 a7 5e ba 7c be 66 85 40 a4 d0 19 80 fc 0b 1e 34 33 10 1c 15 d5 82 f1 7c 0a 05 2b b0 89 ac ba 5b 62 2e 83 79 b0 d2 1d 87 e1 5b 2b db e6 e8 4d 96 35 da 53 c8 48 92 e0 62 d6 c9 ac b7 71 8e ca 20 93 f6 a8 b2 19 c4 8c 32 3e e5 69 84 de 85 43 fd 3b 69 c2 f9 87 54 24 a2 f8 33 46 3c 5a 7f e3 a8 fc df e2 52 01 4d 21 94 4f 82 95 e6 e1 e7 83 eb 5c e0 36 16 14 55 8c d6 02 7b 1d 1b 6b 76 9d fc 59 3c 9b f7 51 c1 2b 7f 1f 38 67 0f ba 69 be 66 75 1e 99 b3 f2 1d d7 bc 92 4a 50 32 52 08 cc 5b 79 2d b5 d3 ab de 48 a5 82 eb e1 33 5a fa 3c b1 12 c5 44 ac 65 0e 76 02 aa 2f 8d c9 86 0f e1 e8 bc 02 2a ef 06 71 25 98 b3 c7 03 a4 d8 cb 32 2f 09 e8 ba dc ea 8e 71 c2 55 c5 5b aa e2 13 aa cf 9b a6 f2 e4 b0 95 83 b0 b5 ac bd 0c 0f cb ee 68 7d f6 33 da af 57 6d 6a fe f1 1a 95 4a 7d 77 4e dd b6 11 78 25 02 24 9b 54 36 4e 8c 37 7d 26 37 f7 4d 4d 69 15 73 2c ef 9c 69 53 d5 10 e4 4c ad e5 8e 2b 19 17 a8 10 f0 fd 7b 77 3b ab d5 b7 d5 73 06 68 41 56 38 81 37 1b 6d 6b 74 50 2d 98 cb 69 42 de 65 e4 88 a7 44 5a 0b 5d 72 89 92 44 42 c6 0e fd 31 20 45 82 57 53 38 1b 4f de 4f ae ce 2f 27 ef 5d 01 33 fb 2e ad d9 0c 2e 31 62 42 b0 7c 87 cc 4d 06 2e 55 0f aa 05 2e 2d 64 68 60 b8 c7 5f e4 84 32 d4 60 d9 76 f6 5c c3 9e 16 96 f5 f7 34 66 43 75 da 0d 0c 71 97 92 90 aa a4 68 bd 85 9a 7e 1b db 11 7b 72 6b 25 a2 2c be f7 ef f5 9d c5 e8 74 61 e7 86 d4 92 92 a5 be d5 1a 7a 43 6d 8f 60 47 68 77 4c 1b be 5a d8 b2 73 5f 85 48 c6 82 53 90 8d 98 75 07 9b 36 0a 67 bd 46 47 ae 52 25 ad ab 51 57 98 07 15 a6 f2 05 63 0a 9a 62 ae 77 53 44 47 a0 e1 79 68 4f 8d e1 4f 02 e7 da f8 81 58 32 3a bb 38 71 e0 a1 f2 e2 c7 2b df 15 b6 33 74 d6 84 f8 15 19 0f ae 5c 84 e2 fb 94 b3 ba 48 4c 3e 9d 91 68 f4 86 6e 90 47 c0 e5 91 d0 6a de 0c 12 cc 1c 40 3f 1d 78 fa d9 d3 f7 72 af 49 d9 03 fb e9 f9 69 b1 6f 49 99 b5 76 db ac db d1 3d b5 c6 83 96 16 ee ed da 36 b7 1b
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:03 GMTContent-Type: text/cssContent-Length: 1962X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:03 GMTX-Request-ID: v-027ce01a-a54e-11eb-9590-9780fa21e305X-AH-Environment: prodAge: 853618Via: varnishX-Cache: HITX-Cache-Hits: 2873Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 59 6b 6f db 36 14 fd 6c ff 8a 3b 0c 43 93 a0 52 fc 88 5d c7 c5 80 2d 0d d2 16 18 d6 a1 d9 03 d8 37 da a2 6d ae b2 28 48 74 1e 0d f2 df 77 f9 d0 83 14 25 2b 2b b0 08 49 4c 8a e4 7d f0 f0 f0 90 3e 3f eb fc 19 e2 03 f0 99 3f 92 f8 36 66 11 cd e0 8f 84 dd d1 2c 27 31 dc 7e 61 89 7e 0f 30 0e e1 e7 2c e3 f7 39 e8 f2 24 84 ab 43 1c 53 91 eb f2 34 84 df 77 87 fd 2a 21 2c 36 55 17 58 45 56 a6 30 0b e1 06 db e7 eb 8c d2 04 56 07 21 78 a2 df cc 43 f8 2d 26 8f e7 eb 98 e7 14 ee d0 07 6e bd 7f 83 ef 33 1a 73 82 ce e9 9a 45 08 ef 48 2a 58 d1 42 fe bd 4d 33 26 e8 12 5e 65 79 70 28 22 08 d3 64 fb 4a be bd a1 34 86 0d 9a 06 c1 81 46 4c 00 49 1e c5 8e 25 5b f9 f6 e3 06 1e f9 01 22 9e bc 12 90 f3 3d 85 94 64 02 02 f8 e7 90 0b 88 28 46 49 81 09 6c 3a ec 4e e6 f9 70 38 3c 3f 83 2b b2 fe b2 cd f8 21 89 00 ab c2 2c c7 94 be 36 ff 01 ff 7d 42 ef 36 31 bf af d7 a9 e4 d7 2b fe 94 89 b8 c9 c8 9e 7e e0 31 86 5e 7f a7 32 9d c3 d3 70 b0 2a 4d 2d e1 fb c9 64 f2 76 38 58 f3 98 67 58 ba b9 b9 79 3b 7c 56 1e f9 a6 bc 9c 50 59 6c c6 51 19 53 ad a4 ad 1d 65 db 9d 58 c2 78 34 fa 01 ed dc b3 48 ec 96 30 1f a5 0f 58 4a 79 ce e4 8c 2c 01 a7 9c c7 07 41 b1 32 62 79 8a 53 bb 84 55 cc d7 5f a4 6f 87 2c 97 ce a5 9c 25 82 66 58 f3 35 60 49 44 1f 96 30 19 4b 6f b5 59 19 3e 22 b1 6e dc 58 33 b6 0b 57 8c f1 b6 8e bf d0 8d 80 27 9c f3 74 09 a3 b7 10 63 51 7d 68 69 fe 59 0e 8a ed 57 1c d1 b7 57 2d eb 7d aa 4e 1f 78 c3 46 d9 ae 30 f6 ec 6f 5e d8 c8 74 00 a6 43 7d fc b2 e9 c7 75 02 4f 83 41 19 fb 74 a2 82 2d 62 37 45 65 6f a6 b2 a2 7d d0 9f f7 24 db b2 24 90 6f 83 f1 1c 5b 0e ca 3a dd 4c d7 0e bd 33 37 68 ce d4 c0 c6 da 21 8b 4f 9a 4b ed 14 0d f3 94 ac 99 c0 39 1f 85 33 2c ae 78 86 e0 0d 32 12 b1 43 8e b3 2c 6d 3e bb 91 2e 77 fc ae 36 0f 2a f0 da 48 0a 19 1d d9 b7 fa 41 e5 66 50 85 16 cc 2f d2 07 08 54 ce ba a7 a6 ff 60 f2 af 8d 8b 06 f6 fa 0c 76 39 f7 7a d6 04 66 ff c1 1c cf ca 9e d7 2c 27 ab 98 46 ce 50 65 a2 c3 31 7c c7 f6 29 cf 04 49 c4 5b d8 b0 18 a7 1e 71 11 a7 3b 72 62 5a fd 38 19 9d e2 ba 38 2b d7 76 c2 13 aa 8c b5 10 4d 7d a7 e8 66 1a d3 4c ce 7d 15 12 52 3f 11 08 b2 3a 57 4c 25 b2 52 12 45 48 e0 0a e2 70 a1 d6 82 9f 24 c8 41 f0 72 45 20 2e 75 05 20 f4 05 7d 10 01 89 d9 16 ab d7 d4 30 52 cc 12 1a 14 7d 67 6a 5c 6e 08 7b 09 3b 16 45 34 b1 21 ac dd ae 91 d4 c2 5a a7 ba 54 a6 8b 25 ca 40 c1 88 65 1e 75 3d ba 35 38 fb ca 91 7d c6 55 88 c6 0d 8f cd 3c 25 6a a9 34 88 b6 c3 13 67 45 6a ba b0 f6 91 ab ab 2b 9f 35 fc f0 2b b9 bb c5 ed 70 2d 10 43 85 ed 1a 10 8b ad 67
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:04 GMTContent-Type: text/cssContent-Length: 2125X-Content-Type-Options: nosniffLast-Modified: Mon, 27 Aug 2018 05:27:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:04 GMTX-Request-ID: v-03203f26-a54e-11eb-a471-5b72d8ed4f20X-AH-Environment: prodAge: 853617Via: varnishX-Cache: HITX-Cache-Hits: 2862Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 5a 6d 6f db 36 10 fe 6c ff 8a 1b 8a a1 71 10 29 b2 1d 3b b6 83 01 5b 12 a4 2b 30 6c c3 32 6c c0 be d1 16 6d 73 95 45 43 a2 93 b4 45 fe fb 8e 2f 7a a3 28 59 ce b6 aa 09 24 8a bc 3b 1e 9f 3b 3e 3c e5 f2 bc f5 5f 1f 2f 80 df f8 67 12 3d 46 2c a4 09 dc d3 35 39 44 02 1e 3f b1 18 f4 6b 80 a1 0f 3f 24 09 7f 4e 41 3f 8f 7c b8 3d 44 11 15 a9 7e 1e fb f0 fb f6 b0 5b c6 84 45 a6 e9 0a 9b c8 d2 3c 4c 7c 78 c0 fe e9 2a a1 34 86 e5 41 08 1e eb 37 53 1f 7e 8d c8 e7 cb 55 c4 53 0a 4f 68 02 af bc bf c6 f7 09 8d 38 41 db 74 cb cc 87 3b b2 17 2c eb 21 7f 3f ee 13 26 e8 02 de 27 a9 17 ea 09 f8 fb 78 f3 5e be 7b a0 34 82 35 2a 06 c1 81 86 4c 00 89 3f 8b 2d 8b 37 f2 ed c7 35 7c e6 07 08 79 fc 5e 40 ca 77 14 f6 24 11 e0 c1 df 87 54 40 48 71 8e 14 98 c0 ae fd 76 4f 5e f6 fb fd cb 73 b8 25 ab 4f 9b 84 1f e2 10 b0 c9 4f 52 e3 cf 8b d2 3d e0 ed 2f 4f 34 59 47 fc d9 6e 57 ab 60 37 fe 21 dd f2 90 90 1d fd 91 47 e8 08 fb bd f2 7d 0a 5f fb bd 65 ae 7e 01 ef 86 13 79 dd f4 7b 2b 1e f1 04 1b 1e 1e 1e 6e fa af ca 50 17 0c f2 55 96 8f f5 e9 55 75 aa 9e 52 e5 96 b2 cd 56 2c 60 18 04 df a2 ae 67 16 8a ed 02 ae ae f6 2f f8 b4 e7 29 93 4b b5 00 c4 02 8f 0e 82 62 63 c8 d2 3d ae f9 02 96 11 5f 7d 92 f6 1d 92 54 1a b8 e7 2c 16 34 c1 96 2f 1e 8b 43 fa b2 80 d1 50 5a 5c a8 96 de 40 94 96 0d 30 1a 8d fe cc 1c 63 40 db e0 9f e8 5a c0 57 84 c5 7e 01 c1 0d 44 f8 a8 6e 5a 86 fc 26 85 e3 98 25 47 88 ee 54 ef f2 b8 ea c0 1f 79 4d 57 de 37 53 fa da 3c 24 d3 95 e8 09 99 41 b6 9e bc fb c7 55 0c 5f 7b bd dc 1f e3 91 72 40 e6 0f f3 a8 f4 4e 94 a7 b4 2d fa 7e 47 92 0d 8b 3d f9 d6 1b 4e b1 67 2f 6f d3 dd 74 6b df b9 a2 bd fa 0a f6 aa 50 3c 24 d1 99 1d 9b 03 29 ad e8 e4 65 20 0d 82 e0 c6 f5 22 d9 2c c9 59 70 a1 2e ff 7a 82 c3 7b e7 8d c3 51 00 4f 30 52 bc 84 84 ec 90 22 8e a4 f5 af 0d 7e 5b 6c 39 86 63 35 7e 9c 6a e7 03 15 3f ed ab 5c 59 10 28 49 2c 5c e7 4d 11 9d e0 a9 35 39 0e 81 ee 02 e5 ef 3a 0e 6b 98 ef 22 70 3e 6d b4 b0 1e 10 dd 05 3a 2c cc 47 df b3 94 2c 23 1a 5a e2 f8 9e ac 98 c0 74 e1 8f 6e 60 cd 22 c4 17 82 2f da 6f c9 99 79 f5 dd 28 18 60 20 9e e7 89 25 e6 31 55 5a 1a 32 5d 79 ff 3a 9e ea 4c 57 89 0f 67 3e cb 93 d5 78 92 87 95 c2 70 9e 24 9a 92 14 39 08 9e 47 1f 76 d4 0d d0 b7 12 b9 1d 12 ae 60 c0 d0 a6 2f c2 23 11 db a0 a4 15 35 89 34 62 31 f5 32 75 33 95 02 b8 d9 7a 16 b0 65 61 48 e3 7a 5c e8 09 97 72 eb ac 92 4a f4 53 ee 6c 16 2b 25 59 32 cf 57 41 b7 e3 6c 7a e7 5f 38 fa 61 28 f7 03 12 86 b8 f3 2e 40 82 61 82 3f 53 57 5c 1a fd e9 9e c4 d2 88 da 7e d1 62 95 15
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:05 GMTContent-Type: text/cssContent-Length: 531X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:05 GMTX-Request-ID: v-03b8ad88-a54e-11eb-9a4e-237a4d771d63X-AH-Environment: prodAge: 853616Via: varnishX-Cache: HITX-Cache-Hits: 2628Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 9d 93 cb 8e d3 40 10 45 f7 f9 8a 22 2c 3c 89 c6 c9 cc f0 9c 8c 22 10 0b 3e 80 2d 0f a9 6d 97 ed 56 da dd 56 57 39 0f 10 ff 4e d9 0e 49 07 b0 07 88 92 85 2b a7 6e df 5b d5 7e 9b 3b cb 71 ae 52 84 6f 13 80 e3 53 a5 cd 61 05 51 aa 08 8d 51 71 a5 88 d1 47 0f 02 90 4f 57 00 8d 37 57 d1 62 b1 94 6f db 41 cb 4b 72 81 8e df a8 1b ba 33 45 34 fb 9f ae a7 1a 73 bd 8f 66 e2 c7 57 8a af 22 ac 12 cc 32 cc 62 57 a3 e5 43 8d d1 ec 5a 74 1f d7 64 ce 4f 4e 4e 6a ec 1b fc 17 91 9d cb ff a0 d2 56 ff 56 81 b6 c5 cf 68 bf 0c f5 ac 27 4c 3f ad 6e 09 3b d4 45 c9 2b b0 ed bf e6 54 26 3e 18 3c 57 bf 4f 26 1f 53 a3 88 be ac a7 3a 75 36 9e 7e be 86 be 32 5f 4f e1 58 ea 56 bb 9c 43 43 08 4f 74 55 3b cf ca 32 b0 83 da e3 56 06 0a 9a a8 41 82 9d e6 12 12 ef 76 84 1e 70 cf 68 49 3b 4b c0 a5 62 48 4b 65 0b ec 6c 10 cc 97 8f dd 96 e0 a4 ee 0a d4 a8 36 ad 71 8b 43 61 c6 93 6f 95 d7 a2 15 d6 59 2c c6 ec 95 a5 76 86 67 71 a3 2d c6 e5 51 e6 f6 61 d2 a7 7f 87 2c be e0 bd 88 c1 07 b4 19 7a 6d 0b 58 9f 3f 7d 28 39 3f d9 68 c9 d5 39 ac 9c e3 52 b8 15 c8 d9 5a 19 2d 21 b3 f6 8c b8 72 5f 63 47 fb df b8 c2 ab 03 a5 ca 60 b7 9d 45 b7 82 aa b1 e9 2a 41 71 d9 bf 66 52 93 d9 8a b9 e9 27 bc bf c1 69 8b f6 64 e9 2a 1c 26 6f 02 52 db ac 21 f6 87 61 fa 36 a0 49 46 66 e2 a4 21 19 0d d1 70 cf 5d d0 e3 91 95 36 c3 ec b3 80 ad bd bc 99 9e 47 dc 3c bf 48 c9 38 22 fc 22 40 e5 27 29 9b 94 e5 22 0e 77 bc 0c 3a 2a cc b4 cc 7f 18 7e 15 c0 98 35 a9 1a d7 7e 1d ba 51 66 64 91 f7 01 d9 7a de 0c a3 ea 02 55 54 0e a3 49 38 e6 52 ae f8 30 9a 86 c9 94 e7 d2 e8 7c 04 cf 3a 7c f2 03 df 0c ae 07 04 06 00 00 Data Ascii: @E",<">-mVVW9NI+n[~;qRoSaQQqGOW7WboAKr3E4sfW"2bWCZtdONNjVVh'L?n;E+T&><WO&S:u6~2_OXVCCOtU;2VAvphI;KbHKel6qCaoY,vgq-Qa,zmX?}(9?h9RZ-!r_cG`EAqfR'id&oR!a6IFf!p]6G<H8""@')"w:*~5~QfdzUTI8R0\|:\|
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:05 GMTContent-Type: text/cssContent-Length: 3905X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:05 GMTX-Request-ID: v-03cbc5da-a54e-11eb-81c0-0b102a227a4cX-AH-Environment: prodAge: 853616Via: varnishX-Cache: HITX-Cache-Hits: 2578Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 1c 5d 6f db 38 f2 79 f3 2b 78 28 8a b4 45 ec e8 c3 72 6c 07 07 5c 9a 64 bb 01 f6 76 7b 69 bb 7b 0f f7 42 4b b4 2d 54 96 7c 12 dd 24 0d f6 bf 1f 45 91 12 49 91 12 e5 24 05 2e de 62 6d 49 1c 0e 87 f3 3d 43 9d be 3b fa 13 2d 8b 18 23 f0 1b dc a2 05 b8 84 05 4a 12 78 74 85 8a 30 8f 77 38 ce d2 05 f8 25 db 22 f0 11 ae 11 28 76 28 8c 57 71 08 0a fc 90 a0 62 83 10 3e fa 03 e5 05 7d cc 1d 3b 47 17 7b bc c9 f2 05 b8 88 ee b2 fc 6b b1 c9 76 ec 12 f8 72 7b b3 00 1b 8c 77 8b d3 d3 bb bb bb 31 ac 9f 18 87 d9 f6 e8 dd e9 d1 d1 e9 3b f0 f7 c3 fe 00 19 4e 46 93 bf 5f ae 2f ae 4e bf 7c fc 78 7d 0b 6e af 3f dc fc fe 1b b0 f8 ab 46 1f 3e 37 38 02 60 bc 21 54 1a 6d 10 8c 50 fe 11 a6 28 19 85 59 8a 61 9c a2 1c 3c 2e 61 f8 75 9d 67 fb 34 5a bc 72 a0 17 f8 e8 1c dc c5 11 de 2c 5c c7 79 7d 0e 76 30 8a e2 74 bd 98 3a bb 7b e0 9c 03 8c ee f1 08 26 f1 3a 5d 24 68 85 cf ff ea 99 60 e3 82 c7 30 4b 08 e5 5f fd fc f3 cf e7 60 45 ee 8c 8a f8 3b 5a 4c 08 44 06 0f e7 30 2d 56 59 be 5d ec 77 3b 94 87 64 ab 6d 00 17 3b 98 8e ef 36 25 8f 88 73 e8 47 26 71 81 2f 9b 75 6f 61 be 8e d3 85 47 97 55 2e 2c 21 d7 c9 80 78 bd c1 25 c3 04 36 60 16 4b 44 b0 a6 b3 a7 18 a5 78 71 7c 7c 0e a2 b8 d8 25 f0 61 b1 4c b2 f0 2b 27 e6 8c 2e 96 81 77 cb ef cb 2c 27 40 47 38 db 95 bf 41 91 25 71 04 5e 79 d3 e0 cc 9f 9e 03 8e 5e 40 d1 2b b1 b4 5a d6 3e 21 eb 00 8f 32 0a d6 03 db cb f9 8f e7 78 9e b0 a6 38 a5 64 62 4b 63 34 5f ad 56 35 c2 0e 70 39 45 ed a7 85 2b 5c 6e 49 6b d6 2e f8 6e 50 12 91 e3 95 66 a9 89 63 74 13 26 b0 c0 a3 6c 35 c2 0f 3b c4 67 3f 0c 14 80 e0 91 b2 f4 0a 6e e3 e4 61 01 8e 3f 64 78 03 b7 a3 f7 59 12 1d 8b ec ee fa 25 c2 6c 49 67 70 b9 f2 fc c1 dc af 45 60 b1 c9 be 55 e4 ab a9 55 8e 26 ff 9d be bb 45 45 b6 cf 43 04 3e e4 71 44 74 09 07 9a b3 eb e5 65 65 e9 8c 61 01 13 ff 8c a8 60 aa 43 73 94 40 1c 7f 43 8d 4a 28 a5 a6 59 9f d3 ec 91 89 b9 65 e1 94 70 68 5f 1a c5 69 f4 67 0e 4b 8a 34 18 02 99 01 05 e5 05 2a 36 d1 e1 cb 16 e4 95 eb 91 a4 dc 39 0c 1b 78 72 d0 28 10 6f d7 c2 4a d8 12 74 08 2b 3b 79 e8 54 a2 1a df c2 fb 91 f0 fb 30 b0 8c d3 28 f0 6c 07 c3 18 3f 2c dc 43 51 7c 2c 61 ad 92 ec 8e d8 de 38 8a 50 5a af fb 60 36 81 44 1f 7c eb 7c 84 7c 25 92 23 98 01 32 4d b3 03 70 49 18 75 8f d1 39 b9 2a b1 96 e3 78 53 bf 75 39 5f 2f e1 1b e7 c4 9f 9d 4c bd 13 67 3c 7f ab 7d c0 f5 bc 13 e0 ce dd 13 e0 07 e5 53 3e 7d 4c 14 32 f2 b3 b6 3b ec 77 87 4a e1 77 a9 d0 01 77 42 b4 0a b9 24 f2 b5 3b 9e d4 4f dd 31 c0 29 51 2f 30 29 2f 0b 06 3c 24 da 16 e5 e5 45 2e d2 54 b9 52
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:06 GMTContent-Type: application/javascriptContent-Length: 2995X-Content-Type-Options: nosniffLast-Modified: Mon, 27 Aug 2018 05:27:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:06 GMTX-Request-ID: v-042db0ba-a54e-11eb-9c6e-231ac797c86cX-AH-Environment: prodAge: 853615Via: varnishX-Cache: HITX-Cache-Hits: 3654Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 95 59 6d 73 e3 b6 11 fe 9e 5f 41 a1 37 1a e0 04 51 f6 e5 53 a8 43 54 c7 bd 69 d2 89 9d 9b d8 75 67 aa e8 3c 14 09 49 b0 29 80 22 40 cb b2 a4 fe f6 2e c0 77 d9 ce b4 1f 6c 13 6f 8b c5 62 f7 d9 67 e1 d1 c7 9e b7 56 31 cf a4 78 c9 bc ef fd ef fd 73 0f 5f e6 da a8 b5 f7 53 2e 92 98 78 07 ef ea 97 5b ef e3 77 de 47 6f 65 4c aa 83 d1 a8 5e e1 47 6a 3d 8a d5 56 26 2a 8c 47 93 61 a4 b5 c9 42 a9 85 11 4a ea 61 cc 4d 28 12 3d 14 32 cd 8d d9 a5 5c 0f f5 d3 72 68 54 1e ad f8 13 97 46 0f c3 38 36 5c 9b e1 7a 33 4c 33 be 10 cf 76 0e 37 51 12 6a 0d 9f 76 4c 9b 5d c2 b5 d7 fb 38 fa ae b7 c8 65 64 65 63 4e 0d 95 64 5f b5 3d 61 7b c8 3e e3 26 cf a4 67 f7 52 0b 8f 33 c6 cc b1 9e a3 30 d9 3f 85 99 e7 d6 52 45 33 aa 69 38 5e a8 0c db de c4 13 d2 bb 27 62 81 ef fd 55 a8 7f db ca af 99 4a 79 66 76 38 21 64 0f fd 9c 4d 67 d4 b0 fb 69 02 7f 7c 19 ae 79 bf 8f b9 9f e6 7a 85 8b b6 6f d4 af 6a cb b3 cb 50 73 4c 08 cc 52 a9 33 45 bf 5f 7f fa 61 22 60 f8 ad 2e 3f e1 72 69 56 84 58 9d 24 3b 1b cb cf ef cd 19 cb c1 80 d4 7b 9f cc 99 ca d9 89 26 ee 94 8a 09 98 bb 90 14 55 26 41 64 62 3b 30 09 5c 7f 06 5b 66 9f 79 b5 45 06 5b 68 c6 a7 d9 8c 86 4c fb 3a 4d 84 c1 c8 47 84 9e 83 61 c3 72 da e4 aa f2 86 69 38 3d 9b cd 98 0a 70 ef a4 ef 70 38 e9 10 52 9b 50 46 f6 92 7e 52 2a e1 a1 3c 1c f0 a9 20 c9 b7 d5 e8 e9 18 d8 f6 a4 07 7e 9f db cd 09 bd 2c ac 82 d5 04 a1 00 49 35 44 64 10 fa 0f 4a 48 8c e0 9b 1c 1b 8f c8 30 2f 5c c2 b0 b9 ef 7c ee 1a 6e 91 4a 56 0b f7 ef 23 25 17 62 59 8c 7e 75 2e 7a 38 20 34 06 7f b8 81 eb 37 cc f8 73 b0 f1 5d 98 b4 54 aa 57 71 19 ce 13 fe 8f 9b 4b bb ba d8 4a b8 73 fd ce 97 5f 9e 53 8c f0 b7 c3 1f 7f 68 82 06 72 60 55 7d d0 18 9a 87 0f 04 91 b1 15 9d f1 34 09 23 8e 05 45 1f ce dd a4 07 fd e1 13 22 c7 f7 b6 ba 2c 02 c7 6a 36 60 c8 b3 4b 78 79 76 db 20 f4 66 d2 3a 69 a5 3a 33 41 ab 97 19 d2 98 48 b7 03 ab d7 fb 0f 46 68 c0 89 2f 64 cc 9f 7f 5b e0 f6 d4 10 57 f3 1a 07 eb b1 32 16 8d 1f 65 3c 34 fc 4b c2 d7 10 f9 93 93 36 0e b3 65 6e 3f 34 5c 26 09 6e 4e c7 af 6f fc 28 4c 12 6c 28 b2 28 04 20 b4 dd 6e fd ed f7 be ca 96 a3 4f 67 67 67 23 40 16 44 bb 52 4e 64 f8 61 9a 26 3b 10 51 cf 6a 29 9f 58 57 28 e1 83 d7 76 1f e1 69 38 7c 99 91 61 f9 77 b4 a4 a7 10 54 41 ce 40 42 cc fd 33 4d ab 98 3b 92 46 ca b7 e1 88 22 d4 da 2d ef c0 55 2d b2 a5 c1 1b ba 36 cb 17 d5 e6 d6 a1 54 0d 61 99 85 30 6e 21 cc 06 2d 7c 1b 52 ca 93 10 b0 bd f3 89 ed 0e 00 07 cc d4 7e cd a8 c0 aa 03 06 39 b4 21 12 0d 09 14 19 97 57 7e de 6c 1b bd 67 a3 8b Data
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:06 GMTContent-Type: application/javascriptContent-Length: 30910X-Content-Type-Options: nosniffLast-Modified: Mon, 20 Jul 2020 20:05:02 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:06 GMTX-Request-ID: v-04a550a2-a54e-11eb-9393-4bf6f2d6eaf7X-AH-Environment: prodAge: 853614Via: varnishX-Cache: HITX-Cache-Hits: 3604Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd bd 7b 7b db 46 92 2f fc ff f9 14 22 c6 ab 01 cc 16 45 39 99 39 3b a0 10 3e 8e 6c 27 9e c9 5d ce 24 59 8a c9 03 91 a0 84 98 02 18 00 d4 25 22 f7 b3 bf f5 ab ea 6e 34 40 50 ce cc ee 79 33 63 11 97 46 5f ab ab eb 5e c7 cf 7b 07 bf 7e bb 4e 8a 87 83 db 8f 06 7f 19 9c 1c 6c 0e fc 59 70 f0 f7 f3 83 37 f9 3a 9b c7 55 9a 67 07 71 36 3f c8 ab eb a4 38 98 e5 59 55 a4 97 eb 2a 2f 4a 2a fa eb 6f f8 74 90 17 57 c7 cb 74 96 64 65 72 f0 fc f8 ff f4 16 eb 6c 86 0f fd 44 55 c1 a3 b7 a6 c7 25 7d 36 ab bc 91 97 5f fe 9a d0 45 14 55 0f ab 24 5f 1c dc e4 f3 f5 32 39 3c dc f3 62 90 dc af f2 a2 2a c7 cd db 28 19 cc f3 d9 fa 26 c9 aa 71 45 cd f4 86 41 58 b7 1a 3c a6 0b bf 57 17 09 aa eb 22 bf 3b c8 92 bb 83 d7 45 91 17 be a7 c7 5c 24 bf ad d3 22 29 0f e2 83 bb 34 9b 53 99 bb b4 ba a6 3b f3 a5 17 8c 8a a4 5a 17 d9 01 b5 12 6c 43 fe eb 7b 34 33 c9 22 cd 92 b9 d7 33 dd 95 ef c7 f2 13 56 d7 69 a9 6c 87 ce 54 d2 9a 86 db b8 38 a8 a2 c9 54 15 d1 d7 3c ee c1 55 52 7d 53 e4 55 8e ea be 5e a8 32 aa 06 25 e6 54 5d d1 d5 62 19 57 63 77 7c a6 53 fc 66 30 8b 97 4b ee 5e 67 11 5a b3 19 15 8a 57 ab e5 83 4f 4d 52 41 b5 a6 4a 57 eb f2 5a a5 74 41 5d 4e ee a9 cd 2c 7a dc aa 3c ca 06 55 7e 4e fd cc ae d4 2d dd 5c c7 e5 d7 77 19 f5 6d 95 14 d5 83 8a a3 db fa fd 32 8a a5 71 19 44 a0 1e 50 c5 4d b4 db 0f cf 3c aa 17 18 8b 9e ad 6f 2e 93 a2 9e c5 64 90 e5 f3 e4 1d dd 6c d5 7d 47 35 07 d9 7a b9 ec 45 f4 69 12 45 04 04 32 dd 5b f5 3a 3a b3 ab ad 66 d1 23 aa 0b 7b 43 55 16 33 fc 64 34 05 89 5c 7c c9 70 44 d7 db 91 a9 fe e0 12 80 aa b2 e0 11 cb 52 a8 94 26 c1 cf a2 6c b3 79 1d 0c 66 45 12 57 c9 eb 65 82 aa 7d af 9c 15 e9 0a 60 41 10 96 0f aa e4 be 8a 00 e4 0b 02 aa e2 20 cd 0e 66 81 4f 53 3a 29 a6 9b 0d af e9 cb 4a f6 0b f5 b8 79 ef 17 41 70 78 98 0f ca c6 33 95 06 23 9a f2 24 9e 63 bd 92 6c 7e 76 9d 2e e7 7e 1e 0c 56 71 41 1d f8 8a 66 67 50 24 37 f9 6d 62 de 6c ed 30 ee 5a f3 44 13 34 4e fa 9e 17 ee ec ad 64 b3 e9 5a 90 71 36 c9 0d 30 d1 00 cc 67 a1 79 bf c5 fc 2c 22 8f 31 85 a7 ce a3 e6 46 37 4d d3 36 3b 1f 2c 32 82 ab b4 e2 37 ce 54 af d0 47 81 fe 5e 0f 10 b0 4c b2 ab ea da a3 a9 c3 a2 0e e4 96 40 11 83 d1 7b af 77 43 d7 87 87 bd 7b fe f1 bd b8 28 e2 07 ea 36 56 68 48 3f 15 75 55 03 92 1d 4b 75 78 38 3c a5 3f d5 d1 09 96 85 60 1e 5d 8a ce 07 2b b3 c9 a2 47 c1 5e e1 42 d1 0e a1 8d b9 9e 11 56 0b cf 95 74 21 1c aa 2a 7f 89 96 ea 5d 65 87 58 ca 2c 61 97 d3 66 a2 65 ed da 79 66 09 dc c2 61 72 3a 1c e3 6a 92 f4 f1 a3 c7 3b 0d e5 d9 74 ab b0 2b Data A
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:06 GMTContent-Type: application/javascriptContent-Length: 5171X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:06 GMTX-Request-ID: v-04a6132a-a54e-11eb-b16c-173cf59655f4X-AH-Environment: prodAge: 853614Via: varnishX-Cache: HITX-Cache-Hits: 2970Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 3a 6b 77 db b6 92 9f f7 fe 0a 89 9b ab 43 58 30 29 a5 8f dd 90 81 75 e4 47 5e 8d 9b d8 4e da de 4a 4a 0f 48 82 0f 9b 12 15 92 92 ec 5a fa ef 3b 03 f0 29 d9 bb f7 c3 e6 b4 16 39 00 06 83 c1 bc 87 e6 51 b7 b3 8c dc 7c 95 0a 3f 8a e3 ce 71 67 fd 83 31 30 5e c2 c3 cb c1 f0 e7 e3 c1 cb e3 e1 cb 7f 74 8e 3a 61 9e 2f 33 cb 34 33 37 c9 f3 5b 11 c6 46 10 e5 e1 ca 31 a2 c4 6c 20 30 71 ee 59 b2 7c 48 a3 20 cc 3b ba 4b 24 9e 6a 79 b1 c8 4d e6 35 a6 d6 7a 27 4e 1c 73 ce b3 5c a4 e6 78 95 87 49 9a 19 f9 7d 6e 77 3e 46 ae 58 64 c2 eb 5c be ff 02 9b 98 ff e8 fa ab 85 9b 47 c9 42 e7 e4 71 cd d3 8e c3 16 7c 1d 05 3c 4f 52 63 95 89 74 1c 88 45 6e 73 e3 dd 97 cb 8f 9f d5 16 17 b1 98 03 b0 d7 33 85 7b 97 98 46 2e b2 5c 77 48 af e7 18 73 9e bb a1 6e a6 eb a9 a5 4f bd 3e 31 01 7a 2d 82 8b fb a5 f1 62 f8 fa c7 9f 7a 3d ee 79 17 6b 58 fd 31 02 ea 16 22 d5 b5 54 64 d1 df 42 a3 15 25 05 21 d4 65 5e e2 ae 70 2b c3 4d 05 cf cb 8d 75 2d 4b 56 a9 2b 34 42 3d 76 40 3f f5 a8 60 dc 58 f2 14 a6 fe 9a 78 c2 d6 3e bf 3f fb f2 f5 fa 42 63 8c 09 63 01 a0 5f f9 5c 18 79 f2 75 b9 14 e9 19 cf 84 4e 46 ba c3 5c c3 8d 93 85 c0 35 3a a1 c2 88 80 53 69 7e 2a fc 24 15 ba 03 00 3f 4a b3 bc 20 e2 2c 8c 62 8f d0 4c e4 5f a2 b9 48 56 b9 de a0 5f 18 a9 98 27 6b 21 27 01 6b 76 84 58 7a 97 1b 7f 2d fd 8f 70 2b 37 70 de ed 96 1b 89 ef c3 fa df 23 2f 0f 4f 5a 83 c0 35 bd 05 60 ad c9 70 6c 6e 20 d3 32 5a fc f6 99 46 87 83 c1 7a a3 3d 43 51 31 8f 79 40 ca 0e 18 b4 c7 6c 4e 9d 9a d9 df 57 22 7d b8 11 b1 70 41 08 c6 71 ac 6b 85 6c 75 4e 3a d1 3c a0 f8 67 92 a5 2e ec 34 9b 48 b4 33 8d d8 c0 25 9d b3 81 cd 5f 3b 46 2c 16 41 1e da bc df 27 70 fc 09 9f c1 9e 7e 73 4f 37 16 3c 2d c9 74 08 ec de 20 5b d0 57 af 60 41 00 87 94 f2 74 29 bc 88 f7 7a f5 b3 ae e9 49 1a 01 a9 1c d1 59 9d 98 2f bc cc e5 4b 41 40 24 c2 e6 3e 3e 5c 64 d0 eb 05 06 88 5d 29 71 7b af ba 4f 76 76 2a e0 7c 8b 8e 6b a8 63 31 cd e3 39 b7 a2 39 0f 04 68 9b 6f 3b 20 24 3f ff 48 af 07 f1 db 4f e7 71 38 be 1a 9f 8e f1 df d9 bb 9f 4e c7 17 bf 8c c7 17 e3 8f 12 80 f0 0b f8 01 89 83 df 4f 1b 06 17 63 7e 9b b8 db 68 b6 f5 5e 14 ba 52 71 1a a4 da 7b b8 81 63 80 38 68 1a 19 85 3a b1 aa c1 43 4d 39 ff 74 79 96 2c 72 84 25 dc 13 9e 46 43 42 fd 9d 0e 57 aa 6f a2 85 97 6c 48 ad 45 70 a5 d4 25 8f 1a 28 71 27 cb 53 b8 41 cd 2e 07 3b 1e aa 8b 3a b4 d6 41 bd e0 40 c0 7f 94 0f d3 45 f5 e4 57 4f a9 7c da 55 28 50 25 5c 25 3d 1e 5b 88 4d 87 1b ef 91 5f 25 2f 3d 03 74 29 4d 93 b4 79 1f e3 89 33 63 dd 21 75 b8 0e 37 Data
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:06 GMTContent-Type: application/javascriptContent-Length: 2966X-Content-Type-Options: nosniffLast-Modified: Mon, 09 Dec 2019 21:35:52 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:06 GMTX-Request-ID: v-04a7ca4e-a54e-11eb-b102-775500b78022X-AH-Environment: prodAge: 853615Via: varnishX-Cache: HITX-Cache-Hits: 3610Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 59 fb 73 d3 46 1e ff 3d 7f c5 46 dc 54 72 88 e5 a4 f7 98 6b 12 87 42 80 c2 4c 78 b4 49 e9 cc 05 8e 59 4b 6b 5b 44 96 54 69 65 27 d0 fc ef f7 f9 ee 43 5a 29 76 c8 95 b9 39 a6 50 79 f5 dd ef fb ad 4f 3f d7 a2 bc 0e e2 3c aa 17 22 93 83 b0 14 3c be 0e a6 75 16 c9 24 cf 82 01 fb b2 c5 98 57 57 82 55 b2 4c 22 e9 1d 6e e1 60 c9 4b 96 e6 2b 51 be e6 cb 93 3c 93 3c c9 44 c9 c6 ec 93 46 e7 85 d3 3c 97 a2 1c 5a 98 61 64 81 bc c1 2e ee 33 96 89 d5 99 48 45 24 9d 5b 47 95 3e 19 1d 7b 83 43 40 8d 46 ec b9 c2 c3 80 22 99 71 e2 88 81 dc 52 94 92 c9 9c 19 04 4f f2 2b 00 37 48 f2 42 c1 01 c9 ae 62 1e ec 6b bc 22 f6 0e 9c 67 cd 87 b7 e4 69 2d 3c 3c e1 9d 3d 93 e2 4a d2 11 9d fd 5c 27 d1 e5 69 92 5d 56 61 18 7a 78 7f 33 08 79 51 88 2c 3e cf 83 46 0a c5 af 65 81 83 f2 2d ed 0c 42 c1 a3 79 ab d9 24 8b c5 d5 2e c3 6d a5 78 c3 2a 29 f6 2f 22 6d 95 62 df 1f aa d7 77 08 d9 15 05 38 42 2e 65 19 78 f3 52 4c ad d2 bb a2 11 0c fd 0c 06 ea e5 66 b9 6e 06 ca e8 cd 61 0b 77 5b 4a 05 f9 75 37 60 da 0c de 20 8c e6 3c 9b 89 be c7 31 b6 82 82 f2 55 98 e6 91 b6 7b a3 11 39 4f aa 41 38 c5 eb c0 d3 6a 38 68 6c 3a 08 a1 83 c0 65 1a 3e 74 26 78 19 cd 7b 6e 12 56 ea f4 2d cf 44 fa 31 87 38 c4 4a 0a 53 df e6 c4 5e 79 a0 af 3c cf cb c5 ab 3c ae 53 a1 2e e3 de 94 c7 e2 65 16 78 53 5e 49 cf 25 be 96 58 94 e6 95 f8 46 6a 6f 6a b9 86 5c 32 65 81 bc 2e 44 3e b5 58 48 4f f2 5d 12 57 6c 3c 66 9e a5 e5 f5 69 85 cb 24 16 f9 49 1b a3 f6 9a 51 e5 26 e4 9f f3 cf f9 39 9f 6c c0 9e 64 89 fc 97 81 70 10 c1 22 a7 c6 a8 95 82 09 b7 34 ac 3d 7d c1 b3 38 15 a5 ba 63 2d 58 2e 93 48 54 4c f2 49 7b 05 0c b5 44 89 85 4d ec b9 0c bd 16 15 1c e5 36 4b 8f e3 98 c9 b9 60 a5 f8 bd 4e 4a 11 b3 28 e5 55 45 59 86 4e 77 88 53 36 4d 44 1a db 88 65 29 9f 88 b4 0a 5b 33 fb ea 04 3e 5f 2e 86 16 8d ff 95 b0 ef d8 c1 1e 86 73 b9 48 83 b5 87 94 a0 8b 94 47 22 f0 77 fc 5d e6 1f 55 05 cf 34 af 63 af 43 d9 3b de 39 1a d1 db 63 7f d0 0b 08 0e 59 a7 49 2a 18 02 2c 4b 73 1e b3 05 2f 2f eb 82 a4 fd 94 4f 18 c2 1b be a9 6c e1 48 f7 40 c4 89 1c 2a 1d 0c 1d 88 e1 de b0 2e 08 89 6f f3 47 e0 1f c5 c9 b2 61 0a 84 86 96 90 77 ac 18 3e 3e e2 8c f2 d2 d8 9b 4b 59 54 07 a3 d1 6a b5 0a 23 8e 38 4e 79 18 e5 8b 51 95 48 51 8d 62 31 e5 75 2a 47 84 a3 1a 15 f1 b4 1a bd f8 65 f8 d8 21 fe 2c 9b a5 49 35 1f 2e f7 f7 87 cf 5f 9e 9e 86 00 f2 e0 26 e5 4c c8 b1 f7 71 92 f2 ec 12 bf 13 99 8a b1 f7 d4 8a 4b 26 75 b0 78 c7 9d 37 8e 70 2c 78 fb f4 f9 e0 68 c4 8f 77 8f 26 e5 71 9e 45 82 81 bd 22 15 70 22 06 3f Data
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:06 GMTContent-Type: application/javascriptContent-Length: 619X-Content-Type-Options: nosniffLast-Modified: Mon, 27 Aug 2018 05:27:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:06 GMTX-Request-ID: v-04a7d5a2-a54e-11eb-b1f3-1bc5d7564670X-AH-Environment: prodAge: 853615Via: varnishX-Cache: HITX-Cache-Hits: 3611Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 55 5d 6b db 40 10 7c d7 af 58 d2 80 64 a3 9e 43 1f 6b 12 68 9c 96 96 e2 a4 6d 62 f2 7c 91 d6 f6 b5 e7 3b 73 77 72 1b 8a ff 7b f6 f4 61 29 b2 54 62 b7 50 83 6c 38 ed ce ce ce 8c e4 d1 10 ce 8f fb c0 70 14 8c 86 d0 f3 79 77 75 7f f3 ed f3 ed c7 9b 2f 30 7d 7f 3d db 2f 28 ba ff 62 76 30 1a c1 35 62 6a c1 69 b0 8e 1b 07 89 d4 16 53 16 7c ff 9a a1 79 8c 52 9d 64 2b 54 6e c0 0c f2 f4 31 9a 67 2a 71 42 ab 68 f0 3b 80 a2 78 aa 1f 84 c4 29 aa 2c 2a 9b 42 b6 ca cf 2e 9d ba 37 7c bd 46 03 9c ad b8 50 be e8 4e 2f 16 12 c3 41 0c 27 8a 6f 5e 55 c7 27 83 f1 81 80 16 73 26 1d 98 8d 3b 1e 76 4b 97 df f4 52 a8 14 dc 12 a1 00 03 3f 1a a8 9e 96 f7 ed 34 5c 24 3f 76 9b bf 68 09 46 4a 84 79 5f 18 c3 4e 1b dc 78 c5 c0 2b 44 63 3f 68 93 60 3e b7 9c 43 5a cf 85 12 76 c9 a8 a0 9a d6 d4 82 70 ad d3 eb c8 99 0c 63 f0 df b9 38 62 0e 95 20 f9 04 96 64 c6 d0 ef 1d 37 0b 24 87 96 dc 4e 24 b7 36 0a 39 f1 d8 10 bd 82 c3 be ac 1d ed 9d 76 6c e9 42 69 b1 84 d1 6b 54 47 a1 f4 39 50 1a 75 a0 09 1d c6 ff 5b 1f 1a 03 fe a3 15 ad 14 1f ef 46 07 50 6e 48 a5 d3 1e 92 44 ff c8 c7 64 8f a4 56 6d 0a ee e5 be bb 43 66 a5 48 f1 4a ff 54 d1 9b b3 b3 18 42 e4 16 3f a9 5b a1 68 dd 71 dd 50 c2 0d 18 4f d3 96 28 f4 6c 36 68 ec 49 73 08 8f d9 ba c1 e2 26 73 fd 34 0c ae f4 06 bb 98 34 32 c0 a8 36 9b 68 e5 28 c9 14 3a e6 25 9a 2c 85 4c 5b 59 db 9d 4f fc c1 9e aa f5 ad 66 18 37 dc c0 e9 9a 7b a3 e0 1c fe 94 a3 a2 28 1a c4 41 f1 c6 3f 75 f9 8d 99 a4 be 12 81 51 86 d3 28 bc c8 a4 df 22 68 d4 f4 26 b7 ea ac 53 4a 82 98 3a a3 d5 fd 67 4a 15 25 e3 e0 19 8d a6 f6 c5 74 00 83 2e 33 aa c8 59 50 83 59 f1 20 85 5a 10 92 14 ac 00 63 c8 93 65 fd 97 42 7b e0 af 18 2a a3 4a 32 6d fb ca 75 c1 ef db 1a df 55 de b3 c3 b6 d4 aa 24 57 47 b3 2e 69 2d 59 05 7d 2f 2a bb b7 1d 51 82 0b 90 e2 2d 21 b9 d7 49 99 96 1a da 1f 7b e8 9e 57 cd 0b db 9f 00 bf 9f 71 21 6e 08 00 00 Data Ascii: U]k@\|XdCkhmb\|;swr{a)TbPl8pywu/0}=/(bv05bjiS\|yRd+Tn1gqBh;x),B.7\|FPN/A'o^U's&;vKR?4\$?vhFJy_Nx+Dc?h`>CZvpc8b d7$N$69vlBikTG9Pu[FPnHDdVmCfHJTB?[hqPO(l6hIs&s4426h(:%,L[YOf7{(A?uQ("h&SJ:gJ%t.3YPY ZceB{J2muU$WG.i-Y}/Q-!I{W
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:06 GMTContent-Type: application/javascriptContent-Length: 563X-Content-Type-Options: nosniffLast-Modified: Mon, 27 Aug 2018 05:27:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:06 GMTX-Request-ID: v-04a80a40-a54e-11eb-9f9c-632fb11fbe5eX-AH-Environment: prodAge: 853615Via: varnishX-Cache: HITX-Cache-Hits: 3553Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 54 4b 6f d4 30 10 be e7 57 0c f4 e0 64 c9 66 25 8e 8b 38 20 2a 1e d2 22 81 da 9e 10 07 af 33 c9 ba 75 ec c8 76 02 51 d5 ff ce d8 c9 3e 52 95 e5 75 b1 35 9e d7 f7 7d 1e 7b b5 58 24 1f b8 2e 15 42 6d 4c 4d 1b d7 5c 0d 5e 0a 07 d8 a3 f6 0e b8 03 d3 79 25 35 96 b0 1d e0 f2 cd 5b a8 ad e9 da 04 2e b1 45 5d 92 5b c3 fb eb 4f 94 59 42 c9 3d df f0 01 6d b2 58 ac 92 aa d3 c2 4b 72 0b 85 5c df b4 1b be 45 95 ba 0c ee 13 00 8b be b3 1a 5c 61 b1 55 5c 60 ba fa ca 9e 7f 7b b1 aa 73 60 2c 7b 95 3c 24 c7 fc 08 e5 da 72 71 27 75 9d 0a ee b1 36 76 c8 79 f4 e6 2a 94 1d 8b ca 0a 52 3f b4 68 aa 23 14 78 f6 1a 58 a7 4b ac 02 07 16 02 29 12 8e 01 45 db b9 5d 7a 1f 0f 01 58 6c c6 d6 cc 87 7e a3 91 cf 7c fb fe 6c 7d 40 32 f3 8f b0 d8 7a 82 37 f3 45 ac 94 78 2a c8 88 3f 86 3d 10 71 5a 89 fc ed 97 0e ed 90 96 46 74 0d e5 65 24 13 2f 87 74 2f 49 3a d1 58 ad 60 47 0e 62 e9 90 5b b1 83 ca d8 86 ce a7 74 16 cc 8b d1 c5 b2 c2 75 db 46 fa 79 91 d0 76 ae 2f 9b e2 73 b6 2f 1d d3 e8 16 a5 b8 63 f9 13 a5 a1 18 f7 77 74 f4 99 6b 54 57 a3 29 51 95 20 75 db 79 6a de 73 95 66 23 3f 5a 47 ec 82 5b 44 eb c0 f3 ad c2 13 d8 d1 be b8 35 db 8d 74 9e 30 39 a2 a7 50 f8 c2 79 92 fc e3 54 51 ec b8 ae f1 b7 74 f6 4d 4e 14 22 6e bd c4 ef c0 95 82 58 d2 3d 66 f7 67 08 e6 9c ce e2 6f b9 2e 2a 63 a4 30 7a 69 b1 31 3d 06 06 a1 e9 3f 12 08 33 74 b8 f6 09 3d fb c1 fe 1e cd 61 3c fe 07 cd 64 8d a3 72 4e c6 22 ce c3 32 fe 21 e3 6c 14 a1 c4 92 90 78 6b d4 2f 06 85 de 6e 09 cd 00 ca 08 ae a0 b5 a6 97 61 32 43 26 a4 4a f6 74 81 52 c3 4b 88 5f 89 cb 1e bf 80 90 16 38 4d 5c 73 98 9f 36 5c ea ab 73 8f e4 29 1d ce 40 22 3d 22 32 61 9a 56 61 fc 0d 72 76 bc 99 24 2c 3f 01 30 2c ea c1 7b 05 00 00 Data Ascii: TKo0Wdf%8 "3uvQ>Ru5}{X$.BmLM\^y%5[.E][OYB=mXKr\E\aU\`{s`,{<$rq'u6vyR?h#xXK)E]zXl~\|l}@2z7Ex?=qZFte$/t/I:X`Gb[tuFyv/s/cwtkTW)Q uyjsf#?ZG[D5t09PyTQtMN"nX=fgo.c0zi1=?3t=a<drN"2!lxk/na2C&JtRK_8M\s6\s)@"="2aVarv$,?0,{
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:09 GMTContent-Type: application/javascriptContent-Length: 1986X-Content-Type-Options: nosniffLast-Modified: Mon, 27 Aug 2018 05:27:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:09 GMTX-Request-ID: v-06233778-a54e-11eb-a048-4f39c70910c5X-AH-Environment: prodAge: 853612Via: varnishX-Cache: HITX-Cache-Hits: 3591Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 59 5d 73 9b 58 12 7d b6 7e 45 ef bc 04 61 09 2c 65 3c c9 da ab da 42 12 96 a9 92 85 02 28 1e d7 d6 3c 20 b8 b2 c9 48 a0 81 8b 93 d4 94 7f d0 fe 8d f9 65 d3 7d 01 09 c9 28 c2 5b 99 7d d8 f5 83 cb f2 fd 38 7d fa f4 b9 7d b1 50 e5 06 c8 f0 e9 43 ca e2 af a0 bb 49 10 de c3 63 47 79 0b 6d 78 e0 7c 7d a1 aa f7 c9 bd af 78 91 92 fe aa 26 6e e8 cf a3 2f ea a7 df 68 b9 ca c4 72 15 01 08 63 96 b0 04 f8 03 83 79 1a 2c 39 04 21 64 f3 e0 b9 6b 77 1e 2c 03 1e e0 02 d7 f7 99 0f 46 58 84 ec 28 1d da cc 23 88 16 0b 16 c3 2a 5d f2 60 bd 64 c5 e6 68 cd 83 28 4c f2 18 8e 6e dd d8 60 5e c1 cc d6 91 e1 0e 6d 9a a7 1f 73 cd 42 48 a2 34 f6 18 a4 a1 8f 98 44 aa 6f 0f 61 1c 78 2c 4c 98 02 c5 d2 41 b4 fe 1a 07 f7 0f 1c fe f8 37 74 cf ce de c3 88 45 f1 3d 83 1b 6f 14 84 4b f6 15 ec 55 c0 1f 68 a9 b6 5c 82 58 9a 40 cc 12 16 3f 32 5f 29 60 2c e6 07 09 8f 83 79 4a 5c 01 45 82 34 61 a4 40 4e 83 46 e6 41 e8 22 d7 45 14 af 92 16 7c 46 58 88 62 f1 3b 4a 39 ac 22 3f 58 04 9e 4b 00 2d 01 ea c6 0c d6 2c c6 f8 1c 05 5b c7 d1 63 40 ca f1 07 97 8b 84 16 d1 72 19 7d 16 fa 46 a1 1f 08 95 c4 a6 15 e3 17 d5 cc 12 d4 b8 a0 e4 45 3e 2e 4d 13 8e e9 70 17 a9 12 a6 3b 8f 1e 69 aa 50 25 8c 38 4a d6 c2 b9 20 81 25 22 11 00 e1 96 43 86 fe 1e 1f 0c e9 2d dd 60 c5 62 a5 8a 03 c6 2a 69 51 70 c0 04 fd 14 79 d5 a3 41 b8 48 a5 26 0d c8 d3 f3 23 2f 5d b1 90 bb 45 99 54 ac 40 84 33 68 3b 97 b3 38 70 97 89 80 de a8 2d ca 24 b6 96 52 d8 d4 7d c2 02 b1 99 16 84 ee 8a 11 25 c1 3f c5 a2 c6 48 7b 3b 95 e4 74 33 90 28 4e 30 e2 57 98 33 32 8a 4f ee 67 a1 8f a3 2c cb 2c 26 06 ab 88 33 c8 64 41 d3 a1 8f 03 f4 1c 2c 70 22 13 22 89 16 fc 33 15 bc f0 50 b2 66 1e 99 08 37 05 64 ad 98 ac 13 66 26 4a 92 32 71 e7 da b0 c1 36 af 9c 5b cd d2 01 3f 4f 2d f3 a3 31 d4 87 d0 bf c3 49 1d 06 e6 f4 ce 32 46 d7 0e 5c 9b e3 a1 6e d9 a0 4d 86 38 3a 71 2c a3 3f 73 4c 1c f8 41 b3 71 e7 0f 62 42 9b dc 09 5c fd e7 a9 a5 db 78 40 2d 30 6e a6 63 03 01 31 82 a5 4d 1c 43 b7 5b 60 4c 06 e3 d9 d0 98 8c 5a 80 20 30 31 1d 18 1b 37 86 83 cb 1c b3 25 02 3f df 86 a7 9d a0 6f 74 6b 70 8d 23 5a df 18 1b ce 9d 08 7b 65 38 13 0a 77 85 f1 34 98 6a 96 63 0c 66 63 cd 82 e9 cc 9a 9a d8 21 28 bb a1 61 0f c6 9a 71 a3 0f 15 24 80 41 41 ff a8 4f 1c b0 af b5 f1 98 62 12 7a 29 61 f3 76 a2 5b 94 c1 4e b6 7d 1d a9 6a fd b1 9e 05 c3 7c 87 86 a5 0f 1c 4a 6a fb 69 80 1a 22 c5 71 0b ec a9 3e 30 f0 83 00 d7 7f d6 31 2d cd ba 6b e5 b8 b6 fe 61 86 0b 71 01 0c b5 1b 6d 84 59 4a 47 c4 c1 0a 0d 66 96 7e 43 d4 b1 ff d9 b3 be Data
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:06 GMTContent-Type: application/javascriptContent-Length: 2714X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:06 GMTX-Request-ID: v-04a64d54-a54e-11eb-bc56-bbffec5bc359X-AH-Environment: prodAge: 853615Via: varnishX-Cache: HITX-Cache-Hits: 3605Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 59 6d 73 db b8 11 fe de 5f 41 33 1d 89 b4 70 b4 7c fd 26 0e 4f 93 26 b9 cb dd 8c 93 c6 4e 7b 9d 51 74 19 90 00 29 da 14 49 13 a0 65 d5 52 7f 7b 77 01 f0 4d 92 9d cc f5 8b 05 e2 65 77 b1 6f cf 2e 7c 71 7e 66 dd 7e aa 79 b5 b5 ae d2 a4 a2 92 5b 0f 7f f3 a6 de d4 da 59 4e e4 36 6b 3f 17 75 ce a8 4c 8b dc a2 39 b3 0a b9 e2 95 15 15 b9 ac d2 b0 96 45 25 60 fb ed 3d 6e f5 8a 2a b9 c8 d2 88 e7 82 5b e7 17 7f b1 e1 20 8f d3 9c 33 3b 08 e4 b6 e4 45 6c 88 7a 6b cd f0 aa 96 7c 34 72 8e 27 83 b3 a9 4b e2 3a 8f 90 af 43 49 e8 3e d9 35 50 15 c0 35 92 b6 df 2c 59 11 48 fa f4 40 2b 8b 05 a1 07 52 89 22 e3 3e 5f 44 cb dd ce c1 1f 20 44 68 43 f9 77 5a e5 69 9e 08 af ac c5 0a 0e 12 36 1a 31 6f 03 b3 a3 d1 19 3d 10 4a 2f 38 f6 6f 9f ae 7e fd e5 fa f5 e7 77 33 cb 9e c0 99 76 df e7 8a 46 1c 09 c8 c1 c0 71 5d 77 df ca c7 50 78 c2 08 77 9f 3e 86 b7 3c 92 9e 56 c9 3f aa a2 e4 95 dc aa e5 27 10 3c 4e 93 ba a2 61 c6 67 20 31 cf eb 35 6f bf 12 2e 67 ad 2e dc a7 8a cb ba c2 9b 73 b8 c0 7e ef ee 5b 89 fe c5 2b 01 7b 02 5b 99 d1 26 bd 43 a8 a2 a8 53 d1 68 d4 0e bd ac 48 46 a3 de d6 c1 8a 47 cb 32 db 3a ed 1c a1 55 02 b2 e5 52 b8 7b c2 82 8b 3f 16 97 3f 2e bf 78 17 7e 04 2a a3 a0 46 d0 02 17 d2 a1 5e 9c 7b da 2d dc dd 2e 1a a8 d1 38 96 12 72 62 5d bf fb f4 cf 5f af df bd b5 dd 63 43 8d 46 c3 93 8d 9f 96 59 9d a4 b9 95 15 94 71 66 ad eb 4c a6 65 c6 2d 99 ae b9 00 3a a7 0f a5 c2 4a 73 21 69 96 81 43 4e 9c 81 bd e7 b6 3d b3 ad 4d 2a 57 40 34 01 da 89 45 41 1f 0f dc 76 27 36 b1 1e b4 62 c1 01 0e 75 0d b6 76 5c 1f b5 cb 83 a7 bd 7f 74 83 60 b1 24 0f 45 ca ac 69 10 04 87 ae e3 0c 27 94 d3 b7 53 d7 5c 70 19 f4 ec 82 0c 4e f8 72 c6 f3 44 ae 82 e9 9e d8 7f a7 d1 dd 9b 62 5d 52 09 01 17 b0 22 52 96 02 d3 e1 d4 55 c1 b8 d2 a7 51 3f a8 23 2f a4 a5 17 53 70 35 7d fd 4f 75 5a dd 09 0b 77 db fa 62 71 a0 8c 99 e6 a9 24 09 8c 53 f1 01 bd 33 8d c8 0a 57 d2 9c 91 34 b8 f8 b2 70 be 88 f3 c5 0f 5f 36 cb 09 0c 5c 67 f1 df dd 1f 7f 3d 5f ce 03 17 3e 1d 5c 78 b5 3c 9f bf 32 03 9c fc b2 bc 20 b7 7f f6 64 e2 b7 52 75 4a a2 da d1 c3 e0 75 55 d1 ad 57 56 85 2c 30 f1 78 02 d3 92 17 81 ed 9d ce 81 7d 1d 49 36 26 95 3c e9 72 14 b8 b1 fd 0a 35 08 03 a7 55 98 63 8d 5f 8d 2d b7 d1 1b b5 1e 68 06 76 15 3c 83 a8 2e 2a 70 bb 70 31 5d 82 bd 21 71 99 a8 91 ab 54 40 ea 42 ab 19 51 3b 91 94 52 89 d6 df 9f be 40 1a 3b a7 a4 4f 4d 0c ba ae ac b6 4f ad 1f a8 68 bc 31 f2 c2 ea 3e a2 32 5a 39 cc 7d a2 20 4d c5 cb 0c d3 d7 ed 20 ef 92 88 b0 26 e5 d8 0b 7b 12 4e a2 c9 d8 1e Data
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:09 GMTContent-Type: application/javascriptContent-Length: 359X-Content-Type-Options: nosniffLast-Modified: Mon, 27 Aug 2018 05:27:07 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:09 GMTX-Request-ID: v-06233778-a54e-11eb-86a5-2f2ca471adf7X-AH-Environment: prodAge: 853612Via: varnishX-Cache: HITX-Cache-Hits: 2953Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 65 51 41 4e c3 30 10 bc f3 0a 63 a4 2a 56 8b 81 6b 22 4b a8 15 47 7a 69 6f 88 83 95 6c 5b a3 c4 89 ec 35 6d 95 e4 ef 6c 9c b4 a0 72 dc d9 d9 f1 cc f8 68 6c 51 1f 65 a5 31 3f bc 43 61 74 d7 25 c7 5b 4c ed 82 cd d1 d4 36 11 2d 0f 1e 98 47 67 72 e4 d9 b7 76 0c d4 c4 f7 78 2e 61 d2 b8 48 0c 53 66 76 c9 3d 88 76 20 a3 2a ea 3c 54 60 51 e6 0e 34 c2 5b 09 c3 94 f0 78 cd c5 c2 fc 32 f6 80 d3 da 2f cf 5b bd 5f eb 0a 88 98 3b d3 20 17 1f cf 9f 0b ab 6c 28 cb 0c 25 9e 1b 50 1c e1 84 4f b9 f7 9c 10 53 28 1e 13 44 0f 5f fe 11 c1 93 63 23 1b ed 48 71 5d 17 20 8d f5 e0 70 09 bb da 41 82 0b 23 32 ab 38 bd ba aa ab 26 20 14 9b e8 c9 58 36 c6 99 cd a6 58 b7 14 ba 1d 7c 88 ae a3 58 c1 0d fa 11 cf 40 b5 d7 16 43 95 5e 6b 9c da 30 8a bf 46 7b 8c cf 61 ce 5b f6 f0 cf 31 6b e9 f1 02 0f 29 7b 69 4e 19 eb 59 cf 87 3e 71 6c 7b 73 00 40 d1 fe 9d 24 e5 df 52 0f ca f4 50 7a a0 dd d0 ca aa b6 48 ae 08 74 80 c1 59 66 65 94 55 4a 71 12 e6 7d 7f 59 5c 3d 92 ee 08 8d 11 c0 a7 20 ff 84 49 b0 eb b8 2e 4b fa b2 e8 37 bd cc 24 95 08 91 dd fd 00 30 b5 1e 39 5a 02 00 00 Data Ascii: eQAN0cVk"KGziol[5mlrhlQe1?Cat%[L6-Ggrvx.aHSfv=v <T`Q4[x2/[_; l(%POS(D_c#Hq] pA#28& X6X\|X@C^k0F{a[1k){iNY>ql{s@$RPzHtYfeUJq}Y\= I.K7$09Z
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:09 GMTContent-Type: application/javascriptContent-Length: 17202X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:09 GMTX-Request-ID: v-06232846-a54e-11eb-9139-f38dd434b741X-AH-Environment: prodAge: 853612Via: varnishX-Cache: HITX-Cache-Hits: 2928Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 7d 69 77 db 46 b2 e8 77 fe 0a 0a 33 23 03 22 48 71 91 e4 19 50 10 8f e3 24 2f 7e 67 12 e7 c6 9e c9 9b 23 eb ea 60 69 90 34 c1 45 5c 24 cb 92 fe fb ab a5 bb d1 0d 80 b2 92 fb 9e 3f 58 44 2f d5 5b 55 75 55 75 75 f5 f1 71 f3 f3 7f ed c4 fa be f9 db f2 3e ca 3f e4 d3 54 ac 9b ab 7c 37 9e 2e 3a cd b7 cb d5 fd 7a 3a 9e 6c 9b df cf a7 5b 28 f4 41 cc c5 62 79 db 9c 6c b7 ab e0 f8 38 9d ce 37 9c d2 49 96 f3 66 e3 18 a0 dd 20 b4 ce 1a a1 6d 18 da ed 3f 3a a7 9d d7 0d 37 db 2d 92 ed 74 b9 70 17 de 83 fa dd bc 75 63 3f f3 1e 6e a3 75 33 f1 a3 70 3b 99 6e 7c 11 de 4d 17 e9 f2 ae b3 88 6e a7 e3 68 bb 5c fb e3 50 74 76 1b b1 7e 33 16 8b 6d 67 bb fc e7 f2 4e ac df 46 1b e1 7a c3 a8 b3 9b a6 e1 a2 b3 de fc bc 4c 77 b9 d8 e0 77 ab 05 e9 8b 4d e8 40 b2 d3 a2 22 43 6c 24 0d d3 65 b2 9b 23 94 64 2d a2 ad f8 21 c7 11 6c 5d 27 9d de 3a 5e 67 b3 bd cf 85 3f 09 2f 9d 3b 11 cf a6 5b c7 77 7e 5e 7e 85 ff e7 1b f8 ef bd 73 e5 cf 42 c7 f1 f3 b0 eb df 0c b3 e5 da 4d c2 ee 30 39 9f 74 72 b1 18 6f 27 c3 a4 d5 f2 6e c2 c9 65 72 e5 1f cc 0e 0f 6f 5a ce c7 75 b4 d8 40 c9 b9 33 5d 34 d3 c3 43 77 16 de 78 fe 4d 78 63 0f c3 97 63 5e 0b 98 c1 cd f6 cd 62 3a 8f 70 86 7e 5c 47 73 f1 f8 e8 3e 97 2d e7 eb 12 5a fb ad 2e 1f 7a 2d ab 27 d1 22 11 f9 de da 6f 6b b2 9d ab c7 c7 72 89 3d ad 78 c3 e7 07 d1 78 7e 14 1a 41 22 3f 96 28 11 ba 0b 71 d7 fc 1e d6 c9 eb 8c c5 f6 e3 74 8e 53 95 86 3f 47 db 49 67 1e 7d 71 bb 7e ef ac ed 26 ed dc f3 0a bc d9 70 c9 e5 6e 5b 20 9d f7 10 b9 49 2b f5 9e fc d4 1b e6 21 fc 1c ae c5 76 b7 5e 34 c5 93 ee 77 dd f4 14 73 5f 3b 79 45 a7 bd 87 24 17 d1 5a b5 1c 79 4f 88 9b d3 cd bb 5f df 7c 1f 8e a1 b7 db 64 e2 1e bb d3 55 94 7a c7 32 eb fd 87 50 15 79 7c 34 cb 4c 96 0b f1 38 5d 2d a9 68 62 b5 12 85 c7 6e 32 59 2f e7 c2 bb 6c 7e 3a be 72 2f 3f dd 75 ae 5a de 71 47 7c 11 09 94 78 7c 3c 76 19 7b 9f 29 b0 5c 89 75 e4 b9 a3 a0 73 74 2b d6 1b 80 fd f8 4c e9 f9 66 2a bc 66 4d 56 f7 02 fa bf 48 c5 97 f7 99 eb 00 13 58 c1 d4 c4 b9 70 bc c3 43 a8 b5 fc 3a cd 73 d9 ca a8 b9 be 0d 14 84 47 13 46 e3 f2 4a ae c5 43 bc 5e de 01 99 07 d1 65 0f d0 0e 08 4d f6 0d 12 fa 98 d0 75 9e 9e dc b1 37 9c 84 0f 4f c3 a4 23 8b 03 51 01 c5 a9 af ab f0 a0 eb 4f 3a b2 66 98 a8 5f 50 ab c3 f3 86 e5 3b 3c 43 50 16 97 e2 3a 0a 27 b4 22 6f 16 e9 7a 09 ec a4 dd 3b 1f 17 03 8b 38 d5 c1 a2 cc d5 c2 85 1b e3 97 b8 0d 71 51 10 44 0c bf 14 73 a1 82 5b 60 4a e2 cb 56 2c 52 f7 e1 c9 5f 74 b2 05 f3 45 e6 b2 9d 54 64 d1 2e df 6e 80 ff 61 f5 24 c4 2a 9d 2d b2 Data A
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:11 GMTContent-Type: application/javascriptContent-Length: 2506X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:11 GMTX-Request-ID: v-07543a48-a54e-11eb-a9d4-8f0be6f0acdcX-AH-Environment: prodAge: 853610Via: varnishX-Cache: HITX-Cache-Hits: 2617Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 1a fd 73 db b6 f5 77 ff 15 48 cf 2d a9 58 a1 64 3b d7 ad f2 bc 2e 71 b2 ab 6f c9 a5 ab dd 6e 3b 9f 2f 47 91 90 88 84 22 18 12 94 ac d8 fa df f7 1e 40 90 20 09 ca cc 25 e5 e5 62 12 c0 7b 78 df 1f 80 26 4f 9f 1e 90 a7 e4 c3 a7 82 66 5b 2f e2 6b 9a 85 2c f3 3e e4 64 7d ec 1d 7b 27 38 19 09 91 ce 26 93 cd 66 e3 05 3c cc 78 9a c3 df 15 cc e0 e4 1b 16 d0 24 a7 21 29 92 90 66 44 44 94 bc bd bc 26 b1 1a f6 5a f0 3c 85 51 5e 64 01 f5 78 b6 9c 94 ab f2 c9 8a 89 67 1a 24 8d d2 12 f7 05 4f b7 19 5b 46 82 9c 4c 8f 4f c6 f0 2d 77 df 4b d3 e4 c0 5d 14 49 20 18 4f 88 bb f0 03 c1 b3 ed 88 dc 1f 10 78 9c 22 a7 24 17 19 0b 84 73 26 47 d8 82 b8 62 9b 52 be 20 21 5d b0 84 92 f3 f3 73 e2 68 0c 0e f9 e1 87 72 c2 f3 57 a1 c6 83 8f 1a 75 6f 1c 25 3a e7 76 4c f4 6e 0a f5 8e d0 18 b6 33 76 a0 77 29 cf 44 4e 9e e0 16 28 2e c4 10 3a 26 d6 15 0f 8b 98 7a 7a e5 b9 c6 e9 66 f4 53 c1 32 ea ea ed 46 cd 5d 6a 0c 1a e0 c3 bf 71 9d 5e 75 b0 1b 19 62 39 b4 0b 44 0e 55 ab 7e 29 6d c1 a5 31 5d d1 44 8c 09 4f 71 22 37 e9 15 11 cb bd 43 1a 03 a5 87 7a 61 b9 27 3e 93 09 c9 a9 d0 80 4d a8 72 10 21 81 5f 41 93 d0 15 59 41 c7 e4 7e 37 56 2b 40 40 7e 11 8b bc de b9 81 99 25 4c 30 3f 66 9f 29 59 b3 9c cd 59 cc c4 96 08 0e 22 40 91 2c 78 46 f2 88 6f 88 9f 84 24 62 21 25 2b 2a 22 1e 36 a9 60 f9 1f 08 1b 53 29 6b 80 6b 6c b1 04 e2 d1 a2 a5 5f 48 8c 08 44 4a 46 5b 52 90 8b 5e c3 14 a0 d2 72 f1 40 c5 c0 97 c1 af 57 2d 6b 72 23 32 3f c9 99 94 7c 0a e6 4c 33 c1 68 4b 62 f5 92 5f 61 05 ec e2 f8 71 4c 1c 72 d4 10 a8 97 a7 14 dc f1 88 38 ab bc 3b 49 fd 9c 25 cb a6 86 8a 14 ad 4d b2 77 71 75 65 50 d2 da 5f 2f 2c d9 7b 5f 7e e7 d7 35 80 db 64 2a e6 7e 28 05 48 d7 20 af 16 ba f7 38 fb 5a 4e b8 95 9d ca 3f da f4 3c 90 84 e0 e8 3d b0 67 c3 f5 a4 5d cc 8c 31 7c 24 e3 33 72 3a 9d 8e 1b e3 8a e7 19 71 e0 85 3a cd 39 a9 8d 57 34 f6 b7 33 d2 02 63 09 4c e5 74 a6 ec c2 02 86 4a 04 ac 21 5b 3b d5 e4 ae 5e 17 80 3c c0 a2 d1 1d 67 15 4b f5 f4 04 23 af 7e 9e 92 57 54 d0 40 60 b8 68 e9 80 f8 19 d5 3a a2 a1 01 62 42 ff 23 a3 a2 c8 12 72 ff 92 f3 98 fa c9 ce 98 9c 54 ef 36 8d cd 6a 8f 77 47 2d 81 1a b1 eb 2d 87 e8 9e b0 cf d9 be e8 a5 9f 92 98 0a c6 0b f2 dc e0 e8 ac 01 d0 89 60 fa 59 fb 19 99 83 e2 43 1e 14 e8 6e de 9c 87 5b f2 f0 50 0f e8 97 d7 65 84 ea a0 c0 07 23 cc dc cb c5 36 a6 f6 05 d2 93 6a f2 74 20 ec 11 44 7e 93 de aa 24 81 71 33 59 5a 05 60 08 01 63 da 59 67 c1 ae bb 07 b8 cb 35 cd 21 e8 a3 1f 82 57 84 18 bf 52 1a b0 05 0b 64 48 b0 0a 68 0d c4 df 38 6f f9 67 Data
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 22:40:10 GMTContent-Type: application/javascriptContent-Length: 1307X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 22:40:10 GMTX-Request-ID: v-06d206fe-a54e-11eb-adef-efbac0be8a5dX-AH-Environment: prodAge: 853611Via: varnishX-Cache: HITX-Cache-Hits: 2608Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 57 5d 6f db 36 14 fd 2b 0a 07 a4 12 2a ab 76 b2 ad 83 1c 25 48 9d 34 09 b0 2e 19 12 ac 0f db 1e 18 e9 4a e2 4a 93 2a 49 39 71 5d ff f7 5d ea c3 92 e3 a4 31 b6 02 dd 1e 8a 5a e4 e1 e1 fd 3c bc 49 4b 11 1b 26 85 03 1f 4b ca 73 60 59 6e 5c f0 16 33 aa 1c e5 b3 68 e8 4b fc 27 22 01 77 ce b1 52 74 3e fe eb d7 12 d4 1c 31 01 d0 38 77 d3 86 c0 f5 16 2c 75 55 d4 6c 9b 9c 69 cf 6f 3e 94 17 34 cc 84 96 46 12 cf 37 b2 b8 92 da 9e 8b 54 50 48 cd 6a 8a 00 d7 7d b9 13 75 db de 22 95 ca 8d 4b a5 40 98 13 36 8b 86 e3 ee e3 40 04 1c 44 66 f2 de da cb 97 9e f8 bd fb fc b3 bd 99 79 e3 16 5d 39 d5 5d 81 5e aa 16 e5 f9 22 28 4a 9d a3 c9 4b e0 1a 9c d5 27 a2 d8 41 87 3b ea 7e 86 6c fc d5 6c 5c 7a cb 3b 26 12 79 17 d0 24 39 9d e1 fe cf 4c 1b 10 a0 5c 72 72 f9 6e 22 85 b1 6b 92 26 90 10 bf 17 7b 52 a2 b1 da 28 16 1b d2 a6 88 04 34 8e a5 4a 10 31 30 32 cb 38 10 2f 40 34 89 39 8b 3f f4 8e 63 be 21 28 14 d8 fb 4e 20 a5 25 47 b7 c6 55 09 ac e7 d3 46 4a c0 bd 59 a3 8e 6b a3 30 ab 72 0d 1d c4 39 e3 09 fa 88 e8 fa fa 01 43 2c e2 c4 3a ae a0 36 10 1b 9c 94 a1 db c4 1b ab e6 f4 84 53 ad 5d 22 0b b0 1c 2c d0 9c 25 70 53 6d b9 7b 3f 0c 3d 1f 53 42 f5 1a ea c8 95 41 6e a6 dc 25 07 cc 89 ed 4e f4 22 a5 4e 4a 07 71 0e 33 85 17 95 c5 8b c3 83 57 ec d0 5a 65 63 de 1c d7 c0 21 36 18 63 cf 0b 9f e5 c0 74 89 1e 8b 82 a9 9c c1 26 d1 b2 0e 29 b4 ce 93 ef 72 39 85 41 e5 06 fa 59 5f e2 8d db ac 38 6a d5 87 d1 3b 89 10 c1 3e a9 60 fa d1 25 ae 33 65 62 70 c7 12 93 87 ce 68 6f 38 2c ee 1d af 1f d6 87 cc 09 35 d4 25 4a ce 29 bf 6e d6 7c 13 cd 24 4b 9c e1 4e 14 89 dd 5d 51 72 6e 7f 8d d5 91 d9 dd dd 11 81 36 01 55 4a de e9 5f e8 ec f3 67 17 17 99 2b 7c a8 a8 02 a9 58 c6 44 4b e6 f5 eb f0 09 0b 7a 77 bb 8b 15 71 b8 33 f2 6d a6 95 e4 f8 c5 32 6a 49 42 22 a4 00 e2 7f 80 f9 ad a4 2a c1 9d 53 41 6f 39 24 e1 ce b0 85 eb 0b a1 91 cc 12 b0 29 cd e0 3a a6 1c 6c 94 42 92 32 ce 49 bd 7a cc 59 26 26 58 5b a0 ec 59 ab 3d 15 b0 36 c4 1e e6 52 16 76 4b 94 d3 0b 7b 42 df c8 2b 05 1c fb 2b 1c f9 26 2f a7 b7 fa 2d 33 17 e2 37 06 77 85 54 c6 9e 11 b5 a9 f0 66 3e b1 7d 54 31 b7 1e 1d e3 15 e7 95 61 bd 45 bb 70 29 6e 64 19 e7 f6 7c c6 e5 2d e5 13 5a 54 de 22 f0 96 4b a4 59 a4 d8 d4 a7 69 8a e5 82 8b cb ca da 2b 4e e7 e1 02 3a f7 0b 8a 7d 7e 29 ce b1 c0 2a 97 12 b0 88 7d d8 5f fa 46 51 51 eb e8 cd bc c0 38 d8 22 24 7e 95 01 7d 5d d0 98 89 2c 1c 2e 57 9a 5c cb 4c ad 07 0a 34 fb 84 60 89 89 aa 7e a2 0e 92 36 a9 24 8a 0c 12 ca d4 29 50 5c 4a 05 36 c0 bb bb db 97 5a 00 b3 Data
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 04 May 2021 19:47:04 GMTContent-Type: text/cssContent-Length: 2098Connection: keep-aliveServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesVary: Accept-Encoding,User-AgentContent-Encoding: gzipCache-Control: max-age=900, publicData Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 dd 6f db 36 10 7f b6 ff 0a 0d 45 d1 a4 b0 5c d9 8e 62 c7 7e 59 b1 36 58 81 ee 03 cb b0 3d 6c 7b a0 24 da 26 22 89 2a 45 27 4e 8b fc ef 3b 7e 49 24 25 3b 5e ba b6 50 61 1e 79 e4 f1 ee 77 c7 bb eb 98 df 93 12 87 0c d7 98 07 5f 86 01 fc 49 69 4e d9 32 78 11 45 d1 4a 12 12 94 de 6e 18 dd 95 19 50 af af af 57 c3 c7 e1 70 6c 33 26 34 7b 18 39 94 8c dc 79 84 dc 1b 73 6f 9c b9 e3 9d b7 9e 7a e3 9c b8 e3 ed c4 1b 4f bd f1 cc 1b 5f 78 e3 d8 1b 5f ba e3 8a 61 97 90 d2 cc a3 ac 29 2b 3c 0a c1 79 06 3f 3c d1 f1 06 97 de 75 49 59 ed bc 65 1c ef 39 62 18 79 72 b8 c3 24 a7 e9 ed a7 1d e5 9e 2c 7c eb 8d 33 6d dd 02 b1 0d 29 97 81 b6 6d 85 b2 8c 94 9b 66 9c 0b 96 2d 26 9b 2d 5f 4e c6 17 5d 53 73 94 e4 58 ef 95 50 96 61 16 02 60 72 54 d5 78 19 98 5f 2b 7b ba ae 50 6a 8e f0 77 eb 57 10 29 36 ce 09 8d 74 19 a9 ab 1c 3d 2c 41 5d 42 d0 ee 7e 70 1b f8 51 7b 96 42 15 27 b4 f4 88 84 3f 69 d0 6c ed 31 61 cf be 35 67 b4 dc 1c d7 fc 1d 62 fa 32 6b 5a f2 b0 e6 0f 39 68 aa 04 ac a0 7c d5 d2 ef 95 ce 9b 09 ff 66 3e fe 77 b9 de 35 27 b5 b5 6b 9f 52 7a ef cf b7 9a 5f c0 2c 44 39 d9 00 28 72 bc e6 5d fe ff df b5 1c 85 90 cf 20 f9 24 8a 5e fe 07 6d 7c 5a 26 18 dc cd b3 d7 a7 25 5a 73 cc 9a 38 56 72 5c c2 26 af 5e f5 00 25 49 98 cb 8c 52 b0 e5 43 d1 0f 3c 29 14 58 92 a0 f2 88 54 f5 ae d2 ec 77 98 71 92 a2 dc 28 56 2a 99 d3 aa 8f 27 39 c6 93 50 ce 69 d1 65 3b 39 5e d4 38 c7 29 b7 15 be 46 05 c9 a5 0f 6d 31 23 7c e5 9b a2 4b 37 d6 68 66 fe 47 69 6c f3 fb db aa 40 d9 f7 2c c1 ca 17 0f 3b 32 0b d3 ba 06 f0 a3 a2 1a c3 2f c9 15 4a bb ef cd 21 4d c8 68 7c 63 f8 42 9d 81 8b 04 67 21 59 33 54 34 38 b2 69 c1 97 16 04 8f c3 9e 05 e3 75 8e f7 44 86 43 0a c6 5b e7 f4 3e 84 83 b6 24 cb 70 19 7c 47 8a 8a 32 0e 80 59 85 05 fd 1c 9a 25 66 c1 a1 3d c9 1e 67 ee 86 68 c7 a9 bd dd e3 50 af ed b2 2f 97 60 ac e4 96 80 5e 01 ce 79 9e 88 e0 63 54 20 35 70 9c 59 08 da e0 b0 d9 e2 8b ab c4 c7 46 85 05 cd 60 5d 9b 1f 68 9d 57 b4 26 22 e2 2c e5 65 14 90 00 fc 4b f3 c6 40 94 31 bf 15 be cd 88 49 9c 75 d2 8e 50 d9 3e c9 81 a2 e6 a8 78 53 f8 c3 72 3c 5f 0d 07 9f 43 52 66 78 bf bc ba ba 82 91 73 db a1 2f ab 98 c2 6c 14 38 44 9c 11 4e 7d 62 0a e0 ed 52 2b 46 8b 4a 60 cb 3b 67 b0 37 8a 4f e8 3e ac b7 28 13 96 9e 57 7b f9 c5 f0 45 f0 b1 4d 82 ce e2 68 14 98 2f 1a 4f cf 25 b3 50 bc cd 09 7f 4e 66 f6 f8 82 ff c2 6c 74 07 0e 28 fc 6a d0 98 0e 25 35 cd 77 bc 47 85 5a 31 a1 8e af 42 17 f7 24 e3 db a5 72 e2 81 f6 9a 7e fd 2b 55 0b 1e 1f 24 9a 2f 64 28 23 bb 7a b9 a8 f6 42 1c 9d 9e 44 72 24 81 03 d2 8b 53 04 9e 62 79 9c 0f 13 b8 ea d9 54 5c d1 fc 73 de 6e 2e 77 d0 16 33 e7 49 cc 79 34 5b 06 9d 0d e9 18 a5 ef 6a 46
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 04 May 2021 19:47:04 GMTContent-Type: text/html; charset=utf-8Content-Length: 6068Connection: keep-aliveServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Cache-Control: privateVary: Accept-Encoding,User-AgentContent-Encoding: gzipSet-Cookie: twine_session=9261ebc8018a93ac70d48b8d09358019:7d4945c759b3a388fa42abafe537aaf6e38332c1; expires=Thu, 03-Jun-2021 19:47:04 GMT; Max-Age=2592000; path=/; domain=.twinesocial.com;HttpOnly;Secure;SameSite=LaxData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5d 7b 77 db 36 b2 ff db fa 14 28 7b b6 b6 bb a2 64 49 96 eb 97 7c 8f e3 24 6d b6 79 b8 b5 d3 ee de a6 c7 0b 91 90 44 9b 22 55 02 94 fc 88 bf fb 9d 19 f0 01 4a a4 6c d7 75 f6 de 73 9d 26 16 01 0c e6 85 c1 0f 03 0a 70 f7 bf 7a f9 e1 e8 f4 5f c7 af d8 48 8d 7d 76 fc f1 c5 db 37 47 cc b2 9b cd 5f 3b 47 cd e6 cb d3 97 ec 9f 3f 9c be 7b cb 5a 8d 0d 76 1a f1 40 7a ca 0b 03 ee 37 9b af de 5b 35 6b a4 d4 44 ee 36 9b b3 d9 ac 31 eb 34 c2 68 d8 3c fd b9 79 89 cc 5a d8 3b 79 b4 95 d1 b5 e1 2a d7 3a a8 ed 93 44 9f 07 c3 9e 25 02 8b 5d 8e fd 40 f6 ca 38 b6 76 76 76 34 23 e8 56 db ff ca b6 6b 8c 9d e9 3f 8c fe e8 47 28 9c 31 7a c0 7a dd 98 15 19 fd ab b1 cf f4 f9 89 7d c2 7e 4d d6 84 e6 cf ec d3 67 f6 19 c8 9a f0 ef 33 fc 80 46 7a a4 b6 26 10 43 33 88 c4 0f 06 6d 9f 9a 9f a0 23 96 3e b3 c6 bf b1 e7 e7 4f 67 d8 69 ed 6c 1d 4a 6b f0 8c 94 c4 08 1e ce ce a8 2f b0 82 ce 67 4d f8 8b 75 c0 1d 7a e9 87 33 ac 45 f1 9f d2 22 3d 63 e9 ec 73 ad f6 22 f6 7c 77 97 c5 c1 45 10 ce 82 da 51 e8 0a f6 2a 98 7a 51 18 8c 45 a0 76 d9 24 0a dd 9a 6d a3 73 46 82 bb 07 b5 95 fd b1 50 9c 05 7c 2c 7a d6 d4 13 b3 49 18 29 8b 39 61 a0 a0 43 cf 9a 79 ae 1a f5 5c 31 f5 1c 61 53 a1 ce bc 00 c6 87 fb b6 74 b8 2f 7a 30 de 56 33 63 84 83 62 8b 3f 62 6f da b3 fe 69 7f 3c b4 8f c2 f1 84 2b af ef 0b 83 eb 9b 57 3d e1 0e 45 dd 19 45 21 08 6e 59 38 5c 2b fb be 17 5c b0 48 f8 3d 8b 4f 26 be b0 55 18 3b 23 db 83 6e 16 93 de b5 80 41 6f 6d 6f 5c c2 3f 8b 8d 22 31 c8 63 40 2a 90 e1 34 d4 cc 0b 84 0c 1d d0 ae e1 84 e3 a6 37 e6 43 21 9b 03 3e 45 26 cd 79 ae 8d 49 30 b4 0e 0a 82 b5 30 75 35 01 77 50 ef 26 d2 a4 d2 3b ed cb 4e fb cf c9 4e 3e 6d 62 f1 60 c1 ad ad cb d6 d6 e3 04 13 8b 12 c1 63 1e 78 03 21 d5 9f e3 0e 53 55 34 66 a2 9f 71 99 67 2e 2f 92 01 fc 53 dc f9 80 47 9e 3d f1 82 40 b8 b6 e2 fd 86 9c 0e 31 8e fc 30 ea 59 5f 77 fb 7d ee 76 31 76 6a 2b 25 f1 77 a4 c3 cd 3e 05 a7 1a c1 a7 c4 a5 6a 22 46 ec 31 67 c4 23 29 54 2f 56 03 7b db 62 18 c6 2b fb ca 53 be 38 38 45 cd 4e 48 b3 5d 76 c4 a5 f0 7d be df d4 6d 48 95 db 28 d5 95 2f e4 48 08 95 8e 1f 49 70 a4 b4 d8 58 b8 1e 07 12 27 12 22 f3 41 13 03 51 da 8e 1b 2c d8 0f 9d ec b1 07 83 e6 01 cb e6 c4 e7 57 22 fa 5b bb db 7e ad 46 62 2c ec 01 d8 40 c5 70 22 02 5b 02 52 fe dd a0 01 1d 85 a3 da 0d 60 52 52 6d f7 c3 50 49 80 d7 c9 3c 81 9a 11 63 39 5f 9f 75 b0 3b 8d 16 fc 07 8a cd 93 60 3f 9b cf c0 84 b1 28 6b d7 6a 43 39 8c b5 e2 7d f0 e4 3c 91 18 f7 85 5b de 73 1c Data Ascii: ]{w6(
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 04 May 2021 19:47:07 GMTContent-Type: application/jsonContent-Length: 8524Connection: keep-aliveServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Cache-Control: privateVary: Accept-Encoding,User-AgentContent-Encoding: gzipSet-Cookie: twine_session=21da2c7f6254cd33d82e6d3ec8debd03:a4627a77e6829a628cfb18fdc642ec0ac26889ee; expires=Thu, 03-Jun-2021 19:47:07 GMT; Max-Age=2592000; path=/; domain=.twinesocial.com;HttpOnly;Secure;SameSite=LaxData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5d 0b 73 db b6 b2 fe 2b a8 33 7d cd 98 0e 08 90 20 d1 99 9c 8e e2 d8 8e db bc 9a 38 cf 9b 33 1a 90 04 25 c6 14 a9 92 94 14 a5 d3 ff 7e 77 41 ea 65 29 96 ec a3 c4 a9 ab b4 51 24 3e 40 60 17 bb fb 61 b1 bb fc 6b 2f ec ea f0 5c 47 4f 8b 7e 57 65 7b bf c4 2a 2d f5 fe 5e 9c a7 69 3e 2a f7 7e f9 6b 2f af ba ba 80 6f ff f7 df fd bd 7c 60 be fd b5 97 44 7b bf 08 df b1 bd fd bd 6a dc d7 7b bf d4 a7 f6 f7 06 a5 2e 32 d5 c3 23 ef 74 91 bf c8 8b 0a 8e e6 c1 07 1d 56 a7 70 d3 9e c7 24 93 ae 0f 7f 3c 38 91 26 e7 da 3c 25 cc 07 59 b5 f7 0b dd df 2b 07 41 19 16 49 a0 8b 76 bf 5b a8 12 9b 3a 56 59 b9 f7 37 b4 5e a4 f0 ab 5b 55 fd 5f de df 7d 7f 77 34 1a 1d c4 2a d4 41 9e 9f 1f 84 79 ef fd dd b9 67 f6 8b 3c 4e 52 dd 9e dd 53 9a 9b 3a 85 ea 77 2f dc 36 d7 a9 f7 77 fb 49 58 0d 0a fd 6b a1 a3 a4 80 6e df ab 8a 81 fe a1 4c 3e e9 7b a9 2a 3a 1a da 6e 46 78 08 bd 4b 53 45 5e ab b2 d2 e4 c5 18 3e 7b 48 84 4c 57 a3 bc 38 c7 71 21 a1 dc fd bd a0 50 59 d4 be d0 fd f9 3e c0 5d 61 59 b6 c3 54 95 40 8f bd c9 a9 d9 b3 8e 27 47 fe 36 24 aa 92 2a 85 c3 d9 20 4d a7 43 3d 33 9c e0 fb 7b 49 d9 56 61 95 0c e1 17 f6 fd ef fd 19 c3 c4 25 0c 6b 86 63 46 b3 c8 34 e6 3b d4 76 25 5f c1 31 9b 7b fc 33 4c 33 73 08 e7 ce 6a ce 55 a3 a4 aa 74 51 73 e0 c2 b3 97 99 67 6e eb 07 25 de d6 eb d4 37 4d ae 4a 7a aa a3 4b 60 a3 cb 5c c7 e6 ae 03 bc 74 90 9d f4 fd dd ee 49 7a 94 ca 97 7f b4 b3 bc e8 a9 f4 e0 43 bf b3 c4 c0 65 96 b1 cf b0 6c ae cf 17 38 d6 9c 99 b5 7d d6 1c 58 c7 2f fb 52 7e f9 97 f0 ab d0 25 1c 0c 75 38 1d c5 1c cb 5e 1e 66 2c d2 e1 c7 37 d9 e3 38 e8 3b dd 0f c3 a3 b7 e7 bc 35 5a c5 42 c7 59 cd c1 17 d3 63 9f e3 e1 38 1f 54 83 40 d7 ec 08 41 83 64 3a 7d 7f f7 92 67 7f 4e 2a c7 15 3f e8 74 fa dd aa 6e ca ca 3a 7e df f7 7a c3 93 47 9d f7 77 5b d3 3f a7 f3 3f 5a ef ef b2 f8 e4 e1 a7 df 5f 3d 29 3a f0 a3 f4 7d 2b b4 ce ad 2c b7 7a b9 55 7c b0 42 fa 31 36 7f 60 aa 74 f3 2a 5f 64 fe 32 f9 2e 4c 02 fe 99 49 70 61 e0 17 26 42 73 66 f6 9c b7 f9 e0 0c 0f 5c 7f 22 78 94 8a cb 34 6d 33 82 d1 b2 e0 da 1e cc 21 87 fa ae 0d 12 2c 3c d7 5e c1 7e e1 7a 57 17 e0 24 2b 2b 05 aa b4 d7 b0 7e b1 07 9f e3 72 19 e6 59 a5 b3 ea e0 e3 c7 83 38 08 a3 ec 00 48 fe fe ee 10 04 cb b5 0f 98 ef bb 96 ed be bf 0b 5d 76 b8 c7 44 1b 84 d9 97 8c 83 38 53 cf a6 76 9b 73 c9 7c cf f3 7d db 75 7c 5f b8 2e 17 ed 0c b9 fa 6b 3b 0b db a1 aa ee d9 d4 fb 01 bf 77 ab 7b 73 0f fb 21 ef de 93 d4 53 6e 18 fb 1e a3 dc 13 1e 8b b5 e3 d0 90 52 db 89 a9 0c 42 fa 43 ae Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: image/svg+xmlContent-Length: 609Connection: keep-aliveServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesContent-Encoding: gzipDate: Tue, 04 May 2021 19:47:08 GMTVary: Accept-EncodingX-Cache: Hit from cloudfrontVia: 1.1 c2b4a332b09677da722930ae336c8bfc.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-C1X-Amz-Cf-Id: V71Lrll3DX4M63WDgIDlsB5WHPFP2awRyzDxGm-VSSRlg9Yxb5p9pw==Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 54 c1 6e db 30 0c bd ef 2b 04 f5 d2 01 b6 22 51 b1 2c 3b 71 0a 6c c0 4e 1b b0 c3 f6 01 ae a3 b8 46 1d 39 b0 dd a6 ed d7 8f 94 eb 34 cd b0 1d 86 1d 2c 93 8f 8f 8f 12 4d 79 7d f3 b4 6f d9 a3 eb 87 a6 f3 05 57 42 72 e6 7c d5 6d 1b 5f 17 fc e7 8f 2f b1 e5 6c 18 4b bf 2d db ce bb 82 fb 8e df 6c d6 c3 63 cd 30 d1 0f 39 5a 05 bf 1b c7 43 be 58 1c 8f 47 71 d4 a2 eb eb 05 48 29 17 18 e3 13 ed ef 94 b3 f2 0a bd c6 1d 3f 75 4f 05 97 4c b2 65 2a 92 b0 d0 2e 9e 5b dc 80 f3 e5 6d eb e2 db b2 ba af fb ee c1 6f 73 ef 8e ec 1d 77 c5 59 b3 2d 38 6a 43 a8 9f 0f 87 b2 c2 d4 43 ef 06 d7 3f 3a be 59 6f dd 6e 08 24 32 0c 02 55 db 1c be 97 e3 5d 00 67 47 59 8c 1c 08 45 f0 1b 93 91 b6 4c db d7 15 4b 86 07 bd 97 a9 20 31 41 f2 c5 66 bd 98 15 d0 a4 0a 9b 75 cd c6 be f4 c3 ae eb f7 05 df 97 63 df 3c 5d 2b 01 49 84 22 51 fc 6a d1 e6 3f 4e 5a b5 02 4e 59 93 bd 0c 36 89 c6 54 a4 e0 0f 7d 7b 7d f5 b6 cd 53 92 e1 17 a5 82 d9 96 a3 bb 56 49 74 e2 01 5c 1c 4c b2 cf 2c 06 01 32 43 33 5e 46 4a a4 99 22 63 49 8b a1 c0 1c b7 48 b7 6c b6 e7 20 31 e7 b4 59 87 64 f7 b8 2a c9 2a 16 6b a1 95 26 75 13 a1 92 b1 69 b0 0c c6 a7 10 0b 20 21 01 9e e9 26 9a c8 26 22 ea c4 9c f2 11 40 05 73 d6 fb e5 69 4a 76 4d db e6 57 fa d6 da 4a af c8 89 3b 9c 81 66 7c ce d5 e4 f6 0f ad cb 7d e7 5f 5c df ad 86 b1 ef ee 83 eb c2 d7 ab ff d8 44 10 a9 d5 10 01 88 2c 35 e6 d4 4e 73 d6 ce fd eb 5c c4 52 48 50 74 72 bc 55 52 91 0f ca 92 87 12 f4 c9 6d 96 9c 3c 2d b2 24 b4 02 84 c4 37 82 40 60 aa 53 f6 8e d1 ce c2 0c ac 48 49 35 c5 9d 00 a2 a0 85 b5 4b f6 35 54 3f 1f 48 7b d1 94 24 c1 cb e0 fe 67 53 74 1a a9 6c ee 85 96 bf f5 a2 a2 4d 1b 61 20 0d 33 84 77 27 56 c0 e2 64 7a 61 4b 0d d0 5c 24 51 22 74 aa c9 50 74 a2 29 63 4a 40 20 a0 33 19 73 27 72 10 79 3b ad 86 8b d3 02 18 93 65 ff 74 da 77 0f fe 4c 36 1f 7e 01 bd 46 01 29 2e 05 00 00 Data Ascii: Tn0+"Q,;qlNF94,My}oWBr\|m_/lK-lc09ZCXGqH)?uOLe.[moswY-8jCC?:Yon$2U]gGYELK 1Afuc<]+I"Qj?NZNY6T}{}SVIt\L,2C3^FJ"cIHl 1Yd**k&ui !&&"@siJvMWJ;f\|}_\D,5Ns\RHPtrURm<-$7@`SHI5K5T?H{$gStlMa 3w'VdzaK\$Q"tPt)cJ@ 3s'ry;etwL6~F).
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: image/svg+xmlContent-Length: 952Connection: keep-aliveDate: Tue, 04 May 2021 06:59:59 GMTServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesContent-Encoding: gzipVary: Accept-EncodingX-Cache: Hit from cloudfrontVia: 1.1 673c96d1f19de21216629aa48d90ac92.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-C1X-Amz-Cf-Id: 4vkxgS6jpnCDtjq4tSqQ0PHb-Cxq5ZDYqp0Wu_Fml5p5kKftuTVYgg==Age: 46029Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 56 db 6e 1b 39 0c 7d df af 10 a6 2f 59 40 23 4b 94 46 17 c7 76 81 06 e8 53 17 d8 87 ed 07 38 f6 c4 35 3a 99 31 c6 4e 9c f6 eb f7 50 63 bb b6 83 16 28 90 3e 0c 43 ea 42 1e 1e 52 74 26 ef 5f 1e 1b f1 5c f7 db 75 d7 4e 0b a3 74 21 ea 76 d1 2d d7 ed 6a 5a 7c fe ef 63 19 0b b1 dd cd db e5 bc e9 da 7a 5a b4 5d f1 7e 36 d9 3e af 04 2e b6 db 31 b4 69 f1 65 b7 db 8c 47 a3 fd 7e af f6 56 75 fd 6a 44 5a eb 11 f6 8a e1 d8 af 8f 9c 85 37 b0 d6 f5 fe 43 f7 32 2d b4 d0 c2 05 55 65 c1 28 be 35 00 50 b7 f3 fb a6 2e ef e7 8b af ab be 7b 6a 97 e3 b6 de 8b 8b b3 b7 85 58 2f a7 05 7c 53 8e 3f de 6e e6 0b 5c dd f4 f5 b6 ee 9f eb 62 36 59 d6 0f db 7c 88 15 8f 85 45 b3 de fc 3b df 7d c9 8b 47 c3 44 ec 6c 78 15 8b ff 08 2d 6d 14 36 1e 24 42 e6 0f d6 f7 21 20 9f 24 5d 8c 66 93 d1 d1 03 54 8e 30 9b ac c4 ae 9f b7 db 87 ae 7f 9c 16 8f f3 5d bf 7e b9 31 8a 2a 09 27 b2 3c 68 0c fe ef c1 d7 ca 50 c1 b7 06 dd 65 9d 9d 96 1c 64 5a 3c f5 cd cd bb 1f 30 4f 97 7c 71 15 2a ab cd 7c 57 df 58 a7 ac 76 41 9a a4 bc b7 fe 78 85 e8 2a 47 2d ee b2 44 31 2c 49 a3 7c 25 4a ad 2a 93 24 a9 10 8d 28 49 19 0f 12 54 32 24 4a ab 28 f1 0e f9 2b e3 93 28 a3 aa 2a 59 56 ca 26 2f 16 ec c4 80 35 80 20 d6 6d 48 30 7c f6 9d 58 8d c9 89 46 04 45 31 4a 83 1d 4a b8 74 04 62 18 88 4b e7 48 44 99 97 64 c6 c9 a8 42 94 79 3b 5e 1a 8d 28 bd 8a 95 97 65 52 29 85 01 09 01 19 a4 3e 78 64 c3 99 c0 46 88 6c 78 a2 0c 26 31 61 06 08 7f 86 25 fe 16 16 90 62 bc 62 07 14 8e 48 12 49 66 26 bb 8b 86 09 b2 99 f1 18 18 54 8a 19 87 a3 c0 a4 44 78 7f 13 52 00 84 90 65 f2 a8 a3 33 a8 02 19 65 d1 83 94 23 b2 15 d9 89 0f 16 f1 1c 68 c0 4d 8b 42 5a 51 e1 7c 62 2e 43 48 82 c0 0c a1 7d d1 0c 43 55 2b ef 39 44 a4 8a 91 d8 c4 06 f9 0b 3d bb 91 ec 93 ef 5b 14 c6 30 26 c6 57 61 23 fb b2 48 da 28 e7 49 86 dc 2f 43 ce 38 e6 2a a0 4a 07 ef 81 73 76 81 f5 44 4e e6 6d 76 e3 7c 92 c3 fe 95 d5 64 7a 62 6e 4a ad dd 50 00 8f 66 66 0f d1 1d 9d 22 d3 e4 33 20 3c 00 1c 8d 96 75 5f 05 36 28 73 ac a1 a3 2f a2 b3 c8 27 39 03 0b 5b 08 01 7a 7c c5 1e 02 80 19 52 c9 c2 e2 34 2b 81 ca fb 68 41 b8 31 48 c5 24 7e 0c 68 72 14 dc 67 f0 e0 1a 92 b8 1d d0 ae c3 03 72 91 e9 c5 fd 60 32 05 e7 93 c6 9d 66 e2 c3 ba 69 c6 ef 96 29 d5 91 6e d9 28 3b 4c bc f5 ee db d8 0c 66 ff d4 d4 e3 b6 6b bf d7 7d 77 bb dd f5 dd d7 6c d6 79 56 ad 7e 3e 32 94 76 78 1b 56 9f 86 85 3f 1b 16 8f 19 51 09 bc b9 3e 16 3c 05 b0 61 90 81 57 a9 8a 22 cb 83 de e0 44 49 Data Ascii: Vn9}/Y@#KFvS8
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: image/svg+xmlContent-Length: 1353Connection: keep-aliveDate: Tue, 04 May 2021 13:28:18 GMTServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesContent-Encoding: gzipVary: Accept-EncodingX-Cache: Hit from cloudfrontVia: 1.1 cc763905c39a59494c951c09271b0422.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-C1X-Amz-Cf-Id: lL-tAvcqikaYV3lLIkxBfiu6f8noW5ZHvDesVJLsQZJmecBBEVpFZQ==Age: 22730Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 c9 6e 1b 47 10 bd e7 2b 06 e3 8b 03 cc b4 7a 5f 68 51 06 62 20 27 07 c8 21 f9 00 8a 1c d1 84 29 52 20 29 c9 f6 d7 e7 bd 6a 92 92 18 3a 87 40 12 c0 41 55 77 75 75 ad af 5a 97 1f bf dd 2e 9b 87 61 b3 5d ac 57 e3 d6 28 dd 36 c3 6a ba 9e 2d 56 f3 71 fb f7 5f bf f7 b9 6d b6 bb c9 6a 36 59 ae 57 c3 b8 5d ad db 8f 57 97 db 87 79 83 83 ab ed 08 d4 b8 fd b2 db dd 8d 2e 2e 1e 1f 1f d5 a3 53 eb cd fc c2 6a ad 2f b0 d7 56 b1 ff 16 79 76 bd 01 b7 18 1e 7f 5b 7f 1b b7 ba d1 8d 4f 2a c8 87 56 7c 5f c2 80 61 35 b9 5e 0e fd f5 64 fa 75 be 59 df af 66 a3 d5 f0 d8 bc 90 fd d0 36 8b d9 b8 85 6e 2b f7 8f b6 77 93 29 8e de 6d 86 ed b0 79 18 da ab cb d9 70 b3 15 21 12 11 0b d3 e5 e2 ee cf c9 ee 8b 2c 1e 18 93 b1 73 c7 55 2c fe d1 e8 ce e5 c6 e5 fd 17 57 ca 0f dc 8f 7a 21 25 ad 6e 2f ae 2e 2f 0e 1a 40 f2 86 ab cb 79 b3 db 4c 56 db 9b f5 e6 76 dc de 4e 76 9b c5 b7 f7 46 d9 d0 41 49 d7 ef 29 1a ff 6b d5 35 37 b6 e5 a9 4a 7b a1 a9 b4 e7 25 e3 f6 7e b3 7c ff ee c9 cc e3 a1 d8 9e 5c 25 e4 72 b2 1b de 97 ce 9a 83 9c b5 cf 1c bb 15 47 a6 4d af 55 08 16 64 6f 3a ad bc cf 24 4c b3 c4 b6 31 d8 87 14 05 1a d9 c3 06 37 0f 47 4c d7 d7 23 20 4c f3 59 f6 3e 35 07 3d 07 29 68 78 16 29 7f cc e9 cd 62 b9 1c bd 9b 4e 67 71 36 fb 40 a6 5f 23 63 8b dd f7 91 a9 ec e6 7e 39 8c 56 eb d5 8f 61 b3 fe b0 dd 6d d6 5f 85 1d 24 d6 f3 9f ba ec 3a 7f f4 38 9e a4 52 c3 3e dd 59 65 5d 6c 7c 17 9b 84 df 67 7c 69 77 c4 d7 41 c2 d2 19 78 04 9f 49 bd 34 3f 9f 98 ef ae 73 9e ba d7 34 df a4 27 fb 9d 3e 93 b1 83 fd 3d 1d e8 e9 01 93 d5 07 6c 21 f4 70 0b 46 07 9a 2f 59 b1 e2 91 79 72 c1 d9 b7 77 21 76 d6 1d 7d f0 67 72 60 0f 86 7a 1a ea 69 bd 56 d9 39 2c 39 15 bc 85 73 ca c4 04 d6 57 b6 ec d9 20 ac 3e 2d 2b 17 df dc 29 df 99 74 f4 29 9f eb 24 89 77 8f f2 71 f2 0d cc 8a 6d ac 4a 01 19 d3 9e 7e a2 b0 54 32 99 bd ef 9d a5 98 97 cf 93 27 5e bf b9 27 51 85 ec 60 93 87 65 07 8f bc 3d 93 25 a3 02 3b 3c c0 07 9c 20 69 6c 68 9c 8a 48 85 c6 e1 86 1a 3a a3 a2 25 59 0c 13 a4 52 b1 10 f1 64 2c d7 a0 45 76 bc 84 00 3a 92 86 ff 91 4a c8 51 17 f6 9c 73 c2 d9 50 1b ef 24 bf fe 14 36 b4 fc bd 6a d1 6a a5 ad 05 5e 06 55 4a 39 c6 25 fe 04 33 93 67 3c 22 ac 36 2a 87 48 67 c5 07 ab 7c 36 f4 c8 9b 48 c1 9c f6 31 ec 6b 81 03 f4 75 3e 84 c1 30 88 5a 59 ce 01 55 52 24 66 ea 4a 27 d0 ce 33 ba c1 4a d8 ac 11 24 36 72 36 63 12 29 17 3d 6f 37 86 8c 09 85 4c 32 92 a7 92 b1 e5 94 8e c4 31 95 cd 13 17 95 06 47 bc Data Ascii: WnG+z_hQb '!)
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 04 May 2021 19:47:08 GMTContent-Type: application/jsonContent-Length: 8475Connection: keep-aliveServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Cache-Control: privateVary: Accept-Encoding,User-AgentContent-Encoding: gzipSet-Cookie: twine_session=8cc9bf16435e8e0d8a6c60feb60ff174:cae6a7c5a756a692d76b5cf5d6e1fd153cc05e5c; expires=Thu, 03-Jun-2021 19:47:08 GMT; Max-Age=2592000; path=/; domain=.twinesocial.com;HttpOnly;Secure;SameSite=LaxData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7c 09 73 db 4a 92 e6 5f d1 be dd de 99 0e 8e 4c f0 00 8f ee 9e 8e c0 0d 10 04 40 dc 47 30 c2 81 fb be 41 02 a0 c3 ff 7d 8b 94 2c 4b b2 7c 3d bf ed dd d9 7d a2 25 13 85 aa ac ac ac ca cc 2f 0b c8 fa f0 5b d4 e5 d9 6f 7f fb ed d8 5d 3f ff c8 e2 22 bd 6b fc ec 3f 8f bf b5 dd 98 f9 6d e4 fb dd f1 b7 bb 6e ac 7c 50 d6 f9 43 77 9c ba 6d 0b 8a 72 df 8b ed 6b 3d b7 f1 fd 02 14 44 8d 1f 80 eb e3 f4 38 b5 ab aa bd 77 bd e2 5d d7 c7 85 df 96 6e 6c 67 ef dc 32 bf b5 bd cf e3 e2 38 0d 62 40 fd 38 ad 32 7b f4 9b bf cc e1 39 d9 45 7e ee df e7 a5 67 67 b7 6b c7 6e fd 77 a0 fe e4 59 9d a0 2c ba 7b bb 07 24 73 ff 1d a0 73 bd 7f 9c 9e 8f d3 f9 bb f9 ec 38 05 cc cd 56 b3 f9 62 b5 5a ae 67 ef 1e f8 3c 4e ff 79 2c c0 e0 8a 3f 72 70 6f 0e ec d3 68 00 1f 9f 87 72 9c 66 7e 68 bb e3 03 37 57 56 8a 7f 78 f1 f9 ce cd ec b6 bd f6 7a ab ea 96 59 d9 dc f7 51 dc f9 77 0f 25 80 52 79 ea ee 1f af 6e e3 2e 2b bf b8 6f ed a2 fd f0 e1 46 7a 7f ab 82 b5 ed c7 8f 77 b7 82 7b db f3 ee 2b f0 27 2e c2 87 21 dc b7 e5 a9 71 fd fb 0f 1f 0a bf eb cb 26 7d 57 d8 b9 ff f1 e3 03 27 dd 8d 13 cf ee ec fb d8 03 bc 7c f8 10 7b d7 7b 77 b7 ab db 10 1f 06 71 df 37 60 d4 60 64 0f cd 1e 1b 7e 51 cb 05 5c fa 45 f7 54 eb d8 7d f8 f0 df ef e2 e0 ae 6a e2 dc 6e c6 f7 8d ff c0 cf 1d e8 e5 b1 c6 ad 0e a8 12 b7 ef 03 e7 fd f9 c6 c0 d3 ad ef 74 74 0f aa fb 25 e0 f7 93 30 03 e7 a1 e8 0b 7e 5f 90 fb 54 fb a1 6a 56 da de 1b 35 5f d5 6d d3 fb c0 be ca f5 de 8d 1b 37 f3 df a8 ff 65 8b 87 aa b3 bb a7 af a0 d5 3f 8e 53 50 eb 87 1b cf 7f a5 f1 e2 57 1a 2f 7f a5 31 fc 2b 8d 57 bf d2 78 fd 2b 8d 37 bf d2 78 fb 2b 8d 67 d0 2f b5 fe a5 35 36 fb a1 45 f6 b5 e2 68 f9 cf 7d 79 53 8d 3b ed aa 50 ef de bd 03 55 41 e9 2b cd 7b ab f9 0b 7e 3e 29 2f d0 e7 9b 49 7a 34 b9 1f 3e 74 76 13 fa dd fb 53 93 3d 19 ae 6f 11 19 02 27 cf 80 19 6c 5a ff 3e 0e 8b b2 f9 8a b2 3a 59 e9 a6 f5 a9 ec fc b7 ee 1e a7 df b8 ff f6 60 be 2c fc a2 e8 c3 07 3f 6b fd df 61 e2 5e f7 15 07 0d 30 e4 77 6d e3 de 44 f4 a6 85 fd ed ce ce b2 b2 0f 4e 59 f6 e0 c7 ee 7a df 49 e3 ee 75 69 eb db 39 f0 86 ed 75 e6 1f e8 7e 6f 10 d7 7a 9f 07 f1 e5 a0 1e 4d 7a 6e 87 fe e3 b4 15 3f 36 da 38 0f 5f 8d f5 c5 ec 3e 50 6c e3 8b ff fe c9 c2 df dd 7c f9 7f fe db a3 df bb 77 ca ae 2b f3 bf dd 01 67 76 ad 7d f0 81 34 8a 8e f6 e3 30 ea 3e 7e fc cb bf 7d 21 c9 3c fc 2c c6 27 96 ef de 58 6a 0f a3 f2 e2 f6 ea e6 31 05 69 5f ce e3 63 15 df 76 a3 3b b7 b3 db 77 65 f1 fe 46 ef cb 6a a0 db b6 b2 8b 2f 8b 8f dd c3 68 Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: image/svg+xmlContent-Length: 1109Connection: keep-aliveDate: Tue, 04 May 2021 05:06:57 GMTServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesContent-Encoding: gzipVary: Accept-EncodingX-Cache: Hit from cloudfrontVia: 1.1 c2b4a332b09677da722930ae336c8bfc.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-C1X-Amz-Cf-Id: W7RG3QscDzTZ3LD1iOAAt5xXgJNzyeR_cDfBX_Qg2LtgD8lI_2837g==Age: 52811Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 57 cd 6e e3 38 0c be ef 53 08 9e 4b 17 b0 15 51 7f 96 d2 a6 03 6c 81 3d 75 81 3d ec 3e 40 26 71 33 c1 b8 76 e1 a4 4d 67 9e 7e 49 ca 76 fe 3a dd 19 a0 c5 1c ec 90 12 c5 8f 1f 49 4b ca d5 c7 e7 fb 5a 3c 55 dd 66 dd 36 b3 0c a4 ca 44 d5 2c da e5 ba 59 cd b2 7f ff f9 b3 08 99 d8 6c e7 cd 72 5e b7 4d 35 cb 9a 36 fb 78 7d b5 79 5a 09 5c d8 6c a6 28 cd b2 cf db ed c3 74 32 d9 ed 76 72 67 64 db ad 26 5a 29 35 c1 b9 2c 99 bd 6e 72 00 0f a8 ad ab dd 1f ed f3 2c 53 42 09 5b 4a c7 2f 8a e2 6b 8d 01 54 cd fc 53 5d 15 9f e6 8b 2f ab ae 7d 6c 96 d3 a6 da 89 23 db cb 4c ac 97 b3 0c 7d 6b c6 9f 6e 1e e6 0b 5c fa d0 55 9b aa 7b aa b2 eb ab 65 75 b7 61 23 12 3c 0e 2c ea f5 c3 df f3 ed 67 1e 1c 14 08 38 f3 40 a3 38 f8 97 50 b9 09 c2 84 fe 8d 90 fc a0 f6 2d 01 92 a5 56 d9 e4 fa 6a 32 78 40 91 10 ae af 56 62 db cd 9b cd 5d db dd cf b2 fb f9 b6 5b 3f 5f 80 d4 2e 47 27 79 d1 4b 14 fc ef c9 d7 0a 74 46 ab 92 6c 59 26 a7 05 81 cc b2 c7 ae be f8 b0 0f 73 5c e4 b3 13 28 16 eb f9 b6 ba 88 f9 de 4e eb 13 62 4a dc e0 bb d0 52 ab 28 30 1c 80 98 17 56 e0 80 e3 5f 23 43 00 96 dc 68 85 11 d3 ab d7 92 45 bf c4 0e 3e 2c 7a 4d 06 88 71 90 25 3b d6 f3 6e 5d d7 d3 0f cb 18 ab a0 2f 49 29 5a ac d6 7a fb 75 0a 49 ed 1e eb 6a da b4 cd b7 aa 6b 2f 37 db ae fd c2 6a c5 79 5e 7d 97 ae b1 87 7c fd 2f e6 1b de 9d af cf c1 4b 6b ca b1 81 8c 7a 91 73 90 4e 7b e1 64 d0 39 38 5c 10 04 98 41 d2 4a 42 18 15 df db a2 a0 e8 55 90 ea 7a a3 62 bf 78 10 d9 e7 a0 a8 c1 fc 28 0f 46 bf 7b 1e 00 eb 5e 8e 39 b0 07 39 b8 e7 1c 2c 44 a1 a4 73 9a 8a 09 b9 92 d6 96 24 80 a8 a9 74 98 22 54 0c 19 0c 76 54 52 7c 7a 79 98 c4 5f 71 2b 68 dd 8d 18 dc 0c 7e 8f 29 fb 13 ca de 6b 00 f3 96 94 f5 11 e5 f0 3d ca e6 07 29 9b 03 ca e6 07 28 9b 53 ca 56 bd 3f 65 95 83 19 28 5b 7d 46 b9 d0 af 95 1a 2d 28 6e 41 43 d8 ef cc e9 b6 cf 45 62 44 6c 81 6d 80 e7 5f 63 7b ba 97 2d c0 47 7b f7 a6 6c bd d4 a5 b5 79 94 d1 43 1c 69 fb 73 da 46 ea 68 31 da 68 01 e9 2b a9 14 c6 2b 95 a1 6a 2a 4d a2 37 a3 18 cb 31 13 c5 90 8a be 2f 0a 7f d6 37 c5 98 c0 82 32 58 8c 6e c1 b3 92 1c d3 3e 9a 5c df a2 a9 95 ce c6 d1 93 61 27 90 fa 2c 18 b6 2c 95 27 cd 87 92 4f 41 e3 d1 09 68 9f d0 28 e1 49 2e 35 4d 20 fb bd a2 22 50 29 70 33 22 c2 0a 08 5e 97 8e e9 06 a4 00 32 1a 60 7a 3a e1 eb 14 a8 8e 4c 17 13 9a 33 70 24 8d 48 e1 3a 2a 31 a0 0f 1c 31 0e 18 3e e4 c5 d0 2c 21 fa bd 02 4c 0c ed 52 2e 39 15 d6 62 da 24 20 25 82 77 65 89 5a Data Ascii: Wn8SKQl=u=>@&q3
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: image/svg+xmlContent-Length: 1142Connection: keep-aliveDate: Tue, 04 May 2021 13:28:18 GMTServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesContent-Encoding: gzipVary: Accept-EncodingX-Cache: Hit from cloudfrontVia: 1.1 673c96d1f19de21216629aa48d90ac92.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-C1X-Amz-Cf-Id: N_AipCFGFgP-KxjIOfouh47MqxugADfYuIyXM2FRvTteQmI5hsWhrA==Age: 22730Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 57 cd 6e db 38 10 be ef 53 10 ea 25 0b 50 34 87 ff 74 e2 14 d8 02 7b ea 02 3d ec 3e 80 6b 2b ae 51 45 0a 64 27 4e fb f4 3b 33 92 1c db 71 8b 1e e2 05 f6 20 79 86 9c 19 f2 fb 38 33 94 6f de 3f df d7 e2 a9 ea 36 eb b6 99 15 a0 74 21 aa 66 d1 2e d7 cd 6a 56 fc f3 f7 9f 65 2a c4 66 3b 6f 96 f3 ba 6d aa 59 d1 b4 c5 fb db 9b cd d3 4a a0 63 b3 99 a2 34 2b be 6c b7 0f d3 c9 64 b7 db a9 9d 55 6d b7 9a 18 ad f5 04 e7 8a de ec e7 26 07 cb 03 6a eb 6a f7 47 fb 3c 2b b4 d0 c2 45 e5 f9 45 bb f8 56 e3 06 aa 66 fe b9 ae ca cf f3 c5 d7 55 d7 3e 36 cb 69 53 ed c4 91 ed 75 21 d6 cb 59 81 b1 0d af 3f dd 3c cc 17 e8 fa d0 55 9b aa 7b aa 8a db 9b 65 75 b7 61 23 12 02 0e 2c ea f5 c3 a7 f9 f6 0b 0f 8e 0a 24 9c 79 a0 51 1c fc 4b 68 69 93 b0 69 78 e3 92 fc a0 f6 bd 5f 90 2c 8d 2e 26 b7 37 93 31 02 8a b4 c2 ed cd 4a 6c bb 79 b3 b9 6b bb fb 59 71 3f df 76 eb e7 2b 50 c6 4b 0c 22 cb 41 a2 cd ff de c7 5a 81 29 c8 ab 97 1d cb 14 b4 a4 45 66 c5 63 57 5f bd 7b d9 e6 de 29 14 27 4b b1 58 cf b7 d5 95 d5 2a 07 09 56 65 b0 30 3a 18 73 80 f0 9e 11 2d 84 53 da c9 92 0d 49 4e 16 37 88 ce d6 0b ab 74 30 7b 0d b7 ad 8d 41 97 d2 29 00 8c ad 92 37 a2 0c 68 94 25 ba db 48 26 d9 5b 69 30 0a db 47 2f 83 8a 31 1f c9 b5 00 e5 53 90 4e 59 23 3e 08 5c 19 22 a0 06 1a 28 34 6e a6 df 0b ee ee 80 68 b7 4f 89 bb 75 5d 4f df 85 60 00 ec 35 29 65 8b 07 be de 7e 9b 42 af 76 8f 75 35 6d da e6 7b d5 b5 d7 9b 6d d7 7e 65 b5 e2 a3 5a fd 90 31 13 cf 31 16 fe b7 8c a5 8b 33 86 eb 8e 3c 59 7d 86 a7 12 08 3b c8 28 ac 04 10 4e 3a 14 fa e7 a3 48 34 f4 a1 ff 49 32 08 84 87 16 46 40 5f 6a 2f 40 ac b9 38 90 78 00 c4 5d 0e 48 b8 3c 10 cc 03 07 12 92 0a 2e ee 21 9d f6 35 4d 49 a4 95 c7 24 32 0a ac 13 a5 e1 fc b4 38 e4 29 bd 9c 47 d9 40 a4 ec 8a 09 c1 a8 14 44 e9 95 93 5a 25 47 a3 c9 64 ee 63 d9 92 66 7c a2 7a 70 26 51 a8 08 58 10 68 12 12 65 b1 8d 99 34 0f b4 a4 c6 c8 54 0c 1e 93 15 17 c3 52 a1 0d 9c 64 ae d3 27 3c 2d 73 ae 92 79 4b 9e ac 43 a2 bc 84 a8 ac 37 fb 26 ec cc 19 a2 8e 78 22 04 54 87 e0 1d 63 4b 92 90 99 11 f5 00 ba 27 84 f8 c8 23 57 44 95 63 0a 35 c8 72 64 91 b8 45 d7 e4 f3 c0 7a 39 d0 de 9f 47 49 07 e2 c6 a3 2a fb 3d 1c 53 e5 2e 4f 95 91 2f 37 8e 3b d7 0e b5 cc c8 44 26 74 09 8d 31 53 90 0a fa 89 0a 12 17 0e e6 43 50 01 eb 83 45 9c c2 4b b0 f7 61 97 12 bc e0 09 2f 06 17 d4 3c 3b 50 24 7f 80 37 5d 1c 2f 64 82 e3 52 18 31 7b 7d ae 7c 0c 9e 6e df d9 4d a4 b2 08 89 ab 05 d3 09 95 88 Data Ascii: Wn8S%P4t{=>k+Q
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: image/svg+xmlContent-Length: 931Connection: keep-aliveServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesContent-Encoding: gzipDate: Tue, 04 May 2021 04:20:06 GMTX-Cache: Hit from cloudfrontVia: 1.1 cc763905c39a59494c951c09271b0422.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-C1X-Amz-Cf-Id: x-Fy_wVn2FJkIwK7DM6uF-OwhDsG8-2s5iKpiEz38maJxUPbmnIuXQ==Age: 55622Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 56 cd 6e db 38 10 be ef 53 10 ea 25 0b 50 34 ff 49 39 b6 0b b4 c0 9e 76 81 1e 76 1f 40 b1 15 d7 a8 22 19 92 12 a7 7d fa fd 86 b2 1c db 4d 8b 1e d2 83 86 df 0c 87 33 9c 1f 8e bd 78 ff fc 50 b3 a7 aa eb 77 6d b3 cc 94 90 19 ab 9a 75 bb d9 35 db 65 f6 df bf 7f e5 31 63 fd 50 36 9b b2 6e 9b 6a 99 35 6d f6 7e b5 e8 9f b6 0c 07 9b 7e 0e b4 cc 3e 0f c3 7e 3e 9b 1d 0e 07 71 30 a2 ed b6 33 2d a5 9c 61 2f 1b d5 7e ae 72 e6 5e 81 db 55 87 0f ed f3 32 93 4c 32 1b 84 4b 84 6e f1 b5 c6 05 aa a6 bc ab ab fc ae 5c 7f d9 76 ed 63 b3 99 37 d5 81 5d e8 de 66 6c b7 59 66 b0 ad 93 ff 79 bf 2f d7 38 ba ef aa be ea 9e aa 6c b5 d8 54 f7 7d 52 22 e0 21 58 d7 bb fd a7 72 f8 9c 84 13 a3 22 76 f6 24 85 f0 1f 26 b9 89 cc c4 23 85 cb f4 81 fb 36 3a 24 4d 2d b3 d9 6a 31 9b 2c 00 92 87 d5 62 cb 86 ae 6c fa fb b6 7b 58 66 0f e5 d0 ed 9e 6f 94 d0 8e c3 08 cf 8f 88 2e ff e7 68 6b ab 74 46 a7 46 6c 13 26 a3 39 39 59 66 8f 5d 7d f3 ee e5 9a a7 43 3e bb 72 95 60 5d 0e d5 8d 2a b8 b1 02 49 3f b9 d0 fa 2c bc 87 14 ce 9a 79 50 e5 79 6e 12 55 9e d1 f5 4c a2 9e e5 66 5a 24 cb 03 37 0c 5b 44 e9 50 5e 88 42 39 3a 48 42 5a 8c 30 36 69 1a ae 74 a2 64 0d c6 94 24 08 fb b8 ef 4b e6 ec a9 c6 f7 bb ba 9e bf 5b 2b 5f d8 fb 5b 62 f2 16 15 dc 0d 5f e7 6a 64 bb c7 ba 9a 37 6d f3 ad ea da db 7e e8 da 2f 89 ad 52 ee b7 3f 4c 41 e0 2a 0a 6b c2 4b 06 fc 55 81 25 fb 08 1a 85 d3 9e 39 61 02 ee ec 70 22 32 a5 4f 28 0a af c3 c4 69 7b d4 06 90 44 72 62 dd a4 95 bf 1c 9f e0 68 76 e2 e4 74 00 be cf 72 11 af 72 b1 29 8a 2a ea b7 cc 05 da 21 4c 69 30 f2 95 46 c8 35 ca 17 52 f9 84 0b 8e e3 71 52 e5 45 90 08 5e e8 02 05 96 c2 14 8a 27 3a 31 98 20 9a ba 45 09 ab 2c 83 2c 06 9e 28 c3 0e fa 82 b4 00 ad 44 ba 20 40 ba e1 47 3b c5 b5 f0 01 9d 23 6c 11 b8 86 01 0d 2d 87 4b 6a 86 7d 24 0c fb b1 00 36 d2 01 07 45 38 48 74 9f 90 85 66 68 35 a3 09 47 05 1c d4 a4 6f 69 17 58 17 21 61 d4 13 7e 0a 76 1e c6 59 78 53 c8 17 c5 30 fa aa 18 77 95 2a 8c 7a cb 62 68 24 4c 9f aa 61 bf ab 46 ae c7 92 48 e1 1c c1 9c b2 6e 2d 25 8c 2b d2 80 1c 59 87 28 82 27 d9 df 29 85 68 66 da a1 64 22 40 d2 51 69 7f 3c 3c ee 5d 47 eb 7f fb 33 44 21 bc 45 c6 cd 29 e2 f8 5a ff a1 3f 52 bf e0 71 10 f6 d4 31 9e 62 1e 19 8a db 31 bc 24 84 e1 51 45 4e 6d 67 12 d6 dc 32 cb 3d ab 93 74 9d 0c a6 c9 54 10 a1 87 1a 79 ae 89 a4 f1 66 19 65 28 cd 2c 49 e6 8c 1b 3d 1a 4b 9c 0f a9 d3 a5 83 ba 82 49 f4 b1 2d d2 0d 21 94 05 75 7a 08 47 6c 84 32 fa 88 dd 38 eb 72 1a 76 11 8b 4f 4b 9a 94 34 59 dd b8 a8 34 02 d0 7c Data Asc
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: image/svg+xmlContent-Length: 917Connection: keep-aliveDate: Tue, 04 May 2021 13:28:18 GMTServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesContent-Encoding: gzipVary: Accept-EncodingX-Cache: Hit from cloudfrontVia: 1.1 c2b4a332b09677da722930ae336c8bfc.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-C1X-Amz-Cf-Id: Wlq-RqMJ3nzYLFOuty_7I90EnBgFvNTlxzjQKZY1meJhsCoUkz6ckw==Age: 22730Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 56 cb 6e db 3a 10 dd df af 20 d4 4d 0a 48 34 df 22 1d db 05 5a a0 ab 5e a0 8b de 0f 50 6d c5 35 aa 48 86 e4 c4 69 bf be 67 a8 47 6c 37 0d ba 48 70 17 a2 67 38 c3 99 39 c3 43 d2 8b 77 0f b7 15 bb 2f db 6e d7 d4 cb 44 72 91 b0 b2 5e 37 9b 5d bd 5d 26 ff 7d f9 98 f9 84 75 87 a2 de 14 55 53 97 cb a4 6e 92 77 ab 45 77 bf 65 58 58 77 73 48 cb e4 db e1 b0 9f cf 66 c7 e3 91 1f 35 6f da ed 4c 09 21 66 b0 25 bd db f3 2e 27 e9 25 b4 5d 79 7c df 3c 2c 13 c1 04 33 39 b7 71 a0 2a 7e 54 28 a0 ac 8b af 55 99 7d 2d d6 df b7 6d 73 57 6f e6 75 79 64 67 be d7 09 db 6d 96 09 62 ab 98 7f de ed 8b 35 96 ee db b2 2b db fb 32 59 2d 36 e5 4d 17 9d 48 70 98 58 57 bb fd e7 e2 f0 2d 4e 8e 8a f4 b0 ec 69 16 93 ff 32 91 6a cf b4 1f 46 a4 8c 1f b4 9f 7d 42 f2 54 22 99 ad 16 b3 31 02 44 ca b0 5a 6c d9 a1 2d ea ee a6 69 6f 97 c9 6d 71 68 77 0f 57 92 2b 9b 22 48 9a 0d 12 15 ff b6 8f b5 95 2a a1 55 bd 6c a2 4c 41 33 4a b2 4c ee da ea ea cd 63 99 d3 22 97 5c a4 8a 62 55 1c ca ab 3c 95 f9 e8 a7 d4 05 30 c1 3e 60 cc 14 57 22 30 94 23 65 48 33 c3 30 61 e3 af e6 de cb 28 d9 c9 0b 15 d3 30 68 bd c7 b0 c4 8c 31 0c a2 f6 0e c8 71 d2 25 33 ed e7 cd ae aa e6 6f 36 21 94 5e 5d 93 92 35 d8 ad dd e1 c7 5c f6 6a 7b 57 95 f3 ba a9 7f 96 6d 73 dd 1d da e6 7b 54 cb d8 e7 ed 1f e1 6a 77 8a d7 fd cf 78 fd ab e3 b5 a9 74 dc e8 7c 22 90 16 4f 62 f6 dc 2a c7 1c 57 ce a7 d2 62 85 67 d2 8c 92 92 3c d7 6a d2 fc e0 ad 88 ed 18 32 52 ed e8 95 49 33 2e 1f c5 3e ec a8 89 71 c1 59 2f b4 7a f5 5e 48 0d 08 53 1f cc 49 1f 6e 63 1f d6 2c 13 dc 5a 45 1b 2a 53 c1 8d c9 49 90 ac a2 ed 43 9b a0 68 72 18 fd 68 5b f1 0d f2 68 c4 2f fb c4 68 dd 07 36 86 19 e3 9e 43 76 17 90 9d 53 52 ea 97 84 8c fb e3 04 b2 ff 13 64 fd 97 90 f5 09 64 fd 17 90 f5 25 64 23 5e 1d 32 8e db 74 c0 cd 53 17 5a 66 b8 f4 44 dd cc 71 6d 71 ff 71 e1 24 29 a8 1a 8a 14 96 94 60 00 07 76 cd b2 9c 4b 03 f6 f3 40 8a e3 3e d0 69 8f 9d 72 dc 19 0f 25 e8 40 8a c0 1e 6b 38 e3 3e 00 f8 1c 06 1f 5c 54 84 23 25 57 74 41 38 1c 12 15 db 0b d9 21 16 83 83 21 bb f7 24 da 10 17 e6 8c 02 5a 0a 88 e8 c8 84 e0 94 49 b1 c7 12 18 4a c3 9b 83 d2 0c b9 a3 8c 58 33 b9 3c 82 21 94 6e 40 49 d0 f3 df 36 e5 f2 da 5d 4b 17 cc cd 8b f2 50 a4 52 4d bb e2 7e e3 61 a6 9e 3b 7f f0 20 32 31 9a 02 da 48 b4 4f 03 41 7b 9a 11 05 65 f4 91 d1 fe 1c 05 fd ab a3 05 05 35 51 c3 4e 47 cf 8a a7 8e 5e e0 aa 3f 79 78 4d b0 63 4e f5 a2 94 dc 1b 47 f7 a4 e5 da 5b 86 6d 04 3f Data Ascii: Vn: MH4"Z^Pm
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: image/svg+xmlContent-Length: 558Connection: keep-aliveServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesContent-Encoding: gzipDate: Tue, 04 May 2021 18:24:25 GMTX-Cache: Hit from cloudfrontVia: 1.1 c2b4a332b09677da722930ae336c8bfc.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-C1X-Amz-Cf-Id: 5A7AZjvdsVSz3Tecd6EtTN7X97Rdhc3TlFoNZ2dm3CRinPcmvRSLEA==Age: 4963Data Raw: 1f 8b 08 00 00 00 00 00 00 03 9d 53 4d 8f db 20 10 bd f7 57 20 f6 92 4a 36 06 fc 05 4e 9c 95 7a e8 a9 95 7a d8 fe 00 c7 21 5e 6b 1d 88 b0 13 ef ee af ef 00 49 9a 4d d5 1e 6a c9 e8 0d f3 e6 cd f0 b0 57 8f af fb 01 9d 94 1d 7b a3 6b cc 08 c5 48 e9 d6 6c 7b dd d5 f8 e7 d3 d7 58 60 34 4e 8d de 36 83 d1 aa c6 da e0 c7 f5 6a 3c 75 08 0a f5 58 01 aa f1 f3 34 1d aa 24 99 e7 99 cc 29 31 b6 4b 38 a5 34 81 1c 0e b4 7f 53 6e da 33 88 7a 35 7f 31 af 35 a6 88 a2 ac 24 b9 5f dc 14 6f 03 0c a0 74 b3 19 54 bc 69 da 97 ce 9a a3 de 56 5a cd e8 03 77 89 51 bf ad 31 68 73 df bf 1a 0f 4d 0b a5 07 ab 46 65 4f 0a af 57 5b b5 1b 3d c9 81 02 36 da a1 3f fc 68 a6 67 bf 79 09 98 80 cc c1 ed c2 e6 77 44 a3 54 a0 54 9c 57 68 e9 5f 88 de 43 43 c7 e4 14 27 eb 55 72 51 00 e8 3a ac 57 1d 9a 6c a3 c7 9d b1 fb 1a ef 9b c9 f6 af 0b 46 78 1e 81 48 14 9f 91 1b fe 73 d0 ea 18 c7 ae 2a e0 cc 63 27 1a bb 26 35 3e da 61 f1 f0 7b cc 6b 51 81 ef 5a 79 38 34 93 5a a4 65 74 15 e7 fc e6 60 7b 7f 90 16 d6 98 13 4e 25 82 71 4a c9 a2 38 43 71 e6 d6 01 c5 5c 78 4a 20 00 84 84 27 39 e0 08 34 e2 c2 4b 04 85 20 90 a1 90 3c 17 5f 6a b3 28 34 40 5e fc 9b ef 7e eb 60 76 bd eb 5d 3f 0c d5 43 ba 11 a2 4d 97 2e 88 0d dc 64 3f bd 55 2c 84 f6 38 a8 4a 1b fd ae ac 59 8e 93 35 2f 3e 54 fe 0e ba bf 5a c1 19 c9 85 90 51 01 63 c8 ab 79 bc f8 c3 94 22 2a 09 47 71 0a 74 e9 2f bb 24 05 e3 fe a0 39 c9 39 a4 32 52 08 1e 31 70 84 51 38 5f 1e 20 c9 58 e6 5c e2 44 14 60 24 64 a4 70 5c 2a 7c 24 c0 2c b0 85 14 52 46 20 ce a5 74 92 24 95 f0 11 00 87 03 96 a2 04 cc 78 09 5e 66 f4 82 53 92 b2 dc cd 45 98 70 b7 55 88 f2 8c 0b 30 32 66 7e 4e 3f 72 98 fc de 5a 71 67 ed ce 3f ff 65 ed 87 17 7e b5 f5 a7 5f fb 1f 61 fe 4c 04 00 00 Data Ascii: SM W J6Nzz!^kIMjW{kHl{X`4N6j<uX4$)1K84Sn3z515$_otTiVZwQ1hsMFeOW[=6?hgywDTTWh_CC'UrQ:WlFxHsc'&5>a{kQZy84Zet`{N%qJ8Cq\xJ '94K <_j(4@^~`v]?CM.d?U,8JY5/>TZQcy"Gqt/$992R1pQ8_ X\D`$dp\\|$,RF t$x^fSEpU02f~N?rZqg?e~_aL
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: image/svg+xmlContent-Length: 1690Connection: keep-aliveDate: Tue, 04 May 2021 13:28:18 GMTServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesContent-Encoding: gzipVary: Accept-EncodingX-Cache: Hit from cloudfrontVia: 1.1 e39402e2cf62b31f7774452c905f38f3.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-C1X-Amz-Cf-Id: TesnacKLxzic6FV_on6mzSPUK5TTzzd9aNQCikEvudaz2r-W-rQMUw==Age: 22730Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 cb 6e 1b 47 10 bc e7 2b 16 eb 8b 03 2c 57 f3 7e c8 92 0c c4 40 4e 0a 90 43 f2 01 b4 44 cb 84 29 52 20 69 cb ce d7 a7 aa 66 49 4b b2 92 93 75 10 35 bd 33 d3 3b d3 55 5d dd 7b f6 f6 eb ed aa fb b2 d8 ee 96 9b f5 79 6f 47 d3 77 8b f5 d5 e6 7a b9 be 39 ef ff fe eb f7 59 e9 bb dd 7e be be 9e af 36 eb c5 79 bf de f4 6f 2f ce 76 5f 6e 3a 6c 5c ef 4e 31 3a ef 3f ee f7 77 a7 27 27 f7 f7 f7 e3 bd 1f 37 db 9b 13 67 8c 39 c1 5c df 96 fd ff 92 07 af b7 b0 96 8b fb df 36 5f cf 7b d3 99 2e e4 31 ea 87 a7 f8 b6 c2 01 16 eb f9 fb d5 62 f6 7e 7e f5 e9 66 bb f9 bc be 3e 5d 2f ee bb 47 6b df f4 dd f2 fa bc 87 6f a7 f7 9f ee ee e6 57 d8 7a b7 5d ec 16 db 2f 8b fe e2 ec 7a f1 61 a7 45 1c 24 3c b8 5a 2d ef fe 9c ef 3f ea e1 c1 b0 05 33 77 7c 8a 87 7f 74 66 f0 a5 f3 65 fa c5 2b f5 07 eb 9f f6 42 ae 74 a6 3f b9 38 3b 39 78 c0 90 6f b8 38 bb e9 f6 db f9 7a f7 61 b3 bd 3d ef 6f e7 fb ed f2 eb 6b 3b ba 38 c0 c9 30 9b 46 3c fc af cd d7 8d 75 3d 77 b5 71 d0 98 4e 67 7c c9 79 ff 79 bb 7a fd ea fb 31 8f 9b 52 ff e4 55 1a ae e6 fb c5 6b 0f 70 8d 1d 8e 6b 9d 7b 70 b9 5b 5d e6 aa 9b 99 d1 07 de 0d 83 54 70 a6 d1 16 4b a3 a4 0a 23 9a d0 ad ba 59 18 9d 8f 43 1a 6b 8e 6d 8f cb 5c 1a 0a c7 36 e5 01 af 2a 1d 5c 59 87 a1 8f dc 14 c6 1a 11 ba ee 1d 9f 3b 3c b7 63 75 1e 46 4a 30 1c 06 c5 f3 3f 38 90 4b 1b 44 a3 65 c5 d0 48 25 d3 08 b9 76 97 70 96 6b c0 01 7c cc 93 e3 30 5a 17 e1 3c e2 68 6e f0 63 0a a9 0b 83 1b 6b b0 9d 1f a3 b3 18 a7 94 b1 17 e7 ac ba 98 77 ed 30 9e 37 33 81 47 b0 69 c2 f5 01 a0 e1 48 bd 0f cb d5 ea f4 95 5f 64 67 af df d0 98 6d 40 ac e5 fe db a9 6d e6 f6 f3 6a 71 ba de ac ff 59 6c 37 6f 76 fb ed e6 93 cc 85 28 71 f3 9f c8 b8 30 1c 61 77 e9 79 54 62 f4 44 c5 32 cc 21 73 60 11 54 33 24 4c 9b 41 f3 9d a6 f0 bc cd d9 b6 17 f1 c3 6d 19 cd 08 2c 32 d0 7c 30 14 83 01 47 1e f8 8a 64 69 00 4a 82 1f ed f7 99 64 03 8c 18 02 99 1a 23 23 65 3c 0c 07 88 22 42 5a 46 80 43 76 10 de 32 66 92 79 74 d8 54 e0 0e d1 ed 18 d5 4b bd ed 61 aa 94 27 91 cd f9 bd 8b f1 a7 46 d6 0f ee 10 59 6f 9e 8f ac 4b 8d ee d1 26 b2 02 64 83 91 0d 2f e4 aa 27 dd 93 a2 cc d4 a8 8c 3f 7e 0f 06 78 4e 0e e3 7f b0 24 39 57 be 3b 38 b3 7e 2c b5 4c af 60 04 f5 03 9e d6 36 70 b1 72 4d cd 89 91 26 fb 61 38 ce e4 98 69 e4 4c 28 fd 18 90 75 1c 20 84 84 f6 5d c7 53 c4 9a a6 95 f0 e4 27 0f c0 45 de e8 1a 63 77 78 df 13 4e 7b f7 f2 91 07 51 aa 43 c2 e3 1a c6 e4 23 08 e1 19 10 70 46 64 30 43 6a Data Ascii: WnG+,W~@NCD)
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: image/svg+xmlContent-Length: 924Connection: keep-aliveServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesContent-Encoding: gzipDate: Tue, 04 May 2021 19:47:08 GMTX-Cache: RefreshHit from cloudfrontVia: 1.1 673c96d1f19de21216629aa48d90ac92.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-C1X-Amz-Cf-Id: 8eNIo0z1qSG5I_HHUaaR-jhXuyAiN8G1X5pRXd_tzlT1XVQYh7kM4A==Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 96 cb 8e db 3a 0c 40 f7 fd 0a c1 dd 4c 01 59 91 a8 87 e5 4c 92 02 2d d0 55 0b 74 71 ef 07 b8 89 27 0d ea b1 03 db 33 99 f6 eb 4b 49 f1 2b f3 48 70 71 b3 b0 4c da 24 65 1d 92 92 17 1f 9f ee 0b f2 98 d7 cd ae 2a 97 91 60 3c 22 79 b9 ae 36 bb 72 bb 8c fe fd e7 4b 6c 23 d2 b4 59 b9 c9 8a aa cc 97 51 59 45 1f 57 8b e6 71 4b d0 b1 6c e6 28 2d a3 9f 6d bb 9f cf 66 87 c3 81 1d 24 ab ea ed 0c 38 e7 33 7c 17 05 b3 b7 4d 46 d3 0b d4 76 f9 e1 53 f5 b4 8c 38 e1 44 25 4c fb c1 7d c5 ef 02 3f 20 2f b3 1f 45 1e ff c8 d6 bf b6 75 f5 50 6e e6 65 7e 20 13 db db 88 ec 36 cb 08 63 83 9f 7f de ec b3 35 ba ee eb bc c9 eb c7 3c 5a 2d 36 f9 5d e3 8d 9c 60 f0 c1 ba d8 ed bf 67 ed 4f ff b0 53 84 c5 37 7b f7 14 1f 7e 23 9c 4a 4b a4 3d 8e 38 a5 bf 50 fb 13 26 74 96 c0 a3 d9 6a 31 eb 22 bc 12 58 f2 49 60 cb 12 ad 28 a4 0c 94 21 9f 89 60 29 48 0a c0 94 d0 24 e6 cc c8 94 0a c1 a4 30 44 a2 22 a8 1f 49 e1 3f 60 4d 12 66 ac a6 b1 62 90 10 81 a1 ac a2 b1 60 09 b7 04 34 33 42 53 cd 04 c8 de dc 30 8b 21 fc 48 52 26 53 49 45 c2 52 54 bc 19 0d 3e bd 75 0c 4c 1b a0 82 29 50 24 d6 4c 73 a0 c0 b8 b5 24 b6 4c 23 06 a7 24 83 b9 61 3c 11 28 c6 02 1d 01 bf 04 98 d1 06 d5 04 5f 24 34 4e 18 88 81 96 84 13 5a 33 97 8f d5 62 4b da 3a 2b 9b bb aa be 5f 46 f7 59 5b ef 9e 6e 04 03 4d 71 16 b7 38 2f b9 54 7f 08 b1 b6 02 22 e7 15 64 e5 65 17 34 76 93 2c a3 87 ba b8 79 3f 24 b5 77 32 d1 c9 54 5e 2c b2 36 bf 09 c9 10 d4 a5 46 a6 9d 07 c0 28 6f f7 c3 9a 1d d1 70 f3 2b 4d 9d ea d9 22 bf 90 83 38 24 c1 67 89 fa 8c 91 90 24 ea 53 a6 a7 f4 5d a8 63 8a 7c 38 1a 82 4d f2 f9 79 9a bd 71 5a f1 bb 46 15 a9 fa de b9 db 15 c5 fc bd 31 20 84 bc 75 4a 5c 61 67 ec da df 73 11 d4 fa a1 c8 e7 65 55 fe c9 eb ea b6 69 eb ea 97 57 73 9f a5 ed 70 1d 49 83 79 93 b4 e4 3d 37 fb 06 69 a4 a1 13 ac 2a 77 37 49 e7 22 d5 4b a8 39 2e 19 cb cb 8d 8e 1f c7 0a eb 15 ec 16 34 2a 50 d4 cc a6 29 3d de 07 37 7f 83 5e f3 ee c4 d7 93 6b b4 91 0d 52 c7 77 72 50 94 c0 79 c8 d7 ce 58 21 7c f7 2a c4 90 47 39 18 4f d8 4b 73 c2 3e 17 b9 cd 37 ff 89 fd 2b f8 84 62 36 b1 b8 41 b8 7d 42 0f f8 ec eb f8 e2 11 3f 39 d2 7a 80 c0 2c b8 ce b6 d0 d3 f3 98 bb 00 1d b9 c0 62 9c 93 71 4a c6 d8 c6 d4 82 bf 1c f9 c1 94 9a e2 d7 a7 86 4d c7 13 8a f0 94 51 fd 86 a0 e0 0c 34 98 40 83 00 4d 0d d0 52 0f cd 4e a0 89 a3 7c 39 34 7d 11 b4 93 52 53 ea ea d0 40 e2 8e af f1 30 c0 bd 31 95 3d 34 f3 1a b4 37 0a 4d 9d 16 9a 7d d6 dd cf 4b 2d f4 68 a8 c4 10 f2 28 be 5c 67 70 16 99 bd 3e b2 84 49 a3 70 5f 97 b8 67 0b d1 31 d3 fc 4c a1
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: image/svg+xmlContent-Length: 1391Connection: keep-aliveServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesContent-Encoding: gzipDate: Tue, 04 May 2021 07:41:23 GMTX-Cache: Hit from cloudfrontVia: 1.1 547a50460a0cda7ae3dafb1c0b6d0e1a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-C1X-Amz-Cf-Id: DqwhC0JMrSJQX0otcr-YoWush-q5AgQ6kqzF38HpwsxK-0VboX1a8w==Age: 43545Data Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 56 c9 8e db 46 10 bd e7 2b 1a f4 c5 01 c8 9e ee ae 5e e5 d1 18 88 81 dc 02 e4 90 7c 80 ac e1 c8 82 35 d2 40 92 3d b6 bf 3e af aa 48 cd 02 d8 97 1c 44 55 75 d7 fa 6a 21 af df 7f bb df 99 af e3 f1 b4 3d ec 97 9d b7 ae 33 e3 7e 7d b8 dd ee 37 cb ee df 7f fe 1c 6a 67 4e e7 d5 fe 76 b5 3b ec c7 65 b7 3f 74 ef 6f ae 4f 5f 37 06 8a fb d3 02 d4 b2 fb 74 3e 3f 2c ae ae 1e 1f 1f ed 23 d9 c3 71 73 15 9c 73 57 b8 eb 54 ec d7 22 cf dc 7b 70 db f1 f1 8f c3 b7 65 e7 8c 33 b1 d8 24 0f 8e e2 fb 0e 01 8c fb d5 c7 dd 38 7c 5c ad 3f 6f 8e 87 2f fb db c5 7e 7c 34 2f 64 df 75 66 7b bb ec 60 3b 88 ff c5 e9 61 b5 86 ea c3 71 3c 8d c7 af 63 77 73 7d 3b de 9d 44 88 89 8c 83 f5 6e fb f0 f7 ea fc 49 0e 67 c6 57 dc 3c f0 29 0e ff 32 ae a7 6a a8 4e 4f b8 94 1f b8 1f ea 90 25 83 eb ae 6e ae af 66 0b 3f 31 4c ee 85 61 df fb 66 3e e0 af 59 97 9a 91 67 ef 8d e7 c7 4e dc ac 71 d8 a2 07 e5 6b 5f 45 0a 84 af 97 6b d7 8b 80 19 aa 2a 57 33 3c 17 f8 30 19 a5 02 2f a1 8a 28 7b 7d 0a 9c c2 ab c0 af 18 9a 9b eb 8d 39 1f 57 fb d3 dd e1 78 bf ec ee 57 e7 e3 f6 db 5b 6f 43 ea 61 b6 1f 26 8a 51 ff 5d 6d 6d 7c e8 58 4b e9 28 34 1b 1d d8 c9 b2 fb 72 dc bd 7d f3 84 ef 45 29 77 af 5c 09 b9 5b 9d c7 b7 54 10 e8 2c 18 c2 33 e4 ee 2f c9 0f 2f b2 1f a6 f4 e5 7f 06 6e b8 20 37 21 33 43 76 41 4c 8f 3f 3c c3 70 16 81 9b 67 25 8e 97 66 bc db ee 76 8b 37 b5 ae db 5d 7b c7 cc 70 40 ab 6d cf df 17 5e d9 e3 97 dd b8 d8 1f f6 3f c6 e3 e1 dd e9 7c 3c 7c 16 76 14 ac 37 4f bf 09 af 90 7f 89 17 b9 0b 0c f5 e7 78 45 9b 43 89 7d 40 e8 29 f8 59 83 e2 ab 5e e6 a6 18 9c 8d 09 0d 61 1b 99 60 7d 4b 7d b4 3e 65 43 36 bb 02 3a e6 66 92 75 68 c4 68 4b 8d 26 5b aa d4 e3 a4 81 4c 51 24 f8 34 b7 dc 93 ad 94 41 57 18 24 eb 1c 99 62 8b 27 d0 e4 33 40 4e 25 81 ce 64 bc b3 25 89 7c 49 c6 7b 5b 4a 86 a1 9c 50 80 60 0b 62 48 36 72 7b 46 eb 82 d0 90 82 cb 08 da 13 ce b3 54 27 da 2a 25 b3 cd 73 a4 cd 45 66 02 5a dc 36 c4 e4 8b cd 99 9d bb 40 ac 12 33 7b f7 dc ff 09 81 36 e4 cc 1a c9 06 1f 7a a7 f3 00 c3 1e 9d 82 a3 c8 4c 2d 34 31 e8 30 5b 61 00 d3 67 8b 43 7f 39 58 4a 40 2c 20 10 64 13 0a 04 52 64 ba 22 41 5c 53 0d f0 10 c1 80 c6 88 04 4b 89 85 8a cb a2 ed 32 4c c5 52 98 a9 39 c3 94 a3 7e e0 98 48 4c 15 1e 2d 5f 44 ca 55 96 8a 85 9d 07 9a 2f 60 17 e0 0e 6c 92 23 01 3c ac 4e d8 0b b8 16 f5 8a 04 c5 7c e4 34 50 9b 81 0d 64 30 d4 02 33 2d fb c9 f2 20 02 1a 8c 84 5c 79 88 58 fa 72 e5 6d 56 41 34 17 4c b8 d2 d4 b8 98 70 b5 a9 f5 24 dc ec 98 91 75 95 f8 8a 88 c1 cc a8 9f 86 c9 72 Data Ascii
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: image/svg+xmlContent-Length: 966Connection: keep-aliveDate: Tue, 04 May 2021 13:28:18 GMTServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesContent-Encoding: gzipVary: Accept-EncodingX-Cache: Hit from cloudfrontVia: 1.1 c2b4a332b09677da722930ae336c8bfc.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-C1X-Amz-Cf-Id: ZjoWKafI8NqP8xompMcjGLV7yd6kNwJawbgozx9VN9PYvL_oF7f9dw==Age: 22730Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 56 4d 6f 1b 47 0c bd f7 57 0c 36 17 17 d8 1d 0d 39 df b2 e5 00 35 d0 53 0b f4 d0 fe 00 45 5a 2b 42 e4 5d 63 25 5b 4e 7e 7d 1f 67 25 45 72 9a 9c 1c a0 06 76 44 ee 70 48 3e 92 fb c6 37 ef 5f 1e 36 ea b9 1d b6 eb be 9b 55 a4 4d a5 da 6e d1 2f d7 dd 6a 56 fd f3 f7 ef 4d aa d4 76 37 ef 96 f3 4d df b5 b3 aa eb ab f7 b7 37 db e7 95 c2 c1 6e 3b 85 34 ab 3e ee 76 8f d3 c9 64 bf df eb bd d5 fd b0 9a b0 31 66 82 bd 6a 34 fb b1 c9 59 78 82 b6 6e f7 bf f5 2f b3 ca 28 a3 5c d4 be 2c 92 c5 e7 0d 12 68 bb f9 87 4d db 7c 98 2f 3e ad 86 fe a9 5b 4e bb 76 af 2e 6c af 2b b5 5e ce 2a f8 e6 12 7f ba 7d 9c 2f 70 f4 71 68 b7 ed f0 dc 56 b7 37 cb f6 7e 5b 8c 44 08 78 b1 d8 ac 1f ff 9a ef 3e 96 97 47 85 12 76 1e e5 2d 5e fe a9 4c 6d 93 b2 e9 b0 22 64 79 a0 7d 19 03 8a 25 9b 6a 72 7b 33 39 7a 80 28 11 6e 6f 56 6a 37 cc bb ed 7d 3f 3c cc aa 87 f9 6e 58 bf 5c 91 66 5f c3 49 dd 1c 24 49 fe d7 d1 d7 8a b8 92 53 a3 ec 8a 2c 4e 1b 09 32 ab 9e 86 cd d5 bb af 69 9e 0e 85 ea 55 a8 22 6e e6 bb f6 ca c6 9a d2 57 ff cc af b0 19 75 87 95 74 b0 59 35 46 e7 58 5b 6d 8c 53 0d 6b 8e 16 8a 4d 5e 35 16 fb b6 26 a3 93 63 d5 e0 97 7c 4d 01 85 6f 28 1d 04 f6 3a 1d 5f 5a d6 36 c4 93 bd b5 3a 72 3c f9 f2 da d8 63 14 1b 8e b1 21 19 b5 50 a5 2c d1 06 85 a1 4c b1 46 64 0a 49 b1 f6 24 b2 83 3b 6c fb 5c 37 41 67 0e 2a 69 43 b0 22 d6 c6 27 45 5e bb 7c d2 a2 76 40 60 14 21 bc a5 da 6b b2 7c 30 39 58 dc 21 7f 84 49 c7 30 a7 e0 a8 cb 59 73 dd 69 0c ef d7 9b cd f4 dd 32 e7 36 f1 b5 28 4d 8f 21 5b ef 3e 4f 69 54 87 a7 4d 3b ed fa ee 4b 3b f4 d7 db dd d0 7f 2a 6a 5b c6 63 f5 dd 2e 91 a4 74 ea 51 38 eb d1 43 e9 d1 02 f5 c1 4f e3 6a 92 a5 21 49 95 15 d7 8d 53 4e 16 c6 ae ab 19 8f c3 96 f4 68 b4 a4 33 18 e9 15 8c 10 98 c9 bd 25 0c 0e 17 c3 66 cd 7f 0e 1b 6a 6c 13 49 e9 09 00 b8 0c 8f f6 07 c9 6a 69 47 11 fd c9 d2 0b 76 0c d7 a8 15 93 d3 b1 22 14 57 22 99 83 d1 45 03 2d ff 74 e4 74 f9 99 59 f7 3f 41 1e 7e 3e 72 8c 2e 9d 70 a7 6f 70 73 79 30 b1 77 e3 8f 00 57 24 8b 39 2c 34 2e 7f 14 f3 33 52 75 e6 55 f2 f7 e5 ef 4d 93 4f 3a 27 20 e0 70 44 e0 be 25 48 d0 a2 01 7f 98 91 2e 18 e6 46 1a 60 2d a0 69 07 1a 29 ec 21 44 66 0b a5 e9 5c 5a 62 02 3e 40 79 25 5c 97 e5 6b d4 ec b8 76 e0 ce 51 21 c8 d1 58 39 11 7d e1 27 e2 e2 0b 3c 0a 8e 4c 41 a2 04 eb 44 f1 23 23 93 c5 19 1f 73 51 5c 80 62 38 8e 5c 2d 61 3c 08 0e 0a a2 49 4c e7 24 df e8 24 99 90 4b ee c9 42 66 f6 82 29 44 70 84 ce 21 14 80 32 c0 50 d0 Data Ascii: VMoGW695SEZ
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKContent-Type: image/svg+xmlContent-Length: 1187Connection: keep-aliveServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Last-Modified: Wed, 03 Feb 2021 15:34:31 GMTAccept-Ranges: bytesContent-Encoding: gzipDate: Tue, 04 May 2021 19:47:08 GMTX-Cache: RefreshHit from cloudfrontVia: 1.1 cc763905c39a59494c951c09271b0422.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-C1X-Amz-Cf-Id: inY4oeT8EzN-55w858qwu37p6_hbv3BjpvHzAXvTbwciOOi8D0JF7A==Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 57 cd 6e 23 37 0c be f7 29 84 d9 4b 0a cc c8 22 f5 ef c4 59 a0 01 7a 6a 81 3d b4 0f e0 d8 63 af b1 ce 4c 30 76 e2 ec 3e 7d 49 c9 63 7b 0c 6f 80 02 4e 7b 18 59 3f 14 29 7e fa 48 ca 77 9f df 9e d6 e2 b5 ee 36 ab b6 99 14 20 55 21 ea 66 d6 ce 57 cd 72 52 fc fd d7 ef 55 28 c4 66 3b 6d e6 d3 75 db d4 93 a2 69 8b cf f7 77 9b d7 a5 a0 8d cd 66 4c bd 49 f1 75 bb 7d 1e 8f 46 bb dd 4e ee b4 6c bb e5 08 95 52 23 5a 2b b2 d8 fb 22 27 e6 81 46 ab 7a f7 5b fb 36 29 94 50 c2 78 69 53 c3 a7 f8 be a6 03 d4 cd f4 71 5d 57 8f d3 d9 b7 65 d7 be 34 f3 71 53 ef c4 40 f6 b6 10 ab f9 a4 20 dd 98 ec 8f 37 cf d3 19 6d 7d ee ea 4d dd bd d6 c5 fd dd bc 5e 6c 92 10 77 1c 4d cc d6 ab e7 2f d3 ed d7 34 d9 0f 10 69 e5 99 67 69 f2 4f a1 4a 1d 84 0e fb 96 4c a6 8f 46 3f b2 41 96 44 53 8c ee ef 46 bd 06 ea b2 85 fb bb a5 d8 76 d3 66 b3 68 bb a7 49 f1 34 dd 76 ab b7 1b 90 68 4b 52 52 56 fb 1e 1f fe d7 ac 6b 09 a7 b6 9f 04 aa d2 89 0a 93 45 2b f2 6f 65 4f 2d 83 39 60 b4 58 ad d7 e3 4f ce 79 eb 17 b7 3c a8 5a 42 60 b5 fd 3e 86 3c ec 5e d6 f5 b8 69 9b 1f 75 d7 de 6e b6 5d fb 2d 0d 6b 3e fb d1 26 a8 12 e0 68 eb 60 fd d4 a8 bb 8e d1 e5 de e9 50 70 9f d1 ab 58 fd a4 78 e9 d6 37 9f 8e f7 d1 a3 83 aa 38 c3 34 75 d7 d3 6d 7d 03 5a c6 18 4b 6d 24 31 ec 80 27 ba 01 9e 7c 77 33 f6 4b 49 6b 91 7c 93 2e 38 ba 08 51 e5 56 4b 0d 86 64 68 a8 a4 31 81 3b c0 bb 92 78 96 06 c1 5f 2f e9 58 17 4b b2 82 13 42 84 33 84 62 9c 4e 1f ed bf 46 68 b4 fc a9 c3 e8 2f 39 ac d5 ff e3 b0 c6 eb 39 7c c2 45 57 62 e8 29 e8 7a 52 ba 53 2e 6a 73 1d c3 3f a3 95 bb 88 f2 fb b4 52 32 c4 8c 2f a6 96 32 9c 4a 28 63 8f 32 9e a0 9c a5 39 e4 40 f4 92 d8 a3 8c 43 94 c3 75 02 ef 1d 5a 69 9b 1c 26 76 9d 3a 6c d4 59 4e 54 e2 81 b3 20 7d 9e fc e3 06 b9 31 34 55 d9 b2 e7 57 ce 95 ea e8 80 39 a7 c9 62 31 9b 99 f9 7f e0 80 b9 78 63 28 51 45 51 05 3e 36 d0 35 8b 35 df 56 0c 31 ad d3 1d a8 7c 71 dc f1 fb 0e 40 0a 18 e9 30 cd 00 4a 6f 29 53 4a 63 e1 30 02 ce ed 29 81 4a 1f 23 05 0f 4f 46 6a c5 5e 20 f5 d9 0a 60 69 a4 57 c0 1d 20 42 24 5a 84 c0 96 80 ea 0d 48 af 81 07 da 03 9d d6 9a 48 c0 13 c2 95 61 ed c8 c7 3a 43 d8 7d 38 c2 7b 80 87 21 61 c2 05 86 f0 01 23 f0 39 23 04 ce 36 ca 85 b2 a2 7a 17 22 51 1d 41 f3 c0 07 c3 c9 24 88 c0 4d 24 19 9d e0 04 4d b5 48 1a 0c c9 cf 88 5c 99 50 04 92 f7 84 84 0f 5a 38 69 9c 27 f8 28 47 24 89 32 db 19 e0 61 d5 19 1e fa 31 84 99 be 6a 26 46 19 74 0c 8c 88 71 26 f4 88 58 bc 40 39 94 60 63 49 48 90 24 1f da 53 3a 93 e0 52 92 08 06 18 0f e3 a8 ea ea 94 38 0c 39 4c
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 23:03:29 GMTContent-Type: text/cssContent-Length: 14584X-Content-Type-Options: nosniffLast-Modified: Thu, 22 Oct 2020 19:27:21 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 23:03:29 GMTX-Request-ID: v-48dfc40c-a551-11eb-a7fc-b301f1f19821X-AH-Environment: prodAge: 852233Via: varnishX-Cache: HITX-Cache-Hits: 1566Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 77 db 38 92 e8 e7 f8 57 e0 4e ce dc 24 bd a6 ac a7 e5 c7 d9 3e eb 38 4e e2 d9 bc ae ed 4c ee cc dd 7b fa 50 12 65 71 22 89 1a 92 8a 93 ce c9 7f 5f 3c 89 37 08 50 b4 bb 67 67 3a dd 69 9b 24 0a 85 02 50 a8 17 aa 0e 7e da fb 94 4c 8a b4 4c c0 bb 78 95 9c 80 f3 b8 48 96 cb 78 ef 45 52 4c f3 74 53 a6 d9 fa 04 5c ae cb 24 5f c7 4b f0 21 be 4d 40 b1 49 a6 e9 3c 9d 82 a2 fc b6 4c 8a 45 92 94 7b 7f 4e f2 02 7f da eb 74 f7 ce b6 e5 22 cb 4f c0 d9 ec 2e cb 3f 17 8b 6c 43 1f 81 8f 57 97 27 60 51 96 9b 93 83 83 bb bb bb 4e 5c 7d d1 99 66 ab bd 9f 0e f6 f6 0e 7e 02 ff de ec 1f 00 9b c3 d6 f0 9f d7 17 67 2f 2e ae 40 d8 3f a4 f5 0e 7d 77 52 4a a6 68 91 c4 b3 24 ff 10 af 93 65 34 cd d6 65 9c ae 93 1c 7c 9f c4 d3 cf b7 79 b6 5d cf 4e c0 e3 6e dc 1f 0d 92 53 70 97 ce ca 05 a4 5b b7 fb c7 53 b0 89 67 b3 74 7d 7b 02 0e bb 9b af a0 7b 0a ca e4 6b 19 c5 cb f4 16 92 76 99 cc cb d3 1f b5 dd 2c 7a e0 fb 34 5b a2 09 78 3c 8e 27 f3 fe e0 14 cc e1 db a8 48 7f 85 13 3c 80 90 29 dc 32 8f d7 c5 3c cb 57 27 60 bb d9 24 f9 14 ce 3d ec 00 92 e1 75 92 67 d6 11 2d e0 4b de c5 7c 3e 97 e0 f7 46 08 fe 12 a2 02 3f 4c 6f 17 25 5a 13 a3 53 b0 8a f3 db 74 4d de 83 2e 1c 1b ee e8 79 0e 01 9f e7 db d5 a4 b0 f6 37 41 df 4c f1 37 e0 fb 2c 2d 36 cb f8 db c9 3a 5b 27 56 62 08 2d 4e 26 09 1c 61 82 f0 85 5f ae cb 93 27 4f 4e 01 03 32 59 66 d3 cf 15 6a 7d 86 59 35 0d 83 2e 7b 42 87 d2 43 63 23 33 d6 ef e3 81 4e b2 1c 76 1b 95 d9 06 bd 04 45 b6 4c 67 e0 f1 70 34 3a 3e 9c fa e0 07 b6 4b 48 2c 3e ae 74 8d 49 47 31 e3 74 ed f5 51 6f f8 f7 79 bc 4a 97 df 4e c0 93 57 59 b9 88 57 d1 f3 6c 39 83 83 62 13 d2 9d 8e a6 f1 d8 bf ef 93 78 5e a2 d5 59 11 e8 40 a0 90 8c 0e 25 54 17 8c 31 5d 7a 78 29 91 7e c3 bb 5d c6 45 19 65 f3 a8 fc b6 49 18 0e a1 b3 4b a9 17 83 ef 46 4a dd 91 59 5b c3 25 1e 2f 2b 4c d1 8a 0d 80 7d b2 c8 be 10 fa c8 e3 6c 85 53 bd 3d bb 7c 07 9e bf 7f f1 17 70 75 f1 ea f2 fd bb 87 e6 54 2b c8 33 9e 67 b3 6f 22 9b 62 ab 9f f1 20 81 6d 3d 7e f9 f2 a5 44 bb aa 3d 9c b5 6c 5b 9e 73 28 ca 1e 23 9b 06 73 39 d8 fe 2e 2d 17 d7 e9 2c 99 c4 39 b0 20 03 97 a2 15 9a 11 03 bd 11 1b 48 d7 dc a0 20 08 d8 71 16 b8 9a 1b c4 a7 3c 46 fc 13 7c c7 ab e2 65 12 97 db 3c 99 81 73 82 91 99 e0 73 fa 15 fd 48 9c 00 61 2d 1f aa cc b4 d7 19 ab 6c e0 45 9e 41 9e 73 9d e4 e9 fc c9 3e 28 d0 ff 85 ad da 05 03 c4 a8 8c e8 db 71 d8 48 db 13 7c 67 e0 82 e1 88 a3 01 bd 3c 59 91 9d f3 2a 81 6f a1 40 e1 24 d1 2d f9 e8 e6 ab 8d 3a 83 86 d4 31 0e c2 d8 db a2 cf 37 3e 3d b0 85 fe c7 a8 7f 81 d2 3
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Wed, 28 Apr 2021 12:44:56 GMTContent-Type: text/cssContent-Length: 2103X-Content-Type-Options: nosniffLast-Modified: Mon, 27 Aug 2018 05:27:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Wed, 12 May 2021 12:44:56 GMTX-Request-ID: v-8912349e-a81f-11eb-a95e-bb69f1986ef4X-AH-Environment: prodAge: 543747Via: varnishX-Cache: HITX-Cache-Hits: 187Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 5a 5b 6f db 36 14 7e ae 7f 05 d7 62 c8 05 91 2b cb d7 3a c0 b0 0b 90 0d 18 06 6c e8 c3 86 bd d1 12 65 73 95 45 4d a2 e3 a4 83 ff fb 0e 29 52 22 25 ca 92 3d 0c 68 82 a2 36 6f 3a f7 ef 3b 54 de df 23 af e7 07 8d 46 bf e6 74 8f f3 57 54 f0 d7 84 8c 46 bd 3b ee df 8f 46 ef ef ef d7 6b 1c 73 92 3f 20 f8 b4 21 31 cb 09 fa 67 84 50 c8 52 4e 52 be 46 37 37 8f a3 93 58 3b da b0 e8 55 ad 96 4b de df 23 f6 4c f2 04 bf 22 f8 07 83 cf b4 a0 9b 84 20 96 a2 62 8f 93 04 45 e4 99 86 a4 40 c7 1d 49 11 df 11 94 d3 ed 8e a3 0c a7 24 41 45 42 23 98 a3 a9 90 04 a1 8c 15 94 53 96 ae 51 4c 5f 48 f4 08 43 9c 65 6b e4 8b 4f 09 89 b9 fa 78 a4 11 df ad d1 c4 f7 bf 16 5f 77 44 1c 59 7f df e0 f0 d3 36 67 87 34 f2 42 96 b0 7c 8d f2 ed 06 df 2e 57 0f 68 35 85 7f 1f 1e 90 3f 5e dd 89 a5 52 5c 9a 50 fe ba 46 3b 1a 45 24 15 a3 2c c3 a1 1c 92 4f f3 8e 64 f3 89 72 8f e7 38 d5 f2 a9 15 68 3c 2d 90 5f 3c 18 e7 c0 57 31 2a 37 ee d9 e7 cb 77 5d b8 e1 24 7d 32 0e 23 4f 39 c2 74 8f a9 9e f2 8c a5 df e4 3a fd fc 6b d4 f3 2f d4 ce 97 ca 7d bb 27 11 c5 10 4e 09 44 75 98 13 08 22 9c 46 e8 76 4f 53 4f 85 c1 72 b1 ca 5e ee a4 be cd f0 44 28 a2 45 26 8c 82 52 96 4a dd 4f 70 28 c4 fc 90 6c fa 05 43 60 86 6c 9f c1 d6 94 17 68 58 42 0d 90 78 e2 07 33 2d f2 8e e0 a8 92 56 47 72 30 f3 b3 97 47 39 94 d0 94 78 ad f1 53 bd 73 37 51 9b 63 48 57 af a0 9f c9 1a 4d 17 7a bb 31 18 8c 83 79 4e f6 c6 f8 51 1d 3b f5 fd ca 34 22 92 62 fc b7 3c b3 91 67 50 5a b6 34 15 cb b3 17 84 0f 9c 89 fc 38 e9 1d 86 d9 ab c2 f1 f6 ad d8 57 f9 80 63 15 80 61 42 30 a4 e5 86 f1 dd e5 4e 36 25 34 6b 46 4e 12 cc e9 33 29 15 d4 c2 ce 4d 61 6d 1d bd 10 73 b2 65 39 85 12 84 e5 71 ee c3 2a f9 37 09 0b 3f c9 04 82 54 8b 13 76 34 8b 86 f6 d1 5c b9 c8 72 9c 1e cc 70 14 d1 74 0b 95 05 05 a0 10 fc 37 51 ae 6a 17 ad 77 4f 4f 4f 66 7e 96 ae dc 33 30 9a 3c 02 a7 9c e2 84 e2 a2 ac 94 32 1d 59 f1 d2 5a b7 cd f1 6b 11 62 65 79 75 b6 8f 83 f9 54 8e 1c 77 94 13 af 80 5c 24 22 4b 8e 39 ce a4 3c 2c 87 e8 f2 c0 45 9c ed 21 06 40 d8 82 41 b9 46 ef a2 a8 ac cc e4 85 7b b5 21 48 92 d0 ac a0 32 c9 a5 04 31 de d3 04 8c 76 f3 23 08 82 f7 de f7 2c 89 6e aa 59 1d 7a 29 cb 01 26 8c 30 b2 9c a2 e1 e8 01 b9 67 2d 20 ca 92 03 40 09 c4 9e 00 9f 1a 69 1a c8 82 37 a0 c6 81 93 0a 5c e6 65 70 e7 0a 43 94 3b 2a 9f d3 54 3a b2 72 7d 05 36 e5 ba 2a 45 3a bd b8 8c 57 8b 95 b2 bd 89 a7 1d 0a d7 2a 59 75 19 ac 00 5e c8 19 87 c5 b7 1f fc 88 6c ef ec 1a dc b9 a0 38 3f cf ce 4e 9f 9b eb 57 27 a1 eb 04 17 dc 0b 77 34 89 54 8a 35 e2 aa 2c cb 57 96
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Apr 2021 23:03:30 GMTContent-Type: application/javascriptContent-Length: 2166X-Content-Type-Options: nosniffLast-Modified: Mon, 27 Aug 2018 05:27:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sat, 08 May 2021 23:03:30 GMTX-Request-ID: v-498c54f6-a551-11eb-86f4-2fa7365bcc58X-AH-Environment: prodAge: 852232Via: varnishX-Cache: HITX-Cache-Hits: 1719Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 59 eb 53 1b 39 12 ff ce 5f a1 70 39 66 26 c1 63 d8 ad 7d 94 59 36 05 0e 24 54 11 cc 81 6f 53 57 b9 dc 96 3c 23 db 5a 64 69 a2 d1 18 bc bb fc ef d7 2d 69 9e 36 8f ad dd fb 70 55 01 1b a9 d5 ef 5f ab 5b d9 2e 72 46 72 a3 79 62 b6 0f b6 b6 fa 7d 72 35 fa d7 d1 39 b9 3e 3f 7b 7b 72 45 7a 64 3c ba ec 1f 8f c6 e3 d1 07 72 7e 74 f5 ee 64 eb 97 7f 14 4c af c2 54 25 c5 82 49 13 c5 9a d1 74 15 4e 0b 99 18 ae 64 18 91 df b6 08 e9 f7 2d 75 9b 81 63 0a bb 7c 4a 42 cf 27 f8 1b 97 86 69 49 45 2f 17 3c 65 3a 88 62 c1 e4 cc cc c9 ce 0e 31 ab 8c a9 29 f1 b4 20 4b ad a8 b8 b6 74 e4 f0 90 6c 97 52 b7 9d 54 e0 2c b9 39 2d 84 f8 c8 53 33 77 84 61 74 00 5b f7 5b 56 ab b3 0b 32 1c 5d 8c 4f 2e c6 a0 da c5 c9 f5 f8 e4 ed d3 1a 26 0a 54 94 e6 2f 53 f0 82 e5 86 a5 6b da 35 65 c6 95 57 a6 a5 35 97 5a 2d 54 8f 2f e8 8c 0d 41 21 ca 25 c8 e0 8b 59 a5 4f 29 22 67 a6 c8 4e 5b c7 3a 52 6a b5 50 c9 ae 0d 53 a5 0c 9d 08 56 f2 ab fc 90 69 b5 44 9d cf 79 6e b8 9c e5 41 4d db 10 e0 c9 b7 e3 5f d4 a4 c7 65 ea a9 7b 34 cb c4 6a ac 66 33 c1 08 dd 8e e2 44 f0 e4 26 04 a2 a3 7a e3 3d 95 a9 60 1a 98 d5 8c 82 18 e4 a6 45 62 de 69 9e f6 a6 5c 80 63 7a 49 ed 01 99 15 e6 13 da 70 b8 9d cc 59 72 33 51 77 db 9f 83 92 7f 95 97 6c 89 d9 da b1 28 20 af cb 3f ec 7e 9c 14 5a c3 e7 98 ea 19 83 dc 5e 52 11 46 51 6c ac 72 a1 53 8b 90 25 d5 36 8e 9c 8a 9f a9 e5 4e 0e 49 30 07 d7 10 2b 34 38 70 a1 ae e3 69 e6 3c 8f 62 9e 87 c1 c0 ea c8 d2 20 8a 36 f0 c8 e7 ea b6 c5 c3 6a 35 d6 34 b9 01 17 86 01 a3 da cc 05 9f 32 e2 7d 92 07 bb 6d 2e bb 4f 9b 63 23 e5 6c 01 bc 0f 51 1f 62 e6 50 06 c0 80 09 98 36 55 9a b0 45 66 56 92 e5 79 0c 54 56 e5 6b b7 3b 74 58 c8 bd 33 5a 38 61 29 37 10 20 26 d2 5e ce f4 92 27 ac fa d4 ec 4b 01 59 bf 96 ab 8e b5 23 ba 72 34 97 9a 41 06 97 09 65 15 2d 83 f8 80 26 96 17 06 e5 65 69 c2 21 59 07 d2 02 f2 e5 58 a5 ab 5e 5e 9f b7 29 14 58 51 68 c9 8b 92 41 47 4b 0d 88 d2 b2 05 a1 20 40 e8 54 f4 73 b3 10 08 7f 96 09 9a b0 b0 ff c3 8b 5e 2f 0c df c0 ef 1f a3 38 7a 05 1f fd d9 2e 09 c0 7e a8 b5 0b 08 82 e7 5c 31 d0 6c a1 96 75 8a 41 60 ce a6 04 d3 86 c0 3f 4a 84 4a 28 7a 20 27 19 e0 9f dc 72 28 3f 52 55 21 03 d8 e0 9f 13 30 8f dc 32 22 19 4b 89 51 c4 50 e9 42 bb ee 84 0a 40 71 37 57 03 b4 25 2e 05 b6 aa 9d 33 fa 11 d7 fa 4a d9 70 6d e9 99 b6 d9 e4 29 26 e5 e9 da 2d ee 58 1d 09 8c c5 1f 66 34 14 34 07 10 a2 fb 7c 16 75 b7 a4 f2 1b 17 74 19 94 39 d8 c8 c0 8d f5 2a b4 75 e5 a1 c2 07 78 5a 38 f2 5a 23 a8 7f 88 75 67 d8 d2 81 6e f1 96 2f 21 73 cb 9b Data
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Tue, 04 May 2021 10:03:14 GMTContent-Type: application/javascriptContent-Length: 1511X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Tue, 18 May 2021 10:03:14 GMTX-Request-ID: v-f0ca6346-acbf-11eb-a794-7377227b2f6dX-AH-Environment: prodAge: 35049Via: varnishX-Cache: HITX-Cache-Hits: 30Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 57 5b 6f db 36 14 7e b6 7f c5 69 17 54 12 62 2b 6e 31 6c 43 d2 b4 18 36 14 1b b0 60 dd 1a 0c 58 86 61 a0 25 ca 62 4b 8b 8a 48 c5 71 5b ff f7 1d 5e 24 51 8a 6c a7 5b 1e 62 9b 3c f7 cb 77 0e df ff 56 d3 6a 1b a6 22 a9 d7 b4 50 51 5c 51 92 6e c3 ac 2e 12 c5 44 11 9e 44 9f a6 00 67 67 f0 3b 5d 8b 3b 0a a4 d8 02 27 4b ca 21 ab c4 1a 54 4e 41 b2 94 2e 49 85 df 89 82 54 50 59 28 c8 89 a1 05 22 a5 48 18 51 34 05 49 15 88 0c 6e 6b 2a b5 64 19 5b b9 bf 16 7c 0b a8 94 e3 47 29 a4 64 4b 4e 81 65 80 07 9a 9b ad 0a e4 6d 99 80 54 14 ea a2 ac 97 9c c9 9c a6 5a c8 49 18 c4 49 3a cf c8 ed 3c 41 4d 2b 51 31 2a 81 b3 20 8a 29 49 f2 ce 17 56 a4 f4 7e 06 94 53 e3 2a 68 cf 00 ee d0 f4 13 ce 8a 0f 70 a9 45 91 a0 a3 b8 98 1a 0a b4 26 7c 72 12 1a a2 98 28 55 85 41 5e d1 2c 88 a2 98 d3 62 a5 f2 46 14 34 9c 18 45 1d ad 10 25 e8 d3 1d fe df 69 69 13 ad ec ea f6 ea 12 be fd e6 bb d9 74 32 b9 ba fd 05 d5 3e 5f bc f8 ba b9 45 37 e4 3b 9a 58 6f 2f 7d e7 56 95 a8 cb 20 d2 6c f8 f3 ba 62 ab 15 ad fa 24 ca 1e b6 44 f2 07 51 28 c2 8a 21 1d 53 74 2d 3d aa 36 6c 7b e8 bb b8 8e 31 21 ed 1e 29 71 86 31 d7 31 35 5c 09 17 92 be 19 b7 ca dc cd 4b 52 50 1e 98 48 9d 9d 49 0c 66 a2 80 68 e1 58 3d 26 24 d3 81 ea 18 d3 1a 24 9c 25 1f 30 6d 6d a2 e9 9d ce de 27 54 69 be c5 65 65 3e 7f a4 19 a9 b9 d2 59 99 98 58 5b 0d 34 fd 09 b3 69 4c 51 39 93 51 2f c5 da ee 89 22 d5 8a 2a 4d e0 73 18 33 27 2c 0b f1 7c 83 7e 8a 4d 14 6f 58 aa f2 30 82 97 3a cb ba 2c 26 83 3c c4 32 a9 04 e7 d7 a2 0c 17 a8 29 4d 7f e0 58 e5 61 20 39 76 d1 9c 15 58 b4 49 ce 78 5a 51 74 ac c6 58 b8 52 6a c8 9c 7e 5d db 18 59 8f b8 67 99 2f b8 e5 d0 5e 8f e4 c0 a3 d5 8a e6 9c 66 ca 11 63 6e 96 22 dd 06 be 3c cc 15 52 55 9c 6c 2d d1 0e 6b 5e 52 ed 29 b8 3f c7 35 cb d5 5a db 4f 0a b6 c6 7c 85 9f 20 68 7d 0f ce c1 c6 34 16 59 86 c0 80 8e 28 51 c2 1c 3b 61 b1 9b c1 8b c5 c2 ca 9e 4e 76 ae 18 8c dd a6 12 38 0a ab 08 07 53 2b c8 b2 16 4b 86 90 21 10 47 a6 9e c5 4b 53 79 a6 34 40 89 3a c9 25 6a 54 e3 55 62 73 68 6b c5 da 15 c5 4c 5a 51 b1 ef 30 7c fe 3c 4a f8 a0 82 5d ea cd d9 5b 7d e4 b4 79 5e 0d ea 42 17 b2 dc b0 92 62 0b e7 7b ec 1c 13 d7 04 48 e6 62 63 e2 93 a0 48 bc 03 e3 3a 2b 56 18 19 e8 f0 62 ea 61 c7 a1 e6 81 c3 dd d3 b4 4a 41 ef 95 07 13 56 35 46 df 94 f3 b5 58 ad 38 0d 75 36 5d b5 96 08 df 05 32 18 70 56 e6 ba 29 2b cb 3a bf 63 66 02 04 6d 8f 1a dd ff 10 63 1b f6 28 12 72 4e 4a ac 05 6b 78 9f cc 4e a6 ae 93 95 36 cf 88 d2 18 de 9c f6 ac c8 89 dc 67 42 f4 40 39 bd c7 fc a6 ad 6a 83 f8 9a
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 04 May 2021 19:47:53 GMTContent-Type: text/html; charset=utf-8Content-Length: 6068Connection: keep-aliveServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Cache-Control: privateVary: Accept-Encoding,User-AgentContent-Encoding: gzipSet-Cookie: twine_session=d5626162231659aedb00fd74fa76a0ca:22520cc9a717342f2bdc8799f4218d0d30985177; expires=Thu, 03-Jun-2021 19:47:53 GMT; Max-Age=2592000; path=/; domain=.twinesocial.com;HttpOnly;Secure;SameSite=LaxData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5d 7b 77 db 36 b2 ff db fa 14 28 7b b6 b6 bb a2 64 49 96 eb 97 7c 8f e3 24 6d b6 79 b8 b5 d3 ee de a6 c7 0b 91 90 44 9b 22 55 02 94 fc 88 bf fb 9d 19 f0 01 4a a4 6c d7 75 f6 de 73 9d 26 16 01 0c e6 85 c1 0f 03 0a 70 f7 bf 7a f9 e1 e8 f4 5f c7 af d8 48 8d 7d 76 fc f1 c5 db 37 47 cc b2 9b cd 5f 3b 47 cd e6 cb d3 97 ec 9f 3f 9c be 7b cb 5a 8d 0d 76 1a f1 40 7a ca 0b 03 ee 37 9b af de 5b 35 6b a4 d4 44 ee 36 9b b3 d9 ac 31 eb 34 c2 68 d8 3c fd b9 79 89 cc 5a d8 3b 79 b4 95 d1 b5 e1 2a d7 3a a8 ed 93 44 9f 07 c3 9e 25 02 8b 5d 8e fd 40 f6 ca 38 b6 76 76 76 34 23 e8 56 db ff ca b6 6b 8c 9d e9 3f 8c fe e8 47 28 9c 31 7a c0 7a dd 98 15 19 fd ab b1 cf f4 f9 89 7d c2 7e 4d d6 84 e6 cf ec d3 67 f6 19 c8 9a f0 ef 33 fc 80 46 7a a4 b6 26 10 43 33 88 c4 0f 06 6d 9f 9a 9f a0 23 96 3e b3 c6 bf b1 e7 e7 4f 67 d8 69 ed 6c 1d 4a 6b f0 8c 94 c4 08 1e ce ce a8 2f b0 82 ce 67 4d f8 8b 75 c0 1d 7a e9 87 33 ac 45 f1 9f d2 22 3d 63 e9 ec 73 ad f6 22 f6 7c 77 97 c5 c1 45 10 ce 82 da 51 e8 0a f6 2a 98 7a 51 18 8c 45 a0 76 d9 24 0a dd 9a 6d a3 73 46 82 bb 07 b5 95 fd b1 50 9c 05 7c 2c 7a d6 d4 13 b3 49 18 29 8b 39 61 a0 a0 43 cf 9a 79 ae 1a f5 5c 31 f5 1c 61 53 a1 ce bc 00 c6 87 fb b6 74 b8 2f 7a 30 de 56 33 63 84 83 62 8b 3f 62 6f da b3 fe 69 7f 3c b4 8f c2 f1 84 2b af ef 0b 83 eb 9b 57 3d e1 0e 45 dd 19 45 21 08 6e 59 38 5c 2b fb be 17 5c b0 48 f8 3d 8b 4f 26 be b0 55 18 3b 23 db 83 6e 16 93 de b5 80 41 6f 6d 6f 5c c2 3f 8b 8d 22 31 c8 63 40 2a 90 e1 34 d4 cc 0b 84 0c 1d d0 ae e1 84 e3 a6 37 e6 43 21 9b 03 3e 45 26 cd 79 ae 8d 49 30 b4 0e 0a 82 b5 30 75 35 01 77 50 ef 26 d2 a4 d2 3b ed cb 4e fb cf c9 4e 3e 6d 62 f1 60 c1 ad ad cb d6 d6 e3 04 13 8b 12 c1 63 1e 78 03 21 d5 9f e3 0e 53 55 34 66 a2 9f 71 99 67 2e 2f 92 01 fc 53 dc f9 80 47 9e 3d f1 82 40 b8 b6 e2 fd 86 9c 0e 31 8e fc 30 ea 59 5f 77 fb 7d ee 76 31 76 6a 2b 25 f1 77 a4 c3 cd 3e 05 a7 1a c1 a7 c4 a5 6a 22 46 ec 31 67 c4 23 29 54 2f 56 03 7b db 62 18 c6 2b fb ca 53 be 38 38 45 cd 4e 48 b3 5d 76 c4 a5 f0 7d be df d4 6d 48 95 db 28 d5 95 2f e4 48 08 95 8e 1f 49 70 a4 b4 d8 58 b8 1e 07 12 27 12 22 f3 41 13 03 51 da 8e 1b 2c d8 0f 9d ec b1 07 83 e6 01 cb e6 c4 e7 57 22 fa 5b bb db 7e ad 46 62 2c ec 01 d8 40 c5 70 22 02 5b 02 52 fe dd a0 01 1d 85 a3 da 0d 60 52 52 6d f7 c3 50 49 80 d7 c9 3c 81 9a 11 63 39 5f 9f 75 b0 3b 8d 16 fc 07 8a cd 93 60 3f 9b cf c0 84 b1 28 6b d7 6a 43 39 8c b5 e2 7d f0 e4 3c 91 18 f7 85 5b de 73 1c Data Ascii: ]{w6(
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 04 May 2021 19:47:54 GMTContent-Type: application/jsonContent-Length: 8524Connection: keep-aliveServer: TwineServerX-Content-Type-Options: nosniffAccess-Control-Allow-Origin: *Cache-Control: privateVary: Accept-Encoding,User-AgentContent-Encoding: gzipSet-Cookie: twine_session=1745bf30f30ec8d817bb01faea7728d9:f6eadc21dbd3674a7aa8639f189834354c5f9066; expires=Thu, 03-Jun-2021 19:47:54 GMT; Max-Age=2592000; path=/; domain=.twinesocial.com;HttpOnly;Secure;SameSite=LaxData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5d 0b 73 db b6 b2 fe 2b a8 33 7d cd 98 0e 08 90 20 d1 99 9c 8e e2 d8 8e db bc 9a 38 cf 9b 33 1a 90 04 25 c6 14 a9 92 94 14 a5 d3 ff 7e 77 41 ea 65 29 96 ec a3 c4 a9 ab b4 51 24 3e 40 60 17 bb fb 61 b1 bb fc 6b 2f ec ea f0 5c 47 4f 8b 7e 57 65 7b bf c4 2a 2d f5 fe 5e 9c a7 69 3e 2a f7 7e f9 6b 2f af ba ba 80 6f ff f7 df fd bd 7c 60 be fd b5 97 44 7b bf 08 df b1 bd fd bd 6a dc d7 7b bf d4 a7 f6 f7 06 a5 2e 32 d5 c3 23 ef 74 91 bf c8 8b 0a 8e e6 c1 07 1d 56 a7 70 d3 9e c7 24 93 ae 0f 7f 3c 38 91 26 e7 da 3c 25 cc 07 59 b5 f7 0b dd df 2b 07 41 19 16 49 a0 8b 76 bf 5b a8 12 9b 3a 56 59 b9 f7 37 b4 5e a4 f0 ab 5b 55 fd 5f de df 7d 7f 77 34 1a 1d c4 2a d4 41 9e 9f 1f 84 79 ef fd dd b9 67 f6 8b 3c 4e 52 dd 9e dd 53 9a 9b 3a 85 ea 77 2f dc 36 d7 a9 f7 77 fb 49 58 0d 0a fd 6b a1 a3 a4 80 6e df ab 8a 81 fe a1 4c 3e e9 7b a9 2a 3a 1a da 6e 46 78 08 bd 4b 53 45 5e ab b2 d2 e4 c5 18 3e 7b 48 84 4c 57 a3 bc 38 c7 71 21 a1 dc fd bd a0 50 59 d4 be d0 fd f9 3e c0 5d 61 59 b6 c3 54 95 40 8f bd c9 a9 d9 b3 8e 27 47 fe 36 24 aa 92 2a 85 c3 d9 20 4d a7 43 3d 33 9c e0 fb 7b 49 d9 56 61 95 0c e1 17 f6 fd ef fd 19 c3 c4 25 0c 6b 86 63 46 b3 c8 34 e6 3b d4 76 25 5f c1 31 9b 7b fc 33 4c 33 73 08 e7 ce 6a ce 55 a3 a4 aa 74 51 73 e0 c2 b3 97 99 67 6e eb 07 25 de d6 eb d4 37 4d ae 4a 7a aa a3 4b 60 a3 cb 5c c7 e6 ae 03 bc 74 90 9d f4 fd dd ee 49 7a 94 ca 97 7f b4 b3 bc e8 a9 f4 e0 43 bf b3 c4 c0 65 96 b1 cf b0 6c ae cf 17 38 d6 9c 99 b5 7d d6 1c 58 c7 2f fb 52 7e f9 97 f0 ab d0 25 1c 0c 75 38 1d c5 1c cb 5e 1e 66 2c d2 e1 c7 37 d9 e3 38 e8 3b dd 0f c3 a3 b7 e7 bc 35 5a c5 42 c7 59 cd c1 17 d3 63 9f e3 e1 38 1f 54 83 40 d7 ec 08 41 83 64 3a 7d 7f f7 92 67 7f 4e 2a c7 15 3f e8 74 fa dd aa 6e ca ca 3a 7e df f7 7a c3 93 47 9d f7 77 5b d3 3f a7 f3 3f 5a ef ef b2 f8 e4 e1 a7 df 5f 3d 29 3a f0 a3 f4 7d 2b b4 ce ad 2c b7 7a b9 55 7c b0 42 fa 31 36 7f 60 aa 74 f3 2a 5f 64 fe 32 f9 2e 4c 02 fe 99 49 70 61 e0 17 26 42 73 66 f6 9c b7 f9 e0 0c 0f 5c 7f 22 78 94 8a cb 34 6d 33 82 d1 b2 e0 da 1e cc 21 87 fa ae 0d 12 2c 3c d7 5e c1 7e e1 7a 57 17 e0 24 2b 2b 05 aa b4 d7 b0 7e b1 07 9f e3 72 19 e6 59 a5 b3 ea e0 e3 c7 83 38 08 a3 ec 00 48 fe fe ee 10 04 cb b5 0f 98 ef bb 96 ed be bf 0b 5d 76 b8 c7 44 1b 84 d9 97 8c 83 38 53 cf a6 76 9b 73 c9 7c cf f3 7d db 75 7c 5f b8 2e 17 ed 0c b9 fa 6b 3b 0b db a1 aa ee d9 d4 fb 01 bf 77 ab 7b 73 0f fb 21 ef de 93 d4 53 6e 18 fb 1e a3 dc 13 1e 8b b5 e3 d0 90 52 db 89 a9 0c 42 fa 43 ae Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Tue, 04 May 2021 12:56:28 GMTContent-Type: text/cssContent-Length: 3337X-Content-Type-Options: nosniffLast-Modified: Mon, 27 Aug 2018 05:27:08 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Tue, 18 May 2021 12:56:28 GMTX-Request-ID: v-23ea8c34-acd8-11eb-8838-dbd69bc99f88X-AH-Environment: prodAge: 24700Via: varnishX-Cache: HITX-Cache-Hits: 7Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 1c 6b 6f db 38 f2 f3 e6 57 f0 10 14 7d 20 52 f4 b0 1d c7 c6 2d 2e 4d d3 d4 40 9b ee a5 69 8b fb b4 a0 25 da 16 22 8b 82 44 c7 49 83 fe f7 25 29 4a a2 a8 87 25 d9 dd db 74 37 70 24 72 66 38 9c f7 90 3e 7d 73 f4 1d cd 63 8f 20 70 03 d7 68 02 2e 61 8c 7c 1f 1e bd 43 b1 13 79 21 f1 70 30 01 9f a3 25 0c 3c 27 06 71 88 1c 6f e1 39 20 26 4f 3e 8a 57 08 91 a3 6f 28 8a f9 28 53 37 8e 2e 36 64 85 a3 09 b8 70 b7 38 ba 8f 57 38 14 8f c0 d7 db d9 04 ac 08 09 27 a7 a7 db ed 56 87 d9 08 dd c1 eb a3 37 a7 47 47 00 e8 31 72 18 ca ef 11 0c 43 14 81 e7 ad e7 92 d5 c4 34 8c 17 d3 9f 47 47 a7 6f c0 bf fb fd 00 0a 9f ce a6 3f 5f ae 2e ef 66 9f 6f c0 cd c5 b7 d9 f5 05 ff b8 fb 27 99 dd 1f 37 a0 6b 3b 16 6b bb 81 0f e0 39 c4 94 e7 8c 6b 11 f2 21 f1 1e d0 14 84 d0 75 bd 60 39 31 a6 60 0e 9d fb 65 84 37 81 3b 01 c7 86 61 8d 6c 77 0a 7e 68 5e e0 a2 c7 89 65 18 6c 08 8e 5c 14 69 73 4c 08 5e 53 de 87 8f 20 c6 be e7 82 e3 b3 d1 1c 0d 6c ca 2e a0 62 d5 f3 cf 9a 8f 97 f8 12 07 04 7a 01 e3 73 46 0f c8 09 4a 11 02 6b ea 7a 71 e8 c3 a7 89 17 f8 74 bc 36 f7 b1 73 9f 53 6c 19 14 3b a5 89 bf 5b 21 6f b9 22 74 15 3f 5b 63 87 e0 99 8e ad c6 91 08 80 7d 36 0c 1f a7 40 c0 86 1b 82 a7 74 86 b6 45 f3 7b 8f 68 24 82 41 4a 3e f4 7d a0 db 31 40 54 8e 29 fd 1a de 90 29 d0 d6 f8 47 8b 51 b8 0d a4 78 f7 a0 5d 03 28 e9 1d 98 33 59 e1 07 b6 45 38 84 8e 47 9e 26 fa 59 07 d6 7a eb 65 41 89 c0 1a 3e 6a f2 df 32 4b 15 b0 ba 17 ff 19 93 8d 73 df 28 38 42 06 cc 44 06 7a 80 80 19 81 43 43 dd 64 75 a1 01 7c 48 ff fc 84 82 0d 78 16 f2 6f 31 f1 a8 c5 5d 37 cb b4 c4 2c 3d 26 9e 73 ff a4 c5 94 c5 6c 51 92 fe a5 ea 04 72 a6 81 7f 79 eb 10 47 04 06 24 d5 32 5d 02 af cd 23 04 dd cb 68 b3 9e 6b 4e ce a8 2a 98 99 02 0d 13 05 4a 55 20 c0 01 12 84 55 c3 dd a6 f6 71 e1 63 48 26 3e 5a 50 b1 5b 50 64 da 02 ae 3d ff 69 02 5e 5e 63 b2 82 6b ed 2d f6 dd 97 53 e0 60 9f 99 e5 e3 f7 ef df 27 80 71 6a d2 75 2f 20 28 0a a0 4f 35 17 52 93 f2 07 0c 90 9f e0 72 18 ae 78 32 47 0b 1c 21 f0 5c a6 ae 3d 10 b0 f1 a9 79 00 cf 29 1d 73 84 c6 d0 e8 07 65 02 17 84 ad 3d 85 05 cf 91 3d ee 09 2b 57 af 14 9a 3d 18 8d 4c b3 cc fd 18 c1 c8 59 a9 9c 8f 98 ac ee 1c 0c 53 f0 c7 8b c5 42 6c 54 ec fd a0 ee d6 b4 33 11 6c 98 5e a4 f1 d8 41 8b c1 7c 90 59 78 fa d4 87 61 8c dc 3a cf 92 7b 0e 59 8c 4b f6 9b 93 91 01 13 7c fb 48 75 b5 28 66 b2 95 6f 9c 05 41 fc 90 59 1f 60 5a b2 76 03 3b d3 3d 75 ee 1d e5 e9 92 ba b6 4a 4e 53 fb 15 2d 3d 6a 57 6d 46 72 1d 7a 15 44 ce 7f c9 39 ee 9e a5 b0 5d 38 e2 2a c7 ba c6 73 cf 47 6f 49 1e
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sun, 02 May 2021 13:03:30 GMTContent-Type: application/javascriptContent-Length: 2119X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Sun, 16 May 2021 13:03:30 GMTX-Request-ID: v-cad2b83e-ab46-11eb-ba14-03daea671d85X-AH-Environment: prodAge: 197077Via: varnishX-Cache: HITX-Cache-Hits: 48Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 5a 5b 6f db 36 14 7e f7 af 60 84 a0 93 62 5b 4e 3a 6c 0f 49 dc 6d e8 b0 ad c0 0a 6c 68 b1 3d 14 83 c0 48 74 ac 95 96 0c 89 4e e2 a6 fe ef 3b bc 49 bc 49 71 d6 1a 88 6b 91 87 87 e7 f2 9d 0b a9 2e 16 e8 57 52 91 06 33 52 a0 9b 3d 7a 5d af 56 84 bc cb 9b 72 cb d0 45 fa 7d fa 72 b2 38 3b 9b fc 48 cb 9c 54 2d 41 ef 58 99 7f dc cf 3f 96 0c dd 5d a4 17 e9 b7 e8 33 7a fb e6 3d 7c ff 4e f0 0a 96 37 79 dd e0 0a bd 3c bf f8 0e 06 d7 8c 6d 2f 17 0b 0a 73 75 5a 11 36 39 5b 4c 26 93 78 b5 ab 72 56 d6 55 9c a0 c7 09 42 77 b8 41 a7 33 74 5f 56 57 13 78 3c 45 4b c4 d6 65 9b fe fb e7 8e 34 7b f4 f9 33 9f 2a ea 7b 35 20 88 60 04 c8 4e 63 39 93 c8 85 e9 aa 4a 5b 2e 61 56 56 d9 16 37 a4 62 40 d4 ed 56 6f 59 2b 77 94 7b 16 75 3e 43 84 6e e0 ab c2 37 94 64 37 35 63 f5 a6 ac 6e 67 a8 ac c0 2a 59 9b 37 35 a5 62 60 83 ab 1d a6 59 bb c5 39 69 66 08 ec d4 12 96 b1 7a 0b bf 77 0c 68 ef cb 82 ad 67 48 6e 9b b5 84 92 9c d5 40 d9 90 1c d3 3c 23 77 20 fa 0c 09 f1 f6 59 4e 71 db ce 50 b6 aa e0 ab 84 3f 4a a4 f2 08 95 2b 24 24 45 cb 25 aa 76 94 6a 89 11 92 a3 e8 f1 70 25 06 0e e2 db 64 08 93 9c 26 b5 37 71 54 d1 44 9e 86 a6 a0 9a c8 16 de d1 4d 13 c9 61 d3 26 7a c6 b4 92 65 c0 4e 52 65 4e d7 01 7a be 1b b8 ea 6d 63 ec e2 59 c8 94 e0 dc 34 13 5f e9 89 ef 2e f7 f5 bb ab cb c2 67 e4 59 d4 65 e4 9b 9c 35 3b e2 b2 b1 5d e7 f2 70 1c 1b 95 6d d6 b2 5d fe 31 32 d9 00 84 45 18 c0 bf bb 0d c8 9e f4 76 f2 4d ea ee 10 30 ba 2b a6 01 6d 33 92 88 c1 85 47 52 5e 6f b6 40 59 40 10 03 96 09 55 50 96 82 a8 e0 bd 25 ec b5 22 7b c7 f6 94 f4 1c 10 5f 02 ec 09 fd 70 fe cf 55 37 a8 99 c2 cc 00 8b 58 ac 48 fa 25 f7 40 0b 4e 6c c9 2f b4 c6 2c d6 1c f8 c2 3f 9a 7a 4b 1a b6 ff 0b d3 1d 89 23 a1 52 94 24 68 7a e4 82 0d 6e 6e cb 6a 4e c9 8a fd 8f 65 4d 79 bb e6 eb 7a 51 b9 65 46 d6 dd d4 0f f3 b6 fc 04 5e 89 12 74 02 ae 83 91 a6 20 cd 1c 26 22 d3 74 5c e9 e9 b1 5a 2b 1e 5c 89 f9 b3 2d a0 16 0b 55 9e bf 7a 8b 8b 02 b4 79 b6 01 f5 3a df 82 87 ee 57 43 d8 ae a9 d0 bd 9e 3b 00 94 a0 58 3d ba 04 84 a6 02 d0 7f 73 e1 63 8e f5 8e 9d 64 a6 32 2b a4 65 1b ed 1b 9e fb 84 1c 2a 5a ba 5c 28 52 9b fa bd 26 5c c6 19 12 63 fa 81 d0 6c c5 75 9c a1 82 30 9c af 49 61 87 8e e4 c7 43 47 ce cf d0 aa 7c e0 8f 10 f7 2c db d6 ad fa 25 93 49 b7 87 cc 74 7a 6b 9d bc bb 24 8e ab 22 e3 f9 a3 1b c8 eb 5d c5 78 a6 d5 19 97 cf 5a 61 0a 5a a6 05 66 38 8e 54 e6 81 22 cf 1d e5 5a d1 b6 18 42 c1 75 33 64 59 d7 d7 00 ec 0b 39 2b 95 0f 71 47 d8 15 6d ce 55 3e f4 93 a1 1c 7e e2 26 35 83 87 fc 91 e6 b4
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Tue, 04 May 2021 12:56:28 GMTContent-Type: application/javascriptContent-Length: 1068X-Content-Type-Options: nosniffLast-Modified: Fri, 02 Oct 2020 18:44:09 GMTVary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=1209600Expires: Tue, 18 May 2021 12:56:28 GMTX-Request-ID: v-23f8aabc-acd8-11eb-b4ff-37bd777a27e2X-AH-Environment: prodAge: 24700Via: varnishX-Cache: HITX-Cache-Hits: 7Accept-Ranges: bytesConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 56 db 6e dc 36 10 7d df af 98 ca 06 24 35 2b ad dd a2 28 b2 ae 0b c4 06 1a e7 c1 4d ea b8 f0 a3 c1 95 28 89 b1 96 54 49 6a e5 4d e1 7f cf 90 d4 6d 2f 76 1c a3 68 1e 16 d0 72 86 33 67 e6 cc 85 b3 19 9c 31 9e 32 9e 4f 56 44 c2 92 a5 57 84 e7 f4 5a e4 79 49 53 38 85 8c 94 8a 9e 4c 3e fd 55 53 b9 0e 52 91 d4 4b ca 75 18 4b 4a d2 75 90 d5 3c d1 4c f0 20 84 7f 27 00 8a ea ba 7a 2f 73 c2 59 a2 ae a8 62 9f 69 10 9e 4c 50 32 9b c1 9b 34 45 8b aa 5e 28 6a ef 40 52 12 a5 40 0b 20 2b c1 52 28 98 81 01 ba a0 c0 c9 0a 50 81 00 17 3c 1a dd a8 48 4e a1 61 ba 40 51 25 ca b2 d6 68 f1 93 02 c6 93 b2 4e 69 8c 8e 5a a0 7e 3c ba 06 07 39 e5 54 92 f2 4f b2 f2 c3 18 1d 59 58 23 e5 04 8d 91 4a d1 34 2a 30 2e 2a af 25 cb 73 2a 51 39 29 59 72 17 f4 f2 0b 2b 3e 37 87 17 84 a7 25 95 7d 7c 9e 4a 24 aa 5d 8b ca 83 aa ac 73 c6 f1 9c 65 10 78 5d 96 3c 38 3d 05 bd ae a8 c8 5a d7 b1 bb f3 77 e5 f2 07 db c7 0e e6 43 e7 01 61 30 f1 7c eb 41 18 db 1b 9b c6 31 dc 25 61 bc a3 29 2a 45 83 11 09 ae 91 d7 2b 9a a3 a5 28 97 2c 8d 1a 49 aa ca e5 c0 18 09 9c 0d 74 9a ce c1 b7 47 fe b4 3d 42 ce 96 14 4f 9b 82 69 da 9f 56 25 49 a8 a9 16 94 2c 68 26 64 27 7a 18 a2 32 11 6c 63 56 1a b3 7b cb f8 6d 45 24 de 36 61 0d 41 6e c5 e2 1d b4 24 23 b5 de ce d5 1e b3 c8 32 ac cd 5b 2d aa 39 1c f5 f8 ac ce 1c bc b8 b5 71 e3 22 f6 3a 05 55 61 00 d2 2a 18 bb eb c8 1d 78 5d 14 ad 5a 8c f5 ef 39 8d db 3b a6 e7 35 b7 7f bc 29 48 db 02 1f ad e8 a3 bd db 46 6e 32 30 e9 62 da a3 d6 f6 93 69 c9 43 b6 cc b1 0f 87 ba ee e3 45 e6 72 61 88 43 36 a9 04 d4 f3 43 07 0d 3f 2f 28 cb 0b cc 9d bd 1f 17 f6 5f 30 88 6f 58 8a 5d d4 4a 1b f3 a7 13 1e 26 bd c5 67 78 1d 79 fc 40 52 db c0 a7 26 b1 8a be c3 f4 0f b6 e2 44 a9 c0 af 9c 4a 84 3c f8 61 08 af be ae b9 10 5a 8b 25 2a db 2e 1b e0 8c f9 30 15 6a ee b8 20 fd 29 04 43 fc b3 21 d8 1f e1 e7 5f 7f 31 4e 47 58 5f 81 5f dd fb 68 fc 61 44 c7 de 29 36 f0 21 9c e4 12 d1 8e 33 b4 d1 53 b5 a9 a3 cd 9e 2a 69 a6 cf 45 19 25 fb 08 1b 1b 3d 7b 3b 32 fb 5b ca 56 b3 df 31 a6 ae 92 95 5e 97 a6 d5 16 24 b9 cb a5 a8 79 1a b1 25 8e c5 39 d4 b2 0c 7c 8c 68 6c 2b 26 5a cb c0 57 32 f1 4d e4 7e d8 37 a7 1d be 68 e7 9b 61 3b 77 57 d4 76 b7 df f7 f3 c0 4e 83 fb 44 34 a1 e9 0a df 55 b6 81 6f 0a ed 78 be 01 6e 0a 87 8b ed b3 b3 b7 53 5c 42 dc 32 86 e8 8e 7f 3a 3a 42 82 1e a6 20 36 f8 e8 66 6f 2c fb 25 33 66 70 af 72 40 57 66 73 d9 4c 9a b1 73 29 70 92 73 f6 59 c6 cb 7f 02 3f 30 6e 23 db 09 73 93 45 ab 1c a7 44 93 b8 c3 63 12 08 a1 29 5c 47 86 31 f2 c3 cb f9 df 4c 6

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/ajax-progress.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/align.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/fieldgroup.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/autocomplete-loading.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/container-inline.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/clearfix.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/details.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /capture_configs/618/70c/772/e7245dc9f172f74952d866e.js HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: cdn.rlets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/hidden.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/item-list.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/js.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/nowrap.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/position-container.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/progress.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/reset-appearance.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /embed?app=casella&layout=251053&showLoadMore=yes&autoload=no HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps.twinesocial.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/resize.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/sticky-header.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/system-status-counter.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/system-status-report-counters.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/system-status-report-general-info.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/tabledrag.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/tablesort.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/themes/stable/css/system/components/tree-child.module.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /modules/contrib/cacheflush/css/cacheflush.menu.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /modules/contrib/paragraphs/css/paragraphs.unpublished.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/plugins/font-awesome-v.4.6.3/css/font-awesome.min.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/css/custom/custom.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/css/custom/developer-overrides.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/css/custom/video.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/css/custom/adw-menu.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/css/custom/career.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/plugins/royalslider/royalslider.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/plugins/royalslider/skins/universal/rs-universal.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/plugins/royalslider/skins/default/rs-default.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/css/lib/casella-master.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/css/custom/home.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/js/libs/modernizr.min.js?v=3.3.1 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/assets/vendor/jquery/jquery.min.js?v=3.5.1 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/assets/vendor/picturefill/picturefill.min.js?v=3.0.3 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/js/libs/jquery-migrate-3.0.0.min.js?v=1.x HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/js/custom/custom.js?v=1.x HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/js/custom/adw-menu.js?v=1.x HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/js/custom/google_analytics_event_tracking.js?v=1.x HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/js/libs/jquery.easing.1.3.js?v=1.3 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/assets/vendor/matchMedia/matchMedia.min.js?v=0.2.0 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/plugins/royalslider/jquery.royalslider.min.js?v=9.5.7a HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/js/custom/home.min.js?v=1.x HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/plugins/hoverdir/jquery.hoverdir.js?v=1.1.2 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/i/misc/payBill-icon.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/i/misc/IR-icon.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/i/misc/customerCare-icon.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/fonts/Gotham-Bold.eot? HTTP/1.1Accept: /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://www.casella.comAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/plugins/font-awesome-v.4.6.3/fonts/fontawesome-webfont.eot? HTTP/1.1Accept: /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://www.casella.comAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/fonts/Gotham-Black.eot? HTTP/1.1Accept: /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://www.casella.comAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/fonts/casella-master.eot?a0s2lg HTTP/1.1Accept: /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://www.casella.comAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/i/misc/career-icon2.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/1x1/public/2021-04/Helper.jpeg?itok=3n9A9yeL HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/1x1/public/2021-04/IMGL9024%20-%20worthingtonimages.com_RT.JPG?itok=d0O9NGGA HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/1x1/public/2021-04/Screen%20Shot%202020-09-24%20at%2012.03.31%20PM.png?itok=s5WPuOnd HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/1x1/public/2021-04/Screen%20Shot%202020-09-23%20at%2011.40.28%20AM.png?itok=qIqm1XJh HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x384/public/2021-01/BANNER-SustainabilityReport20-1900x960.jpg?h=7a8a8cdf&itok=X4pFSupk HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x384/public/2018-03/BANNER-RecycleRight-1900x960.jpg?h=7a8a8cdf&itok=OVikH09Q HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x384/public/2018-06/BANNER-Drivers%26Mechanics-1900x960.png?h=7a8a8cdf&itok=pdz2vuKB HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x384/public/2016-12/JohnDoug-Truck_0.jpg?h=52a61b8e&itok=Q7rj68nk HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x384/public/2017-02/BANNER-ZS-2-1900x960.jpg?h=7a8a8cdf&itok=fdBWRZI0 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x384/public/2016-11/BANNER-CurbsidePickup-1900x960.jpg?h=7a8a8cdf&itok=9P7rGhj3 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/fonts/Gotham-Black.woff HTTP/1.1Accept: /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://www.casella.comAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1
Source: global traffic	HTTP traffic detected: GET /en_US/all.js HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: connect.facebook.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/fonts/Gotham-Bold.woff HTTP/1.1Accept: /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://www.casella.comAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/960x768/public/2021-01/BANNER-SustainabilityReport20-1900x960.jpg?h=7a8a8cdf&itok=euAXjE8f HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/960x768/public/2018-06/BANNER-Drivers%26Mechanics-1900x960.png?h=7a8a8cdf&itok=743q4U-D HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/960x768/public/2018-03/BANNER-RecycleRight-1900x960.jpg?h=7a8a8cdf&itok=dWTnB6Wc HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/960x768/public/2016-12/JohnDoug-Truck_0.jpg?h=52a61b8e&itok=S183Gchh HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/960x768/public/2017-02/BANNER-ZS-2-1900x960.jpg?h=7a8a8cdf&itok=anxbZg8d HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/960x768/public/2016-11/BANNER-CurbsidePickup-1900x960.jpg?h=7a8a8cdf&itok=Q1KFV8e9 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/960x768/public/2017-02/BANNER-Rolloff-2-1900x960.jpg?h=7a8a8cdf&itok=lPWcbdh1 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/960x768/public/2019-01/BANNER-Winter-1900x960.jpg?h=7a8a8cdf&itok=dQyQv3EG HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/plugins/royalslider/skins/preloaders/preloader-white.gif HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/plugins/royalslider/skins/universal/rs-universal.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/1x1/public/2021-04/PHOTO-LisaM.jpg?itok=dH0221re HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/i/favicons/favicon-32x32.png HTTP/1.1Accept: /Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1
Source: global traffic	HTTP traffic detected: GET /css/player/embed.css HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps.twinesocial.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=none HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps.twinesocial.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /js/player/pusher.min.js HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /js-min/files/player%252Fbugsnag.js+player%252Fjquery-1.11.1.min.js+player%252Fselect2.min.js+player%252Fjquery-easing-1.3.js+player%252Fjquery.timeago.js+player%252Fbootstrap-3.1.1.min.js+player%252Fisotope.pkgd.min.js+player%252Fjquery.lazy.min.js+player%252FjMinEmoji-SVG.min.js+player%252Ftheme-base.js+player%252Ftheme-base-utility.js+player%252Ftheme-base-toolbar.js+player%252Ftheme-base-fx.js+player%252Ftheme-base-manage.js+player%252FisInViewport.min.js+player%252FAnimOnScroll.js+player%252Fmodernizr.custom.js+player%252Fhandlebars.min.js+player%252Ftheme%252Fclassic/v/2.21/t/1612366471.js HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /css-min/files/player%252Ftheme-font%252Fopen-sans+player%252Fselect2.css+player%252Fselect2-bootstrap.css+player%252Ftw-fonts.css+player%252Fbootstrap-3.1.1.min.css+player%252Ffont-awesome.min.css+player%252Ftheme-layout%252Fbase.css+player%252Fembed.css+player%252Ftheme-modal%252Fbase.css+player%252Ftheme-layout%252Fclassic+player%252Ftheme-color%252Fwhite/v/2.21/t/1612366471.css HTTP/1.1Accept: text/css, /Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /player/d/GetMedia?appBaseUrl=casella&offset=0&photosOnly=false&pagesize=20&embedded=true&ref=&ds=WebSDK&eh=http%3A%2F%2Fwww.casella.com%2F&token=MjI1MjAxOTA5NzM2 HTTP/1.1Accept: /X-Requested-With: XMLHttpRequestReferer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: apps.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625
Source: global traffic	HTTP traffic detected: GET /app/7686f91ffa51daedac98?protocol=7&client=js&version=2.2.4&flash=false HTTP/1.1Origin: http://apps.twinesocial.comSec-WebSocket-Key: +wPf6g8jD9POgHpayUs0IA==Connection: UpgradeUpgrade: websocketSec-WebSocket-Version: 13User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: ws.pusherapp.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /css/webfonts/fa-brands-400.eot? HTTP/1.1Accept: /Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://apps.twinesocial.comAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625
Source: global traffic	HTTP traffic detected: GET /css/webfonts/fa-light-300.eot? HTTP/1.1Accept: /Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://apps.twinesocial.comAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625
Source: global traffic	HTTP traffic detected: GET /css/webfonts/fa-regular-400.eot? HTTP/1.1Accept: /Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://apps.twinesocial.comAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625
Source: global traffic	HTTP traffic detected: GET /css/webfonts/fa-solid-900.eot? HTTP/1.1Accept: /Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: http://apps.twinesocial.comAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625
Source: global traffic	HTTP traffic detected: GET /player/casella?getPostTemplate=true&theme-layoutclassic&theme-color=white&theme-font=open-sans&eh=http%3A%2F%2Fwww.casella.com%2F&modal-style=&format=embed HTTP/1.1Accept: /X-Requested-With: XMLHttpRequestReferer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: apps.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/emoji/350.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/emoji/111.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/emoji/475.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/emoji/66.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/emoji/67.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/emoji/65.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/emoji/64.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/emoji/457.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/emoji/575.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/emoji/675.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/emoji/361.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/emoji/747.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /timeline/v2/jsonp/1?session=MTg1MjQ1MTU2&bundle=MQ%3D%3D&key=NzY4NmY5MWZmYTUxZGFlZGFjOTg%3D&lib=anM%3D&version=Mi4yLjQ%3D&features=WyJ3cyIsImZsYXNoIl0%3D&timeline=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%3D%3D HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: stats.pusher.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /images/emoji/288.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/emoji/63.svg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps-cdn.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/280x187/public/2021-04/Helper.jpeg?h=c775bc71&itok=yJ73e6-L HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/280x187/public/2021-04/PHOTO-LisaM.jpg?h=2992ba0a&itok=WlhPwy-4 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/280x187/public/2021-04/IMGL9024%20-%20worthingtonimages.com_RT.JPG?h=f2fcf546&itok=F_3T84nk HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/768x614/public/2021-01/BANNER-SustainabilityReport20-1900x960.jpg?h=7a8a8cdf&itok=Ia_fF50X HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/280x187/public/2021-04/Screen%20Shot%202020-09-24%20at%2012.03.31%20PM.png?h=b6a95e15&itok=biC4NExs HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/280x187/public/2021-04/Screen%20Shot%202020-09-23%20at%2011.40.28%20AM.png?h=87ca5f37&itok=e674vuHm HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/768x614/public/2018-03/BANNER-RecycleRight-1900x960.jpg?h=7a8a8cdf&itok=2nGxqiL6 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/768x614/public/2019-01/BANNER-Winter-1900x960.jpg?h=7a8a8cdf&itok=cUlTnXbU HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /core/misc/favicon.ico HTTP/1.1User-Agent: AutoItHost: www.casella.comCookie: __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1; _uetsid=80821530ad1111eba948d593a59477c6; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _ga=GA1.2.1720354987.1620157622; _uetvid=8082a930ad1111ebb66d99a995277b1f
Source: global traffic	HTTP traffic detected: GET /faq HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/css/custom/internal.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/faqAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/css/custom/faq.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/faqAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/js/custom/internal.js?v=1.x HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/faqAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/js/custom/faq.js?v=1.x HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/faqAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A1%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A1%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A2%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A2%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A2
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x384/public/2021-01/BANNER-SustainabilityReport20-1900x960.jpg?h=7a8a8cdf&itok=X4pFSupk HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comRange: bytes=47711-If-Range: Thu, 14 Jan 2021 15:54:17 GMTConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A2%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A2%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A2
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x384/public/2018-03/BANNER-RecycleRight-1900x960.jpg?h=7a8a8cdf&itok=OVikH09Q HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comRange: bytes=42359-If-Range: Fri, 13 Jul 2018 20:15:39 GMTConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A2%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A2%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A2
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x384/public/2018-06/BANNER-Drivers%26Mechanics-1900x960.png?h=7a8a8cdf&itok=pdz2vuKB HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comRange: bytes=28980-If-Range: Thu, 14 Jun 2018 20:39:38 GMTConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A2%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A2%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A2
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x384/public/2016-12/JohnDoug-Truck_0.jpg?h=52a61b8e&itok=Q7rj68nk HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comRange: bytes=77147-If-Range: Wed, 28 Dec 2016 19:54:17 GMTConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A2%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A2%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A2
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x384/public/2017-02/BANNER-Rolloff-2-1900x960.jpg?h=7a8a8cdf&itok=iPSDTzER HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A2%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A2%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A2
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x384/public/2017-02/BANNER-ZS-2-1900x960.jpg?h=7a8a8cdf&itok=fdBWRZI0 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comRange: bytes=74471-If-Range: Thu, 02 Feb 2017 20:30:56 GMTConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A2%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A2%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A2
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x384/public/2019-01/BANNER-Winter-1900x960.jpg?h=7a8a8cdf&itok=1Kc3FmYN HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A2%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A2%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A2
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/768x614/public/2018-06/BANNER-Drivers%26Mechanics-1900x960.png?h=7a8a8cdf&itok=qZ1_IRyE HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A2%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A2%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A2
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/768x614/public/2016-12/JohnDoug-Truck_0.jpg?h=52a61b8e&itok=oBGH749l HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A2%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A2%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A2
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/768x614/public/2017-02/BANNER-ZS-2-1900x960.jpg?h=7a8a8cdf&itok=hCHIZwyg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A2%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A2%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A2
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/768x614/public/2016-11/BANNER-CurbsidePickup-1900x960.jpg?h=7a8a8cdf&itok=LPjZiPW9 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A2%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A2%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A2
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/768x614/public/2017-02/BANNER-Rolloff-2-1900x960.jpg?h=7a8a8cdf&itok=Qy_47eA6 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A2%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A2%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A2
Source: global traffic	HTTP traffic detected: GET /casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=none HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Referer: http://www.casella.com/Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: apps.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /player/d/GetMedia?appBaseUrl=casella&offset=0&photosOnly=false&pagesize=20&embedded=true&ref=&ds=WebSDK&eh=http%3A%2F%2Fwww.casella.com%2F&token=MjI1MjAxOTE2NTQ3 HTTP/1.1Accept: /X-Requested-With: XMLHttpRequestReferer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: apps.twinesocial.comConnection: Keep-AliveCookie: _ga=GA1.2.848002786.1620157625; _gid=GA1.2.1037464698.1620157625; _gat=1
Source: global traffic	HTTP traffic detected: GET /app/7686f91ffa51daedac98?protocol=7&client=js&version=2.2.4&flash=false HTTP/1.1Origin: http://apps.twinesocial.comSec-WebSocket-Key: O/5gWsZ4mFkdYbMQz4CL/Q==Connection: UpgradeUpgrade: websocketSec-WebSocket-Version: 13User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoHost: ws.pusherapp.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /timeline/v2/jsonp/1?session=ODQwNTk1ODM3&bundle=MQ%3D%3D&key=NzY4NmY5MWZmYTUxZGFlZGFjOTg%3D&lib=anM%3D&version=Mi4yLjQ%3D&features=WyJ3cyIsImZsYXNoIl0%3D&timeline=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 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%3A%2F%2Fwww.casella.com%2F&ref=&ift=noneAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: stats.pusher.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /your-home HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A3%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A3%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x216/public/2016-12/IMG_8967%20-%20worthingtonimages.com_RT.jpg?h=6f8e8448&itok=X-OHaiUU HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/your-homeAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A3%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A3%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/1400x630/public/2016-12/IMG_8967%20-%20worthingtonimages.com_RT.jpg?h=6f8e8448&itok=uGpbTLRW HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/your-homeAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A3%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A3%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/plugins/royalslider/skins/default/rs-default.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/your-homeAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A3%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A3%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3
Source: global traffic	HTTP traffic detected: GET /your-business HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A4%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A4%7C644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/max_400/public/2016-11/promo-demo.jpg?itok=VwfrL5Z7 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/your-businessAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A4%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A4%7C644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x216/public/2016-12/Truck-business-1.jpg?h=a7f9be62&itok=Wd6YM-Kk HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/your-businessAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A4%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A4%7C644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/1400x630/public/2016-12/Truck-business-1.jpg?h=a7f9be62&itok=BWt-k-vt HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/your-businessAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A4%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A4%7C644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /your-business/agriculturelandscaping HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A5%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A5%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7CPGEVDZGYGBG7FOCQQNWLLJ%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/css/custom/organics.css?qpcosx HTTP/1.1Accept: text/css, /Referer: http://www.casella.com/your-business/agriculturelandscapingAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A5%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A5%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7CPGEVDZGYGBG7FOCQQNWLLJ%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x216/public/2016-12/Trailer%20dump_1.jpg?h=fab5421a&itok=qmuYXibG HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/your-business/agriculturelandscapingAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A5%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A5%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7CPGEVDZGYGBG7FOCQQNWLLJ%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/2016-11/fullWidthPromo2.jpg HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/your-business/agriculturelandscapingAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A5%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A5%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7CPGEVDZGYGBG7FOCQQNWLLJ%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/plugins/sticky-kit/jquery.sticky-kit.js?v=1.x HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/your-business/agriculturelandscapingAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A5%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A5%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7CPGEVDZGYGBG7FOCQQNWLLJ%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/js/custom/organics-main.js?v=1.x HTTP/1.1Accept: application/javascript, /;q=0.8Referer: http://www.casella.com/your-business/agriculturelandscapingAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A5%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A5%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7CPGEVDZGYGBG7FOCQQNWLLJ%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /themes/custom/casella/i/patterns/blueTrans.png HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/your-business/agriculturelandscapingAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A5%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A5%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7CPGEVDZGYGBG7FOCQQNWLLJ%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/1400x630/public/2016-12/Trailer%20dump_1.jpg?h=fab5421a&itok=NQMCUGPF HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/your-business/agriculturelandscapingAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A5%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A5%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7CPGEVDZGYGBG7FOCQQNWLLJ%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /your-business/chains-multi-site-retailers HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=PGEVDZGYGBG7FOCQQNWLLJ%3A20210503%3A2%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A6%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A6%7C644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/480x216/public/2016-11/your-business_multisite-retailers_shopping-cart.jpg?h=10d202d3&itok=Ww4xYlPj HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/your-business/chains-multi-site-retailersAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=PGEVDZGYGBG7FOCQQNWLLJ%3A20210503%3A2%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A6%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A6%7C644R46JRQFDBFITQ5UFEBZ%3A20210503%3A1Data Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/1400x630/public/2016-11/your-business_multisite-retailers_shopping-cart.jpg?h=10d202d3&itok=yvWnvdT5 HTTP/1.1Accept: image/png, image/svg+xml, image/jxr, image/;q=0.8, /*;q=0.5Referer: http://www.casella.com/your-business/chains-multi-site-retailersAccept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.casella.comConnection: Keep-AliveCookie: _ga=GA1.2.1720354987.1620157622; _gid=GA1.2.1105888955.1620157622; _gat_UA-5572590-5=1; AMCV_98CF678254E93B1B0A4C98A5%40AdobeOrg=359503849%7CMCIDTS%7C18752%7CMCMID%7C81930410984941889612400480780969304533%7CMCAAMLH-1620762446%7C6%7CMCAAMB-1620762446%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1620164846s%7CNONE%7CMCSYNCSOP%7C411-18759%7CvVersion%7C5.0.1; AMCVS_98CF678254E93B1B0A4C98A5%40AdobeOrg=1; _uetsid=80821530ad1111eba948d593a59477c6; _uetvid=8082a930ad1111ebb66d99a995277b1f; rl_visitor_history=95fa6a68-9b03-4624-988d-a781d51e39b1; sifi_user_id=undefined; __adroll_fpc=43fdde5aa9ff127a01bbb10bae01a719-1620157624991; __ar_v4=PGEVDZGYGBG7FOCQQNWLLJ%3A20210503%3A2%7C36KJ47TCRRBTBCG2ZRAH6N%3A20210503%3A3%7C44LNCGAYPJDXFK7VEUPB5B%3A20210503%3A6%7C5GUGQOHJCNCCRMXAOQX6O6%3A20210503%3A6%7C644R46JRQFDBFITQ5UFEBZ%3A20210503%3AData Raw: Data Ascii:

Source: LPC26D7B.htm.3.dr	String found in binary or memory: <li><a href=" https://www.facebook.com/ZeroSort " title=""><span class="fa equals www.facebook.com (Facebook)
Source: LPC26D7B.htm.3.dr	String found in binary or memory: <li><a href=" https://www.linkedin.com/company/casella-waste-systems " title=""><span class="fa equals www.linkedin.com (Linkedin)
Source: LPC26D7B.htm.3.dr	String found in binary or memory: <li><a href=" https://www.youtube.com/user/resourcecasella " title=""><span class="fa equals www.youtube.com (Youtube)
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://www.facebook.com/CasellaWaste equals www.facebook.com (Facebook)
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://www.linkedin.com/company/casella-waste-systems equals www.linkedin.com (Linkedin)
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://www.youtube.com/c/CasellaWasteSystems equals www.youtube.com (Youtube)
Source: 2330210673747845[1].js.3.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsGetTier");e.exports=function(b,c){c=a(c);c=c==null?"www.facebook.com":"www."+c+".facebook.com";return"https://"+c+"/signals/iwl.js?pixel_id="+b}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.close()};e.src=i(c,g.ENDPOINT);b.body&&b.body.appendChild(e)}var o=!1,p=function(a){return!!(e&&e.pixelsByID&&Object.prototype.hasOwnProperty.call(e.pixelsByID,a))};function q(){if(o)return;var b=n.getItem(m);if(!b)return;b=JSON.parse(b);var c=b.pixelID,d=b.graphToken,e=b.sessionStartTime;o=!0;h(c,function(){var b=p(c)?c:null;a.FacebookIWL.init(b,d,e)})}function r(b){if(o)return;h(b,func

Source: unknown

DNS traffic detected: queries for: www.casella.com

Source: roundtrip[1].js.3.dr, agriculturelandscaping[1].htm.3.dr	String found in binary or memory: http://a.adroll.com
Source: ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: http://apps.twinesocial.cll
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: http://apps.twinesocial.com/casella?layout=251053&showLoadMore=yes&autoload=no&format=embed&eh=http%
Source: LPC26D7B.htm.3.dr	String found in binary or memory: http://casellawastesystems.gcs-web.com/
Source: LPC26D7B.htm.3.dr	String found in binary or memory: http://feeds.feedburner.com/casella/MwAD
Source: 1612366471[1].css.3.dr	String found in binary or memory: http://getbootstrap.com)
Source: jquery.easing.1.3[1].js.3.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: agriculturelandscaping[1].htm.3.dr, LPC26D7B.htm.3.dr	String found in binary or memory: http://ir.casella.com
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: http://ir.casella.com/
Source: pusher.min[1].js.3.dr	String found in binary or memory: http://js.pusher.com/
Source: 55F3ZRAZ.htm.3.dr	String found in binary or memory: http://local.casella.com/Dumpster-Rental
Source: 55F3ZRAZ.htm.3.dr	String found in binary or memory: http://local.casella.com/Garbage-Pickup
Source: e7245dc9f172f74952d866e[1].js0.3.dr	String found in binary or memory: http://localiq.com/tc
Source: clearfix.module[1].css0.3.dr	String found in binary or memory: http://nicolasgallagher.com/micro-clearfix-hack
Source: pusher.min[1].js.3.dr	String found in binary or memory: http://pusher.com/
Source: e7245dc9f172f74952d866e[1].js0.3.dr	String found in binary or memory: http://rtsys.rtrk.co.nz/w3c/proxy_privacy_policy.html?path=/w3c
Source: e7245dc9f172f74952d866e[1].js0.3.dr	String found in binary or memory: http://rtsys.rtrk.com.au/w3c/proxy_privacy_policy.html?path=/w3c
Source: e7245dc9f172f74952d866e[1].js0.3.dr	String found in binary or memory: http://rtsys.rtrk.com/w3c/proxy_privacy_policy.html?path=/w3c
Source: embed[1].js.3.dr	String found in binary or memory: http://stackoverflow.com/questions/19491336/get-url-parameter-jquery
Source: custom[2].css.3.dr	String found in binary or memory: http://www.adworkshop.com
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr, agriculturelandscaping[1].htm.3.dr	String found in binary or memory: http://www.casella.com
Source: 55F3ZRAZ.htm.3.dr, casella[1].htm.3.dr	String found in binary or memory: http://www.casella.com/
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: http://www.casella.com/#main-content
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.casella.com/#menu
Source: ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: http://www.casella.com/#menucom/
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.casella.com/(
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.casella.com/P
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.casella.com/Root
Source: 55F3ZRAZ.htm.3.dr	String found in binary or memory: http://www.casella.com/casella
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.casella.com/faq
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.casella.com/faq.Customer
Source: ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: http://www.casella.com/faqasella/default.asp
Source: default[1].htm.3.dr	String found in binary or memory: http://www.casella.com/form/156
Source: default[1].htm.3.dr	String found in binary or memory: http://www.casella.com/form/318
Source: ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: http://www.casella.com/icims.com/
Source: default[1].htm.3.dr	String found in binary or memory: http://www.casella.com/locations/request/service/
Source: default[1].htm.3.dr	String found in binary or memory: http://www.casella.com/siteproblem.asp
Source: ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: http://www.casella.com/themes/custom/casella/i/favicons/favicon-32x32.png
Source: imagestore.dat.3.dr	String found in binary or memory: http://www.casella.com/themes/custom/casella/i/favicons/favicon-32x32.png-
Source: your-business[1].htm.3.dr	String found in binary or memory: http://www.casella.com/your-business
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.casella.com/your-business.Your
Source: agriculturelandscaping[1].htm.3.dr, ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: http://www.casella.com/your-business/agriculturelandscaping
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.casella.com/your-business/agriculturelandscapingBAgriculture/Landscaping
Source: chains-multi-site-retailers[1].htm.3.dr, ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: http://www.casella.com/your-business/chains-multi-site-retailers
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.casella.com/your-business/chains-multi-site-retailersNChains
Source: ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: http://www.casella.com/your-businessj
Source: your-home[1].htm.3.dr	String found in binary or memory: http://www.casella.com/your-home
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: http://www.casella.com/your-home&Your
Source: ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: http://www.casella.com/your-homeb
Source: e7245dc9f172f74952d866e[1].js0.3.dr	String found in binary or memory: http://www.newsquest.co.uk/terms-conditions/marketing-services/
Source: Gotham-Bold[1].eot.3.dr	String found in binary or memory: http://www.typography.com
Source: Gotham-Bold[1].eot.3.dr	String found in binary or memory: http://www.typography.com/support/eula.html
Source: Gotham-Bold[1].eot.3.dr	String found in binary or memory: http://www.typography.com/support/eula.html.
Source: Gotham-Bold[1].eot.3.dr, Gotham-Black[1].eot0.3.dr	String found in binary or memory: http://www.typography.com/support/eula.html.A
Source: Gotham-Bold[1].eot.3.dr, Gotham-Black[1].eot0.3.dr	String found in binary or memory: http://www.typography.com/support/eula.html.http://www.typography.com/support/eula.htmlhttp://www.ty
Source: Gotham-Bold[1].eot.3.dr, Gotham-Black[1].eot0.3.dr	String found in binary or memory: http://www.typography.comCopyright
Source: Gotham-Bold[1].eot.3.dr, Gotham-Black[1].eot0.3.dr	String found in binary or memory: http://www.typography.comGotham
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: https://61870c77-2e72-45dc-9f17-2f74952d866e.rlets.com/static/storage.html
Source: gtm[1].js.3.dr	String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: gtm[1].js.3.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: loader[1].js.3.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/%
Source: analytics[1].js.3.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://api.nasdaqomx.wallst.com/api/chart?display=mountain&symbol=CWST.OQ-cwst&scale=linear&duratio
Source: EX0b560b8898cb4385897cb33bd1f22cf1-libraryCode_source.min[1].js.3.dr	String found in binary or memory: https://assets.adobedtm.com/898335afd880/c52ee8aa1e90/d30aef398190/EX0b560b8898cb4385897cb33bd1f22cf
Source: 55F3ZRAZ.htm.3.dr	String found in binary or memory: https://autoprefixer.github.io
Source: f[1].txt.3.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://careers-casella.icims.com
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr, agriculturelandscaping[1].htm.3.dr, 55F3ZRAZ.htm.3.dr, ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: https://careers-casella.icims.com/
Source: ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: https://careers-casella.icims.com/efault.asp
Source: ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: https://careers-casella.icims.com/s/g/files/knoqqb53536/files/favicon-32x32.png
Source: gtm[1].js.3.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: embed[1].js.3.dr	String found in binary or memory: https://code.jquery.com/jquery/
Source: casella[1].htm.3.dr	String found in binary or memory: https://connect.facebook.net/en_US/all.js#xfbml=1&status=1&version=v2.5
Source: roundtrip[1].js.3.dr	String found in binary or memory: https://d.adroll.com
Source: roundtrip[1].js.3.dr	String found in binary or memory: https://d.adroll.com/p
Source: roundtrip[1].js.3.dr	String found in binary or memory: https://d.adroll.mgr.consensu.org/consent/iabcheck/
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://edge.media-server.com/mmc/p/bgatt2tt
Source: fa-solid-900[1].eot.3.dr, 1612366471[1].css.3.dr	String found in binary or memory: https://fontawesome.com
Source: 1612366471[1].css.3.dr	String found in binary or memory: https://fontawesome.com/license
Source: fa-solid-900[1].eot.3.dr, fa-regular-400[1].eot.3.dr, fa-light-300[1].eot.3.dr	String found in binary or memory: https://fontawesome.comhttps://fontawesome.comFont
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/droidserif/v13/tDbI2oqRg1oM3QBjjcaDkOr9rAM.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/droidserif/v13/tDbK2oqRg1oM3QBjjcaDkOr4nAfcGA.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/droidserif/v13/tDbV2oqRg1oM3QBjjcaDkOJGiRD7Owc.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/droidserif/v13/tDbX2oqRg1oM3QBjjcaDkOr4lLz5CwOnTg.woff)
Source: css[1].css0.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhv.woff)
Source: css[1].css0.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0d.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v14/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDQ.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v14/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7j.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v14/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCds18I.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v14/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdo.woff)
Source: embed[1].js.3.dr	String found in binary or memory: https://github.com/MoonScript/jQuery-ajaxTransport-XDomainRequest
Source: picturefill.min[1].js0.3.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/blob/master/Authors.txt;
Source: 1612366471[1].css.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ir.casella.com
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ir.casella.com/
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://ir.casella.com/LOverview
Source: ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: https://ir.casella.com/aqasella/default.asphttp://www.casella.com/faq
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://ir.casella.com/corporate-governance
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://ir.casella.com/corporate-governance/board-of-directors
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://ir.casella.com/corporate-governance/committee-composition
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://ir.casella.com/corporate-governance/contact-the-board
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://ir.casella.com/corporate-governance/management
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://ir.casella.com/environment
Source: agriculturelandscaping[1].htm.3.dr, LPC26D7B.htm.3.dr	String found in binary or memory: https://ir.casella.com/esg-practices
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://ir.casella.com/events-and-presentations
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://ir.casella.com/node/5806
Source: agriculturelandscaping[1].htm.3.dr, LPC26D7B.htm.3.dr	String found in binary or memory: https://ir.casella.com/press-releases
Source: imagestore.dat.3.dr	String found in binary or memory: https://ir.casella.com/sites/g/files/knoqqb53536/files/favicon-32x32.png-
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://ir.casella.com/social
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://ir.casella.com/static-files/12fed032-30d5-4871-89b8-e289852a798b
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://ir.casella.com/static-files/f7cfcc84-793e-4879-8b14-cf5492447e3f
Source: pusher.min[1].js.3.dr	String found in binary or memory: https://js.pusher.com/
Source: loader[1].js.3.dr	String found in binary or memory: https://maps-api-ssl.google.com/maps?jsapiRedirect=true&file=googleapi
Source: loader[1].js.3.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?jsapiRedirect=true
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://ogp.me/ns#
Source: gtm[1].js.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: js[1].js.3.dr	String found in binary or memory: https://pixel.mathtag.com/misc/img?mm_bnc&bcdv=
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://pixel.mathtag.com/sync/iframe?mt_uuid=b1b55f46-7936-4001-9dfc-67a6a8fcc405&no_iframe=1&mt_ad
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr, js[2].js.3.dr	String found in binary or memory: https://pixel.mathtag.com/sync/iframe?mt_uuid=cc3a6091-a4b5-4a00-95ec-94d4d16e385b&no_iframe=1&mt_ad
Source: roundtrip[1].js.3.dr, agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://s.adroll.com
Source: roundtrip[1].js.3.dr	String found in binary or memory: https://s.adroll.com/j/exp/
Source: roundtrip[1].js.3.dr	String found in binary or memory: https://s.adroll.com/j/nrpa.js
Source: roundtrip[1].js.3.dr	String found in binary or memory: https://s.adroll.com/j/pre/
Source: roundtrip[1].js.3.dr	String found in binary or memory: https://s.dca0.com/sdk.v5.3.min.js?1609955697
Source: picturefill.min[1].js0.3.dr	String found in binary or memory: https://scottjehl.github.io/picturefill/
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://secure3.i-doxs
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://secure3.i-doxs.net/casella/default.asp
Source: ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: https://secure3.i-doxs.net/casella/default.aspT
Source: ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: https://secure3.i-doxs.net/casella/default.aspnt:
Source: ~DF6CBADDF41D1DC3B0.TMP.1.dr	String found in binary or memory: https://secure3.i-doxs.net/casella/default.aspx
Source: imagestore.dat.3.dr	String found in binary or memory: https://secure3.i-doxs.net/favicon.ico~
Source: casella[1].htm.3.dr	String found in binary or memory: https://static.twinesocial.com/images/favicon/apple-touch-icon.png
Source: casella[1].htm.3.dr	String found in binary or memory: https://static.twinesocial.com/images/favicon/favicon-16x16.png
Source: casella[1].htm.3.dr	String found in binary or memory: https://static.twinesocial.com/images/favicon/favicon-32x32.png
Source: casella[1].htm.3.dr	String found in binary or memory: https://static.twinesocial.com/images/favicon/safari-pinned-tab.svg
Source: casella[1].htm.3.dr	String found in binary or memory: https://static.twinesocial.com/images/favicon/site.webmanifest
Source: analytics[1].js.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://tag.simpli.fi/sifitag/da06ef10-8b00-0137-57d2-06659b33d47c
Source: f[1].txt.3.dr, analytics[1].js.3.dr	String found in binary or memory: https://tagassistant.google.com/
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://thenasdaqomxgroup.demdex.net/dest5.html?d_nsid=0
Source: {7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://thenasdaqomxgroup.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fir.casella.com
Source: casella[1].htm.3.dr	String found in binary or memory: https://twinesocial.com/
Source: casella[1].htm.3.dr	String found in binary or memory: https://twinesocial.com/casella
Source: casella[1].htm.3.dr	String found in binary or memory: https://twinesocial.com?newaccount-refer=casella&utm_source=twinehub
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://twitter.com/CasellaWaste
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://twitter.com/resourcecasella
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://wsw.com/webcast/gabellifunds4/cwst/2862340
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://wsw.com/webcast/oppenheimer11/cwst/2812446
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://www.casella.com
Source: 55F3ZRAZ.htm.3.dr, LPC26D7B.htm.3.dr	String found in binary or memory: https://www.casella.com/about-us/casella-sustainability
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://www.casella.com/available-careers
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://www.casella.com/beyond-bin?tab=Podcast#tabs
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://www.casella.com/beyond-bin?tab=Webinar#tabs
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://www.casella.com/beyondthebin?tab=Events#tabs
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://www.casella.com/contact-us
Source: 55F3ZRAZ.htm.3.dr	String found in binary or memory: https://www.casella.com/covid-19-update
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://www.casella.com/customer-care
Source: agriculturelandscaping[1].htm.3.dr, LPC26D7B.htm.3.dr	String found in binary or memory: https://www.casella.com/history
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://www.casella.com/multimedia-education
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://www.casella.com/news
Source: 55F3ZRAZ.htm.3.dr	String found in binary or memory: https://www.casella.com/our-commitment-service-during-challenging-weather-conditions
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://www.casella.com/privacy-statement
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://www.casella.com/services/casella-sustainability
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://www.casella.com/services/recycling/recycle-better
Source: 55F3ZRAZ.htm.3.dr	String found in binary or memory: https://www.casella.com/services/recycling/recycle-better?tab=Download_Free_Posters#tabs
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://www.casella.com/sitemap
Source: custom[1].js.3.dr	String found in binary or memory: https://www.casella.com/sites/default/files/pdfs/HR-Application-English-v11-FILL.pdf
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://www.drupal.org)
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://www.flickr.com/photos/resourcecasella
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://www.flickr.com/photos/resourcecasella
Source: analytics[1].js.3.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: analytics[1].js.3.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.3.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: gtm[1].js.3.dr	String found in binary or memory: https://www.google.com
Source: casella[1].htm.3.dr	String found in binary or memory: https://www.google.com/jsapi
Source: gtm[1].js.3.dr	String found in binary or memory: https://www.google.com/pagead/conversion_async.js
Source: gtm[1].js.3.dr, f[1].txt.3.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: agriculturelandscaping[1].htm.3.dr, LPC26D7B.htm.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-JSKKV
Source: loader[1].js.3.dr	String found in binary or memory: https://www.gstatic.cn/charts/%
Source: loader[1].js.3.dr	String found in binary or memory: https://www.gstatic.cn/charts/debug/%
Source: loader[1].js.3.dr	String found in binary or memory: https://www.gstatic.com/charts/%
Source: loader[1].js.3.dr	String found in binary or memory: https://www.gstatic.com/charts/debug/%
Source: jsapi[1].htm.3.dr	String found in binary or memory: https://www.gstatic.com/charts/loader.js
Source: loader[1].js.3.dr	String found in binary or memory: https://www.gstatic.com/inputtools/js/ita/inputtools_3.js
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://www.instagram.com/casellawaste/
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://www.linkedin.com/company/casella-waste-systems
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://www.linkedin.com/company/casella-waste-systems
Source: e7245dc9f172f74952d866e[1].js0.3.dr	String found in binary or memory: https://www.reachlocal.com/de/de/legal/hinweise-zu-den-werbepraktiken-von-reachlocal
Source: agriculturelandscaping[1].htm.3.dr	String found in binary or memory: https://www.youtube.com/c/CasellaWasteSystems
Source: LPC26D7B.htm.3.dr	String found in binary or memory: https://www.youtube.com/user/resourcecasella

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: unknown	HTTPS traffic detected: 169.50.137.179:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.50.137.179:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.162:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.162:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.88.192.45:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.88.192.45:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.2.69:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.2.69:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.215.226.121:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.215.226.121:443 -> 192.168.2.4:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.242.18:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.242.18:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.31.47:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.31.47:443 -> 192.168.2.4:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.75.237.118:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.75.237.118:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.57.10.248:443 -> 192.168.2.4:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.110:443 -> 192.168.2.4:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.110:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.57.10.248:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.73.36:443 -> 192.168.2.4:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.73.36:443 -> 192.168.2.4:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.159.8:443 -> 192.168.2.4:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.4:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.159.8:443 -> 192.168.2.4:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.228.48:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.228.48:443 -> 192.168.2.4:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.162:443 -> 192.168.2.4:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.15:443 -> 192.168.2.4:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.162:443 -> 192.168.2.4:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.15:443 -> 192.168.2.4:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.248.118.22:443 -> 192.168.2.4:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.248.118.22:443 -> 192.168.2.4:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.228.139.221:443 -> 192.168.2.4:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.228.139.221:443 -> 192.168.2.4:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.10:443 -> 192.168.2.4:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.10:443 -> 192.168.2.4:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.66.19:443 -> 192.168.2.4:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.66.19:443 -> 192.168.2.4:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.66.19:443 -> 192.168.2.4:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.66.19:443 -> 192.168.2.4:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.4:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.4:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.229.1:443 -> 192.168.2.4:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.229.1:443 -> 192.168.2.4:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.229.1:443 -> 192.168.2.4:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.229.1:443 -> 192.168.2.4:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.229.1:443 -> 192.168.2.4:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.229.1:443 -> 192.168.2.4:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.66.19:443 -> 192.168.2.4:49858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.66.19:443 -> 192.168.2.4:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.220.14:443 -> 192.168.2.4:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.220.14:443 -> 192.168.2.4:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.19.26:443 -> 192.168.2.4:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.19.26:443 -> 192.168.2.4:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.18.19:443 -> 192.168.2.4:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.18.19:443 -> 192.168.2.4:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.14.19:443 -> 192.168.2.4:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.14.19:443 -> 192.168.2.4:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.112.4.23:443 -> 192.168.2.4:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.112.4.23:443 -> 192.168.2.4:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.112.4.23:443 -> 192.168.2.4:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.112.4.23:443 -> 192.168.2.4:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.112.4.23:443 -> 192.168.2.4:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.112.4.23:443 -> 192.168.2.4:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.133.52:443 -> 192.168.2.4:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.133.52:443 -> 192.168.2.4:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.234.234.58:443 -> 192.168.2.4:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.234.234.58:443 -> 192.168.2.4:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.200.157.96:443 -> 192.168.2.4:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.200.157.96:443 -> 192.168.2.4:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.210.171.182:443 -> 192.168.2.4:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.210.171.182:443 -> 192.168.2.4:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 65.9.66.129:443 -> 192.168.2.4:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.50.137.179:443 -> 192.168.2.4:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.50.137.179:443 -> 192.168.2.4:49942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.64.218:443 -> 192.168.2.4:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.64.218:443 -> 192.168.2.4:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:49954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.162.133.149:443 -> 192.168.2.4:49957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.162.133.149:443 -> 192.168.2.4:49958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.227.248.159:443 -> 192.168.2.4:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.227.248.159:443 -> 192.168.2.4:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.243.60.138:443 -> 192.168.2.4:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.243.60.138:443 -> 192.168.2.4:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.86.139.89:443 -> 192.168.2.4:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.94.180.125:443 -> 192.168.2.4:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.94.180.125:443 -> 192.168.2.4:49969 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.86.139.89:443 -> 192.168.2.4:49967 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.13.182:443 -> 192.168.2.4:49974 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.13.182:443 -> 192.168.2.4:49973 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.197.81.144:443 -> 192.168.2.4:49975 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.197.81.144:443 -> 192.168.2.4:49976 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.254.47:443 -> 192.168.2.4:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.254.47:443 -> 192.168.2.4:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.252.166.236:443 -> 192.168.2.4:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.252.166.236:443 -> 192.168.2.4:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.246.207.243:443 -> 192.168.2.4:49981 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.246.207.243:443 -> 192.168.2.4:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.251.14.14:443 -> 192.168.2.4:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 96.46.186.57:443 -> 192.168.2.4:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 96.46.186.57:443 -> 192.168.2.4:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.251.14.14:443 -> 192.168.2.4:49959 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.89.7.199:443 -> 192.168.2.4:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.89.7.199:443 -> 192.168.2.4:49995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.176.232.241:443 -> 192.168.2.4:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.176.232.241:443 -> 192.168.2.4:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.194.226.253:443 -> 192.168.2.4:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.194.226.253:443 -> 192.168.2.4:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.81.208.30:443 -> 192.168.2.4:49989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.81.208.30:443 -> 192.168.2.4:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.108.245:443 -> 192.168.2.4:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.108.245:443 -> 192.168.2.4:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.58.206.142:443 -> 192.168.2.4:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.58.206.142:443 -> 192.168.2.4:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.241.59.199:443 -> 192.168.2.4:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.241.59.199:443 -> 192.168.2.4:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.209.93.152:443 -> 192.168.2.4:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.209.93.152:443 -> 192.168.2.4:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.123.96.39:443 -> 192.168.2.4:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.123.96.39:443 -> 192.168.2.4:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.243.60.138:443 -> 192.168.2.4:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.243.60.138:443 -> 192.168.2.4:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.202.112.127:443 -> 192.168.2.4:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.4:50048 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@3/364@88/63

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{7BEDC59C-AD11-11EB-90EB-ECF4BBEA1588}.dat

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF21DCDB1B8E2911F8.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5488 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5488 CREDAT:17410 /prefetch:2

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Windows\SysWOW64\Macromed\Flash\ss.cfg

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Source: BANNER-Drivers&Mechanics-1900x960[1].png0.3.dr

Binary or memory string: HGFs<

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	Security Software Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	File and Directory Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol3	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol4	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Ingress Tool Transfer2	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://www.casella.com/	3%	Virustotal		Browse
http://www.casella.com/	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
nydc1.outbrain.org	0%	Virustotal		Browse
bam.nr-data.net	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
https://ir.casella.com/LOverview	0%	Avira URL Cloud	safe
http://www.casella.com/core/themes/stable/css/system/components/details.module.css?qpcosx	0%	Avira URL Cloud	safe
https://www.casella.com/services/recycling/recycle-better?tab=Download_Free_Posters#tabs	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/i/favicons/favicon-32x32.png-	0%	Avira URL Cloud	safe
http://www.casella.com/core/misc/favicon.ico	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/css/custom/home.css?qpcosx	0%	Avira URL Cloud	safe
http://rtsys.rtrk.com.au/w3c/proxy_privacy_policy.html?path=/w3c	0%	Avira URL Cloud	safe
http://www.casella.com/sites/default/files/2016-11/fullWidthPromo2.jpg	0%	Avira URL Cloud	safe
http://www.casella.com/sites/default/files/styles/1400x630/public/2016-12/Trailer%20dump_1.jpg?h=fab5421a&itok=NQMCUGPF	0%	Avira URL Cloud	safe
https://fontawesome.comhttps://fontawesome.comFont	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/fonts/Gotham-Black.eot?	0%	Avira URL Cloud	safe
http://www.casella.com/sites/default/files/styles/480x384/public/2016-11/BANNER-CurbsidePickup-1900x960.jpg?h=7a8a8cdf&itok=9P7rGhj3	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/css/custom/developer-overrides.css?qpcosx	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/plugins/sticky-kit/jquery.sticky-kit.js?v=1.x	0%	Avira URL Cloud	safe
http://www.casella.com/core/themes/stable/css/system/components/ajax-progress.module.css?qpcosx	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/i/misc/customerCare-icon.png	0%	Avira URL Cloud	safe
http://www.casella.com/siteproblem.asp	0%	Avira URL Cloud	safe
http://www.casella.com/core/assets/vendor/picturefill/picturefill.min.js?v=3.0.3	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://www.casella.com/services/casella-sustainability	0%	Avira URL Cloud	safe
http://www.casella.com/sites/default/files/styles/280x187/public/2021-04/PHOTO-LisaM.jpg?h=2992ba0a&itok=WlhPwy-4	0%	Avira URL Cloud	safe
http://www.casella.com/core/assets/vendor/matchMedia/matchMedia.min.js?v=0.2.0	0%	Avira URL Cloud	safe
http://www.casella.com/P	0%	Avira URL Cloud	safe
https://ir.casella.com/press-releases	0%	Avira URL Cloud	safe
http://www.casella.com/core/themes/stable/css/system/components/item-list.module.css?qpcosx	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/css/custom/internal.css?qpcosx	0%	Avira URL Cloud	safe
http://www.casella.com/sites/default/files/styles/768x614/public/2017-02/BANNER-Rolloff-2-1900x960.jpg?h=7a8a8cdf&itok=Qy_47eA6	0%	Avira URL Cloud	safe
http://www.casella.com/core/themes/stable/css/system/components/fieldgroup.module.css?qpcosx	0%	Avira URL Cloud	safe
http://ws.pusherapp.com/app/7686f91ffa51daedac98?protocol=7&client=js&version=2.2.4&flash=false	0%	Avira URL Cloud	safe
http://www.casella.com/Root	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/css/lib/casella-master.css?qpcosx	0%	Avira URL Cloud	safe
http://www.casella.com/(	0%	Avira URL Cloud	safe
http://www.casella.com/sites/default/files/styles/480x216/public/2016-12/Trailer%20dump_1.jpg?h=fab5421a&itok=qmuYXibG	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/plugins/royalslider/skins/preloaders/preloader-white.gif	0%	Avira URL Cloud	safe
http://www.casella.com/modules/contrib/paragraphs/css/paragraphs.unpublished.css?qpcosx	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/css/custom/adw-menu.css?qpcosx	0%	Avira URL Cloud	safe
http://www.casella.com/core/themes/stable/css/system/components/position-container.module.css?qpcosx	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/plugins/royalslider/skins/universal/rs-universal.png	0%	Avira URL Cloud	safe
http://www.casella.com/core/themes/stable/css/system/components/align.module.css?qpcosx	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/plugins/font-awesome-v.4.6.3/css/font-awesome.min.css?qpcosx	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/i/misc/career-icon2.png	0%	Avira URL Cloud	safe
http://www.casella.com/sites/default/files/styles/480x384/public/2021-01/BANNER-SustainabilityReport20-1900x960.jpg?h=7a8a8cdf&itok=X4pFSupk	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/i/patterns/blueTrans.png	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/js/custom/faq.js?v=1.x	0%	Avira URL Cloud	safe
https://ir.casella.com/corporate-governance/contact-the-board	0%	Avira URL Cloud	safe
http://www.casella.com/sites/default/files/styles/1x1/public/2021-04/Screen%20Shot%202020-09-23%20at%2011.40.28%20AM.png?itok=qIqm1XJh	0%	Avira URL Cloud	safe
http://www.casella.com/sites/default/files/styles/960x768/public/2016-11/BANNER-CurbsidePickup-1900x960.jpg?h=7a8a8cdf&itok=Q1KFV8e9	0%	Avira URL Cloud	safe
http://www.casella.com/sites/default/files/styles/480x384/public/2018-03/BANNER-RecycleRight-1900x960.jpg?h=7a8a8cdf&itok=OVikH09Q	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/js/custom/google_analytics_event_tracking.js?v=1.x	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/i/misc/payBill-icon.png	0%	Avira URL Cloud	safe
http://www.casella.com/themes/custom/casella/js/custom/home.min.js?v=1.x	0%	Avira URL Cloud	safe
https://ir.casella.com/environment	0%	Avira URL Cloud	safe
http://www.casella.com/form/318	0%	Avira URL Cloud	safe
http://www.casella.com/your-businessj	0%	Avira URL Cloud	safe
https://www.casella.com/available-careers	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
scontent-frx5-1.xx.fbcdn.net	185.60.216.19	true	false		high
eu-u.openx.net	34.98.64.218	true	false		high
mt1-ws-1895636413.us-east-1.elb.amazonaws.com	3.208.175.180	true	false		high
dyrxq3369g3sr.cloudfront.net	65.9.66.12	true	false		high
scontent-mia3-2.xx.fbcdn.net	157.240.14.19	true	false		high
adserver-vpc-alb-2-1264451658.eu-west-1.elb.amazonaws.com	54.78.31.47	true	false		high
elb-aws-fr-clickdistrict-1651093077.eu-central-1.elb.amazonaws.com	3.123.96.39	true	false		high
61870c77-2e72-45dc-9f17-2f74952d866e.rlets.com	52.88.192.45	true	false		unknown
ih.adscale.de	18.197.81.144	true	false		high
mwzeom.zeotap.com	172.67.13.182	true	false		high
sync.crwdcntrl.net	54.194.226.253	true	false		high
cm.g.doubleclick.net	142.250.185.162	true	false		high
idaas-ext.cph.liveintent.com	54.81.208.30	true	false		high
rtb-csync-itx4.smartadserver.com	185.86.139.89	true	false		high
scontent-iad3-1.xx.fbcdn.net	31.13.66.19	true	false		high
idaas6.cph.liveintent.com	3.209.93.152	true	false		high
eu2-ice.360yield.com	52.58.206.142	true	false		high
nydc1.outbrain.org	64.202.112.127	true	false	0%, Virustotal, Browse	unknown
us-u.openx.net	35.244.159.8	true	false		high
stats.l.doubleclick.net	74.125.133.154	true	false		high
secure3.i-doxs.net	209.112.4.23	true	false		high
uip.semasio.net	77.243.60.138	true	false		high
ad.sxp.smartclip.net	34.252.166.236	true	false		high
bam.nr-data.net	162.247.242.18	true	false	0%, Virustotal, Browse	unknown
d3bi9sbave64gz.cloudfront.net	65.9.66.129	true	false		high
googleads.g.doubleclick.net	216.58.212.162	true	false		high
ams01.sync.search.spotxchange.com	185.94.180.125	true	false		high
ams-1-sync.go.sonobi.com	178.162.133.149	true	false		high
capture-api.reachlocalservices.com	99.86.2.69	true	false		unknown
envoy-public.liqadprdct-capture-production-us-east1.gke-eric-eyre-svc.gannettdigital.com	34.75.237.118	true	false		high
awseb-awseb-eghbt6mzdw45-44179265.us-east-1.elb.amazonaws.com	52.0.228.129	true	false		high
prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com	34.246.207.243	true	false		high
adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com	52.215.226.121	true	false		high
aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com	35.176.232.241	true	false		high
pixel-origin.mathtag.com	185.29.133.52	true	false		high
alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com	18.195.73.36	true	false		high
dualstack.engagement-bus-prod-713264365.us-east-1.elb.amazonaws.com	3.228.139.221	true	false		high
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	18.200.157.96	true	false		high
scontent-bos3-1.xx.fbcdn.net	157.240.220.14	true	false		high
ec2-18-233-7-102.compute-1.amazonaws.com	18.233.7.102	true	false		high
scontent.xx.fbcdn.net	31.13.92.14	true	false		high
idsync.rlcdn.com	35.244.174.68	true	false		high
i.simpli.fi	169.50.137.179	true	false		high
scontent-ort2-2.xx.fbcdn.net	157.240.18.19	true	false		high
scontent-iad3-2.xx.fbcdn.net	157.240.229.1	true	false		high
am-vip001.taboola.com	141.226.228.48	true	false		high
www.google.de	142.250.185.227	true	false		high
pixel.tapad.com	35.227.248.159	true	false		high
tag.simpli.fi	169.50.137.179	true	false		high
star.c10r.facebook.com	31.13.92.10	true	false		high
scontent-dfw5-1.xx.fbcdn.net	157.240.19.26	true	false		high
ssp.ads.betweendigital.com	96.46.186.57	true	false		high
prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud	52.57.10.248	true	false		unknown
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	52.28.108.245	true	false		high
match-243508202.us-west-2.elb.amazonaws.com	44.241.59.199	true	false		high
pug22000nf.pubmatic.com	185.64.189.110	true	false		high
api.nasdaqomx.wallst.com	209.234.234.58	true	false		high
www.casella.com	52.87.65.167	true	false		unknown
ib.anycast.adnxs.com	185.33.221.15	true	false		high
prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	18.156.0.31	true	false		unknown
naw.vap.lijit.com	63.251.14.14	true	false		high
load-euw1.exelator.com	54.78.254.47	true	false		high
edge.gycpi.b.yahoodns.net	87.248.118.22	true	false		unknown
apps.twinesocial.com	unknown	unknown	false		high
a.adroll.com	unknown	unknown	false		high
d.adroll.com	unknown	unknown	false		high
stats.pusher.com	unknown	unknown	false		high
id5-sync.com	unknown	unknown	false		unknown
sync.go.sonobi.com	unknown	unknown	false		high
ads.stickyadstv.com	unknown	unknown	false		unknown
cm.everesttech.net	unknown	unknown	false		high
cdn.rlets.com	unknown	unknown	false		unknown
thenasdaqomxgroup.demdex.net	unknown	unknown	false		high
stats.g.doubleclick.net	unknown	unknown	false		high
ir.casella.com	unknown	unknown	false		unknown
token.rubiconproject.com	unknown	unknown	false		high
ice.360yield.com	unknown	unknown	false		high
match.adsrvr.org	unknown	unknown	false		high
i6.liadm.com	unknown	unknown	false		high
assets.adobedtm.com	unknown	unknown	false		high
pixel.rubiconproject.com	unknown	unknown	false		high
ce.lijit.com	unknown	unknown	false		high
connect.facebook.net	unknown	unknown	false		high
simage2.pubmatic.com	unknown	unknown	false		high
apps-cdn.twinesocial.com	unknown	unknown	false		high
uipglob.semasio.net	unknown	unknown	false		high
c-11158-20201221-www-casella-com.i.icims.com	unknown	unknown	false		high
stags.bluekai.com	unknown	unknown	false		high
sync.mathtag.com	unknown	unknown	false		high
careers-casella.icims.com	unknown	unknown	false		high
pixel.mathtag.com	unknown	unknown	false		high
d.adroll.mgr.consensu.org	unknown	unknown	false		unknown
s.go-mpulse.net	unknown	unknown	false		unknown
ups.analytics.yahoo.com	unknown	unknown	false		high
ws.pusherapp.com	unknown	unknown	false		unknown
external-iad3-1.xx.fbcdn.net	unknown	unknown	false		high
d.agkn.com	unknown	unknown	false		high
ads.yahoo.com	unknown	unknown	false		high
rtb-csync.smartadserver.com	unknown	unknown	false		high
ads.betweendigital.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.casella.com/your-business/agriculturelandscaping	false		unknown
http://www.casella.com/core/themes/stable/css/system/components/details.module.css?qpcosx	false	Avira URL Cloud: safe	unknown
http://www.casella.com/core/misc/favicon.ico	false	Avira URL Cloud: safe	unknown
http://apps-cdn.twinesocial.com/images/emoji/66.svg	false		high
http://www.casella.com/themes/custom/casella/css/custom/home.css?qpcosx	false	Avira URL Cloud: safe	unknown
http://www.casella.com/sites/default/files/2016-11/fullWidthPromo2.jpg	false	Avira URL Cloud: safe	unknown
http://www.casella.com/sites/default/files/styles/1400x630/public/2016-12/Trailer%20dump_1.jpg?h=fab5421a&itok=NQMCUGPF	false	Avira URL Cloud: safe	unknown
http://www.casella.com/themes/custom/casella/fonts/Gotham-Black.eot?	false	Avira URL Cloud: safe	unknown
http://www.casella.com/sites/default/files/styles/480x384/public/2016-11/BANNER-CurbsidePickup-1900x960.jpg?h=7a8a8cdf&itok=9P7rGhj3	false	Avira URL Cloud: safe	unknown
http://www.casella.com/themes/custom/casella/css/custom/developer-overrides.css?qpcosx	false	Avira URL Cloud: safe	unknown
http://www.casella.com/themes/custom/casella/plugins/sticky-kit/jquery.sticky-kit.js?v=1.x	false	Avira URL Cloud: safe	unknown
http://www.casella.com/core/themes/stable/css/system/components/ajax-progress.module.css?qpcosx	false	Avira URL Cloud: safe	unknown
http://www.casella.com/your-business/agriculturelandscaping	false		unknown
http://www.casella.com/themes/custom/casella/i/misc/customerCare-icon.png	false	Avira URL Cloud: safe	unknown
http://www.casella.com/core/assets/vendor/picturefill/picturefill.min.js?v=3.0.3	false	Avira URL Cloud: safe	unknown
http://www.casella.com/your-business	false		unknown
http://www.casella.com/sites/default/files/styles/280x187/public/2021-04/PHOTO-LisaM.jpg?h=2992ba0a&itok=WlhPwy-4	false	Avira URL Cloud: safe	unknown
http://www.casella.com/core/assets/vendor/matchMedia/matchMedia.min.js?v=0.2.0	false	Avira URL Cloud: safe	unknown
http://www.casella.com/your-business	false		unknown
http://www.casella.com/core/themes/stable/css/system/components/item-list.module.css?qpcosx	false	Avira URL Cloud: safe	unknown
http://www.casella.com/themes/custom/casella/css/custom/internal.css?qpcosx	false	Avira URL Cloud: safe	unknown
http://apps.twinesocial.com/css/player/embed.css	false		high
http://apps-cdn.twinesocial.com/css/webfonts/fa-brands-400.eot?	false		high
http://www.casella.com/sites/default/files/styles/768x614/public/2017-02/BANNER-Rolloff-2-1900x960.jpg?h=7a8a8cdf&itok=Qy_47eA6	false	Avira URL Cloud: safe	unknown
http://www.casella.com/core/themes/stable/css/system/components/fieldgroup.module.css?qpcosx	false	Avira URL Cloud: safe	unknown
http://ws.pusherapp.com/app/7686f91ffa51daedac98?protocol=7&client=js&version=2.2.4&flash=false	false	Avira URL Cloud: safe	unknown
http://apps-cdn.twinesocial.com/css-min/files/player%252Ftheme-font%252Fopen-sans+player%252Fselect2.css+player%252Fselect2-bootstrap.css+player%252Ftw-fonts.css+player%252Fbootstrap-3.1.1.min.css+player%252Ffont-awesome.min.css+player%252Ftheme-layout%252Fbase.css+player%252Fembed.css+player%252Ftheme-modal%252Fbase.css+player%252Ftheme-layout%252Fclassic+player%252Ftheme-color%252Fwhite/v/2.21/t/1612366471.css	false		high
http://www.casella.com/themes/custom/casella/css/lib/casella-master.css?qpcosx	false	Avira URL Cloud: safe	unknown
http://www.casella.com/sites/default/files/styles/480x216/public/2016-12/Trailer%20dump_1.jpg?h=fab5421a&itok=qmuYXibG	false	Avira URL Cloud: safe	unknown
http://www.casella.com/themes/custom/casella/plugins/royalslider/skins/preloaders/preloader-white.gif	false	Avira URL Cloud: safe	unknown
http://www.casella.com/modules/contrib/paragraphs/css/paragraphs.unpublished.css?qpcosx	false	Avira URL Cloud: safe	unknown
http://www.casella.com/	false		unknown
http://www.casella.com/themes/custom/casella/css/custom/adw-menu.css?qpcosx	false	Avira URL Cloud: safe	unknown
http://apps-cdn.twinesocial.com/css/webfonts/fa-light-300.eot?	false		high
http://www.casella.com/core/themes/stable/css/system/components/position-container.module.css?qpcosx	false	Avira URL Cloud: safe	unknown
http://www.casella.com/themes/custom/casella/plugins/royalslider/skins/universal/rs-universal.png	false	Avira URL Cloud: safe	unknown
http://www.casella.com/core/themes/stable/css/system/components/align.module.css?qpcosx	false	Avira URL Cloud: safe	unknown
http://www.casella.com/themes/custom/casella/plugins/font-awesome-v.4.6.3/css/font-awesome.min.css?qpcosx	false	Avira URL Cloud: safe	unknown
http://www.casella.com/themes/custom/casella/i/misc/career-icon2.png	false	Avira URL Cloud: safe	unknown
http://www.casella.com/sites/default/files/styles/480x384/public/2021-01/BANNER-SustainabilityReport20-1900x960.jpg?h=7a8a8cdf&itok=X4pFSupk	false	Avira URL Cloud: safe	unknown
http://www.casella.com/themes/custom/casella/i/patterns/blueTrans.png	false	Avira URL Cloud: safe	unknown
http://www.casella.com/themes/custom/casella/js/custom/faq.js?v=1.x	false	Avira URL Cloud: safe	unknown
http://www.casella.com/	false		unknown
http://www.casella.com/sites/default/files/styles/1x1/public/2021-04/Screen%20Shot%202020-09-23%20at%2011.40.28%20AM.png?itok=qIqm1XJh	false	Avira URL Cloud: safe	unknown
http://www.casella.com/sites/default/files/styles/960x768/public/2016-11/BANNER-CurbsidePickup-1900x960.jpg?h=7a8a8cdf&itok=Q1KFV8e9	false	Avira URL Cloud: safe	unknown
https://secure3.i-doxs.net/casella/default.asp	false		high
http://www.casella.com/sites/default/files/styles/480x384/public/2018-03/BANNER-RecycleRight-1900x960.jpg?h=7a8a8cdf&itok=OVikH09Q	false	Avira URL Cloud: safe	unknown
http://apps-cdn.twinesocial.com/images/emoji/111.svg	false		high
http://www.casella.com/themes/custom/casella/js/custom/google_analytics_event_tracking.js?v=1.x	false	Avira URL Cloud: safe	unknown
http://stats.pusher.com/timeline/v2/jsonp/1?session=ODQwNTk1ODM3&bundle=MQ%3D%3D&key=NzY4NmY5MWZmYTUxZGFlZGFjOTg%3D&lib=anM%3D&version=Mi4yLjQ%3D&features=WyJ3cyIsImZsYXNoIl0%3D&timeline=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	false		high
https://ir.casella.com/	false		unknown
http://www.casella.com/themes/custom/casella/i/misc/payBill-icon.png	false	Avira URL Cloud: safe	unknown
http://www.casella.com/themes/custom/casella/js/custom/home.min.js?v=1.x	false	Avira URL Cloud: safe	unknown
http://www.casella.com/your-business/chains-multi-site-retailers	false		unknown
http://www.casella.com/#menu	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ir.casella.com/LOverview	{7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://ogp.me/ns#	LPC26D7B.htm.3.dr	false		high
https://www.casella.com/services/recycling/recycle-better?tab=Download_Free_Posters#tabs	55F3ZRAZ.htm.3.dr	false	Avira URL Cloud: safe	unknown
http://www.casella.com/themes/custom/casella/i/favicons/favicon-32x32.png-	imagestore.dat.3.dr	false	Avira URL Cloud: safe	unknown
http://casellawastesystems.gcs-web.com/	LPC26D7B.htm.3.dr	false		high
https://connect.facebook.net/en_US/all.js#xfbml=1&status=1&version=v2.5	casella[1].htm.3.dr	false		high
https://careers-casella.icims.com/s/g/files/knoqqb53536/files/favicon-32x32.png	~DF6CBADDF41D1DC3B0.TMP.1.dr	false		high
http://rtsys.rtrk.com.au/w3c/proxy_privacy_policy.html?path=/w3c	e7245dc9f172f74952d866e[1].js0.3.dr	false	Avira URL Cloud: safe	unknown
http://js.pusher.com/	pusher.min[1].js.3.dr	false		high
https://fontawesome.comhttps://fontawesome.comFont	fa-solid-900[1].eot.3.dr, fa-regular-400[1].eot.3.dr, fa-light-300[1].eot.3.dr	false	Avira URL Cloud: safe	unknown
https://s.adroll.com	roundtrip[1].js.3.dr, agriculturelandscaping[1].htm.3.dr	false		high
http://www.casella.com/#menu	{7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false		unknown
https://fontawesome.com	fa-solid-900[1].eot.3.dr, 1612366471[1].css.3.dr	false		high
https://github.com/scottjehl/picturefill/blob/master/Authors.txt;	picturefill.min[1].js0.3.dr	false		high
http://www.casella.com/siteproblem.asp	default[1].htm.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/MoonScript/jQuery-ajaxTransport-XDomainRequest	embed[1].js.3.dr	false		high
http://getbootstrap.com)	1612366471[1].css.3.dr	false	Avira URL Cloud: safe	low
https://www.casella.com/services/casella-sustainability	LPC26D7B.htm.3.dr	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/company/casella-waste-systems	agriculturelandscaping[1].htm.3.dr	false		high
https://stats.g.doubleclick.net/j/collect	analytics[1].js.3.dr	false		high
http://www.casella.com/P	{7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://static.twinesocial.com/images/favicon/favicon-16x16.png	casella[1].htm.3.dr	false		high
http://www.typography.com/support/eula.html	Gotham-Bold[1].eot.3.dr	false		high
https://ir.casella.com/press-releases	agriculturelandscaping[1].htm.3.dr, LPC26D7B.htm.3.dr	false	Avira URL Cloud: safe	unknown
http://rtsys.rtrk.com/w3c/proxy_privacy_policy.html?path=/w3c	e7245dc9f172f74952d866e[1].js0.3.dr	false		high
https://static.twinesocial.com/images/favicon/apple-touch-icon.png	casella[1].htm.3.dr	false		high
https://careers-casella.icims.com/	{7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr, agriculturelandscaping[1].htm.3.dr, 55F3ZRAZ.htm.3.dr, ~DF6CBADDF41D1DC3B0.TMP.1.dr	false		high
https://secure3.i-doxs.net/casella/default.asp	LPC26D7B.htm.3.dr	false		high
http://www.casella.com/Root	{7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false	Avira URL Cloud: safe	unknown
http://feeds.feedburner.com/casella/MwAD	LPC26D7B.htm.3.dr	false		high
http://www.casella.com/(	{7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false	Avira URL Cloud: safe	unknown
http://www.typography.com/support/eula.html.A	Gotham-Bold[1].eot.3.dr, Gotham-Black[1].eot0.3.dr	false		high
https://www.youtube.com/c/CasellaWasteSystems	agriculturelandscaping[1].htm.3.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	1612366471[1].css.3.dr	false		high
https://ir.casella.com/corporate-governance/contact-the-board	LPC26D7B.htm.3.dr	false	Avira URL Cloud: safe	unknown
https://tag.simpli.fi/sifitag/da06ef10-8b00-0137-57d2-06659b33d47c	agriculturelandscaping[1].htm.3.dr	false		high
https://www.instagram.com/casellawaste/	agriculturelandscaping[1].htm.3.dr	false		high
https://ir.casella.com/environment	LPC26D7B.htm.3.dr	false	Avira URL Cloud: safe	unknown
http://www.casella.com/#main-content	{7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DF6CBADDF41D1DC3B0.TMP.1.dr	false		unknown
https://www.linkedin.com/company/casella-waste-systems	LPC26D7B.htm.3.dr	false		high
http://www.casella.com/form/318	default[1].htm.3.dr	false	Avira URL Cloud: safe	unknown
https://api.nasdaqomx.wallst.com/api/chart?display=mountain&symbol=CWST.OQ-cwst&scale=linear&duratio	LPC26D7B.htm.3.dr	false		high
http://www.casella.com/your-businessj	~DF6CBADDF41D1DC3B0.TMP.1.dr	false	Avira URL Cloud: safe	unknown
https://ir.casella.com/	{7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat.1.dr	false		unknown
https://www.casella.com/available-careers	LPC26D7B.htm.3.dr	false	Avira URL Cloud: safe	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
34.246.207.243	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
172.67.13.182	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
54.78.31.47	adserver-vpc-alb-2-1264451658.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.197.81.144	ih.adscale.de	United States	16509	AMAZON-02US	false
157.240.220.14	scontent-bos3-1.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
3.208.175.180	mt1-ws-1895636413.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
185.33.221.15	ib.anycast.adnxs.com	Netherlands	29990	ASN-APPNEXUS	false
99.86.2.69	capture-api.reachlocalservices.com	United States	16509	AMAZON-02US	false
77.243.60.138	uip.semasio.net	Denmark	42697	NETIC-ASDK	false
169.50.137.179	i.simpli.fi	United States	36351	SOFTLAYERUS	false
34.75.237.118	envoy-public.liqadprdct-capture-production-us-east1.gke-eric-eyre-svc.gannettdigital.com	United States	15169	GOOGLEUS	false
52.0.228.129	awseb-awseb-eghbt6mzdw45-44179265.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.88.192.45	61870c77-2e72-45dc-9f17-2f74952d866e.rlets.com	United States	16509	AMAZON-02US	false
65.9.66.12	dyrxq3369g3sr.cloudfront.net	United States	16509	AMAZON-02US	false
35.227.248.159	pixel.tapad.com	United States	15169	GOOGLEUS	false
34.252.166.236	ad.sxp.smartclip.net	United States	16509	AMAZON-02US	false
52.58.206.142	eu2-ice.360yield.com	United States	16509	AMAZON-02US	false
31.13.66.19	scontent-iad3-1.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
35.176.232.241	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
63.251.14.14	naw.vap.lijit.com	United States	32475	SINGLEHOP-LLCUS	false
157.240.19.26	scontent-dfw5-1.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
185.86.139.89	rtb-csync-itx4.smartadserver.com	France	201081	SMARTADSERVERFR	false
18.195.73.36	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
178.162.133.149	ams-1-sync.go.sonobi.com	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
18.156.0.31	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
18.233.7.102	ec2-18-233-7-102.compute-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
157.240.18.19	scontent-ort2-2.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
216.58.212.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
3.209.93.152	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
209.112.4.23	secure3.i-doxs.net	Canada	15290	ALLST-15290CA	false
185.29.133.52	pixel-origin.mathtag.com	United Kingdom	30419	MEDIAMATH-INCUS	false
44.241.59.199	match-243508202.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.87.65.167	www.casella.com	United States	14618	AMAZON-AESUS	false
74.125.133.154	stats.l.doubleclick.net	United States	15169	GOOGLEUS	false
31.13.92.10	star.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
52.57.10.248	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
31.13.92.14	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
157.240.14.19	scontent-mia3-2.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
54.78.254.47	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
3.123.96.39	elb-aws-fr-clickdistrict-1651093077.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
185.94.180.125	ams01.sync.search.spotxchange.com	Netherlands	35220	SPOTX-AMSNL	false
96.46.186.57	ssp.ads.betweendigital.com	United States	7979	SERVERS-COMUS	false
52.28.108.245	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
185.64.189.110	pug22000nf.pubmatic.com	United Kingdom	62713	AS-PUBMATICUS	false
18.200.157.96	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.185.162	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
65.9.66.129	d3bi9sbave64gz.cloudfront.net	United States	16509	AMAZON-02US	false
3.228.139.221	dualstack.engagement-bus-prod-713264365.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
87.248.118.22	edge.gycpi.b.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
64.202.112.127	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
51.89.7.199	unknown	France	16276	OVHFR	false
157.240.229.1	scontent-iad3-2.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
54.194.226.253	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
52.215.226.121	adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
185.60.216.19	scontent-frx5-1.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
34.98.64.218	eu-u.openx.net	United States	15169	GOOGLEUS	false
54.81.208.30	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
162.247.242.18	bam.nr-data.net	United States	23467	NEWRELIC-AS-1US	false
209.234.234.58	api.nasdaqomx.wallst.com	United States	7334	WALLSTREETUS	false
52.210.171.182	unknown	United States	16509	AMAZON-02US	false

General Information

Joe Sandbox Version:	32.0.0 Black Diamond
Analysis ID:	404292
Start date:	04.05.2021
Start time:	21:46:08
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 7m 39s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.casella.com/
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@3/364@88/63
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: http://www.casella.com/#main-content Browsing link: https://secure3.i-doxs.net/casella/default.asp Browsing link: http://www.casella.com/faq Browsing link: http://ir.casella.com/ Browsing link: https://careers-casella.icims.com/ Browsing link: http://www.casella.com/ Browsing link: http://www.casella.com/#menu Browsing link: http://www.casella.com/your-home Browsing link: http://www.casella.com/your-business Browsing link: http://www.casella.com/your-business/agriculturelandscaping Browsing link: http://www.casella.com/your-business/chains-multi-site-retailers
Warnings:	Show All Excluded IPs from analysis (whitelisted): 104.43.139.144, 184.87.213.153, 52.255.188.83, 23.5.103.140, 142.250.184.234, 184.87.212.223, 142.250.186.40, 172.217.16.130, 142.250.185.142, 142.250.185.227, 142.250.184.196, 142.250.186.170, 151.101.2.110, 151.101.66.110, 151.101.130.110, 151.101.194.110, 2.20.143.32, 2.20.142.228, 173.222.105.15, 173.222.105.33, 142.250.185.67, 204.79.197.200, 13.107.21.200, 23.57.81.215, 69.173.144.139, 69.173.144.138, 69.173.144.165, 20.82.210.154, 95.100.252.216, 95.100.252.91, 23.57.80.54, 34.250.153.194, 34.255.166.243, 54.194.191.134, 54.171.42.33, 99.81.11.244, 34.253.145.149, 162.247.243.147, 162.247.243.146, 23.37.59.116, 152.199.19.161, 92.122.246.223, 23.211.4.169, 2.19.68.144, 184.87.213.138, 23.37.54.146, 92.122.213.194, 92.122.213.247, 151.101.2.49, 151.101.66.49, 151.101.130.49, 151.101.194.49, 52.155.217.156, 20.54.26.129 TCP Packets have been reduced to 100 Created / dropped Files have been reduced to 100 Excluded domains from analysis (whitelisted): gstaticadssl.l.google.com, tags.bluekai.com.edgekey.net, arc.msn.com.nsatc.net, uipglob.trafficmanager.net, tls12.newrelic.com.cdn.cloudflare.net, cn-assets.adobedtm.com.edgekey.net, leapfrog-ssl-15399.edgekey.net, e11290.dspg.akamaiedge.net, e9126.x.akamaiedge.net, www.google.com, watson.telemetry.microsoft.com, www.gstatic.com, www.google-analytics.com, ip46.go-mpulse.net.edgekey.net, fonts.googleapis.com, e15399.dsca.akamaiedge.net, e11676.b.akamaiedge.net, ajax.googleapis.com, dual-a-0001.a-msedge.net, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, cm.everesttech.net.akadns.net, 2-01-275d-002d.cdx.cedexis.net, e4016.a.akamaiedge.net, ris-prod.trafficmanager.net, skypedataprdcolcus16.cloudapp.net, cidr1.ads.stickyadstv.com.akadns.net, ris.api.iris.microsoft.com, sadroll.edgekey.net, store-images.s-microsoft.com, wildcard.icims.com.edgekey.net, wildcard46.go-mpulse.net.edgekey.net, blobcollector.events.data.trafficmanager.net, dsum-sec.casalemedia.com.edgekey.net, e10784.a.akamaiedge.net, e83137.dscb.akamaiedge.net, cs9.wpc.v0cdn.net, h2.shared.global.fastly.net, www.googleadservices.com, pixel.rubiconproject.net.akadns.net, store-images.s-microsoft.com-c.edgekey.net, a1449.dscg2.akamai.net, arc.msn.com, consumerrp-displaycatalog-aks2eap-europe.md.mp.microsoft.com.akadns.net, pixel.mathtag.com.edgekey.net, a.adroll.com.edgesuite.net, iecvlist.microsoft.com, db5eap.displaycatalog.md.mp.microsoft.com.akadns.net, e12564.dspb.akamaiedge.net, go.microsoft.com, e8037.g.akamaiedge.net, www.googletagmanager.com, stickyadstv.com.edgekey.net, bat.bing.com, arc.trafficmanager.net, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, e4518.dscx.akamaiedge.net, ip2.ads.stickyadstv.com.akadns.net, displaycatalog-europeeap.md.mp.microsoft.com.akadns.net, e6791.b.akamaiedge.net, www-google-analytics.l.google.com, fonts.gstatic.com, ie9comview.vo.msecnd.net, www-googletagmanager.l.google.com, f4.shared.global.fastly.net, sync.search-gtm.spotxchange.com.akadns.net, a1945.g.akamai.net, e4518.dscapi7.akamaiedge.net, ip1.ads.stickyadstv.com.akadns.net, skypedataprdcoleus17.cloudapp.net, bat-bing-com.a-0001.a-msedge.net, e7808.dscg.akamaiedge.net, go.microsoft.com.edgekey.net, ds-m.addthisedge.com.edgekey.net, displaycatalog-rp.md.mp.microsoft.com.akadns.net Report size exceeded maximum capacity and may have missing behavior information. Report size exceeded maximum capacity and may have missing network information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtReadFile calls found. Report size getting too big, too many NtWriteFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\BACZYXTY\apps.twinesocial[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	410
Entropy (8bit):	5.008957183924771
Encrypted:	false
SSDEEP:	12:JsrUCDe8slrSAVO9u0rUCDe85LSAVO1dqDiq:WU/8slr7VO9usU/8p7VO1dqDiq
MD5:	2AB552E92FAEAB017C6DD8D0CC980B33
SHA1:	9ABBA126C33DBB878D172BB790FFD74D9C30BAF5
SHA-256:	CF531DB87B0C50361214A36027E39930245061D2CEA4308EA4B94F1BB2D63E3B
SHA-512:	1DD08359F33C9FAE5D28AAEBD6DD9C7B90CAC88271878D8640DB16ACB2C9B44C6C9CF6B0366492C86402E6C04515A77A05BBE4098DD5969F5E2B4FB80748F3EB
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="pusherTransportUnencrypted" value="{"timestamp":1620157627733,"transport":"ws","latency":1714}" ltime="1142076704" htime="30884126" /></root><root><item name="pusherTransportUnencrypted" value="{"timestamp":1620157674925,"transport":"ws","latency":928}" ltime="1613836704" htime="30884126" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\BC6XF3KU\ir.casella[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	135
Entropy (8bit):	4.73404550280935
Encrypted:	false
SSDEEP:	3:D90aK1ryRtFwsnObemKmlULF0VqHlJR3vAmBRMIAqSf6lKoaKb:JFK1rUFjgemKm6GVqHlJR3omBqlcb
MD5:	63AC654DBBE798AE3A6D78805C13D17F
SHA1:	AFF977028538F01C0B6428935B70A395CCF52714
SHA-256:	A601882070EC29CF18E6C893B8042ED4F0C596C4D0016984A7D71F4AAB52A1B7
SHA-512:	E1A47212946EF4F91438652A1E680073D7FF8D8CB95034215327F57BDF1A5F3D7FC8DFFDD2F4E815D7E9538A13A7E425DC8F4A0DB2EDA5756BAD2F426C840928
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="1326926704" htime="30884126" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\E5F0NRSV\careers-casella.icims[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	12162
Entropy (8bit):	5.010504890267369
Encrypted:	false
SSDEEP:	192:oDQclqDQclWDQclEW4DQclEWo96DQclEWo9mDQclEWo9mDQclEWo9DDQclEWo9Rz:CZUZQZEWSZEWo9kZEWo9gZEWo9gZEWoY
MD5:	423D1372EF37B933995EEE6451292AEC
SHA1:	42E098B9FBD645120BC6DC6AB43F16FE0D23FC3E
SHA-256:	4A24180E982683C51C690E781B32CCEBF1598F3671162AD379C368A4FBF56066
SHA-512:	0E95BFBE0FCC7E175E9687BAEDBF9D77D50D25AD9C5341FB11E22D649FCD86E5DE54ADDB4D65497E886E40EDFBECC014DEB13752EB291E6DB9FB4340C05725EC
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="capture_base_site_id" value="61870c77-2e72-45dc-9f17-2f74952d866e" ltime="1350216704" htime="30884126" /></root><root><item name="capture_base_site_id" value="61870c77-2e72-45dc-9f17-2f74952d866e" ltime="1350216704" htime="30884126" /><item name="61870c77-2e72-45dc-9f17-2f74952d866e_override_site_id" value="" ltime="1360916704" htime="30884126" /></root><root><item name="capture_base_site_id" value="61870c77-2e72-45dc-9f17-2f74952d866e" ltime="1350216704" htime="30884126" /><item name="61870c77-2e72-45dc-9f17-2f74952d866e_override_site_id" value="" ltime="1360916704" htime="30884126" /></root><root><item name="capture_base_site_id" value="61870c77-2e72-45dc-9f17-2f74952d866e" ltime="1350216704" htime="30884126" /><item name="61870c77-2e72-45dc-9f17-2f74952d866e_override_site_id" value="" ltime="1360916704" htime="30884126" /><item name="rl_initial_referrer" value="" ltime="1368456704" htime="30884126" /><item name="rl_initial_page_uri" value="https://care

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\E5F0NRSV\www.casella[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	93320
Entropy (8bit):	5.0013647929901195
Encrypted:	false
SSDEEP:	1536:zhh6X9XnX+XDXGXjXgXgXXXJXMTYThoThBThcThcThvTh5ThkJUJbJ2J2JiJl3Ti:V
MD5:	DB8EF61A342E6CE1D36BD99C1A3CCCB8
SHA1:	80A82E7493E16463E3F2A581006B5314ED50A1F2
SHA-256:	12AC1C5073585032DF8A9099F2333162328C996B00CD2FC6A2348856FB5F2A8A
SHA-512:	E79A92461E5A812C742EDA11B5F8B27338F8D531D2B7BECA1C627101396F74E7D440A3BDD03705E9CD2F6F28427465581FA6749BE5BF33FE470167B421EDC14F
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="capture_base_site_id" value="61870c77-2e72-45dc-9f17-2f74952d866e" ltime="1085396704" htime="30884126" /></root><root><item name="capture_base_site_id" value="61870c77-2e72-45dc-9f17-2f74952d866e" ltime="1085396704" htime="30884126" /><item name="61870c77-2e72-45dc-9f17-2f74952d866e_override_site_id" value="" ltime="1095276704" htime="30884126" /></root><root><item name="capture_base_site_id" value="61870c77-2e72-45dc-9f17-2f74952d866e" ltime="1085396704" htime="30884126" /><item name="61870c77-2e72-45dc-9f17-2f74952d866e_override_site_id" value="" ltime="1095276704" htime="30884126" /><item name="rl_initial_referrer" value="" ltime="1108236704" htime="30884126" /><item name="rl_initial_page_uri" value="http://www.casella.com/" ltime="1108236704" htime="30884126" /></root><root><item name="capture_base_site_id" value="61870c77-2e72-45dc-9f17-2f74952d866e" ltime="1085396704" htime="30884126" /><item name="61870c77-2e72-45dc-9f17-2f74952d866e_override_site_

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\URW0GA4Q\61870c77-2e72-45dc-9f17-2f74952d866e.rlets[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	31687
Entropy (8bit):	4.864381787482574
Encrypted:	false
SSDEEP:	768:LwrDegARvJJVMCnB/AvcEV2XVI2+88PVPmP6PoP4PWFEube7:LwrDegARvJJVMCnB/AvcEV2XVI2+88Pd
MD5:	64DC86288FB68A4A727183ACB719BA93
SHA1:	354475FDB46D4356D8FE7E785DBB660A516B4F00
SHA-256:	90A005D3BC3245C3CD9896B592C3D3C7B55C9A0C0567B980A90B003E5CD77115
SHA-512:	DA943DEB36F4B3B43609C13B12F552E3C3D2FFF92810743128CE8F7AA9D8BEE4ED76E8DC3B1901506F966E56B9FD7268AF9D69FABFD21D5D76814BBEEA3ED18C
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="test" value="test" ltime="1094486704" htime="30884126" /></root><root><item name="test" value="test" ltime="1094486704" htime="30884126" /><item name="override_site_id" value="" ltime="1095276704" htime="30884126" /></root><root><item name="test" value="test" ltime="1094486704" htime="30884126" /><item name="override_site_id" value="" ltime="1095276704" htime="30884126" /><item name="bot_type" value="" ltime="1109236704" htime="30884126" /></root><root><item name="test" value="test" ltime="1094486704" htime="30884126" /><item name="override_site_id" value="" ltime="1095276704" htime="30884126" /><item name="bot_type" value="" ltime="1109236704" htime="30884126" /><item name="history_campaign" value="" ltime="1109276704" htime="30884126" /><item name="history_referrer_type" value="DIRECT" ltime="1109276704" htime="30884126" /><item name="last_activity_at" value="1620157624466" ltime="1109276704" htime="30884126" /><item name="visitor_id" value="95fa6a68-9b

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{7BEDC59C-AD11-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.8486438816955302
Encrypted:	false
SSDEEP:	192:ruZ1ZI2ZW/tHifXPxzMUpBsDDZsfNPMjX:r67folgeKWcy
MD5:	2FF081EB23FB28589FAE3AB28240CD9D
SHA1:	7DE9564A097A11D86FA50AC4C7FF0263FAC98146
SHA-256:	E04EC05A2DDCCD507C96C3545870C81F771D27B5E177F942D8CE2E52D31D825D
SHA-512:	24732F26E4587EE88C50B7CB77DAE5D6EECD31EFC541B6013DFE5055E7DC8D7F382F106EF88679C14FB338787BE7C4BE3FD0F24CBFA75FF7548048096B646105
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7BEDC59E-AD11-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	199758
Entropy (8bit):	2.763898779842383
Encrypted:	false
SSDEEP:	384:ruCk0y4wlZTVeflDHjch9+LIDaWu1dXu+cEgbkhIoc/IHvpU7+3DkCvLzUR3oSnV:HD3Md
MD5:	9E7B92665766C4917A166286AA05FBB5
SHA1:	4EE0014B0FC15D3ECF9863D8D51E5EC1596216FC
SHA-256:	85EE934B07E6FC1CA94281ECFDEA5FFB6C2F5F3D37E11204836ED364F80339BE
SHA-512:	46A63B3A41D835F2F1318AFC0D9BD07F7D8A2A3C2F89388B77BC8BFE3A5ABE6631B7A158744929B4679C5EE37EAC2FA925F300711B1E1B2F31F21EEDB5A5C212
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{82CFA500-AD11-11EB-90EB-ECF4BBEA1588}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5641093935758295
Encrypted:	false
SSDEEP:	48:Iw8GcprVGwpa0G4pQTGrapbSaZGQpK0G7HpRvaTGIpG:rgZ/QE63BSazA/TveA
MD5:	34C186C39F45211685DEEF420293FED0
SHA1:	9902A5293523189905EF398F3654D2030DD042EF
SHA-256:	C0FBFF7DA75EBDB53C6B74740985F472CEBD9AFC3208D67574B3BAD06E761906
SHA-512:	A9D93E5AE594F9A602954FB90BD11D26AF17192B6815CEC0E926C079CEDF9243F0B22ED343ABC6B73DFFAFAE7AD7982011FE2D0C10A88E61AEFDD9761DEE62B0
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	3512
Entropy (8bit):	6.10202470888679
Encrypted:	false
SSDEEP:	96:uxoPBjTpGWoabmG8CL3uSTdfAApixoPBjTpY:uxov93jQxoY
MD5:	BBA3FCF7B4C0C25B92FE15F86F1AAC26
SHA1:	EE9252B4BF13CB03628ED01DAD87285B317FCDF0
SHA-256:	F5A29436F76DE4B2E601557E1C9BAA4D84D1FC22D599C458FC373D87FA031F0E
SHA-512:	B9543748CB0B19C1C46AEF0B7BAA75A073D9D506FECB767C0C55CC7E51AFE2707A2FE9BE37BF7E733C7A8485840326CCB2F5FCCC5F8A3F799DF6BF9ED17621BB
Malicious:	false
Reputation:	low
Preview:	I.h.t.t.p.:././.w.w.w...c.a.s.e.l.l.a...c.o.m./.t.h.e.m.e.s./.c.u.s.t.o.m./.c.a.s.e.l.l.a./.i./.f.a.v.i.c.o.n.s./.f.a.v.i.c.o.n.-.3.2.x.3.2...p.n.g.-....PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE.+Ap............8M...Xq..&>.........Idt.9N:Wj....2G.+B.............?S/N`(H\.1F.8M.8M.8M.:O.:O.<P.<P.=R.>R.<Q..........'=......&=:Xi............Yq.......'>.+Ax.....Nhx.&=.&=....6.{...9tRNS.............................................................bKGD:N.......pHYs.........L"M.....tIME.....0.........IDAT8.c.$......+`fa.(`....A.8p.[q.R.E...<.\|.....=&(.[.08lD.).%.@L..$.+@..L..R.2.r...J........W...R..[..........V:.zVx.......)0.'ZC..F.`.&.f.....~...n.0.O.....%tEXtdate:create.2017-01-03T16:48:18+01:008.qd...%tEXtdate:modify.2017-01-03T16:48:18+01:00I.......tEXtSoftware.www.inkscape.org..<....WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`. ... ..............`.......`....&.h

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\111[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2357
Entropy (8bit):	5.1447703901082225
Encrypted:	false
SSDEEP:	48:cxkdCpj2xygvI/AVk6dMdSsxXXdul5x3zrjEJxMqxL:zIj2x9IIVlMSa9uV3HW1L
MD5:	5A71F8658593419AB94D74DE35A0D2E2
SHA1:	FD8A53D51134177CBFF9C64EC2DEF3F0BDBDAB8D
SHA-256:	DBD4A7532356753472D2D4EFDAB033D1BBB02C5BDE13EAE9DCC3EA5F028E42B6
SHA-512:	1705A4739B3E9A554BEBD81F993FC8E8A23AC7FA0D24EA4B641A74FA5591B33B608999C9C313A25B0475D082A5F8F9D46AE9137E0A6A9CB2D82388AC95E9FC63
Malicious:	false
Reputation:	low
IE Cache URL:	http://apps-cdn.twinesocial.com/images/emoji/111.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 47.5 47.5" style="enable-background:new 0 0 47.5 47.5;" id="svg2" xml:space="preserve"><defs id="defs6"><clipPath id="clipPath18"><path d="M 0,38 38,38 38,0 0,0 0,38 z" id="path20"/></clipPath></defs><g transform="matrix(1.25,0,0,-1.25,0,47.5)" id="g12"><g id="g14"><g clip-path="url(#clipPath18)" id="g16"><g transform="translate(34.3047,19.6636)" id="g22"><path d="M 0,0 C 0,0 1.132,1.65 -0.519,2.781 -2.168,3.912 -3.299,2.262 -3.299,2.262 L -8.55,-5.396 c -0.18,0.302 -0.379,0.6 -0.599,0.894 l 7.288,10.629 c 0,0 1.131,1.649 -0.519,2.78 -1.649,1.132 -2.78,-0.518 -2.78,-0.518 l -6.856,-9.997 c -0.255,0.209 -0.515,0.417 -0.785,0.622 l 7.947,11.59 c 0,0 1.131,1.649 -0.518,2.78 -1.649,1.132 -2.78,-0.518 -2.78,-0.518 L -16.1,1.277 c -0.292,0.18 -0.581,0.335 -0.87,0.498 l 7.427,10.832 c 0,0 1.131,1.649 -0.519,2.78 -1.649,1.132 -2.78,-0.5

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\1612366471[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	502533
Entropy (8bit):	5.484857938704484
Encrypted:	false
SSDEEP:	6144:jJq17hbvca98Hrt1cSBnEDFKpfdQCXSvecF3:UbA6FGWKA
MD5:	9B6B9BC3C915179C675CEE7DB6A85752
SHA1:	1C0D7FC0C331612F3BA4E930463055822A68B796
SHA-256:	23611817E66BCB3E89E566E2BBD6F9D012FB08B460F1E07679384D86DF8BCD04
SHA-512:	45727B49544334045F2F92928037FDE190466DB1212403D470F9C6781FB3825C7E52CEF37D1CD745191DE4352BB9428141310523572AFA50D28C967EAEE7EC61
Malicious:	false
Reputation:	low
IE Cache URL:	http://apps-cdn.twinesocial.com/js-min/files/player%252Fbugsnag.js+player%252Fjquery-1.11.1.min.js+player%252Fselect2.min.js+player%252Fjquery-easing-1.3.js+player%252Fjquery.timeago.js+player%252Fbootstrap-3.1.1.min.js+player%252Fisotope.pkgd.min.js+player%252Fjquery.lazy.min.js+player%252FjMinEmoji-SVG.min.js+player%252Ftheme-base.js+player%252Ftheme-base-utility.js+player%252Ftheme-base-toolbar.js+player%252Ftheme-base-fx.js+player%252Ftheme-base-manage.js+player%252FisInViewport.min.js+player%252FAnimOnScroll.js+player%252Fmodernizr.custom.js+player%252Fhandlebars.min.js+player%252Ftheme%252Fclassic/v/2.21/t/1612366471.js
Preview:	// player/bugsnag.js.!function(a,b){function c(a,b){try{if("function"!=typeof a)return a;if(!a.bugsnag){var c=e();a.bugsnag=function(d){if(b&&b.eventHandler&&(u=d),v=c,!y){var e=a.apply(this,arguments);return v=null,e}try{return a.apply(this,arguments)}catch(f){throw l("autoNotify",!0)&&(x.notifyException(f,null,null,"error"),s()),f}finally{v=null}},a.bugsnag.bugsnag=a.bugsnag}return a.bugsnag}catch(d){return a}}function d(){B=!1}function e(){var a=document.currentScript\|\|v;if(!a&&B){var b=document.scripts\|\|document.getElementsByTagName("script");a=b[b.length-1]}return a}function f(a){var b=e();b&&(a.script={src:b.src,content:l("inlineScript",!0)?b.innerHTML:""})}function g(b){var c=l("disableLog"),d=a.console;void 0===d\|\|void 0===d.log\|\|c\|\|d.log("[Bugsnag] "+b)}function h(b,c,d){if(d>=5)return encodeURIComponent(c)+"=[RECURSIVE]";d=d+1\|\|1;try{if(a.Node&&b instanceof a.Node)return encodeURIComponent(c)+"="+encodeURIComponent(r(b));var e=[];for(var f in b)if(b.hasOwnProperty(f)&&null!=f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\170581839_10159677912488888_3092895498031908587_n[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2640
Entropy (8bit):	7.883167737695746
Encrypted:	false
SSDEEP:	48:c6kemZCOldISPIgM+9iNBIkfr8YcRgnwJ1u5PtEy37lGPmK:ByLI59r8B+n7EPV
MD5:	266A6E4C7A662C7C9C6C8097CB4A86A7
SHA1:	9540D794F99234C9141758B7DF3744A4A2A2E5E0
SHA-256:	1CE6EA57D15B8C472484E9CD86DB3856067AD2829EE5283D69B2718A7FCE67F8
SHA-512:	E72BE9ED1DAE7527EA85245BFC50005613824AEEDA84DE7598279CFFC3323AD79E673C100A3C3BBF13CC9B47E96DDF14A1A07D8FCA49C488D649208754165C8D
Malicious:	false
Reputation:	low
IE Cache URL:	https://scontent-frx5-1.xx.fbcdn.net/v/t1.6435-1/cp0/p50x50/170581839_10159677912488888_3092895498031908587_n.png?_nc_cat=111&ccb=1-3&_nc_sid=dbb9e7&_nc_ohc=8dXRoCtschIAX9A_vJW&_nc_ht=scontent-frx5-1.xx&tp=30&oh=18cfa11f6062b78d1049627f27680a83&oe=60B699CC
Preview:	.PNG........IHDR...2...2......]......sRGB...,....SzTXtRaw profile type iptc.........@...>....u.B.....]...X.L.w&Hx\|..VK(.p...jsq._....?.........IDATX..i......1.3=.wv......&6`.........B...aD...HN.......(".8...B..".A.....6.....\.]{...v.~U.0......K...Z..~O...zU.....7...<..y.3..Xgb....Q,5.....l.#..@.........fM,.......hc._8q^i.;Py....O.R.....x.u...L...y...C.!.<.Q.e.....yw.~..Q...W....<Z..K...2...].-q0.V...E.......~.8.mZ,........n......1..@.X%Kg....../..0K.......[..z.2.< ..T43Z.3#...1!.1.q..^...p.T.%.XV..g.......\|S...?..'...]{...R..M.8.{dy{[...j..a..;.t.w.-...c....dM...;/...m.ke..B..y...5kK{-.X(n..yl(...w.).^;..I.'j.U..d.(Z..\|n._.....Y.N.3D..S.?....>.+".B...f...3....z.5.........a3........WW..w......_[.NO.@O.@..p2...c.l...P.3...H&.L...L.._x}..w?P..........'....Ew=.\|......G.hl..L.......2.x<..........s`.m7.46.....8.d..^...C.x...h.@mMu{[s..b\|x....V.Y.....2.+/.7k..\|.o...1pWO....c.DsS..+..~..B...Z....+....;...mZ.k.kp..._.....a......,.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\176597167_780408019282225_3124021654920406254_n[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, progressive, precision 8, 1280x720, frames 3
Category:	downloaded
Size (bytes):	42280
Entropy (8bit):	7.944422037263365
Encrypted:	false
SSDEEP:	768:CYysdxQohNScNYYD3Rab25iwdbVeTuujllN6Sn1KtHHpx+LAd6SxbWOA8qs/:C2xQohAcNLxxVmdl//1+n/+LVeW38d
MD5:	D58C361FE70620C74E735166CABF6CA6
SHA1:	E4FC1061FF8811D255CBA48378A43C5E25687F54
SHA-256:	FF11C4B3735D878AE70334D745737D7C64B7F50EB19917E1E48AB3B72D7C3B8C
SHA-512:	254265F82694CA4D76254B67517F40D89E3CCBF46C02CB0ABC6609E488426C2724389CE12DA3E8464DF289D6A7F8E06AD8121A31DF0348C2D3E8565F0A27A83C
Malicious:	false
Reputation:	low
IE Cache URL:	https://scontent-iad3-1.xx.fbcdn.net/v/t15.5256-10/176597167_780408019282225_3124021654920406254_n.jpg?_nc_cat=106&ccb=1-3&_nc_sid=ad6a45&_nc_ohc=i36gvYeY-FoAX9IBK-l&_nc_ht=scontent-iad3-1.xx&oh=9417d9dfa58540bdb64ff130ced49cee&oe=60B43256
Preview:	......ICC_PROFILE...............mntrRGB XYZ .........$..acsp.......................................-....).=..U.xB...9.................................desc...D...ybXYZ........bTRC........dmdd........gXYZ...h....gTRC........lumi...\|....meas.......$bkpt........rXYZ........rTRC........tech........vued........wtpt...p....cprt.......7chad.......,desc........sRGB IEC61966-2-1 black scaled..................................................................................XYZ ......$.........curv.......................#.(.-.2.7.;.@.E.J.O.T.Y.^.c.h.m.r.w.\|...............................................................%.+.2.8.>.E.L.R.Y.`.g.n.u.\|.........................................&./.8.A.K.T.].g.q.z...............................!.-.8.C.O.Z.f.r.~......................... .-.;.H.U.c.q.~.......................+.:.I.X.g.w.....................'.7.H.Y.j.{...................+.=.O.a.t...................2.F.Z.n.................%.:.O.d.y...............'.=.T.j...............".9.Q.i...............*.C.\

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\181086922_10159734185388888_162057070642722993_n[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x540, frames 3
Category:	downloaded
Size (bytes):	72205
Entropy (8bit):	7.97824052383283
Encrypted:	false
SSDEEP:	1536:DhDB9ffn5ZkkRMo1FTvwgS5VhMKDHOn2yjDPIb9uKW8FNb:5B9f8iMoHsgSzOn2MDPGwIFNb
MD5:	E986655CABCB5273E0FA107ACB87FEA8
SHA1:	2F94D275F503909C6B4EDE3E1E5E56A9A9AA8A80
SHA-256:	068A906E26814252409BA2B1D98CBD7E6CBDA9960102435F2563FDEDB83B794E
SHA-512:	5BA2C74275B1E854D0122E5E2E5A9A73FD1A0A76B5B096D8B0D91F8EC5D6BE0F0F6B0B72DFD1AFCC5FAF88DCE15997445DB6800AC07F9A35966B37175060ED99
Malicious:	false
Reputation:	low
IE Cache URL:	https://scontent-iad3-1.xx.fbcdn.net/v/t1.6435-0/p180x540/181086922_10159734185388888_162057070642722993_n.jpg?_nc_cat=107&ccb=1-3&_nc_sid=110474&_nc_ohc=DjNS5gRWOIwAX-NA2fQ&_nc_ht=scontent-iad3-1.xx&tp=6&oh=d4f4e52e1efe98f0eefe92ada29216b0&oe=60B1C57B
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a700100008a18000040410000c8440000b2480000c673000096ac00004bb100009eb60000d9bb00000d1a0100....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................Y.L.I.I.$3:.$$.M$EM.bL..R.k.....a,.a(,..]..e....Ja.A....t.B.].p..At...B..... ......T%...a)K8......t.a... ..Ag...JR.!...B.aZ..3..[......RdO....5,.kY...a.....U..P..C.". .`F.=...7...0A.A.....B.{..=...M..7..w...0A. .``..`.......1.hc....!.&..M.`..AG...-.j./js.2.b.&/E.K......Y...z).M.....0.0.Q$.....X.....+X..r..%-s...J.-.R.E.+\.\..rJ...QR...h.X..b+y..k.+.Z..)..H..+'a..IA.(1./3....mSv..'.s.\}...8......=..^.fJH...]F...\F.Q.2.de.\..9t.r..E.%. J,..Y.Qf....b... B.........8!.@....] .0.....Q.e..."..r... J,.-.J.D..D...>.n...j.=......[N.o-G]..r3.gC_4A7.USE.p..3.YP.Q.._.9. j"...."....9. s.@.A...",.D.9.`z

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\2330210673747845[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	260370
Entropy (8bit):	5.4701580342805505
Encrypted:	false
SSDEEP:	6144:Rk1HgCSntDV/HaK3V/Ha8NEPjQHguH3HpQrwzzm5:dNESY
MD5:	149D2DF63F15120781C0393FB078FEF2
SHA1:	C382A440FFA259DFB79808A5535C7F3BD4E3D373
SHA-256:	C6291468A500A090A1F1EA530F3DB7E35364BB51BD35D789723F0F59E3A2DD09
SHA-512:	7878BDF58DF214DA79B60A9200CBAFBF3A347985C5A96B1BF93A72EB39DAAB16F05E8E7BB8EFA46ED457610669CE09A5E1D519489F9CB750BD2409E682C1226A
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/signals/config/2330210673747845?v=2.9.39&r=stable
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\350[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1326
Entropy (8bit):	5.276308217675897
Encrypted:	false
SSDEEP:	24:2dtjXL44vAWWJRIYKoqOVpFSVzvpn+Pa9Bzkvp4I0fivpc:cxkdCRsPWzt3fL
MD5:	8839BF4D36A1EF977297C37D6ECC4A6A
SHA1:	4A587F24F99552FC8FF4EA176A45260495845443
SHA-256:	3AE7D3FC34C1CD676A45BC2C72C3D1BE265D227071C6819E72BFDDA3FAD7E90B
SHA-512:	9EB9FD110ABECAABCC43081C10C79D6C7C6DB998FD52CB39C908B27E37E2066025C2190DF88675B7C8F8A9C01DF27A585B614EDB7260493264A7A5313193C1E2
Malicious:	false
Reputation:	low
IE Cache URL:	http://apps-cdn.twinesocial.com/images/emoji/350.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 47.5 47.5" style="enable-background:new 0 0 47.5 47.5;" id="svg2" xml:space="preserve"><defs id="defs6"><clipPath id="clipPath18"><path d="M 0,38 38,38 38,0 0,0 0,38 z" id="path20"/></clipPath></defs><g transform="matrix(1.25,0,0,-1.25,0,47.5)" id="g12"><g id="g14"><g clip-path="url(#clipPath18)" id="g16"><g transform="translate(15,8)" id="g22"><path d="M 0,0 C -2.209,0 -4,1.791 -4,4 -4,6.209 -2.209,8 0,8 2.209,8 4,6.209 4,4 4,1.791 2.209,0 0,0 m 0,10 c -3.313,0 -6,-2.687 -6,-6 0,-3.313 2.687,-6 6,-6 3.313,0 6,2.687 6,6 0,3.313 -2.687,6 -6,6" id="path24" style="fill:#3b88c3;fill-opacity:1;fill-rule:nonzero;stroke:none"/></g><g transform="translate(2.7832,22.9766)" id="g26"><path d="m 0,0 0,-0.021 c -1.001,-0.218 -1.783,-1.895 -1.783,-3.956 0,-2.06 0.782,-3.737 1.783,-3.956 l 0,-0.02 28.701,-7.972 0,23.884 L 0,0 z" id="path28" st

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\475[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3847
Entropy (8bit):	5.171594213317656
Encrypted:	false
SSDEEP:	48:cxkdCAFvKH8NaJJthRWC2EjSwmzNSCZbesUakpHPTGHaL/PElJFhqizkOW5:zn4cN7CTSBNSCfUJpHSi/P86
MD5:	CE071A596B6D16E8B1C0E6121661B015
SHA1:	28429EC3F3A53A8F8686518B097656B49D3BB754
SHA-256:	5A6616BDF46D37FB2551818A4941E3D788DF96E57E024ADFB4A4F072E52349F5
SHA-512:	096179B9D0AEA31E677DFE3C4582F9FC1A86FA290B40D05D8CA7DF74AA811DE4E7B2B1336CD6B79FAEED1B3918D4BCD129ADFA0264974A9F8A865E3C42CED82E
Malicious:	false
Reputation:	low
IE Cache URL:	http://apps-cdn.twinesocial.com/images/emoji/475.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 47.5 47.5" style="enable-background:new 0 0 47.5 47.5;" id="svg2" xml:space="preserve"><defs id="defs6"><clipPath id="clipPath18"><path d="M 0,38 38,38 38,0 0,0 0,38 z" id="path20"/></clipPath></defs><g transform="matrix(1.25,0,0,-1.25,0,47.5)" id="g12"><g id="g14"><g clip-path="url(#clipPath18)" id="g16"><g transform="translate(9,21)" id="g22"><path d="m 0,0 c -0.552,0 -1,0.448 -1,1 l 0,11 c 0,0.552 0.448,1 1,1 0.552,0 1,-0.448 1,-1 L 1,1 C 1,0.448 0.552,0 0,0" id="path24" style="fill:#ccd6dd;fill-opacity:1;fill-rule:nonzero;stroke:none"/></g><g transform="translate(3,4)" id="g26"><path d="M 0,0 C 0,2.236 4,6 7,6 L 7,1 C 6,1 3,0 2,-1 1,-2 0,-1 0,0" id="path28" style="fill:#3b88c3;fill-opacity:1;fill-rule:nonzero;stroke:none"/></g><g transform="translate(17,4)" id="g30"><path d="m 0,0 c 0,2.236 -4,6 -7,6 l 0,-5 c 1,0 4,-1 5,-2 1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCds18I[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 19212, version 1.1
Category:	downloaded
Size (bytes):	19212
Entropy (8bit):	7.974755958403984
Encrypted:	false
SSDEEP:	384:vyrzxrRnuXB6wgkFx4rjY+dx47uhGTJWXj1oHjt3DPl4MCX6mQW1gZS9pMgINptt:vkr8XB6XW43/LyJWXj1oHjIMw6Ug89pS
MD5:	C13797BD5E320111CF0AF5C140AD9EE5
SHA1:	009FBB0574E44FCAE9B67AF50F397B40A5B3CDAA
SHA-256:	CA250667A898B5996D8A46DF440CE42A44A2B6C1016A84094EB237E22C44FBC1
SHA-512:	B7A94B34CD16DE1CCFFAD7BF08843DE259453C22428161D53E66965D358E1187A972562C4BDBD755A73B0B45A8FC17E1208DABE08153E6AE2E0A612DEB6BBE1B
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/sourcesanspro/v14/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCds18I.woff
Preview:	wOFF......K........\|........................GDEF.......0...:.\..GPOS...........b./.aGSUB............#.#.OS/2.......Y...`[.u.cmap...8...k......Icvt ...........X..fpgm...........s.Y.7gasp................glyf......5...d..."Ehead..A....6...6....hhea..B....#...$.9..hmtx..B4...M...D.m".loca..D........$Uxn.maxp..F.... ... .+.Wname..F....F....a.y.post..H............prep..J....S...VS..:x......0..................v@.C.=..xz.>....ZY...x..3..A.......6c.N..m......r..A...b..\|............[.!D.L\2..e........S..#...T)...B46gp.P..2...V...Z.PKm.3.2p.9.....)v..f..c...F.S....[4..{O.....w..>..{..O....}.......To........5..EG~.oyX..`.Ii..e=...&.r...<....b.(el.7{..A.`h...e..')..&&)..B.....)#+.r.#/Q...(1J..2U.V.$.%A-1...%A...T.4.7..K...R....!:I...U...1H......".h.3...Og...,".b..g9+H.M.. o%.....b..;hBCx..@..Da.Tq......*.(...."....... ......D....'..QQ.Q.4.n....8.....]..&z{f.....y..7...Cb.;.K.m.)K..Q.5...9.ju..]zh.!.A..p...M..a..?...`..6...5.G...3..D........C{...y.)G<...w-.2....\|

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\747[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4303
Entropy (8bit):	4.983979961659166
Encrypted:	false
SSDEEP:	96:z4z+Rlw1m3jShCRoehpRtBVj8JY7sTQt45587uVSnL:8+RlDGEhpjfj4Ui+iU
MD5:	D1B5BF793F3DF67A091646E45E0C4FED
SHA1:	814C3BD2DC47CF9BE30D775844038830495D87EE
SHA-256:	9E55A202DA52704AA5E84FCC7C35F52460097D97672942D7025EFFBF4658DE6C
SHA-512:	DBBF6342EB4AE108E8CA34953C6243B85F419EB97FE61015705A4C650086D7787159ED7B9DE1C09DFD7000DC8E1E0449EA3F5513D4EA6986411B84B04DA08A65
Malicious:	false
Reputation:	low
IE Cache URL:	http://apps-cdn.twinesocial.com/images/emoji/747.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 47.5 47.5" style="enable-background:new 0 0 47.5 47.5;" id="svg2" xml:space="preserve"><defs id="defs6"><clipPath id="clipPath18"><path d="M 0,38 38,38 38,0 0,0 0,38 z" id="path20"/></clipPath></defs><g transform="matrix(1.25,0,0,-1.25,0,47.5)" id="g12"><g id="g14"><g clip-path="url(#clipPath18)" id="g16"><g transform="translate(31.001,8)" id="g22"><path d="m 0,0 c -0.348,0 -0.685,0.181 -0.869,0.504 l -4.235,6.975 c -0.275,0.48 -0.167,1.08 0.312,1.354 l 4.958,3 C 0.322,11.923 0.662,12 0.83,12 1.178,12 1.502,11.802 1.687,11.479 L 4.794,6.357 4.958,4.125 C 5.232,3.646 4,2.941 3.521,2.667 L 0.495,0.132 C 0.339,0.042 0.168,0 0,0" id="path24" style="fill:#3e721d;fill-opacity:1;fill-rule:nonzero;stroke:none"/></g><g transform="translate(24,5)" id="g26"><path d="m 0,0 c -0.553,0 -1,0.447 -1,1 l 0,6 c 0,0.553 0.447,1 1,1 l 10,0 c 1.85,0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BANNER-CurbsidePickup-1900x960[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 480x384, frames 3
Category:	downloaded
Size (bytes):	29167
Entropy (8bit):	7.960392640140513
Encrypted:	false
SSDEEP:	768:e32fwRFRlBNZjRWvyQBLjIRG8AamiaQx9Nl9kpUZ7EH:e3awRrNZjTQBLjIRxva4NlzyH
MD5:	170060025134070DAA928D61C4667151
SHA1:	F6C4DEEF9F1AB31DE55D64D8FF9D3D5665DBB76C
SHA-256:	2BDD9E2D5EDE74AF956349CE407A7A0CE9F5234B15DD59C2848D30C51D93F381
SHA-512:	4E45ED721AD5E5E5AF0133A19CACD38023C26B6BBC8691042876EDD508597FD83540AAE9BC9996C87F61150C12EFC63BAD13C4AB507C150DE52E00A516E70401
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/styles/480x384/public/2016-11/BANNER-CurbsidePickup-1900x960.jpg?h=7a8a8cdf&itok=9P7rGhj3
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...)(. Z)(...4.P..IQ\\.k..g...'.&......=...[..ee...P{...U..T.:d.I..&;4f..c.4f...-..P..IE.-%.P.E.P..IE.-..P..E..QE..QIK@..f.....).QFi(...(.....(.....Q@.%.P.-\.D.>....t...f.}].....R...Y..._%9..UD}.k(5(j..EM...5B..C......a.kCNA".;.b....?z....._..i.....q.......V..W...........`.H..2.....g.*+..............Z..L..].

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BANNER-Drivers&Mechanics-1900x960[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 480 x 384, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	296598
Entropy (8bit):	7.996560621800548
Encrypted:	true
SSDEEP:	6144:ZOcMjmclLDN+M5piS6TYEpD5K/DYo71Nzw+Ay7HWr+CwIWLOBvv:ZFMjXlHb5pGHp9K/D1nk+FarHWO5v
MD5:	22E273E057359BC337E2C6E718D0352B
SHA1:	76EE5FC5AD8BF3ED7F025EA1AF61D045017B5182
SHA-256:	DBD300C3EE324FE4DAD786ACA252655D670387105F78ED00926E4DDDEB57A318
SHA-512:	415E076BC1724663264D2F8ECF8210B2480BCD82DA04CEEFF447A6CABB1D2783195EA0CDFF5101873A9541B33A71D02A3D9C7236E048482E7BBE63671AFDC7E6
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/styles/480x384/public/2018-06/BANNER-Drivers%26Mechanics-1900x960.png?h=7a8a8cdf&itok=pdz2vuKB
Preview:	.PNG........IHDR.............u .... .IDATx...k.n.U.6.........D7..&.s'.Fr.b.....W....;.%)W.r).XT.J.....IL.G6...`."HBHj.....>{..c.....N..e.u..1/k.......)...@`^...c....."..@".V..3.+..@f..M...0.j....4..?...8.}.....@d....2.....}..R..o.."..y"V o9...........C..c..g,.....N.M..I..5.k3......S...g..xF..?.A.)8.Df.X..H...+p;O..Xu_D.G..1..y&.QmF..D.G.L../"...XKC;s&...m...Do.....I.@.o.j...CD`..W.Us...........6W....~........./.......uM}.\...N..IJQ(...%..5.n..B.._m.gO...g.Lf......L.\|L....4.a........7X..lx}....:/....Vl.^.n..@......f.h..N.F.............X1..[.....\&y..q.t......j..M...VP..7./.....9..y.y&..K.d....#.....X..E.3....j/..(..$..!.iAv.b..>....1...S.YG_.......9....../..Zk.`.2..0.@m.Mr...L.C:D........c@..-....A:p.."..{....c.v.......8...,..._.]...h....i.G..(."0.dhT..`I...ZJ...8i.A.....z..q..i.F....:}....H.-./#..-.=...A..X.I]7..qF.X.'.I&...D8...W#.t$L........`..-.k...e...+.....h...4#...1`.'b.....-#.YrWc...;.Z.].u3.7LU..)...J.3.]...J.K[.)...E 8...8)5&.$......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BANNER-RecycleRight-1900x960[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 480x384, frames 3
Category:	downloaded
Size (bytes):	156044
Entropy (8bit):	7.952888574563787
Encrypted:	false
SSDEEP:	3072:xe53zREFU1qRnUM1DusBlmrL+PYjojkXjRIsvz7K8s/9ea2DjB:W3tEaGUM1DJ1Moj4IM7K8y2DjB
MD5:	F1EEF35D2611AFF26180FE9591A0ECFA
SHA1:	A361702E3C486DD0C2F3CC56EAC24996E45ECD22
SHA-256:	92AE250606EA0CDAD6C9114D075F8946980B86D03FF67D903F8CA5C8A1956F05
SHA-512:	A1E20A1B42611AB2F3843A0D1D2F255A6C689AF83F2C9481DDF8FB75BBEF0BC1AEE0BA0F4AA5BA9B04377A8A9C5011A67CF06A7B65130F16E0CFFA819C8E2B5F
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/styles/480x384/public/2018-03/BANNER-RecycleRight-1900x960.jpg?h=7a8a8cdf&itok=OVikH09Q
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....d.>.vS.E...4...8.y........A"...s...1....aT.?.#.F.2....8...?...8.t.........u....#..7..k....<..88'..#.P.YF.3.A...'.......h.7e.8..x..q.A.z`.==()A.5o...lX.q...>....;J...4.H9..c....P;z....Fr!....8 ...=~`...9.....c..G8'.,...{'.E...._...I......N....$...........q.....''h..O....?..Ny4.$........r?...b

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BANNER-SustainabilityReport20-1900x960[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 480x384, frames 3
Category:	downloaded
Size (bytes):	196578
Entropy (8bit):	7.93780943952382
Encrypted:	false
SSDEEP:	3072:HXVHa/t4M46gXESc+AX1jPgPySf/kkhwNJFVB7CiO9vwQoyZnXYBQnM5QtTUGdBh:3VH2SfAXRY9f/kawNJ5OuCBXY+XBBtbF
MD5:	43A302CEE576C136EB9C1FE9D1E05F1B
SHA1:	A4B7397623C9F925F35E2E212EA7F1DC9FCF77CE
SHA-256:	111983E82EBE1183CA440E201D647D8A9B614812AA05D66638C74AD603891382
SHA-512:	14326FE538C3C3AAB9BD5B1340B645AC0B48554974410BEC8DD3E95F0D9C6813F72ED4376AD6737C6DFFFF015BD382F4E295B9ED4F3895973DF3111A4B4BF9F4
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/styles/480x384/public/2021-01/BANNER-SustainabilityReport20-1900x960.jpg?h=7a8a8cdf&itok=X4pFSupk
Preview:	......JFIF.....`.`.....<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....[..no.O.\|8.m........Ud2.i...3.......M.....-....x.....X."..:..$+;.h.JGn..J.Ir...n]f.e.....?S.....X...^.?....v.././.B.K.b.......Ciux-...."...O..k$..&...x.....n...Y....R....O:..,...a..w...5..E.A..9........`...b..^j.\|V..d.J.<<UiN....RP.9.....r.%.y.....`1xY.b.O....F*.I/r..''i^.n.R..}..^M..H.w.Zd.)./4

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BANNER-SustainabilityReport20-1900x960[2].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 768x614, frames 3
Category:	downloaded
Size (bytes):	466195
Entropy (8bit):	7.949080438388158
Encrypted:	false
SSDEEP:	6144:W/r47Jmqcx3qt26uFuEwFUoTK0B3BPZsfBZV32GsXhQA7e6hSfP7bYX95Z2J96en:f7Jm3qt268uEr6F/ELV3XI7r8n7sX89J
MD5:	E5BD6091F571334613B3E8D4A786FF5C
SHA1:	8A60776337E938A5CCC1B66D6E4B2292FFEC388C
SHA-256:	61EC07D4608A5175F4D8D6DAA39745E8E3EEBB4686932C70F7280158B93783D9
SHA-512:	73F66B5AAB7D61475513211D001467AAE7C03C4F085F68598D2993EE9FB11F221A04B0BFDC22A3B654F6EFBA45A1D380359EE410A2AEE455C547AF0EAE250692
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/styles/768x614/public/2021-01/BANNER-SustainabilityReport20-1900x960.jpg?h=7a8a8cdf&itok=Ia_fF50X
Preview:	......JFIF.....`.`.....<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C.......................................................................f...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....}....Y.G.Y..a..C.kP_\.....J..C,x.._q`z.=...f...Z..'.U.]..y...{Geo5..R...6....Y..K.Ic...+&..^.M...y...zM..... ..a&.n4..0&.+...#.Kn.`.........It.3R...0\............$I..-QC.Y<..om...eg....D.t.\%...9!...V'....kEN2..R..B.6..Fu'..i.O.8..'.......K.(.*SnQjr.V..(FJ...,%h7....,...,d.......t..u....i.Dc[.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BANNER-ZS-2-1900x960[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 480x384, frames 3
Category:	downloaded
Size (bytes):	199185
Entropy (8bit):	7.948897086375355
Encrypted:	false
SSDEEP:	6144:DcsrX8qr603K1PFlCu8NXPHZJKFSkw8s9A:gok0aFrCLXP5YFnKA
MD5:	48010898EF61B92A25CBB7F80571E0CB
SHA1:	5C4FEAC3C38B9A4221E2FFD4D7F4D1C57C19FE27
SHA-256:	D8FD1C704F84E286AE0E039A3AD0EF62937033E9527404B6FBB67FDCDAB52803
SHA-512:	51F18EB1FCF77AB973ED8E234B87E24D4560F37D8FE98F381DB29030C18614B616D749E00367A65032C3030BD9D06EE34A1788A76ECC28D004B563571F95AFB4
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/styles/480x384/public/2017-02/BANNER-ZS-2-1900x960.jpg?h=7a8a8cdf&itok=fdBWRZI0
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..L..k.>..o....Y.d[..w..fX...%...Xn.....y."f...5..._..x.C....X...Nd...,q...[......kb....z.Vg.4.I+.... .,..t..kZ#}.6D.K.aI<.......%.Kv.c.E.6.Z.....?.U..Y..Ar..{.C..eo}v.Q[I...5.>.......A<..B.K'...mba.&..Z.tVM..Vm......A.EA.Y.^.[.....g.\..N.u.".E.h...[y..[..D.{.c.InZ(.?..M.'I!..].s....Q...c.!..4.K...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Enroll[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 87a, 52 x 19
Category:	downloaded
Size (bytes):	1410
Entropy (8bit):	7.198100774838102
Encrypted:	false
SSDEEP:	24:IKjreoAX1BthLFyQgtZcGflcSeLUwTmYsEYz7pir0pC5:/uoAX1BnHgt6Sem+YBiw6
MD5:	3F3599581B8F9C8514F3C8D86B172214
SHA1:	5C994AF0C665AF75628908F3D4D0A6D655E970B6
SHA-256:	4B08DE83E867054BBC53BBD78C280D83FCBF61DEA19D56AF1373C9A1FA7BBD2F
SHA-512:	5BE3F959AACE550E722B7A0E2748D05FBD0443E3873FB099C5A286DCF4258F7E44980AB08672A48625DEB65666D25642816DEEEE85AF16B6D68A63AB18B70CA8
Malicious:	false
Reputation:	low
IE Cache URL:	https://secure3.i-doxs.net/casella/images/Enroll.gif
Preview:	GIF87a4........ZGKTGKUGKVFKYGL\KMSHN\HO_MPWRU[UWYGObKRcKSiW[eV[h]_aU^uR^{S^z\aj`adghkkloikrvwy{\|~\|}.Xe.[g.ir.is.wz.y\|.{~.{..{..ev.i{.m~.m..n..w..w..z..z............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................,....4..........."....I$DX..A..#6<8B.E.$D\|.!....b<a..S&..,.,.$.K'GRZ..S&..fb...T.w`..(A..^H.*]...}...q!..X.jE....1.\|.....Z.d..E..-..j."..-.....+.Z..n..T.C..Z..2Th. C..H...P..2..l9...0.....?_.4p...6r...G..9

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Gotham-Black[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Gotham Black family
Category:	downloaded
Size (bytes):	69248
Entropy (8bit):	5.87377123134412
Encrypted:	false
SSDEEP:	768:mlorHqRAXoj1VDIyR3ae5EzMxI512oHW2dag8buKY5CIQm3WsD3yzrGJ9oflvs1b:nqbLIMprs8buTQmmsD30UisuUOb1klZ
MD5:	5F3D6E07DFEAE03CAA5E518FA46C28AD
SHA1:	10685F845D79193CBE78C572662EF56C02E5DE7C
SHA-256:	534B0A760F185A1F42250F91B54FF05B842CEE3AA3E796C3C6D8B7D3041D5E80
SHA-512:	69510348F35FF9F25A8B9B29FC361BEEA64CCDD120546B1A55BEBD9F7A72E380257C980D094C1E15798CECDEBEA873446A42C75F25430F25DEEDBA194D09E12F
Malicious:	false
Reputation:	low
IE Cache URL:	https://c-11158-20201221-www-casella-com.i.icims.com/themes/custom/casella/fonts/Gotham-Black.eot?
Preview:	..................................LP....[..@.................i.....................G.o.t.h.a.m. .B.l.a.c.k.....R.e.g.u.l.a.r...".V.e.r.s.i.o.n. .2...2.0.0. .P.r.o.....G.o.t.h.a.m.-.B.l.a.c.k................pFFTM^...........GDEF.o........ZGPOS.n ....\|..>"GSUB...`.......hOS/2Y.0....x...`cmap...G...x....gasp...........glyf.M.....$....head...c.......6hhea...E...4...$hmtxy.Ar........loca).Q>...H....maxp.?.....X... name..6.........post.................33..i._.<............9.......9......................... .8.....................................................@.................................2..................@..[........H&FJ... ... .8..................... ...........M.......D.6..."...........#......."...-...........9.......(...,.......).....p.!.m.......v.....).f...v.....+.&.1.&.....?...?...P...............>...'...>...>...>...'...>.G.C.4.....>.i.>.d.>...>.?.'...>.?.'...>...........6.....].............)...C............X.....Y.W.....3.9.......^...........z.3.-.4.....[.3.-.8...3.z.3....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Helper[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 280x187, frames 3
Category:	downloaded
Size (bytes):	54394
Entropy (8bit):	7.956972919722851
Encrypted:	false
SSDEEP:	768:DSElKQvLQoTqFKJVYOYLhJNPFm97Nea2pS+I25oJfWv9cI/cdF5teT/FdJvVT7C1:DdvL9qk0PJNw97NQYtgifycd4DFbvtm1
MD5:	BE3F19FF565189F39708A4FAF877CB7C
SHA1:	C730599FDAADC53E6E20074DFC03672332A0ED0B
SHA-256:	229B5F616F7199CA11C24C1B29E11B243DFE86CF04C3573A231DE82654D4CEEB
SHA-512:	F0957A3F6368184B74C736229C6212AE6C42353D6C9A3FD0603C4A663ADB81625722839A81BFB18F08B5FBE5B8902ADF635ED37F902F4F77818B946E01CDEDBA
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/styles/280x187/public/2021-04/Helper.jpeg?h=c775bc71&itok=yJ73e6-L
Preview:	......JFIF.....`.`.....<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..#.-w.......M]7..y...K4Kkgg<K.YZ.!mV...7..-.8.`.1..../@.........M,R]K.7S#[...h...K"...y...#.. ....HP4..&..0...Z..~.......p.:f...W.T...\...---.Qj..\...r..g.......,.-SN.......KV......9%..K.....&"".R+yeh...X.f?.G9.+..,...a]\.6.n&Te...j.^.....m.....JQ.{.U/:r.I3....r...e..)...1P.c.8...e}z._....R7.,El..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\IMGL9024%20-%20worthingtonimages.com_RT[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 280x187, frames 3
Category:	downloaded
Size (bytes):	47496
Entropy (8bit):	7.948693765658309
Encrypted:	false
SSDEEP:	768:DTrF4NMGu3NYOGEzwa/QHu07Zpm3ZcIkIYwnFGt9+upri5R:D3FAMPJpz9/QdnomIGGcrif
MD5:	6E56A5969A359AD3C064D3AB02D19157
SHA1:	CCCD47A72F02AB53A89EE17EFD374EB24592F750
SHA-256:	DB0B4E03F7402D6E12D60D39445BFF1FEAB48B461C929A3F073A30164FA5BBEC
SHA-512:	30E64916304158CAB2164602DAC21F17684FC29F09F3002C393A243C976214FE2D7E1672383A00754B9EBB036787B56681512C0FEB1248F4FA16FC3C72EFB8B2
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/styles/280x187/public/2021-04/IMGL9024%20-%20worthingtonimages.com_RT.JPG?h=f2fcf546&itok=F_3T84nk
Preview:	......JFIF.....`.`.....<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......b/*2F9.o.8.......q.q....WH..s.L.pjl.....R...A1IE$.V...<...3..d..Td..S.L[UIZU....7........\|....=?._.e.......q....W...u../.9#...wZ%g.&...T...H._....W.i.`s...s.....r1.......!.d.......q...?O..#..u........<s.{.5z.u.......<..9...+..rY.....q.....g..8.}.\|.........{7...5m........w.....g.8.2..I$..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\IR-icon[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 204 x 152, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1704
Entropy (8bit):	7.050020806414554
Encrypted:	false
SSDEEP:	24:g1hfvWwjx82lY2T3iV8+yJ3VJVHG9Kftej5Quwg9zXGyJB8e9LL8:+ANn2eAJ3H9yAk9Iah9Lw
MD5:	F3803462C9A3BE12DCCC16D162F43733
SHA1:	9E766FC388882E50E48D912CFB65FEE3FD1384B6
SHA-256:	7F769844B6075B0FD7CC07F911AA40AFDFEEEDA44812058360CCA7B55F8EED64
SHA-512:	229C9BABEA01820A89CEDFBAA8C34FB5EFF7CD63CF57396B0BE611528032BD80E023CD70B3302A570E241E3B273F274062B01F14C8C0F36674C5F9915798BD9D
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/themes/custom/casella/i/misc/IR-icon.png
Preview:	.PNG........IHDR..............=......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)" xmpMM:InstanceID="xmp.iid:4FF1FAAFDC6C11E6B58E9EFB08FEE97B" xmpMM:DocumentID="xmp.did:4FF1FAB0DC6C11E6B58E9EFB08FEE97B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4FF1FAADDC6C11E6B58E9EFB08FEE97B" stRef:documentID="xmp.did:4FF1FAAEDC6C11E6B58E9EFB08FEE97B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx...?kSQ...D....~......Zp......ft.:..`.D...... b... ....$.bm!..M .....p=.y.....=....[.....:1...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\JohnDoug-Truck_0[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 480x384, frames 3
Category:	downloaded
Size (bytes):	117942
Entropy (8bit):	7.96808505540523
Encrypted:	false
SSDEEP:	3072:IC2BStqdDgVm9wwA24KF2mmbRR0ifTFkuma62PCjII6JjCG:x2stEDom/v2JR/62PCjI1
MD5:	B65E5FC080BBF23621D32A822FDDE6AE
SHA1:	DDE7005CC8906E9A04A14118D1992D8CA83DDA6C
SHA-256:	3FBAE76374EFF7E9CE51D8A82F3142C0687588E813D7F740AFD49320A81743F3
SHA-512:	693B379A89E222D103CECB99675F901F4F09509304ECB94ED587046ACEB5244093BE9057077AFB4EB6264F79B83DD58C182D723EA64A491DAC61ADD2F2AE8D29
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/styles/480x384/public/2016-12/JohnDoug-Truck_0.jpg?h=52a61b8e&itok=Q7rj68nk
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..q...XK.....&mu.1.iR.xc....2...)e..Wz.i o.....F............@T/.Ac..to%.A.k.....s_g\|,.~..C.C....^.>".....;...&%.'C.d..b$...A....w6b.u;]6....7.RX[...E.K+....k)... .0...Z.>rG.8X<..K.e...8-#.7W/h.I..c`.I..[...z.p.v..@..1o<.]...b.wg...0*p.t. .yTZZ...l....K.6....2)P..nM...w\.u.>..8..T.ym.L.1.....+.\m c...zE

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Login[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 87a, 52 x 19
Category:	downloaded
Size (bytes):	1412
Entropy (8bit):	7.422177064958372
Encrypted:	false
SSDEEP:	24:IKjreoAX1BthLs+yQgt10S9sU6qqYCucdE58aOXfPVr4iHa:/uoAX1Bn4mgpyzx+YXVrvHa
MD5:	5027ABC5FCD8B396222C210C20201C4A
SHA1:	4D8DB48688A6E3F0FF063A899DD18995EAC0325D
SHA-256:	198A9CB339C89A12CF71AB5465CFDDD1A11AF223E260237F33202BCE7714B824
SHA-512:	6D91F13F832139E9F4417823DF3C2CD7BF758615C8DD58FF76C803911908E879BCF19806A1932C72520BD1029DF7AC16E492D385D3B2EFCE71E8EBC9FD5786B9
Malicious:	false
Reputation:	low
IE Cache URL:	https://secure3.i-doxs.net/casella/images/Login.gif
Preview:	GIF87a4........ZGKTGKUGKVFKYGL\KMSHN\HO_MPWRU[UWYGObKRcKSiW[eV[h]_aU^uR^{S^z\aj`adghkkloikrvwy{\|~\|}.Xe.[g.ir.is.wz.y\|.{~.{..{..ev.i{.m~.m..n..w..w..z..z.............................................................................................................................................................................................................................................................................................................................................................................................................................\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.\|}.{\|~\ajm~............:..:........................................................,....4..........."....I$DX..A..#6<8B.E.$D\|.!....b:].t..&...,.$IK'GNZ...&..f^...S.v`..(AJ.]H.*]...\|...q...X.jE....1.xz.jV.X.`...--..d."k.-....{..Z..h..T.C..Z..2Th. C...(T..D.1..Lh3...0~.P...\|I...."_..3gN.9

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\O2IBJZ7L.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	66924
Entropy (8bit):	5.621854208995882
Encrypted:	false
SSDEEP:	1536:RcXbB1xGLGyx3OLO17yEPA27w9oE+JolbAFhN/nQ:y9O6G+C827w9oE+CxAFhu
MD5:	4A6E92CD9DBA9CA29356C4A0B12FD435
SHA1:	621684563B4738D2EC57F32F2ECC715A43CEC4C3
SHA-256:	B16DD0B6FE6939F04AD418D8FAD5E7A5EF09D0C21C0F1BC121D51DF0ACFEA4A9
SHA-512:	DCEC32306B1048FBF43C6B64669F6048E85BAE03AE0068A37953DD158369ACA31D3DD232F1E82E2D3773129B8CFAAA9AADA633A0B023A8B79D89BE410679DB8E
Malicious:	false
Reputation:	low
Preview:	............................<!DOCTYPE html><html lang="en" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# " class="career csstransitions svg no-touchevents details"><head id="" class=""><base href="https://c-11158-20201221-www-casella-com.i.icims.com/careers/"> <script type="text/javascript">(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"fa0a609357",applicationID:"55450868"};window.NREUM\|\|(NREUM={}),__nr_require=function(e,t,n){function r(n){if(!t[n]){var i=t[n]={exports:{}};e[n][0].call(i.exports,function(t){var i=e[n][1][t];return r(i\|\|t)},i,i.exports)}return t[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var i=0;i

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\PHOTO-LisaM[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 280x187, frames 3
Category:	downloaded
Size (bytes):	62761
Entropy (8bit):	7.950465492179113
Encrypted:	false
SSDEEP:	1536:DMjiPqVTp/wnHLZUM/uuMdCpvAO5WVpaL5LRYcO4ljRY:jPOpSHFUZuM8pvAO595R5Y
MD5:	ED6A12F689388C56ED67C2896A3C963E
SHA1:	7AF3F882953A9044738762ECBAC75AEA9909F9FF
SHA-256:	724792080CD6B6B035ACD5ABBB95122518C81C1C43D378BDC05635D4311160A4
SHA-512:	5927C5AB66E15CD1DB3FA082A98F180DAFFA12585D8B508A69C3C182F0B4B3C5DB23FA5E6431908AC3DFF7A6C90E347BCEE0C5ECBC7EB8DFFDE908FF5106DC98
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/styles/280x187/public/2021-04/PHOTO-LisaM.jpg?h=2992ba0a&itok=WlhPwy-4
Preview:	......JFIF.....`.`.....<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..\|.9.K......xw.P.n[.Ac..GP{A..m\|.zu..<&f.(qj..C.....)....i.&i>3...u..x..C....+.u..i....B...]@....Y!.]:...\|../.~..Z...G.A..J...m.1i.x#V.\|j....,R..1H.d......!..>.(.........S..:Rh......t..M...c.....[<a.1B....~.B....q2.V.H..iN....Z..WTi....~.N)i.J..1.......)S.*.J.J..`..iB...7jr.:....i.V.\].......P..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\PayNow[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 87a, 62 x 19
Category:	downloaded
Size (bytes):	1616
Entropy (8bit):	7.487565611945328
Encrypted:	false
SSDEEP:	48:tGLrl1HPlO0eNeIS1FRu/w1lgxQUWt4TmXzDc/F:wR1H9Od01Fw4lgLXmXfc/F
MD5:	6F771A10C23070A0AF568106F44D88D0
SHA1:	1E945E2CEE57099AC06B1EC615EBE15188E68BF6
SHA-256:	DDBEA2C3A99694045CAADBAF31740814A914F995B6E3461D4541F1A1D53229FA
SHA-512:	79B3F7833C4231BFF1774237F8F3994868F343584A38F33329942C871929E7B6459A8FCBC4B021AA7BB427740311EEDDF2B5FA74AF8D4688FA0EF3A643C4FB32
Malicious:	false
Reputation:	low
IE Cache URL:	https://secure3.i-doxs.net/casella/images/PayNow.gif
Preview:	GIF87a>........Z?BHFGIGHJFIMHIKIJKJKMHLVHMVJMTIMXIP_JP^NR\YZ\KQaLRaNVjQXiZ]cZ]fS[p^`b^`c_`c_ac_ad\an\e}`adfgjhikjlmklnoqtuvy\g.\g.bn.dq.w{.x\|.y}.y~.z}.z~.s\|.s}.m~.o..r..t..t..{..~.....~...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................,....>........Di.#E..+..8..a.....XHQ!.....H...-T.P"0...D...f.K6l.i.F..8.....9rt.3.f.jl..Ys..4SD...a..].f..K..Y.f.U..XY..+...Yc.....(N.........L....7h.x.*.0b...K...1..i...3.d.A...2d..H..v.re...#.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Screen%20Shot%202020-09-23%20at%2011.40.28%20AM[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 280 x 187, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	90493
Entropy (8bit):	7.991382096398374
Encrypted:	true
SSDEEP:	1536:7XCNJAsnNKqfsMpby5Q7iWzhwM1abQnhU6XqusFeDyG6CH3aBgSt8McOIhhPv:7X6nns4Ym7wM1pWhleWhCY381OSxv
MD5:	0434DB8079E4ECA815058D930209DC2F
SHA1:	4A5CFB254308FD5C596A0BB21BF6C035FF043B18
SHA-256:	0BCB0EC49242DD2F1A3E195115C36571FD1D21CC3EA40F5ECB6FE802899419F5
SHA-512:	0CABBD0693EA96D78794405B8D3C8C7DB874F0F3930E2C8419547BCAD370AEE41B7206F8355FC7CFFDA2EC0ED9C02FDECDD312334ACA0FDEE053F2FF1EA32A5E
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/styles/280x187/public/2021-04/Screen%20Shot%202020-09-23%20at%2011.40.28%20AM.png?h=87ca5f37&itok=e674vuHm
Preview:	.PNG........IHDR..............q.x....pHYs..........+.... .IDATx...K.n.v...U.....^.}.9.....m...%XD.v...$..A@...DB.A...4....XBB`.H"..8v...c;..s..}.~....Y5h.1.j....\|..k...Y.j.........5..DH9..R..k.H).("r.........$......w..}..^.......;{.Ck"~_..xU{../.E..^...-..........r.r.&..2.L...^......hU..&..N.%.zW.....b...i......>....d..CQ.....$:.N.B.O..8..z...$"..V..2gS&O.%-..:.I.. I.w.RUm>E(s..J.c'..V)U9.x./\.a..U.6..3xPa.g.... l.r.!1q..([..JAHl..v#.&..fL...(.VJ..T.sf_f.sa..,.S...)...ZQ...s.$..T......0W(...Z.'T+3Pj..Bu.j.....b.k.V...$)!RA@H$.I.#..TF&.)^..0).!.7dxy. .....]>..P.I.?.q=.....&u,...?.T..`.`#6.M...v.r.rN.&...HR(..Jt..N.@2.YP)..Z.>tj.........c.p1....PC..v[;..9...j."!.Mk."I..R..Y..dML.r...m.........Z.d...$..Z..F1...(Z.U.O .N..`..qu:[.LQ(A..$%.D.j}....iR&....a.....i.y.`-0.8.a.B. )s"J.ARb.....e....$J..[...P....FM.T.&e.0....UH.U2.J..a.Z+..BA...$..f..3.... .b...`......r;.h.....9....}.\|....$..*.xg...5.\...e..7.#,.~....2..).".Z+...U+UaVE.1.bd.a.-...S.(...........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Screen%20Shot%202020-09-24%20at%2012.03.31%20PM[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 280 x 187, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	108790
Entropy (8bit):	7.9883416699535035
Encrypted:	false
SSDEEP:	3072:BOTVXRewXx+i5oltihJSdvdnqts8spBtKmaYZX:BaVheix4ltiW1tZl
MD5:	5C86B1B86166D9F264FBF41D801D3301
SHA1:	2EAFE01D2AEF18E57D753C1383CABB898CDB7647
SHA-256:	4DFBD264280491FCFADC55A91C19359D6EF15C739F5DC35FF6AFB62C83C06BBD
SHA-512:	0040B1E16713EA0285D9B9A4362003E65CCCB6C7519AE044F3BBF6E698DC996CC767BA3B43AB25906AC602A2100BF2680E25197A033074151BE274DC64AACBB2
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/styles/280x187/public/2021-04/Screen%20Shot%202020-09-24%20at%2012.03.31%20PM.png?h=b6a95e15&itok=biC4NExs
Preview:	.PNG........IHDR..............q.x....pHYs..........+.... .IDATx.t..l.u..[{8.DD.7.T......(...@Y.n.B..~..1....`.....[...,.-R...b.Uw.).s........H:......q......}k....S...f..^_..#.2}.Y..B..X.......5.V.'......S..p......q..k.X..0&.VLG.U...w........7........!.. q...q..Cp .3..X.T..Z).....>...J)L...O....?...K....'x..Q.\|%,{.x..?...._ N...%.:.G.O.......k./q......T......[.n.\|...,8:9......g..h{..f..C.........iL..-......V...5.......}.Z.'.....8.l.4N......;.p..9.....G...\|.;....o1+d..R0._w..?....'...9.k>......O.L..:su[(..^.{.x.A......1....N.%.;F...6...,.-.....:..j..B.G.n.Gpl...b.H%.a..> b...."NP...1.1.0..-..3.H@..........u..x..!....{T....@1...s.3#....].#..B`.X.bO..pO...."B....^..{D...3....90E....F.mm..Ua.FR..R....Z...K.........c..1.X..c..)%........rJ.v;....0a...............o.._^..O.@I....'J.R.R......SVKN.r...d.b<}...z.$z2..........j...7\m....\..>...BI'\\..qD.D0e.2.@..1:..U..!.p.6..!..a ....w...hf..{.1....V...s".... 8.l\|~..@..k....l@..h..v.q.V...j...p.....G<..CV

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Trailer%20dump_1[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 480x216, frames 3
Category:	dropped
Size (bytes):	39708
Entropy (8bit):	7.96202857940588
Encrypted:	false
SSDEEP:	768:nGhowggqqqahB7gF9pw5p0vuq4ajRY0aEFMx3APEFMYWuer+kC:nPwOqqwB7gF9a/ESatY0aD3APSerC
MD5:	7BDBE228F6D8A79D3FB3FD98CD81BA81
SHA1:	5B153FE57A17FA16EAA5C306E821106ACD7BFABF
SHA-256:	26B17B2AEC1FE2E3D1AC2A6B63EBE65EC77D9FED79FFC1CEF0A89DDF59A7DF60
SHA-512:	CDF6F74A005AE887685F021362879CE8E88DD5E2CA985BFB6D07FB0554751322881B1113E72C217100C3E2CCE0D210E7B3DE81316A3E41832272320637D0F6A5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.........d.`x.'.zw.*E..5,Ssg...=8..O.].V.9.... .....8.....i1@....99q.X.w..}k.bX.......]o._~....:..-.._..n..k..R.W. ....z.1.\.Nk[m.J...W.'...'.L.Q.S...c.e.p....R2s....k6..)fa)#;G....;p....oJ.8.&...v}...?.............k_V.....4.2..\.......q..N..+2.L.W...P..$.A...;...ON9.E.F...i........^9..ZZ..[....b.7n

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Truck-business-1[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 1400x630, frames 3
Category:	downloaded
Size (bytes):	106422
Entropy (8bit):	7.951840271845407
Encrypted:	false
SSDEEP:	3072:GGVBxiVQi8PpOagtgbT/WQZxxyof2xGbzI0+EHDfWcbx5TJy69y:G2BxiVV8PpOagCbT/WQZx5k+fz5gn
MD5:	89FC8C3ED360DDBCC694FCE0217FC459
SHA1:	F4C36166824843DD53F4A28B9D6CBD7ABFD1672E
SHA-256:	2024C614EDBC071B8FB238B63AE98AFB8DC0BCB74E35E5A7BB92132126E4513E
SHA-512:	E6252A64F49A8A412E7D463045352F5C0BE8B3F454C26B3BFE002F7DFE8725EBC1843855EDFD38D6093B328DFEC0C0AB06D2F5C0AF5CB438B897F0E411F2EB3A
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/styles/1400x630/public/2016-12/Truck-business-1.jpg?h=a7f9be62&itok=BWt-k-vt
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......v.x.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..a..n;..\|..N>tN.~4.....AH).....R.@.E......`........u.....GJ\Q.P.sK..........)h...iq..c..LQK.1.i.....(...1E).Q.Z`%...P).....(....E..(..&(.-...{..i.......F)\..F94.(..Q.\R...U.7.....ZwAF.(.)1N.8....QN..8.@...@.N.&(....4.b....9....}(.......Piz.\....1.QK.P.h....(....b..1.....:.^(..@..z\w..I..A.S....n:.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\WMRT93B1.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	88108
Entropy (8bit):	5.255231125747819
Encrypted:	false
SSDEEP:	1536:RizltYqJr7yRNClGTjeLVAY7NeB+SIrWLgvDCgpSwovExT8uLxkh8DWBKtU3UvUm:RUqmeV86pVg5X60vviSEti50yH2Qz0sD
MD5:	8365F3AA02292375A4C400A63E480889
SHA1:	E5426BB4858E7C03E17DAC9B69759C33D6DAD4A6
SHA-256:	6D140534408A81DC513F83D8394AEC809E76557C777FF1C80BF4AC6A666993E7
SHA-512:	2302479925EAA2D159DF5214371B3A6472847276178494E40C0EE13D68836A51FF56A554DB3026D06B30526BFDDDE7E47E7D1970EF8FCCAF62A39F9D71833303
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# " class="landing-page">. <head>. <meta name="google-site-verification" content="YDvNl0VJhQJP6yrbLJp1-zQNGziQDoqCwwtXKBfJk2I" />. Google Tag Manager --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-JSKKV');</script> End Google Tag Manager -->. <meta charset="utf-8" /><scri

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\align.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	516
Entropy (8bit):	4.659087910408482
Encrypted:	false
SSDEEP:	12:U6dD/uKW9hFYaXTefgYe03jKqKCNILIEL9LyYBjfo/0V:3dil9T3DwgYL3jKvYPHo
MD5:	04D7490507FEC772BA9B77FF032847FA
SHA1:	E0A7D1EBC3D499FB65B42D4431237E15E273BCCB
SHA-256:	04A7A5360238B1BC854B61C4E04391B93141B57FE9266ECD3D5806D4E0353A82
SHA-512:	FFC5F098FE2982E760189ECE2F603F7DEDB3ECDFC9B801AC56C578D85BE00B8A9A8E2B57A8478EF5840B7F377C48DB5A5380856B8D23D8E3E634C65933774AA5
Malicious:	false
Reputation:	low
IE Cache URL:	https://c-11158-20201221-www-casella-com.i.icims.com/core/themes/stable/css/system/components/align.module.css?qljrib
Preview:	/*.. @file.. * Alignment classes for text and block level elements... /.....text-align-left {.. text-align: left;..}...text-align-right {.. text-align: right;..}...text-align-center {.. text-align: center;..}...text-align-justify {.. text-align: justify;..}..../.. Alignment classes for block level elements (images, videos, blockquotes, etc.).. */...align-left {.. float: left;..}...align-right {.. float: right;..}...align-center {.. display: block;.. margin-right: auto;.. margin-left: auto;..}..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\autocomplete-loading.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	troff or preprocessor input, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	633
Entropy (8bit):	4.944219293052727
Encrypted:	false
SSDEEP:	12:U6dMhiyFWH4dGfPRLMr5/AFilmb4M7uXHRLI3Vr5AN9mb4I3V7uXy:3daiykH4dmp+5/AoQb6Xxs5lbAXy
MD5:	2548D606F096D31AE1839C9E3331F37D
SHA1:	B9EBFF128AB3FB23C6D5F83F172418438177A49D
SHA-256:	24B16EAA0AF08A248F87ABDB33C3D90B858E02628ADA3C1CA366655CCC506374
SHA-512:	BAE0296F10C3E9D106D356DC2739D5070C0BD5C2EFF707069D57B3D82773DFEB642F9A1C9C64113E9CC72581B7175CD9E6589B9524FD93319ED6AA24311FE273
Malicious:	false
Reputation:	low
IE Cache URL:	https://c-11158-20201221-www-casella-com.i.icims.com/core/themes/stable/css/system/components/autocomplete-loading.module.css?qljrib
Preview:	/*.. @file.. * Visual styles for animated throbber... .. @see autocomplete.js.. /.....js input.form-autocomplete {.. background-image: url(../../../images/core/throbber-inactive.png);.. background-repeat: no-repeat;.. background-position: 100% center; / LTR /..}...js[dir="rtl"] input.form-autocomplete {.. background-position: 0% center;..}...js input.form-autocomplete.ui-autocomplete-loading {.. background-image: url(../../../images/core/throbber-active.gif);.. background-position: 100% center; / LTR */..}...js[dir="rtl"] input.form-autocomplete.ui-autocomplete-loading {.. background-position: 0% center;..}..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\capture[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	164155
Entropy (8bit):	5.434263098825111
Encrypted:	false
SSDEEP:	3072:b1SdOfcY+aBSIxjOBfwpw4Uc+hGpa5v3Ri7z5Xg:yOfia9Kfwpwdv3iW
MD5:	6FD4624AC5413D01D355905086C7B1B5
SHA1:	F2E1A17285D08009D44440DE28C39B23C60BED31
SHA-256:	4DDD92DEC33C4103544854F91E46731612B8C288F0ABD7695230A08E01DCAC2C
SHA-512:	859C1538AB798A6159FA8FE03885C7D44416AFA5969E81AFFE0110F2F1C17DBC8B560CB10EE5CEA104C0D98ECD5C8DF74BC2E7EB25D6007E484913466902D579
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.rlets.com/capture_static/mms/capture.js
Preview:	!function capture(window,document,undefined){"use strict";if(window.RLCAP&&window.RLCAP.version)console&&console.warn&&console.warn("Capture has already been loaded.");else{var CAPTURE_VERSION="0698945cfd85ab10938f9864fdaae48b4d5e36dd";window.RLCAP=window.RLCAP\|\|{},window.RLCAP.version=CAPTURE_VERSION;var hasInitialized=!1,CONSTANTS={CAMPAIGN_EVENT:"campaign_event",CONFIG_EVENT:"config_event",EU_VISITOR_CHECK_EVENT:"eu_visitor_check_event",OPT_OUT_CHECK_EVENT:"opt_out_check_event",SHOW_BANNER_EVENT:"show_banner",SHOW_IMPLIED_CONSENT_BANNER_EVENT:"show_implied_consent_banner",SIMPLIFI_EVENT:"simplifi_visitor_event",SIMPLIFI_INIT_EVENT:"simplifi_init_event",VISIT_EVENT:"visit_event"},BOTS={ahrefs:["AhrefsBot"],apple:["Applebot"],barracuda:["barracuda_vsm"],google:["Google"],yahoo:["Yahoo! Slurp"],yandex:["yandex.com/bots"],pingdom:["pingbot"],hubspot:["Hubspot Migration bot","Hubspot Webcrawler"],jobseeker:["JobBot"],leadcrunch:["CrunchBot"],opendi:["Opendi Screenshot Bot"],phantomjs:["S

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\container-inline.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	235
Entropy (8bit):	4.48709628679562
Encrypted:	false
SSDEEP:	6:U6dqNT9rSTJu3WBQKO65MdeBlEfVvlHktF3jfo9:U6doTVM4a1O65eefERdktBjfo9
MD5:	134E3CD5110A796AA447C6E886D31B87
SHA1:	A3D77A34D43E600A6D4B025B3E31773DC70403B4
SHA-256:	49A31D020822A89EDA5B4FBE4D873BDD4BF94E66B6C9AFBA715B8279259EF79A
SHA-512:	31FE7B5E935C4CD26781BF2E01377A08540297D3004129A2A0A9516230DA71BA3AA57D5FFBA129259255B366052A7E09C9369E3A3704DC6804E8DDBD0794FFB3
Malicious:	false
Reputation:	low
IE Cache URL:	https://c-11158-20201221-www-casella-com.i.icims.com/core/themes/stable/css/system/components/container-inline.module.css?qljrib
Preview:	/*.. @file.. * Inline items... /.....container-inline div,...container-inline label {.. display: inline;..}../ Details contents always need to be rendered as block. */...container-inline .details-wrapper {.. display: block;..}..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\css__0ocaB9BRuNrmD5oFvZi50Nm5I9tkJRm0uksBslP4bY[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	48241
Entropy (8bit):	5.121831234225155
Encrypted:	false
SSDEEP:	384:GnliHUkTa0OPr2Zv5y3RRAxFnEf407g0XkJ/OUMAngMErHUapH6LpdxyFx1UpFbM:EkTa0OPr2Zv5yLilkUY6LnxyFMA
MD5:	8B2165D904525A5E6E5DB366700D3536
SHA1:	2DDC37F40D862C3B457E1B14200BB013A54A59E6
SHA-256:	FF4A1C681F4146E36B983E6816F662E74366E48F6D909466D2E92C06C94FE1B6
SHA-512:	2CFA3CD7C025B1A9C7CBC35841D796F04E722B7CF235C2F72DCFBDEA0530BA86DBF4E04207F4E205C38299AF677C2064324C30CF1255A090E38C85EFCB595359
Malicious:	false
Reputation:	low
IE Cache URL:	https://ir.casella.com/sites/g/files/knoqqb53536/files/css/css__0ocaB9BRuNrmD5oFvZi50Nm5I9tkJRm0uksBslP4bY.css
Preview:	[ndq-data-icon]:before{font-family:"ndqfonticons" !important;content:attr(ndq-data-icon);font-style:normal !important;font-weight:normal !important;font-variant:normal !important;text-transform:none !important;text-decoration:none !important;display:inline-block;speak:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-size:30px;vertical-align:bottom;padding-right:5px;}[class^="ndqicon-"]:before,[class*=" ndqicon-"]:before{font-family:"ndqfonticons" !important;font-style:normal !important;font-weight:normal !important;font-variant:normal !important;text-decoration:none !important;display:inline-block;text-transform:none !important;speak:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-size:22px;vertical-align:middle;}.ndq-icon svg{fill:#000}.ndqicon-briefcase-1:before{content:"\e068";}.ndqicon-briefcase-2:before{content:"\e069";color:#454545;}.ndqicon-briefcase:before{content:"\e02a";color:#454545;}.nd

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\custom[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	37438
Entropy (8bit):	5.3548670809167245
Encrypted:	false
SSDEEP:	768:9J1HrtZnLuZnW9ZnG4R4fn8tfJSX0eAshCFGFeFqLETPhG:/xrtZnLuZnW9ZnWn8yX0eAshCIEDTPhG
MD5:	386A1EDC686C5509CD2E75335492111D
SHA1:	2E7AD27C47759E3B975092954BC585860B3CEA87
SHA-256:	D1BE550FA641EA4EA543F9B52111B3CF9A0508601FEB1C102D618E8D92559205
SHA-512:	31D89993EFE9BCB7ADE0A083C7C53F1E1D1843586970AAED3FCF14134AE0E0B689AE5FBE18464F6409CAC9E0D4A7384D727986F3C823BEC1922F6EEF0D4D46CD
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/themes/custom/casella/css/custom/custom.css?qpcosx
Preview:	/.Website Name: High Peaks Resort.Description: Global/General stylesheet.Version: 1.0.Author: Adworkshop.Author URI: http://www.adworkshop.com./../* ======================================================= /./ FONTS /./ ======================================================= */. @font-face {..font-family: 'Gotham-Black';..src: url('../../fonts/Gotham-Black.eot');..src: url('../../fonts/Gotham-Black.eot?#iefix') format('embedded-opentype'),...url('../../fonts/Gotham-Black.woff2') format('woff2'),...url('../../fonts/Gotham-Black.woff') format('woff'),...url('../../fonts/Gotham-Black.ttf') format('truetype'),...url('../../fonts/Gotham-Black.svg#Gotham-Black') format('svg');..font-weight: normal;..font-style: normal;.}..@font-face {..font-family: 'Gotham-Bold';..src: url('../../fonts/Gotham-Bold.eot');..src: url('../../fonts/Gotham-Bold.eot?#iefix') format('embedded-opentype'),...url('../../fonts/Gotham-Bold.woff2') format('woff2'),...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\custom[2].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	38194
Entropy (8bit):	5.3898171455076955
Encrypted:	false
SSDEEP:	768:lJ2wqJSI/40u4q4ucTLfKwvAP+hBI9eV6rex:HpqcKPycTVDhT6rex
MD5:	AA3D526C4BA3A1A7E8F2F90095BA1AB3
SHA1:	C2D13C71757624E19466D49F07105973E14DAAB1
SHA-256:	8D37EF96CF3EC7AF5EF8470831B0D895D049264836F703B68BF90D86042B466F
SHA-512:	DF6C1480301D645582A9526699037557A409D203A88008D9012507353E8A348257CA0E80A1B39FB9AE3C8C435108B46E2C10C55C0B0817775694683F5CE745E3
Malicious:	false
Reputation:	low
IE Cache URL:	https://c-11158-20201221-www-casella-com.i.icims.com/themes/custom/casella/css/custom/custom.css?qljrib
Preview:	/..Website Name: High Peaks Resort..Description: Global/General stylesheet..Version: 1.0..Author: Adworkshop..Author URI: http://www.adworkshop.com../..../* ======================================================= /../ FONTS /../ ======================================================= */.. @font-face {...font-family: 'Gotham-Black';...src: url('../../fonts/Gotham-Black.eot');...src: url('../../fonts/Gotham-Black.eot?#iefix') format('embedded-opentype'),....url('../../fonts/Gotham-Black.woff2') format('woff2'),....url('../../fonts/Gotham-Black.woff') format('woff'),....url('../../fonts/Gotham-Black.ttf') format('truetype'),....url('../../fonts/Gotham-Black.svg#Gotham-Black') format('svg');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Gotham-Bold';...src: url('../../fonts/Gotham-Bold.eot');...src: url('../../fonts/Gotham-Bold.eot?#iefix') format('embedded-opentype'),....url('../../fonts/Gotham-Bold.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\dest5[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	6983
Entropy (8bit):	5.483922930498494
Encrypted:	false
SSDEEP:	96:inw1EOb9muLpw47eIDCpXHG5z/QkqJeMnSSyi8c2Kgn/UnNsnA2aI4j4e:iPc/xDCpX8/in/y+2KgMSA26l
MD5:	2C9C2EE145EE280B85A217AD7045FAE5
SHA1:	6ABE394B53B32816ECA642126FD62BCD91D17348
SHA-256:	7BEA17A80A61ED0F54248B4FFC4C718F7C8FF2619742577A73591D62CE074DA8
SHA-512:	3762C5F678EB4858000FCF379EA1C8BEA54F2A211A3F940300876D1697B82012C57B0E614E33770D8F5626B2F4C3B7842B658C926E12974A43A1B0A313E2DB79
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">.<html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javascript">.var Demdex={version:"6.2",dest:"5",PROTOCOL:"https:"==document.location.protocol?"https:":"http:",COOKIE_DOMAIN:function(){var a=document.domain;/demdex\.net$/i.test(a)&&(a=".demdex.net");return a}(),SIX_MONTHS_IN_MINUTES:259200,THREAD_YIELDING_DELAY:100,errorReportingEnabled:!1,sent:[],errored:[],timesDextpWasCleared:0,dpids:null,cbmacros:["%timestamp%","%rnd%","%did%","%http_proto%"],validators:{isPopulatedString:function(a){return"string"==typeof a&&a.length}},addListener:function(){if(document.addEventListener)return function(a,.b,c){a.addEventListener(b,function(a){"function"==typeof c&&c(a)},!1)};if(document.attachEvent)return function(a,b,c){a.attachEvent("on"+b,function(a){"function"==typeof c&&c(a)})}}(),replaceMacro:f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\embed[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	39819
Entropy (8bit):	5.240122704158427
Encrypted:	false
SSDEEP:	768:z2aA6BVRJ/LGhSOFjwpVtcSOmRVy+GV2UKDLo459fk9qwMILi9MS/v/FZVeG/GfX:i6BVRJ/LhVy+21KD359fk9qFILi9N/do
MD5:	C913338EECFA5E495053A7FFD9EE7E40
SHA1:	B606F5C84AA375116D1626D036983E4F76DA6FF7
SHA-256:	F4F7FA29F3661A499112FE623C00887924A2456D5847BE5BBBA2E60F77978F8F
SHA-512:	4CEA784953BE82CF95B2364D3DE4A8D12FFD0D14EB639BD34DD52C8398E54042938AA664EA138A69CFD8D375EBBA26EE6D0BE2644B5CE5759BE431C782792553
Malicious:	false
Reputation:	low
IE Cache URL:	http://apps.twinesocial.com/embed?app=casella&layout=251053&showLoadMore=yes&autoload=no
Preview:	if (typeof TwineSDK == 'undefined') {...Twine = {}; // global object container..Twine.frameArray = new Array();...var TwineSDK = {....// default to autoLoad the hub; set to false to manually load...autoLoad: true,....// default settings for networks...// an example:...networks: {},....// load the Twine hub using this specific tab id...// it sends it to the first twine iframe on the page...// no way to send it into a second iframe on the page...// we could send in a parameter if it is a problem...LoadTabById: function (tabId) {....document.getElementById('twine-iframe-' + Twine.frameArray[0].instanceId).contentWindow.postMessage(JSON.stringify({verb: "load-tab",data: tabId}), "*");...},....setIFrameSrc: function(nurl,iFrameID) {....if (!document.getElementById(iFrameID).src) {.....document.getElementById(iFrameID).src = nurl;....}...},....executeCTAEvent: function(el) {....var action = jQuery(el).attr('data-cta-action'),......cta_id = jQuery(el).attr('data-cta-id'),......media_id = jQue

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\f[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	36606
Entropy (8bit):	5.497235992375013
Encrypted:	false
SSDEEP:	384:K49S+7D2RCcqbzAGfn292c3Lxa6I5rDcJcRAeYUAkP/e5KNCsNSDAhcjCSJ1pOu1:7B7jciAat4JGYUAkXusAjebvm48XoU
MD5:	645EE2F03A1C6F1C98B0A1E0A7DB00DA
SHA1:	F93FE04BB5D2E3A1AA7446A4125ED2F9A9BB5BAD
SHA-256:	C322060C87967C74E8E1469862CAB247AD7AA0C66E35918333904A125EDCF3B3
SHA-512:	2A1D418C15B101AA028F89F176ABD5FEDC21BE38E70D0CD9BC530F593585DCA0A34E4C77AED2A8B8350B5B92509D22F115E7F39828837CF9FF945AE4127EE15F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googleadservices.com/pagead/conversion_async.js
Preview:	(function(){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),l={},fa={};function p(a,b){var c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]} .function v(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in l?f=l:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&"es6"===c?f[d]:null;b=b(c)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\fa0a609357[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.254849015882737
Encrypted:	false
SSDEEP:	3:U3KTDWTwTWMWVrfVh:HAFMWVrn
MD5:	5C9DA71976FB9D00F82E61C7E496BA06
SHA1:	58884FB0E24A399213205AD35DB27E6011BD149C
SHA-256:	F69A13217482DC43F25E74CFCB9391D0F06D22501F10F5CB5E413D2D98A5CD23
SHA-512:	DBC11417F6342430D30220B7A4F141F05801520C429CC1C80FEC974BA840AF1D4C316395CF9B12AAFBC36F04795A0558BEAEC690D43C31FBB86175C2B41557EF
Malicious:	false
Reputation:	low
Preview:	NREUM.setToken({'stn':0,'err':0,'ins':0,'cap':0,'spa':0})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\fa0a609357[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.254849015882737
Encrypted:	false
SSDEEP:	3:U3KTDWTwTWMWVrfVh:HAFMWVrn
MD5:	5C9DA71976FB9D00F82E61C7E496BA06
SHA1:	58884FB0E24A399213205AD35DB27E6011BD149C
SHA-256:	F69A13217482DC43F25E74CFCB9391D0F06D22501F10F5CB5E413D2D98A5CD23
SHA-512:	DBC11417F6342430D30220B7A4F141F05801520C429CC1C80FEC974BA840AF1D4C316395CF9B12AAFBC36F04795A0558BEAEC690D43C31FBB86175C2B41557EF
Malicious:	false
Reputation:	low
Preview:	NREUM.setToken({'stn':0,'err':0,'ins':0,'cap':0,'spa':0})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\fa0a609357[3].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.254849015882737
Encrypted:	false
SSDEEP:	3:U3KTDWTwTWMWVrfVh:HAFMWVrn
MD5:	5C9DA71976FB9D00F82E61C7E496BA06
SHA1:	58884FB0E24A399213205AD35DB27E6011BD149C
SHA-256:	F69A13217482DC43F25E74CFCB9391D0F06D22501F10F5CB5E413D2D98A5CD23
SHA-512:	DBC11417F6342430D30220B7A4F141F05801520C429CC1C80FEC974BA840AF1D4C316395CF9B12AAFBC36F04795A0558BEAEC690D43C31FBB86175C2B41557EF
Malicious:	false
Reputation:	low
Preview:	NREUM.setToken({'stn':0,'err':0,'ins':0,'cap':0,'spa':0})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon-32x32[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	813
Entropy (8bit):	7.058318274293224
Encrypted:	false
SSDEEP:	24:hXeUfKO+xZ61+0dayZ4ua66zjW6EMCppvKEfl9:hV+xoPZ4uEG6EVppNT
MD5:	6258DFE671D9CF189232A625569C67B6
SHA1:	C7EF886735BFABCB4AE10B4249D9E750A70E7EDB
SHA-256:	AF10AAFD29541ED5308241E60675D7B6737F6D380E4D0DB6B81B1FEC9FC5E551
SHA-512:	6572DB41C848F0AB7F3239EC5C6677B39C8A06F11EA87229B04D654236BB62A2E8B4D2E93A6DC6F2FB3B1CBF7D2F488DC71D1C49FF547F2DB3AFD8A75E6F2F7E
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/themes/custom/casella/i/favicons/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE.+Ap............8M...Xq..&>.........Idt.9N:Wj....2G.+B.............?S/N`(H\.1F.8M.8M.8M.:O.:O.<P.<P.=R.>R.<Q..........'=......&=:Xi............Yq.......'>.+Ax.....Nhx.&=.&=....6.{...9tRNS.............................................................bKGD:N.......pHYs.........L"M.....tIME.....0.........IDAT8.c.$......+`fa.(`....A.8p.[q.R.E...<.\|.....=&(.[.08lD.).%.@L..$.+@..L..R.2.r...J........W...R..[..........V:.zVx.......)0.'ZC..F.`.&.f.....~...n.0.O.....%tEXtdate:create.2017-01-03T16:48:18+01:008.qd...%tEXtdate:modify.2017-01-03T16:48:18+01:00I.......tEXtSoftware.www.inkscape.org..<....WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon-32x32[2].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	813
Entropy (8bit):	7.058318274293224
Encrypted:	false
SSDEEP:	24:hXeUfKO+xZ61+0dayZ4ua66zjW6EMCppvKEfl9:hV+xoPZ4uEG6EVppNT
MD5:	6258DFE671D9CF189232A625569C67B6
SHA1:	C7EF886735BFABCB4AE10B4249D9E750A70E7EDB
SHA-256:	AF10AAFD29541ED5308241E60675D7B6737F6D380E4D0DB6B81B1FEC9FC5E551
SHA-512:	6572DB41C848F0AB7F3239EC5C6677B39C8A06F11EA87229B04D654236BB62A2E8B4D2E93A6DC6F2FB3B1CBF7D2F488DC71D1C49FF547F2DB3AFD8A75E6F2F7E
Malicious:	false
Reputation:	low
IE Cache URL:	https://ir.casella.com/sites/g/files/knoqqb53536/files/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE.+Ap............8M...Xq..&>.........Idt.9N:Wj....2G.+B.............?S/N`(H\.1F.8M.8M.8M.:O.:O.<P.<P.=R.>R.<Q..........'=......&=:Xi............Yq.......'>.+Ax.....Nhx.&=.&=....6.{...9tRNS.............................................................bKGD:N.......pHYs.........L"M.....tIME.....0.........IDAT8.c.$......+`fa.(`....A.8p.[q.R.E...<.\|.....=&(.[.08lD.).%.@L..$.+@..L..R.2.r...J........W...R..[..........V:.zVx.......)0.'ZC..F.`.&.f.....~...n.0.O.....%tEXtdate:create.2017-01-03T16:48:18+01:008.qd...%tEXtdate:modify.2017-01-03T16:48:18+01:00I.......tEXtSoftware.www.inkscape.org..<....WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\fbevents[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	93774
Entropy (8bit):	5.392602416896564
Encrypted:	false
SSDEEP:	1536:sM+OWt6w6aic9MeipKKqQqcThe7Kdv0a9sIOC1jaMu5Qm2B+QNSMngUSZYSlIUiX:sOQMj1SVBYDGKx
MD5:	077B8B6E85C9EDF74D372D155180E6D3
SHA1:	4A24BE343819AD355807ADB01579366A1E64B8B9
SHA-256:	A517525B8A7D39BCAF1CF5F9695C5BE8FCE7A6B920A3924C1A4F70E8EA748C05
SHA-512:	DB714A2EAF14E6727086795FE151F3729DA32BFA0B87AB74289B7DF9E0808E1FEBCA38D2622EF47B7AA263479BDB66857011E2302DD1AFC9E814EF6B74642DF9
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\fieldgroup.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.461978028205114
Encrypted:	false
SSDEEP:	3:U6dDeZWKQNVQWAtWPKyoPBPTQ/HuB62nfF0Jrnt:U6dqZC/QWyWPKycPc/HO/Fsh
MD5:	06380BC2E356228B2062789C877F97EE
SHA1:	C45B4C44207982AD34A740002E579F3ADE45804C
SHA-256:	833B0D5C6E389060D934CC3904FD64D9BB35354229758B6804C913587BAAB583
SHA-512:	C84D1479A7CAE160860FDA630365A32AB65B3129E901DD4D8317A234F5C1D9AA80C3E652E21F6CF75A97AA461481824EEED4EE95157EEEE8813B9EF8DC42A2FC
Malicious:	false
Reputation:	low
IE Cache URL:	https://c-11158-20201221-www-casella-com.i.icims.com/core/themes/stable/css/system/components/fieldgroup.module.css?qljrib
Preview:	/*.. @file.. * Fieldgroup border reset... */.....fieldgroup {.. padding: 0;.. border-width: 0;..}..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\font-awesome.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	29063
Entropy (8bit):	4.755267089852831
Encrypted:	false
SSDEEP:	384:Uu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdG:flr+Klk3Yi+fwYUf8l8yQ/eC
MD5:	4083F5D376EB849A458CC790B53BA080
SHA1:	FB5B49426DEE7F1508500E698D1B3C6B04C8FCCE
SHA-256:	008A1D103902F15FDB1C191FCB1CE8954330E7B8DE43D09ABB08555BA609F420
SHA-512:	E2E1991E96C3962371880BFF43364DA3FC9BD85B405FEAA20DBEF2A415A211D2505FC3EE829F0CEA297949190DF2342B0CB5AC877AEB3C349745FDC3C0560CEA
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/themes/custom/casella/plugins/font-awesome-v.4.6.3/css/font-awesome.min.css?qpcosx
Preview:	/!. Font Awesome 4.6.3 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.6.3');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.6.3') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.6.3') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.6.3') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.6.3') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.6.3#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\fullWidthPromo2[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x900, frames 3
Category:	downloaded
Size (bytes):	201924
Entropy (8bit):	7.973356171783263
Encrypted:	false
SSDEEP:	6144:ucXIoumsSD//WclQGqdnhdxIWPrNz6/KW53W:ZYoulQ/mrdxIWVUK
MD5:	8C47E8D8B024C2975968FFCE70E571F2
SHA1:	21914099CFFD308726135AAD30318C44F57D2C58
SHA-256:	7EC0DEE54A758C2FE7C305DC90CDE1624B664E3D602EB55A46F0C912C461C54B
SHA-512:	9C8F88192B088E9298FF49C17FA30DD99EE625F125ACEA636C13186009A848E220A85988F9970390F47C999759C6123019BC9FE7A3E062B6C73E6479748933DF
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/sites/default/files/2016-11/fullWidthPromo2.jpg
Preview:	......Exif..II*.................Ducky.......2.....3http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:200A195F453011E6AA3DC438A8F8E659" xmpMM:InstanceID="xmp.iid:200A195E453011E6AA3DC438A8F8E659" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AD4D9278412411E6BBDFA7B2533248F2" stRef:documentID="xmp.did:AD4D9279412411E6BBDFA7B2533248F2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................#"""#''''''''''...............................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\gtm[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	80399
Entropy (8bit):	5.517175005595233
Encrypted:	false
SSDEEP:	1536:7b0NdVQ0i+H7wuo6Ni7QSN27sDjd0rrrNSt81z9jKPfmTJ0NSoiUT:7b0Ns0Y4ABjOrNStkoiUT
MD5:	F3A67CD3CF1BFE48812ECDBEB369B057
SHA1:	1CF5C9047A18BF92BE584AA023B637B3F9B1A57F
SHA-256:	D7775ECD3DE7541926A952EF7F189FB1DF1B69F2005DCE942AD8B9F1CB1D431F
SHA-512:	0F4E299E62D11AEE673D6E5FA06A7B809C0E94FE4502E607CD083496409451849BCC28F9F5481F93F51D4A5EB72471BF9F34EA89DD89300D2706EAAC8F56025A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtm.js?id=GTM-N966XSH
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__c",. "vtp_value":"UA-5572590-5". },{. "function":"__u",. "vtp_component":"URL". },{. "function":"__u",. "vtp_component":"HOST". },{. "function":"__u",. "vtp_component":"PATH". },{. "function":"__f",. "vtp_component":"URL". },{. "function":"__e". }],. "tags":[{. "function":"__ua",. "once_per_event":true,. "vtp_overrideGaSettings":true,. "vtp_trackType":"TRACK_PAGEVIEW",. "vtp_trackingId":["macro",1],. "vtp_enableUaRlsa":false,. "vtp_enableUseInternalVersion":false,. "vtp_enableFirebaseCampaignData":true,. "tag_id":1. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":"gtm.js". }],. "rules":[. [["if",0],["add",0]]].},."runtime":[].....};../*.. Copyright The

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\home.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4029
Entropy (8bit):	5.214303610589507
Encrypted:	false
SSDEEP:	48:CB2LDddN8XZ+VZuTBx6Y9aJFTDtN4QELLDa8Bx6YCVZViwsBd3rOOfrlQ8FijSbg:NN4ZGAT29P8arh8QZ
MD5:	69EB8C34CB9FEA182EA40CE74E9FFC9A
SHA1:	2155612E5A3182EB0B945E1BC09CB49DBEB92D98
SHA-256:	B36ACE30B58B88931BE593FEA0B54876434CED7493967798C136DFEE98A12644
SHA-512:	E4D2A0D88433D577A8560FD11697188BF0C596A8A9DD51E2C7F1B7D18E3A63B614A1D94C0592E3A7C77A4797DD6E81E6CD15F077851C6E109292FF11F1F1844C
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/themes/custom/casella/js/custom/home.min.js?v=1.x
Preview:	function equalheight(e){var r,i=0,o=0,n=new Array;jQuery(e).each(function(){if(r=jQuery(this),jQuery(r).height("auto"),topPostion=r.position().top,o!=topPostion){for(currentDiv=0;currentDiv<n.length;currentDiv++)n[currentDiv].height(i);n.length=0,o=topPostion,i=r.height(),n.push(r)}else n.push(r),i=i<r.height()?r.height():i;for(currentDiv=0;currentDiv<n.length;currentDiv++)n[currentDiv].height(i)})}window.addEventListener("DOMContentLoaded",function(){"use strict";jQuery(".accordion-toggle").on("click",function(e){e.preventDefault();var r=jQuery(this),i=r.next(".accordion-content"),o=jQuery(this).children(".toggle-icon"),n=jQuery(this).parent(".accordion-container");r.toggleClass("open"),i.slideToggle(250),r.hasClass("open")?(o.html("<i class='fa fa-chevron-up'></i>"),n.addClass("selected")):(o.html("<i class='fa fa-chevron-down'></i>"),n.removeClass("selected"))});var e=jQuery("#home-slider").html();function r(e){var r=Modernizr.mq("( min-width: 1200px )"),n=jQuery("#home-slider").dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\home[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	22334
Entropy (8bit):	5.06890079606409
Encrypted:	false
SSDEEP:	384:OsFNvT6hZFU3SKaMPU6gcmTPFGFeFkFmFGFeF4TxC2Ar:RFNvT6vFU3SKaMPU6gcqPFGFeFkFmFGO
MD5:	21553BF166F52A4E1F96FEC668203C3B
SHA1:	DFCEB08F63846FA15D36DABA8B9D5668D0DB2691
SHA-256:	2D63B4F96E3BF93B7933ADD1CFFAA6A26D825D154F3C200F5D64EF5C6DA6221C
SHA-512:	F6435277AF954932D356E72A5625C53E695E9EE74C64F944BEF761004327512945347E32500A2E1C0865156F76DDA88A5075F593B17402FD98E4D96957C6E692
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/themes/custom/casella/css/custom/home.css?qpcosx
Preview:	/.Website Name: Casella.Description: Home Page specific stylesheet.Version: 1.0.Author: Adworkshop.Author URI: http://www.adworkshop.com./../* ======================================================= /./ HEAD/UPPER REGION /./ ======================================================= */ . .home-headerPanel-container {background:#0a253e; width:100%; padding:60px 0; text-align:left;}. .home-headerPanel-container h1 {color:#FFF; font-size:40px; text-transform:uppercase;}. .home-headerPanel-container h1 span.white {color:#FFF;}. .home-headerPanel-listContainer {margin:20px 0 0; line-height: 1.5;}. .home-headerPanel-listContainer:before {content:''; display:block; width:80px; height:1px; border-top:1px solid #265736; margin:25px 0 20px;}. .home-headerPanel-listContainer ul li {display:block;}. .home-headerPanel-listContainer ul li:before {content:'\2022'; display:inline-block; color:#fff; margin:0 10px 0 0;}. .home-headerPanel-listContainer ul

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\ibs_dpid=269&dpuuid=cc3a6091-a4b5-4a00-95ec-94d4d16e385b[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\iframe[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	12291
Entropy (8bit):	5.478244112341409
Encrypted:	false
SSDEEP:	192:6BNKHoBIyOTP0TE9RJp/CipesEdBS1wTQXK2BEtyOTP0T1U2Jp1YipesEdBS1wT8:6BNKIBW08JHUoK2Bc0bJPUe
MD5:	4E694592ADB84FFBA79A0F6E283BC767
SHA1:	D4874AF094D9D7D5B6E948B0297D279BAEF00AD2
SHA-256:	D8E37AC241343558A12AE83AAF3AB693F29F24B59ECD088CFF37329B12B833B5
SHA-512:	A96DE1C83F3BB0B725343B3FD3459ECC32470F864234DC11ABD94D4BA401C9D7143193F3D5B68DEF7A07BED0C2FC12050330FBBF7915899A7A376411C7BAC63F
Malicious:	false
Reputation:	low
IE Cache URL:	https://pixel.mathtag.com/sync/iframe?mt_uuid=b1b55f46-7936-4001-9dfc-67a6a8fcc405&no_iframe=1&mt_adid=187218&source=mathtag
Preview:	<html><body>.<script type="text/javascript">.try {. /**/.(function() {. try {..var sync_4815162342 = function() {.this.urls = [.[0, "https://pixel.mathtag.com/misc/img?mop_seq=0:28&mt_cb=835433&mop_top="],.[9, "https://pixel.rubiconproject.com/tap.php?v=4222&nid=1512&put=cc3a6091-a4b5-4a00-95ec-94d4d16e385b&expires=28"],.[4, "https://cm.g.doubleclick.net/pixel?google_nid=mediamath&google_cm&google_hm=zDpgkaS1SgCV7JTU0W44Ww"],.[13, "https://ib.adnxs.com/getuid?https://sync.mathtag.com/sync/img?mt_exid=13&mt_mminit=1&mt_exuid=$UID"],.[3, "https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD00MzIwMA==&piggybackCookie=uid:cc3a6091-a4b5-4a00-95ec-94d4d16e385b"],.[5, "https://eu-u.openx.net/w/1.0/sd?id=536872786&val=cc3a6091-a4b5-4a00-95ec-94d4d16e385b"],.[15, "https://dsum-sec.casalemedia.com/rum?cm_dsp_id=3&external_user_id=cc3a6091-a4b5-4a00-95ec-94d4d16e385b"],.[21, "https://pixel.advertising.com/ups/55938/sync?uid=cc3a6091-a4b5-4a00-95ec-94d4d16e385b&_orig

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\iframe[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6207
Entropy (8bit):	5.4890276806147655
Encrypted:	false
SSDEEP:	192:hK2BEjZuyOTP0T19Zyy6Jpy3ZyySipesEdBS1wTQMFk:hK2Bn00JOUq
MD5:	74279C91E120111F208D880C23CB57EE
SHA1:	DC3F346B14BBC80E8C4C3861C955CD7423A52DE8
SHA-256:	8E6E1209A98BEC8AAD8595E8CFB09E6244D4A91D0A863384A6720F9EBB671831
SHA-512:	A7858F5BBD6DE45BA13AE5947BEA43B75230B5913863F95C548BD68DE8A3C5BD4207F877B5EDC51DE1AE4F01E4E899F32BFF111BEA115405A38FDDB94D4D81AA
Malicious:	false
Reputation:	low
IE Cache URL:	https://pixel.mathtag.com/sync/iframe?mt_uuid=cc3a6091-a4b5-4a00-95ec-94d4d16e385b&no_iframe=1&mt_adid=187218&source=mathtag
Preview:	<html><body>.<script type="text/javascript">.try {. /**/.(function() {. try {..var sync_4815162342 = function() {.this.urls = [.[0, "https://pixel.mathtag.com/misc/img?mop_seq=0:28&mt_cb=229175&mop_top="],.[9, "https://pixel.rubiconproject.com/tap.php?v=4222&nid=1512&put=cc3a6091-a4b5-4a00-95ec-94d4d16e385b&expires=28"],.[13, "https://ib.adnxs.com/getuid?https://sync.mathtag.com/sync/img?mt_exid=13&mt_mminit=1&mt_exuid=$UID"],.[3, "https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD00MzIwMA==&piggybackCookie=uid:cc3a6091-a4b5-4a00-95ec-94d4d16e385b"],.[5, "https://eu-u.openx.net/w/1.0/sd?id=536872786&val=cc3a6091-a4b5-4a00-95ec-94d4d16e385b"],.[15, "https://dsum-sec.casalemedia.com/rum?cm_dsp_id=3&external_user_id=cc3a6091-a4b5-4a00-95ec-94d4d16e385b"],.[21, "https://pixel.advertising.com/ups/55938/sync?uid=cc3a6091-a4b5-4a00-95ec-94d4d16e385b&_origin=1"],.[10010, "https://stags.bluekai.com/site/4448?id=cc3a6091-a4b5-4a00-95ec-94d4d16e385b"],.[46, "https

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\img[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
IE Cache URL:	https://pixel.mathtag.com/misc/img?mop_seq=0:28&mt_cb=229175&mop_top=
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\img[2].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
IE Cache URL:	https://sync.mathtag.com/sync/img?mt_exid=13&mt_mminit=1&mt_exuid=5955513615460275225
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\img[3].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
IE Cache URL:	https://pixel.mathtag.com/misc/img?mop_seq=20:28&mt_cb=232790&mop_top=9:1620155996\|13:1620155996\|3:1620155996\|5:1620155996\|15:1620155996\|21:1620155996\|10010:1620155996\|46:1620155996\|10017:1620155996\|10074:1620155996\|10072:1620155996\|42:1620155996\|44:1620155996\|17:1620155996\|39:1620155996\|10041:1620155996\|30:1620155996\|10092:1620155996\|10008:1620155996\|26:1620155996\|
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\img[4].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
IE Cache URL:	https://pixel.mathtag.com/misc/img?mop_seq=28:28&mt_cb=771320&check=cc3a6091-a4b5-4a00-95ec-94d4d16e385b&mop_top=9:1620157641\|13:1620157641\|3:1620157641\|5:1620157641\|15:1620157641\|21:1620157641\|10010:1620157641\|46:1620157641\|10017:1620157641\|10074:1620157641\|10072:1620157641\|42:1620157641\|44:1620157641\|17:1620157641\|39:1620157641\|10041:1620157641\|30:1620157641\|10092:1620157641\|10008:1620157641\|26:1620157641\|50:1620157641\|10025:1620157641\|10031:1620157641\|36:1620157641\|10040:1620157641\|10004:1620157641\|10009:1620157641\|10089:1620157641\|
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\img[5].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
IE Cache URL:	https://pixel.mathtag.com/sync/img/?mt_exid=10009&mt_exuid=
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\img[6].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
IE Cache URL:	https://pixel.mathtag.com/misc/img?mop_seq=28:28&mt_cb=913507&check=cc3a6091-a4b5-4a00-95ec-94d4d16e385b&mop_top=9:1620155996\|13:1620155996\|3:1620155996\|5:1620155996\|15:1620155996\|21:1620155996\|10010:1620155996\|46:1620155996\|10017:1620155996\|10074:1620155996\|10072:1620155996\|42:1620155996\|44:1620155996\|17:1620155996\|39:1620155996\|10041:1620155996\|30:1620155996\|10092:1620155996\|10008:1620155996\|26:1620155996\|50:1620155996\|10025:1620155996\|10031:1620155996\|36:1620155996\|10040:1620155996\|10004:1620155996\|10009:1620155996\|10089:1620155996\|&final&timings=0:166\|9:251\|13:254\|3:9\|15:9\|10074:9\|5:113\|10004:109\|42:180\|39:180\|0:180\|0:186\|10072:248\|44:255\|10010:262\|0:266\|10092:278\|30:289\|26:292\|50:350\|10040:476\|46:603\|10009:696\|36:1214\|10041:1960\|&errors=21:182\|10008:248\|10031:320\|10017:381\|10025:444\|17:656\|10089:1385\|
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\index[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	4598
Entropy (8bit):	5.274424813815875
Encrypted:	false
SSDEEP:	96:Qty8grfp3fGfpNJutdJWfbQdXwe5B8hKXWosbVZoprghFOuvrNCj:QaGbQd5PKvw
MD5:	33ED216EF4569E95A97E55FB39D91D38
SHA1:	9849B887B9D36E35355DFEC4EA142AC455CF9190
SHA-256:	41F1E9970B646AADAC0F40543BB08B21E49990BF1B09392D1EF4D71B275069EA
SHA-512:	0F083D5F8DB6D5A49424C3E10947A387416BA57DB6279E2AFC2ECB8763AED3531FBA8DE0155B3CDAB9578E878E51D51C527AC97F60C6F5DC120FAFD257AA7544
Malicious:	false
Reputation:	low
IE Cache URL:	https://s.adroll.com/j/pre/5GUGQOHJCNCCRMXAOQX6O6/44LNCGAYPJDXFK7VEUPB5B/index.js
Preview:	(function(m){(function(c){function l(a){return null===a\|\|void 0===a?a:!!a}function y(a,b){if(!b\|\|!b.length)return a;for(var d={},e=0;e<b.length;e++)d[b[e]]=!!a[b[e]];return d}function k(a,b){if(!a&&0!==a)return a;for(var d={},e=0;e<b;e++)d[e+1]=!!(a&1),a>>=1;return d}function z(a){if(a&&a.length){for(var b={},d=0;d<a.length;d++)b[a[d]]=!0;return b}}if(c._has_global("__cmp")\|\|c._has_global("__tcfapi")&&!c._has_global("_adroll_tcfapi_placeholder_installed"))c._install_cmp=function(){};else{c._cmp_calls=.[];c._set_global("__cmp",function(a,b,d){"ping"===a?d({gdprAppliesGlobally:!1,cmpLoaded:!1}):c._cmp_calls.push([a,b,d])});c._tcfapi_calls=[];c._set_global("__tcfapi",function(a,b,d,e){"ping"===a?d({gdprApplies:void 0,cmpLoaded:!1,cmpStatus:"loading",displayStatus:void 0,apiVersion:"2.0",cmpVersion:void 0,cmpId:void 0,gvlVersion:void 0,tcfPolicyVersion:void 0}):c._tcfapi_calls.push([a,e,d])});var m={getVendorConsents:function(a){var b=c._global("__adroll_consent"),d=c._global("__adroll_con

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\internal[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	103674
Entropy (8bit):	5.172469992008471
Encrypted:	false
SSDEEP:	768:0j0Nps4FbAm2bA4mBKgxw/s+hClmMDS2c5DHS92W:Q0W4NIKHlmY
MD5:	A90D42358288605CDC44E3B087F2A86D
SHA1:	F950179C44BC363322A2C7AD45E67DAE2D7A9567
SHA-256:	A4B8761B4B77067BD7CE66BA56E4C451038A395C46406CDEECB94C062B1DA983
SHA-512:	4F5D1E5F19D8D5E7E41636B1EFE3D8E125017C7B194666AF4B990F91D3EC434C01C650F5BD85F334E6199306ABBF0A04DED71F1C2CAF28E6021B89BAB47FBE6D
Malicious:	false
Reputation:	low
IE Cache URL:	https://c-11158-20201221-www-casella-com.i.icims.com/themes/custom/casella/css/custom/internal.css?qljrib
Preview:	/..Website Name: Casella..Description: Internal Page specific stylesheet..Version: 1.0..Author: Adworkshop..Author URI: http://www.adworkshop.com../..../* ======================================================= /../ HEADER /../ ======================================================= /...internal-headerPanel-container {background: #0a253e; width: 100%; padding: 60px 0; text-align: left;}...internal-headerPanel-container h1 {color: #7abf23; font-size: 30px; text-transform: uppercase;}..../Hero/...internal-headerPanel-hero {color: #fff; font-size: 15px; line-height: 1.5; margin: 15px 0 0;}..../BreadCrumbs*/...internal-headerPanel-breadcrumbs {display:none;}...internal-headerPanel-breadcrumbs:before {content:''; display:block; margin:25px 0 0; padding:30px 0 0; height:1px; width:225px; border-top:1px solid #45596c;}...internal-headerPanel-breadcrumbs ul li {display:inline-block; font-size:12px; font-family: 'Gotham-Bold'; color: #0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery.hoverdir[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9482
Entropy (8bit):	4.158127586191687
Encrypted:	false
SSDEEP:	192:bLL7RRl42nU7t7NncXOrdy32lMHPTipf/0Klxd1wIoTIQ2LM5tLbSk7WIC7:v5ykHLeb4mLURo
MD5:	A7C8D367551B1EF41C0B053A7941021D
SHA1:	D424A8006FFE78CB3928872594359D88A5F09EF4
SHA-256:	C9C4E7FAEF055A775BE35D8D48E1DBC0D9B9A1D5FC85CB40F7DCD04151B5F257
SHA-512:	0DC3D8FF54927CB9A7FDA1BB48B684ED48CACD65F80B9DFBD9C826298C3360228884AA0C22C86EB46FB740323487B6F39F5F50CD9B04C243ECB809C7FF3A7282
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/themes/custom/casella/plugins/hoverdir/jquery.hoverdir.js?v=1.1.2
Preview:	/*. jquery.hoverdir.js v1.1.2. * http://www.codrops.com. . Licensed under the MIT license.. * http://www.opensource.org/licenses/mit-license.php. . Copyright 2012, Codrops. * http://www.codrops.com. */.(function (factory) {. 'use strict';. if (typeof define === 'function' && define.amd) {. define(['jquery'], factory);. } else if (typeof exports !== 'undefined') {. module.exports = factory(require('jquery'));. } else {. factory(jQuery);. }.})(function ($) {. 'use strict';.. function Hoverdir(element, options) {. this.$el = $(element);. // set options. this.options = $.extend(true, {}, this.defaults, options);. // initialize visibility to false for show and hide method. this.isVisible = false;. // get the hover for this element. this.$hoverElem = this.$el.find(this.options.hoverElem);. // transition properties. this.transitionProp = 'all ' + this.options.speed + 'ms ' + this.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\js[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	86452
Entropy (8bit):	5.519029987848581
Encrypted:	false
SSDEEP:	1536:JM0YWtzcB0Q+HQafG5PuQU4/9E0GFadncI6c1K9ovKPiIZ1Au/2O:JM0vO0pu5PHGsdp6CtO
MD5:	63EAD9DBC25B10D046C76D54BE47EC73
SHA1:	9BC68DA5C0A2EBC9D803F5F243670CB21D42351E
SHA-256:	DAC68C294F00ADC1C9DCFE5D330054F806394AC67E744FE7EF418D96C113470A
SHA-512:	0D07C61079AD943096C8DB5065389CB144F9DE5EDEB82FF9F36408CF8713EC8EE8D5B6EF60341C8090CD9F4EB15556C2ADD7D415B1C02231B37A3303BCA7745A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtag/js?id=AW-740347260
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__cid". }],. "tags":[{. "function":"__rep",. "once_per_event":true,. "vtp_containerId":["macro",1],. "tag_id":1. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":"gtm.js". }],. "rules":[. [["if",0],["add",0]]].},."runtime":[].....};../.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:ba(a)}},fa="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ha;.if("function"==typeof Object.setPrototypeOf)ha=Object.setPrototypeOf;else{var ia;a:{var ka={a:!0},ma={};

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\js[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2028
Entropy (8bit):	4.939382788025054
Encrypted:	false
SSDEEP:	48:xuteGV5lfKog8//NiQC+p4CHQC+pL0ZuteGV5lfKog8//NiQC+p4CHQC+pL0f:3GVPfKo1/ViQ7lQ7p4GVPfKo1/ViQ7lr
MD5:	A85C41C02753141C109ACEFE31C00D7E
SHA1:	FC232B89D8F2B30564DABCAF9501A492EBA9CD5B
SHA-256:	2BF81E7668A65B74F26F85ADA91423A569EA734D4FD42FC655411425BF1D5A78
SHA-512:	E5EA7F082FBF3FC51F460492CFC0FB0B355C51C85E28B469164D56650D93F79A8BACE01025D693D99AC2BAD3DA645CA836F067287490ED5ADB16E89E9D139304
Malicious:	false
Reputation:	low
Preview:	(function() {.try {. (function(){./**/..})();.(function() {. try {. if (document.getElementById('mm_sync_back_ground')). return;. var frm = document.createElement('iframe');. frm.style.visibility = 'hidden';. frm.style.display = 'none';. frm.src = "https://pixel.mathtag.com/sync/iframe?mt_uuid=cc3a6091-a4b5-4a00-95ec-94d4d16e385b&no_iframe=1&mt_adid=187218&source=mathtag";. frm.setAttribute("id", "mm_sync_back_ground");. frm.title="MediaMath Advertising";.. if (document.body). document.body.appendChild(frm);. else. if (document.head). document.head.appendChild(frm);. }. catch(ex). {. document.createElement("img").src="//pixel.mathtag.com/error/img?error_domain=synciframe&what="+encodeURIComponent(ex.message);. }.})();..}.catch(ex).{. document.createElement("img").src="//pixel.mathtag.com/error/img?error_domain=wrap_js&what="+encodeURIComponent(ex.mess

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\layout_css[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9793
Entropy (8bit):	5.291991402487626
Encrypted:	false
SSDEEP:	192:6CJnqhwg9gHK3LhOsIs6RGvjHc6ZUSUcUaUg8/XGYSV:IyRs6eckUSUcUaUg8/XGYSV
MD5:	2FD5941A631AB34A134BF89F4668EECF
SHA1:	2F0CA3A94CB613DC4A06A0F11418A6370EAB6808
SHA-256:	E6F964212202F35327DE4C81E86F731EC1F0774014F8461744F3E4277AB5FEFC
SHA-512:	7428580D81BF28407F5991EF467EA0F5A258101D5F4D73887631E049B56DDFC8DFC00D354377ADFA6815ECEEB199859EFC40A7275C76302E2B61442C9C458288
Malicious:	false
Reputation:	low
IE Cache URL:	https://secure3.i-doxs.net/casella/layout_css.css
Preview:	BODY..{.. PADDING-RIGHT: 0px;.. PADDING-LEFT: 0px;.. MARGIN-BOTTOM: 0px;.. PADDING-BOTTOM: 0px;.. MARGIN-LEFT: 0px;.. MARGIN-RIGHT: 0px;.. PADDING-TOP: 0px;.. FONT-FAMILY: Arial, Geneva, Helvetica, Verdana, Swiss, SunSans-Regular;.. BACKGROUND-COLOR: #E8EDF1..}..A..{.. FONT-WEIGHT: bold;.. COLOR: #002d62;.. TEXT-DECORATION: none;.. outline: none..}..A:visited..{.. TEXT-DECORATION: none; ..}..A:active..{.. TEXT-DECORATION: underline ..}..A:hover..{.. FONT-WEIGHT: bold;.. TEXT-DECORATION: underline..}..P..{.. FONT-SIZE: 12px;.. LINE-HEIGHT: 14px;.. MARGIN-RIGHT: 5px;.. COLOR: #5a636f..}..TD..{.. FONT-SIZE: 12px;.. LINE-HEIGHT: 14px..}..H1..{.. MARGIN-TOP: 0px;.. FONT-WEIGHT: bold;.. FONT-SIZE: 24px;.. MARGIN-BOTTOM: 0px;.. COLOR: white;.. LINE-HEIGHT: 44px..}..H2..{.. MARGIN-TOP: 5px;.. FONT-WEIGHT: bold;.. FONT-SIZE: 14px;.. MARGIN-LEFT: 22px;.. LINE-HEIGHT: 16px;.. MARGIN-RIGHT:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\match[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\modernizr.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	7059
Entropy (8bit):	5.307190209270235
Encrypted:	false
SSDEEP:	96:44uuITey2hGUupREEp3DD1sd/+B6C6mnt4mQIFM4mHsi97kKP4IZSp0xQHn:YuIT/2hHEpzDG9nenONIFwHseA70xQHn
MD5:	D0FB33DCF799E36A31CE24795CD9FD16
SHA1:	5E4FB5F00EDF27996C33307A773523C693E614BA
SHA-256:	895385A514223CB5636F335DC52A67F80E6A3D7E61D7ED0BD3D2D4E16A12225A
SHA-512:	6995DBC7D50BEFD1ECAAAD9F653090648B171CF8F4C663DBF5ADDE8D19E89A1DEA7A353EEC4943C02C692C9BA8C55223D50FE72CFDB6ED296142EF0822B7FA6E
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/themes/custom/casella/js/libs/modernizr.min.js?v=3.3.1
Preview:	/! modernizr 3.3.1 (Custom Build) \| MIT . * https://modernizr.com/download/?-csstransitions-details-inputtypes-svg-touchevents-addtest-mq-prefixes-setclasses-teststyles !*/.!function(e,t,n){function i(e,t){return typeof e===t}function o(){var e,t,n,o,r,s,a;for(var l in _)if(_.hasOwnProperty(l)){if(e=[],t=_[l],t.name&&(e.push(t.name.toLowerCase()),t.options&&t.options.aliases&&t.options.aliases.length))for(n=0;n<t.options.aliases.length;n++)e.push(t.options.aliases[n].toLowerCase());for(o=i(t.fn,"function")?t.fn():t.fn,r=0;r<e.length;r++)s=e[r],a=s.split("."),1===a.length?Modernizr[a[0]]=o:(!Modernizr[a[0]]\|\|Modernizr[a[0]]instanceof Boolean\|\|(Modernizr[a[0]]=new Boolean(Modernizr[a[0]])),Modernizr[a[0]][a[1]]=o),C.push((o?"":"no-")+a.join("-"))}}function r(e){var t=b.className,n=Modernizr._config.classPrefix\|\|"";if(S&&(t=t.baseVal),Modernizr._config.enableJSClass){var i=new RegExp("(^\|\\s)"+n+"no-js(\\s\|$)");t=t.replace(i,"$1"+n+"js$2")}Modernizr._config.enableClasses&&(t+=" "+n+e.jo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\modernizr.min[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	7063
Entropy (8bit):	5.311179289186801
Encrypted:	false
SSDEEP:	96:B49uITey2hGUupREEp3DD1sd/+B6C6mnt4mQIFM4mHsi97kKP4IZSp0xQHy:quIT/2hHEpzDG9nenONIFwHseA70xQHy
MD5:	F645839E3438709E823AAB1C099CA223
SHA1:	DF4653A3CB0E47AE5969ED8CE28F73147DCDD8D6
SHA-256:	F1F852A254973D33784F79AEB42BF571478033DF82DD9B96F3E28E148541D7D7
SHA-512:	1A1E7ED446E507AC2FED3580E138A727A9BF1AA2B1D961E6207EC6C594254D8BAE7DF5CEAEC201B026B0FEE9AB6127D4E6F0D2C5FB616D11EAD829E564EFA751
Malicious:	false
Reputation:	low
IE Cache URL:	https://c-11158-20201221-www-casella-com.i.icims.com/themes/custom/casella/js/libs/modernizr.min.js?v=3.3.1
Preview:	/! modernizr 3.3.1 (Custom Build) \| MIT .. * https://modernizr.com/download/?-csstransitions-details-inputtypes-svg-touchevents-addtest-mq-prefixes-setclasses-teststyles !*/..!function(e,t,n){function i(e,t){return typeof e===t}function o(){var e,t,n,o,r,s,a;for(var l in _)if(_.hasOwnProperty(l)){if(e=[],t=_[l],t.name&&(e.push(t.name.toLowerCase()),t.options&&t.options.aliases&&t.options.aliases.length))for(n=0;n<t.options.aliases.length;n++)e.push(t.options.aliases[n].toLowerCase());for(o=i(t.fn,"function")?t.fn():t.fn,r=0;r<e.length;r++)s=e[r],a=s.split("."),1===a.length?Modernizr[a[0]]=o:(!Modernizr[a[0]]\|\|Modernizr[a[0]]instanceof Boolean\|\|(Modernizr[a[0]]=new Boolean(Modernizr[a[0]])),Modernizr[a[0]][a[1]]=o),C.push((o?"":"no-")+a.join("-"))}}function r(e){var t=b.className,n=Modernizr._config.classPrefix\|\|"";if(S&&(t=t.baseVal),Modernizr._config.enableJSClass){var i=new RegExp("(^\|\\s)"+n+"no-js(\\s\|$)");t=t.replace(i,"$1"+n+"js$2")}Modernizr._config.enableClasses&&(t+=" "+n+e.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\ndqfonticons[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), ndqfonticons family
Category:	downloaded
Size (bytes):	64264
Entropy (8bit):	6.201521235202019
Encrypted:	false
SSDEEP:	1536:AwoSpG7xWGNIJWfYQa2ksTZ9fLgW4Ahoi7WXQaOhbC6CHCG2c9qoGzjPtEjFPQmW:AwTpG7XIJWfYQ9PzfLgW4Ahoi7WXQaOD
MD5:	B3A284884E0C8DE8919A361416172AEB
SHA1:	A8F26846276F67CEDF8FBA94DA54E2E8B6C4D5FE
SHA-256:	4AA87B2D813B5D836F7A59AF064A7326C6D7B8A06DD5B37617EFB6AFFB2C13E1
SHA-512:	6C28ABBB84BC080DD0D43BE898C9F8CCB521DE100FAEAC5D1A14FF225683B54B32E438903C755EACB59FE72606F0E63D765795A0F115CD9B18413C5B9AA6CB47
Malicious:	false
Reputation:	low
IE Cache URL:	https://ir.casella.com/profiles/nasdaqir/themes/custom/nir_base/dist/fonts/ndqfonticons.eot
Preview:	....P.............................LP...............................................n.d.q.f.o.n.t.i.c.o.n.s.....R.e.g.u.l.a.r.....V.e.r.s.i.o.n. .1...0.....n.d.q.f.o.n.t.i.c.o.n.s................PFFTMq......4....GDEF.S......... OS/2/.M\...X...Vcmap...........rgasp............glyfn..........@head..`........6hhea.0.........$hmtx:/7........Tloca......x...Nmaxp.......8... name.v..........posta9.........=..........._.<................................................................................&...................@.................L.f...G.L.f....................................PfEd.@.........................................;.;.R.....v.\.\.D.f.....\|.D.3.3.3.J.g.\.9...g.).F.U.P...\.\.\.\.\.D.D.D.....\.D.D.D.D.D.......w.w...........U.f.f...u.P./.........z...w.D.K.K.K.K.K.K...F.F.P...P."...D.+.U.D.U.U.o.V.S.U.U.U.U.U.U.U.U.U.3.3.U.,.C.f.E.f.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.k.K.H.H.H.H.K.U.K.K.K.K.J.K.Q.K.K.H.K.H.H.H.H.H.K.H.I.f.t.t.<.<.D.D.D.D.D.D.D.H...6.D.D.H.D.H

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\nr-1208.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	31332
Entropy (8bit):	5.307480606148579
Encrypted:	false
SSDEEP:	384:bW+ioYSXVnMGIhDlu7kKuaq9VB5gwlfy9StcepgYYKxsq6lM7Y0vncYemRhVxp8q:bW5Laq9VHTZDhumdcfKtCK/
MD5:	1A71E4208296F97B465116492F59124D
SHA1:	40C8559838A758630287ED0B0F8E4E076215BDB0
SHA-256:	4014CA31D3C8E768608A40ED160A405AE39836A5B2C43F256BEE3BDF427DD67F
SHA-512:	2E5853FBD0D19FE6C69D8B3106F1788A1AB2483202FAC40D8303E74925D4632E91E66B40D3FB37802E59269EE715D5EF8BFB92BAE65E215D0D67BB29D55B4C4C
Malicious:	false
Reputation:	low
IE Cache URL:	https://js-agent.newrelic.com/nr-1208.min.js
Preview:	!function(n,t,e){function r(e,i){if(!t[e]){if(!n[e]){var a="function"==typeof __nr_require&&__nr_require;if(!i&&a)return a(e,!0);if(o)return o(e,!0);throw new Error("Cannot find module '"+e+"'")}var s=t[e]={exports:{}};n[e][0].call(s.exports,function(t){var o=n[e][1][t];return r(o\|\|t)},s,s.exports)}return t[e].exports}for(var o="function"==typeof __nr_require&&__nr_require,i=0;i<e.length;i++)r(e[i]);return r}({1:[function(n,t,e){t.exports=function(n,t){return"addEventListener"in window?window.addEventListener(n,t,!1):"attachEvent"in window?window.attachEvent("on"+n,t):void 0}},{}],2:[function(n,t,e){function r(n,t,e,r,i){var a=c(n,t,e,i);return a.metrics=o(r,a.metrics),a}function o(n,t){return t\|\|(t={count:0}),t.count+=1,m(n,function(n,e){t[n]=i(e,t[n])}),t}function i(n,t){return t?(t.c\|\|(t=u(t.t)),t.c+=1,t.t+=n,t.sos+=n*n,n>t.max&&(t.max=n),n<t.min&&(t.min=n),t):{t:n}}function a(n,t,e,r,o){var a=c(n,t,r,o);if(!a.metrics)return void(a.metrics=e);var u=a.metrics;u.count+=e.count,m(e,fun

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\organics[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	18542
Entropy (8bit):	5.055963360050615
Encrypted:	false
SSDEEP:	192:48IkgEDj1YbWeKeGtFfc5uDne7DFqgCwFdyFGFeFecttiS19z9/XdvM6mSltVmG3:zHgEDjm+F8HFdyFGFeFecBlxtv+iLcU
MD5:	620CF72707B8D7358EC1DE4A1F3900B6
SHA1:	9684EA611F4E14D511D03034D4426D4DA3B027A0
SHA-256:	AAA821699241EDB24FFD4C2814BA9A1822B86C33E96A7FD418C1B776E390E299
SHA-512:	0C546543458AB64D991B174D7FE8AF50FBD0E37FA402D1EA5E202ABFE3CEE4F69442D9D6488D1AC8DD65C1BEB4BBF49E67B4069A3A178582E4757EA195E74FCF
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/themes/custom/casella/css/custom/organics.css?qpcosx
Preview:	/.Website Name: Casella.Description: Organics specific stylesheet.Version: 1.0.Author: Adworkshop.Author URI: http://www.adworkshop.com./.. .sectionWrapper {width:100%;}../* ======================================================= /./ SECTION NAVIGATION /./ ======================================================= */ . #sectionNav {position:relative; padding:0; background: #00263d; z-index:2000; border-bottom: 1px solid #76be43;}. . #sectionNav .sectionNav-logoContainer {position: relative; z-index: 2;display:inline-block; padding:20px 0; line-height:0;}. #sectionNav .sectionNav-logoContainer a {. display:inline-block; width:375px; height:auto;. -webkit-transition: all .3s ease-in-out; -moz-transition: all .3s ease-in-out; -o-transition: all .3s ease-in-out; -ms-transition: all .3s ease-in-out; transition: all .3s ease-in-out;. }. #sectionNav .sectionNav-logoContainer a:hover {opacity:.7;}. #sectionNav .sectionNav-logoContainer img {wid

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\paragraphs.unpublished[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	57
Entropy (8bit):	4.5736893560802265
Encrypted:	false
SSDEEP:	3:kEUWKSnkmFmGOCXLFSKPkRtv:kEUxIF/hRk7v
MD5:	6BF7857DC423EADA40DDF4AEC0506587
SHA1:	9DE57D9EF96077986EFFBAB3521672BD15736488
SHA-256:	F1EEA94C1D7F9C6747515E1D7AF60618498E8197905F290BC3851DA41FBD5588
SHA-512:	74DBA740C9898FEB942047E576E29FB9CF5C7AAFBC2E6F8D0488AC1062864947BF93A141973B167C0554AD887BD10A463597782AE73860242A255FC958891CC1
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/modules/contrib/paragraphs/css/paragraphs.unpublished.css?qpcosx
Preview:	.paragraph--unpublished {. background-color: #fff4f4;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\payBill-icon[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 281 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2696
Entropy (8bit):	7.806391272870825
Encrypted:	false
SSDEEP:	48:i3b8EeOpzNyxkadra2YP5IdF4IBFzSViz9ZjeA0wVuVil7jWpWSbDjmpX/j:k98HM2hv4IXLZyAmViRjWpnmJ/j
MD5:	24173167A16F35E3591641C590ABC3EF
SHA1:	7FF1BC54EED49E3F9BB336974C1225BD2A6532B7
SHA-256:	2F21D45231796FC8762D0F59237F3B5A4059F2F94CD8A48E172B84267B732AAD
SHA-512:	2280D928A57C711EEB5B2762DCA36D0E8E764CECF6EFBB00B3F754BAF1C8ECAFD20357C9BEC89E349A5101E80B1D61FFFA0A0BEEBD0184FD5EEA615B74FDE279
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/themes/custom/casella/i/misc/payBill-icon.png
Preview:	.PNG........IHDR..............C<.....tEXtSoftware.Adobe ImageReadyq.e<...IDATx...u....9....cXR.@..T0P.&.@HR.l.a.T.RA..,[..;.y....6..-}.9:..@.e..,Ky......C.1p....)..\|..$l]......."..\.N.E.2v.e.y.;..\|:.l..@.b.X..H...J.......\&.......J.........,./....)...&.pB$\..#l.+n.<......e.{.E....O..S.w...~G.`]a\e..@.r....w.Z!R.se7.d....E.M..(_,...aJ.r.i..c.i....:rBD.....qe,..Z...&...Q...d...BI.......P0.m..t.\iT.k...dbj.BG..C.,.m.KW.Z#..D2.f.p.C@d...@.=..8..Hf.t?M~pR.3.` ,R.6.....o.L.\|=.t.`..(...#er.}S.F2.!..r..`...KE2:8..@H........`i..){...f....n:.C...9{..r{:{.`...K...g/..@y.HD3.5.&.7:+F3&...j.f..$.!zW..."....@......]...}?k.K.29...m.%.....n.k..\|n.4?..U...<n..fn.V.SE.jp....G1..O.5.H...u..'..C2.fRC3.-,..6<K....l.c.~.Z.B2..\-......t.@..L..t)..Hb.hs..M......@62.E...{....H.....^.{.P.&.g'TT3....d.+Q.0.3:}..K+&\|..FV..&$.)3....P...F".Q..D3H......D1.....i>...w.#. .yY.i..B.$...'MH......o9....\u.<T4............J4.uY6.~..Y#...x..x~..$..xs.7..j.!5..J..Y..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\position-container.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.220495863964869
Encrypted:	false
SSDEEP:	3:USQTWqVYb1MVNMNQMXm/1JrYv:UVtYbymQt/frYv
MD5:	A203BFB5819742D466B5E99AF480009A
SHA1:	CC0323B65FD726EF89264B2A7A6D3D7C4999A5E2
SHA-256:	92931CEB6A0AD1C9B3E8FC6F335B9DFD6F0C7C8EE36F089BB10241C142A78FAA
SHA-512:	D12FB20EDE3211C3C3469D5DC86E2BE654A3D5ACE2FE3F20D3E959596106E0775369CB1A5A1886447497508DD572F4D61A47291EDD25910DD8713883AD015185
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/core/themes/stable/css/system/components/position-container.module.css?qpcosx
Preview:	/. @file. * Contain positioned elements.. */...position-container {. position: relative;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\redir[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\reset-appearance.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	274
Entropy (8bit):	4.5219236059353545
Encrypted:	false
SSDEEP:	6:UiE4nzwfgWczGPtd+LRuL7OAnRtX0H0D0K:UvdczGPtELRuL7jXOMH
MD5:	5318929554D3BCE84406B2A5418EACAE
SHA1:	0E6DB18A3D7FBBDB6FC3827D3DA529A778AED732
SHA-256:	0AC01AB832B811CDC2DFDDAF28BA2F1EE3EF3BB6486CBAEB424226FDE71EE625
SHA-512:	9CD234CAFB5B728B9F0C7D1E2A9E851A751C1617B04550E68ECB0DD0E7211FBC6453093E5AC93CBACA89F716AA573BEACFE730917F567619DC93675A52F08C93
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/core/themes/stable/css/system/components/reset-appearance.module.css?qpcosx
Preview:	/. @file. * Utility class to remove browser styles, especially for button.. */...reset-appearance {. margin: 0;. padding: 0;. border: 0 none;. background: transparent;. line-height: inherit;. -webkit-appearance: none;. -moz-appearance: none;. appearance: none;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\roundtrip[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	42078
Entropy (8bit):	5.404500116886135
Encrypted:	false
SSDEEP:	768:2i5UOTGnoBVKQIhGIDITmxJCC4/xbGYtcZ9fuie6pc+tS2C:hU4HKQKfkMZbSV
MD5:	4748055DBDD5649BB8F3F2A9B89F85B1
SHA1:	5D5B298C45DF22FEAA07B87B11BBC88E71529265
SHA-256:	F55B80216D81F421D8DA8C69AE09068B1231E4B0FB6D3912EAE8D147B5232D9C
SHA-512:	8784022191246AAC6A7A5EAB2211C3D5C23B9FB479D4B0637C7D5A9A04B80598E8E067FCC9EF9AF3F51BE5437E143472D69CB02AC4BDDEAE35427EA15F1D6452
Malicious:	false
Reputation:	low
IE Cache URL:	http://a.adroll.com/j/roundtrip.js
Preview:	window.__adroll\|\|(function(){function f(){this.version="1.0";this.exp=8760;this.eexp=720;this.pv=1E11Math.random();this.__adc="__ar_v4";this._nad=0;this._lce=null;this._loaded=this._broken=!1;this._url=2E3;this._kwl=300;this._r={};this.cm_urls=[];this._logs=[];this.consent_networks={facebook:"f",linkedin:"linkedin"};for(var a=Array(4),b=0;b<a.length;b++)a[b]=(Math.round(1E11Math.random()).toString(16)+Array(9).join("0")).substr(0,8);this._set_global("adroll_sid",a.join(""));this._has_global("adroll_adv_id")&&(this.load_experiment_js(),.this.init_pixchk(),this._load_precheck_js(),this.trigger_gtm_consent_event(),this.load_pixel_assistant(),["adroll_adv_id","adroll_pix_id"].forEach(function(a){window.hasOwnProperty(a)&&("string"===typeof window[a]\|\|window[a]instanceof String)&&(window[a]=window[a].replace(/[^A-Z0-9_]/g,""))}))};f.prototype.load_consent_banner=function(){window.document.getElementById("__adroll_consent_banner_el")\|\|this.add_script_element("s.adroll.com/j/consent_tcfv2.j

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\roundtrip[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	42078
Entropy (8bit):	5.404500116886135
Encrypted:	false
SSDEEP:	768:2i5UOTGnoBVKQIhGIDITmxJCC4/xbGYtcZ9fuie6pc+tS2C:hU4HKQKfkMZbSV
MD5:	4748055DBDD5649BB8F3F2A9B89F85B1
SHA1:	5D5B298C45DF22FEAA07B87B11BBC88E71529265
SHA-256:	F55B80216D81F421D8DA8C69AE09068B1231E4B0FB6D3912EAE8D147B5232D9C
SHA-512:	8784022191246AAC6A7A5EAB2211C3D5C23B9FB479D4B0637C7D5A9A04B80598E8E067FCC9EF9AF3F51BE5437E143472D69CB02AC4BDDEAE35427EA15F1D6452
Malicious:	false
Reputation:	low
IE Cache URL:	https://s.adroll.com/j/roundtrip.js
Preview:	window.__adroll\|\|(function(){function f(){this.version="1.0";this.exp=8760;this.eexp=720;this.pv=1E11Math.random();this.__adc="__ar_v4";this._nad=0;this._lce=null;this._loaded=this._broken=!1;this._url=2E3;this._kwl=300;this._r={};this.cm_urls=[];this._logs=[];this.consent_networks={facebook:"f",linkedin:"linkedin"};for(var a=Array(4),b=0;b<a.length;b++)a[b]=(Math.round(1E11Math.random()).toString(16)+Array(9).join("0")).substr(0,8);this._set_global("adroll_sid",a.join(""));this._has_global("adroll_adv_id")&&(this.load_experiment_js(),.this.init_pixchk(),this._load_precheck_js(),this.trigger_gtm_consent_event(),this.load_pixel_assistant(),["adroll_adv_id","adroll_pix_id"].forEach(function(a){window.hasOwnProperty(a)&&("string"===typeof window[a]\|\|window[a]instanceof String)&&(window[a]=window[a].replace(/[^A-Z0-9_]/g,""))}))};f.prototype.load_consent_banner=function(){window.document.getElementById("__adroll_consent_banner_el")\|\|this.add_script_element("s.adroll.com/j/consent_tcfv2.j

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\rum[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\sd[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\sticky-header.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	163
Entropy (8bit):	4.711564923747027
Encrypted:	false
SSDEEP:	3:UV91G2AVgULbvlFPFlHgQEBYPiK0EcIAFwF0Sf4IAwHEZCXLFSKPxC:UNGgiqBYqKhgwF0SwIjlhRw
MD5:	47DD1A9AB77932B92B6C8E68B9B41E77
SHA1:	EE55F889A03FDCF021FA916B6B7CFED8DB417249
SHA-256:	0B61E01FA0FA02EBA3C6A074427DDF2A6CF98C01727B2796309B2B5B005FAC70
SHA-512:	29F9277A71D16CAF1EC6EA5E70963D8F98EFCFCC92F34EDDDD1F6697532553865088113A66B22BE830DE6EF534128527AB18400C9ACF34BA031EA6FEF82FB570
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/core/themes/stable/css/system/components/sticky-header.module.css?qpcosx
Preview:	/*. @file. * Table header behavior.. . @see tableheader.js. */..table.sticky-header {. z-index: 500;. top: 0;. margin-top: 0;. background-color: #fff;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\system-status-report-counters[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	584
Entropy (8bit):	4.839526368513175
Encrypted:	false
SSDEEP:	12:U6dfNKgteFEYKWJoIXmed6GrqvmRNa29GKgFK:3dRtY2VI2eQTvYNanW
MD5:	E65CC16D5C92CD242850D0D607CE3B61
SHA1:	CFE0AB80E76AB1FDE9B226C51E425587DE708C9B
SHA-256:	791BF430E835E8F755420AAC9D175BB568B165DBBA709453EB2E48C4A479AA63
SHA-512:	6FB24AAB9FAF4E9419A5464D02E47A726AECB32321417F080F5AF806F3DE5B07C0FCC870051E4FF284282B0C1EBB2BEFE92F20648B9B5406EFAEFD5C6930E956
Malicious:	false
Reputation:	low
IE Cache URL:	https://c-11158-20201221-www-casella-com.i.icims.com/core/themes/stable/css/system/components/system-status-report-counters.css?qljrib
Preview:	/*.. @file.. * Styles for the system status report counters... */.....system-status-report-counters__item {.. width: 100%;.. margin-bottom: 0.5em;.. padding: 0.5em 0;.. text-align: center;.. white-space: nowrap;.. background-color: rgba(0, 0, 0, 0.063);..}....@media screen and (min-width: 60em) {.. .system-status-report-counters {.. display: flex;.. flex-wrap: wrap;.. justify-content: space-between;.. }.. .system-status-report-counters__item--half-width {.. width: 49%;.. }.. .system-status-report-counters__item--third-width {.. width: 33%;.. }..}..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\system-status-report-general-info[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	4.758561643554257
Encrypted:	false
SSDEEP:	6:U6dqbADEnCWRK2y7fy7Mm5AUu/NIRYYfmy7MmIAFfNg/RYYy:U6dfYntRj+fyIm5AB/NIXfmyImIA5IXy
MD5:	5F4C9A3373FD14DF9E7FDCD2C3D91204
SHA1:	D04D743B35759D8DDBDFB9639C9D991033CF1356
SHA-256:	8EF76C600A3610E1D312FFD41BEAF00A4D92A4ED232624B7840E0833F912A137
SHA-512:	F8FDFF9AFF7B0EF8103FD7D17DB3A344DD4001DB4402D30B7536F7B99434345A0ADD34BFAC1269FCE5E59C1F5086FF2600F639304E47FFC3FE5A593C0F359315
Malicious:	false
Reputation:	low
IE Cache URL:	https://c-11158-20201221-www-casella-com.i.icims.com/core/themes/stable/css/system/components/system-status-report-general-info.css?qljrib
Preview:	/*.. @file.. * Default styles for the System Status general info... */.....system-status-general-info__item {.. margin-top: 1em;.. padding: 0 1em 1em;.. border: 1px solid #ccc;..}.....system-status-general-info__item-title {.. border-bottom: 1px solid #ccc;..}..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\tDbV2oqRg1oM3QBjjcaDkOJGiRD7Owc[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 29856, version 1.1
Category:	downloaded
Size (bytes):	29856
Entropy (8bit):	7.9847589176034734
Encrypted:	false
SSDEEP:	768:a09Vn3v9YqS3LDmiUuLhiHdcng0vn/i+l:a2vBS7DCuLoHdC/Bl
MD5:	176F838635C53CBE9BE7B8A649CE7B1A
SHA1:	E7E133B0CB9155C84B43447E76404F83EAD76A57
SHA-256:	81656FAE16BC170A071115EF76F8D15469D3B9013497B10B7656035E40584DC3
SHA-512:	165C4F0090BE6CA1B392EBEBF25305730CEDAEC8EBEDD22FCC07DA62E85CBDDA92B6E3B70E24038E9122BCEF6692A28C8E43FCD41459138FB21AE55794BE955B
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/droidserif/v13/tDbV2oqRg1oM3QBjjcaDkOJGiRD7Owc.woff
Preview:	wOFF......t.................................GDEF................GPOS............T...GSUB...x........l.t.OS/2.......V...`....cmap.......j....mag.cvt ...X.........L..fpgm.......&....s.#.gasp................glyf......a....h....head..l....5...6..g.hhea..l........$....hmtx..m........L..=!loca..o.........C7i!maxp..p.... ... ...$name..p.........%xB)post..q....Y......;prep..s.........x.e.........................x.L....q.@.x.....g.m.....e.v....vrs..7..R.F....ZB.. ...`......"&t. ...C..A..8...Hk$..3Q.._.5....K\|=..t(z...K..k........5....).P.......t..8gk../g...N........ .....Em"....&4%...(E/zS..V..V.!V.."....@U&Yu...lc'..g.9...p.s..&...C..3^..\|`..l....I.....zm.Fm.fm.R.P.(UI....F.d_h..j.......3.<.I}..U?.....8........c.p~P.tXGtL.uB'uJ.}..........;..{...z..z..z...>..g...\].W.....q...w).Mp.}.p...i......i.t2.yq=.......F.:..,c..(.R.e...w.x...WSC-u..@..M.>........Ca...T....l.Zz...QO../&.V.m$H."M.,9..(r..\.:7..m.....G.e4../.3r.x.nD../....1...C.aWM5+.Xa.J(..i........VSC-u..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\tabledrag.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1840
Entropy (8bit):	4.979542674814808
Encrypted:	false
SSDEEP:	48:02cxDZDI4f1Ba4fgwrE3QA1R53934s44XG4046XfX0u:02cxe4Xa4brE3r1L3t4j4W4046vku
MD5:	E5C74E1C6FD604D03DC784CF615E849B
SHA1:	A2F9F7270EA674F70A6702F5CE4201106EF398D9
SHA-256:	8188BAD0F77AAF0E06C5D199B36C85263048A4AC6361BED201939FDAB3DD196F
SHA-512:	4B47BF98B65F151AA42628A3E3BC69770AF9BD684900971F329059B396AFA83F549FD345D94BA2F1C6DE3726A8B9B21BCCB4399AD1A330903613A9417AB864CF
Malicious:	false
Reputation:	low
IE Cache URL:	http://www.casella.com/core/themes/stable/css/system/components/tabledrag.module.css?qpcosx
Preview:	/*. @file. * Table drag behavior.. . @see tabledrag.js. /..body.drag {. cursor: move;.}.tr.region-title {. font-weight: bold;.}.tr.region-message {. color: #999;.}.tr.region-populated {. display: none;.}.tr.add-new .tabledrag-changed {. display: none;.}..draggable a.tabledrag-handle {. float: left; / LTR /. overflow: hidden;. height: 1.7em;. margin-left: -1em; / LTR */. cursor: move;. text-decoration: none;.}.[dir="rtl"] .draggable a.tabledrag-handle {. float: right;. margin-right: -1em;. margin-left: 0;.}.a.tabledrag-handle:hover {. text-decoration: none;.}.a.tabledrag-handle .handle {. width: 14px;. height: 14px;. margin: -0.4em 0.5em 0;. padding: 0.42em 0.5em;. background: url(../../../images/core/icons/787878/move.svg) no-repeat 6px 7px;.}.a.tabledrag-handle:hover .handle,.a.tabledrag-handle:focus .handle {. background-image: url(../../../images/core/icons/000000/move.svg);.}..touchevents .draggable td {. padding: 0 10px;.}..touchevents .draggable .m

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\tpid=cc3a6091-a4b5-4a00-95ec-94d4d16e385b[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\us[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.0021975300504877
Encrypted:	false
SSDEEP:	3:CUO/RD/wlHrfx/n:oD2/n
MD5:	ED280A0EA3CC38F3CBBC747ACFBEF47D
SHA1:	6BDCB32EE75E957A5085C010F4DFD0C716BFDADC
SHA-256:	8F69E10876805B747A3AD08A818D46AC7E731B1AF417EA6E259D9B6B7DEB65C5
SHA-512:	4248E293BB759C3AC0EA71F545E10E85D0C3C7F1237CE8B18C6A3FD00499A11BDC0252C938BE87359FA673C8E7A83C7CC6FC5D12718A68844C2615E5DCA3527B
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\174173569_10159695018988888_4668211343051673706_n[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x540, frames 3
Category:	downloaded
Size (bytes):	83403
Entropy (8bit):	7.988791939956067
Encrypted:	false
SSDEEP:	1536:BfjIIGUAPlMjHtcX7vlP0bO+QyJsIZGW6AQXMZs7n3Cc7rqQcNxixHdL41tynm:3Kl2KBP0lhZBqXI+3/Vc7k9L41Unm
MD5:	A65908D93EBFCB23DB96CCBFD3B935E8
SHA1:	D15C2C7EB4A6AE23176392719B15243F0622E226
SHA-256:	FAAD471F95F653E0D3685D76B8E499841128C9D8E38B508A70DED430B94676ED
SHA-512:	23DAE4304C6F74FAC8F15B289ECB71F3D00081B08B316D471255DC72BD994CDEBD08EFF43A28980E4D4DCA29D8C1C15201EDFC753334740B3B4D2EBEB103966A
Malicious:	false
Reputation:	low
IE Cache URL:	https://scontent-bos3-1.xx.fbcdn.net/v/t1.6435-0/p180x540/174173569_10159695018988888_4668211343051673706_n.jpg?_nc_cat=102&ccb=1-3&_nc_sid=110474&_nc_ohc=lm1f-dYLkN8AX-Lpn8i&_nc_ht=scontent-bos3-1.xx&tp=6&oh=0ca72c7f50f0b8016177ebf2159d6c98&oe=609E61C3
Preview:	......JFIF..............Photoshop 3.0.8BIM..........g..jPkhjI42-vwMnSIE5-eZ..(.bFBMD0a000a88010000ff180000373f0000e6460000924f0000db7c000017bd0000cfc100001ccb0000cad40000cb450100...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...................................................................................hr....."...........(...."..@R.HH.".Q..).(..$...(I!$@..D.."...D...@R.D.."."@....(.......jp.".(........!.......@..PJ.(.."...".Q.(I.'!..".J.$......$.."...HE."@..(...P..A.V..$....!..jp@......(i(i(....$@..(......'%i%.JP...@R.F.p.r..P...T....D...(..A(H.'$jq..R.ri..j(..$... .."...r.(j$j(.........."@.. H."T".......(I..D..D..".".".QD..&.Q.J....@.(............!..j(..iHI.")$....@..(I!"...IR(@.$@.."%I..H.( .....HE...i..J(.")QH.."."...VSNnt...L..@.,..jp.p.........(... "...(..'!.."....."... H....).F.(....D.xC.#A...(E.....$T"..(C..z]...vZ..J..Y1b...js` eA..!.!&.H.F.....H.."."...(.!$.$.

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 4, 2021 21:47:00.138503075 CEST	49734	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.139400959 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.272279978 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.272435904 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.272996902 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.275862932 CEST	80	49734	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.275991917 CEST	49734	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.405555010 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.434756041 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.434781075 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.434796095 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.434808016 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.434827089 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.434843063 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.434854031 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.434885979 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.434905052 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.434928894 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.434942961 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.434957981 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.434987068 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.435015917 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.435049057 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.435095072 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.514453888 CEST	49734	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.522676945 CEST	49736	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.522991896 CEST	49737	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.525769949 CEST	49738	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.525876045 CEST	49739	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.569571018 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.569628954 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.569654942 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.569669962 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.569705009 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.569716930 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.569741011 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.569760084 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.569806099 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.569864035 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.638067007 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.651475906 CEST	80	49734	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.651591063 CEST	80	49734	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.654371023 CEST	49734	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.656060934 CEST	80	49736	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.656196117 CEST	49736	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.658571005 CEST	80	49738	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.658694029 CEST	49738	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.660012007 CEST	80	49737	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.660104990 CEST	49737	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.660206079 CEST	49736	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.660324097 CEST	49734	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.660341024 CEST	49738	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.661319017 CEST	49737	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.662046909 CEST	80	49739	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.662153006 CEST	49739	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.664025068 CEST	49739	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.676242113 CEST	49745	80	192.168.2.4	65.9.66.129
May 4, 2021 21:47:00.678157091 CEST	49746	443	192.168.2.4	169.50.137.179
May 4, 2021 21:47:00.679081917 CEST	49747	443	192.168.2.4	169.50.137.179
May 4, 2021 21:47:00.683490038 CEST	49744	80	192.168.2.4	65.9.66.129
May 4, 2021 21:47:00.716830969 CEST	80	49745	65.9.66.129	192.168.2.4
May 4, 2021 21:47:00.716995955 CEST	49745	80	192.168.2.4	65.9.66.129
May 4, 2021 21:47:00.717621088 CEST	49745	80	192.168.2.4	65.9.66.129
May 4, 2021 21:47:00.724133015 CEST	80	49744	65.9.66.129	192.168.2.4
May 4, 2021 21:47:00.724399090 CEST	49744	80	192.168.2.4	65.9.66.129
May 4, 2021 21:47:00.725308895 CEST	443	49746	169.50.137.179	192.168.2.4
May 4, 2021 21:47:00.725418091 CEST	49746	443	192.168.2.4	169.50.137.179
May 4, 2021 21:47:00.726015091 CEST	443	49747	169.50.137.179	192.168.2.4
May 4, 2021 21:47:00.727055073 CEST	49747	443	192.168.2.4	169.50.137.179
May 4, 2021 21:47:00.727313995 CEST	49746	443	192.168.2.4	169.50.137.179
May 4, 2021 21:47:00.735649109 CEST	49747	443	192.168.2.4	169.50.137.179
May 4, 2021 21:47:00.758141994 CEST	80	49745	65.9.66.129	192.168.2.4
May 4, 2021 21:47:00.771056890 CEST	80	49735	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.771184921 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.772834063 CEST	49735	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.774245024 CEST	443	49746	169.50.137.179	192.168.2.4
May 4, 2021 21:47:00.776845932 CEST	443	49746	169.50.137.179	192.168.2.4
May 4, 2021 21:47:00.776895046 CEST	443	49746	169.50.137.179	192.168.2.4
May 4, 2021 21:47:00.776953936 CEST	443	49746	169.50.137.179	192.168.2.4
May 4, 2021 21:47:00.776993990 CEST	49746	443	192.168.2.4	169.50.137.179
May 4, 2021 21:47:00.777029991 CEST	49746	443	192.168.2.4	169.50.137.179
May 4, 2021 21:47:00.782712936 CEST	443	49747	169.50.137.179	192.168.2.4
May 4, 2021 21:47:00.785198927 CEST	443	49747	169.50.137.179	192.168.2.4
May 4, 2021 21:47:00.785275936 CEST	443	49747	169.50.137.179	192.168.2.4
May 4, 2021 21:47:00.785334110 CEST	443	49747	169.50.137.179	192.168.2.4
May 4, 2021 21:47:00.785336971 CEST	49747	443	192.168.2.4	169.50.137.179
May 4, 2021 21:47:00.785365105 CEST	49747	443	192.168.2.4	169.50.137.179
May 4, 2021 21:47:00.785378933 CEST	49747	443	192.168.2.4	169.50.137.179
May 4, 2021 21:47:00.793092012 CEST	80	49738	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.793148994 CEST	80	49736	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.793289900 CEST	80	49736	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.793368101 CEST	49736	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.793433905 CEST	80	49738	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.793538094 CEST	49738	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.797482967 CEST	80	49734	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.798285007 CEST	80	49737	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.798541069 CEST	49734	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.798573017 CEST	80	49737	52.87.65.167	192.168.2.4
May 4, 2021 21:47:00.798656940 CEST	49737	80	192.168.2.4	52.87.65.167
May 4, 2021 21:47:00.800043106 CEST	80	49739	52.87.65.167	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
May 4, 2021 21:46:59.949779034 CEST	192.168.2.4	8.8.8.8	0xe6a9	Standard query (0)	www.casella.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:00.580293894 CEST	192.168.2.4	8.8.8.8	0x21a9	Standard query (0)	cdn.rlets.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:00.590354919 CEST	192.168.2.4	8.8.8.8	0x4601	Standard query (0)	pixel.mathtag.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:00.612838984 CEST	192.168.2.4	8.8.8.8	0xf643	Standard query (0)	tag.simpli.fi	A (IP address)	IN (0x0001)
May 4, 2021 21:47:00.701581001 CEST	192.168.2.4	8.8.8.8	0x29fa	Standard query (0)	apps.twinesocial.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:02.106021881 CEST	192.168.2.4	8.8.8.8	0x7a85	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:02.581445932 CEST	192.168.2.4	8.8.8.8	0x3d77	Standard query (0)	61870c77-2e72-45dc-9f17-2f74952d866e.rlets.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:02.824830055 CEST	192.168.2.4	8.8.8.8	0xe0f9	Standard query (0)	www.google.de	A (IP address)	IN (0x0001)
May 4, 2021 21:47:02.886126995 CEST	192.168.2.4	8.8.8.8	0xa7d5	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:03.265011072 CEST	192.168.2.4	8.8.8.8	0xf01f	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:03.561399937 CEST	192.168.2.4	8.8.8.8	0xe30	Standard query (0)	capture-api.reachlocalservices.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.471178055 CEST	192.168.2.4	8.8.8.8	0xb895	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.544157028 CEST	192.168.2.4	8.8.8.8	0xd20b	Standard query (0)	a.adroll.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.736361980 CEST	192.168.2.4	8.8.8.8	0x2cf3	Standard query (0)	apps-cdn.twinesocial.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.774674892 CEST	192.168.2.4	8.8.8.8	0x6ca0	Standard query (0)	s.adroll.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.783866882 CEST	192.168.2.4	8.8.8.8	0x13af	Standard query (0)	d.adroll.mgr.consensu.org	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.897373915 CEST	192.168.2.4	8.8.8.8	0x97a2	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:05.146281004 CEST	192.168.2.4	8.8.8.8	0xc361	Standard query (0)	d.adroll.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.776218891 CEST	192.168.2.4	8.8.8.8	0x2553	Standard query (0)	ws.pusherapp.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.782813072 CEST	192.168.2.4	8.8.8.8	0xbb95	Standard query (0)	liqadprdct-capture-prod-east.gannettdigital.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.870280981 CEST	192.168.2.4	8.8.8.8	0x8281	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.870801926 CEST	192.168.2.4	8.8.8.8	0x9628	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.870924950 CEST	192.168.2.4	8.8.8.8	0x5f46	Standard query (0)	pixel.advertising.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.871121883 CEST	192.168.2.4	8.8.8.8	0x9f78	Standard query (0)	sync.outbrain.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.871216059 CEST	192.168.2.4	8.8.8.8	0xfd1a	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.472870111 CEST	192.168.2.4	8.8.8.8	0xe5b2	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.472918987 CEST	192.168.2.4	8.8.8.8	0x5949	Standard query (0)	ads.yahoo.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.473206043 CEST	192.168.2.4	8.8.8.8	0x199d	Standard query (0)	sync.taboola.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.476049900 CEST	192.168.2.4	8.8.8.8	0xff82	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.476166010 CEST	192.168.2.4	8.8.8.8	0x249a	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.478183985 CEST	192.168.2.4	8.8.8.8	0xd017	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.478564978 CEST	192.168.2.4	8.8.8.8	0xca28	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.494290113 CEST	192.168.2.4	8.8.8.8	0x9555	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.811995983 CEST	192.168.2.4	8.8.8.8	0x7b7c	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.113224030 CEST	192.168.2.4	8.8.8.8	0xabbb	Standard query (0)	graph.facebook.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.114881039 CEST	192.168.2.4	8.8.8.8	0xc4db	Standard query (0)	scontent-iad3-1.xx.fbcdn.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.246710062 CEST	192.168.2.4	8.8.8.8	0x14bc	Standard query (0)	stats.pusher.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.329138994 CEST	192.168.2.4	8.8.8.8	0x5de2	Standard query (0)	scontent-iad3-2.xx.fbcdn.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.330053091 CEST	192.168.2.4	8.8.8.8	0x7c6a	Standard query (0)	scontent-dfw5-1.xx.fbcdn.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.352945089 CEST	192.168.2.4	8.8.8.8	0xfc4a	Standard query (0)	external-iad3-1.xx.fbcdn.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.378187895 CEST	192.168.2.4	8.8.8.8	0x399c	Standard query (0)	scontent-ort2-2.xx.fbcdn.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.383299112 CEST	192.168.2.4	8.8.8.8	0xc948	Standard query (0)	scontent-bos3-1.xx.fbcdn.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.431109905 CEST	192.168.2.4	8.8.8.8	0x9fd2	Standard query (0)	scontent-mia3-2.xx.fbcdn.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.443670034 CEST	192.168.2.4	8.8.8.8	0xb68d	Standard query (0)	scontent-frx5-1.xx.fbcdn.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:17.368731976 CEST	192.168.2.4	8.8.8.8	0xfb3e	Standard query (0)	www.casella.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:21.056521893 CEST	192.168.2.4	8.8.8.8	0x8838	Standard query (0)	secure3.i-doxs.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:24.805640936 CEST	192.168.2.4	8.8.8.8	0x329e	Standard query (0)	ir.casella.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:25.125138998 CEST	192.168.2.4	8.8.8.8	0x9613	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:26.070106983 CEST	192.168.2.4	8.8.8.8	0x5719	Standard query (0)	api.nasdaqomx.wallst.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:26.079638004 CEST	192.168.2.4	8.8.8.8	0x40d0	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:26.750679970 CEST	192.168.2.4	8.8.8.8	0x168f	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:27.049813986 CEST	192.168.2.4	8.8.8.8	0xbd6c	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:27.052820921 CEST	192.168.2.4	8.8.8.8	0xd1b1	Standard query (0)	thenasdaqomxgroup.demdex.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:27.502635002 CEST	192.168.2.4	8.8.8.8	0x537f	Standard query (0)	bam-cell.nr-data.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:28.166872978 CEST	192.168.2.4	8.8.8.8	0x2c0c	Standard query (0)	careers-casella.icims.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:28.543668985 CEST	192.168.2.4	8.8.8.8	0x5a63	Standard query (0)	c-11158-20201221-www-casella-com.i.icims.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:28.694250107 CEST	192.168.2.4	8.8.8.8	0x44cd	Standard query (0)	cdn07.icims.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:28.777981043 CEST	192.168.2.4	8.8.8.8	0x4394	Standard query (0)	i.simpli.fi	A (IP address)	IN (0x0001)
May 4, 2021 21:47:29.536402941 CEST	192.168.2.4	8.8.8.8	0xa256	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:30.251200914 CEST	192.168.2.4	8.8.8.8	0x3f04	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.799417019 CEST	192.168.2.4	8.8.8.8	0x44c8	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.809319973 CEST	192.168.2.4	8.8.8.8	0x9f35	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.824485064 CEST	192.168.2.4	8.8.8.8	0xe4d6	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.828211069 CEST	192.168.2.4	8.8.8.8	0xe6a7	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.828994036 CEST	192.168.2.4	8.8.8.8	0xb683	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.839243889 CEST	192.168.2.4	8.8.8.8	0xf3f4	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.855200052 CEST	192.168.2.4	8.8.8.8	0x675f	Standard query (0)	uip.semasio.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.863012075 CEST	192.168.2.4	8.8.8.8	0x855f	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.876983881 CEST	192.168.2.4	8.8.8.8	0xf57c	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.903517008 CEST	192.168.2.4	8.8.8.8	0xca33	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.908188105 CEST	192.168.2.4	8.8.8.8	0x3c39	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.919059038 CEST	192.168.2.4	8.8.8.8	0x7a11	Standard query (0)	loadm.exelator.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.919222116 CEST	192.168.2.4	8.8.8.8	0x17fb	Standard query (0)	ih.adscale.de	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.943698883 CEST	192.168.2.4	8.8.8.8	0x2966	Standard query (0)	ad.sxp.smartclip.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.949079990 CEST	192.168.2.4	8.8.8.8	0x9284	Standard query (0)	su.addthis.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.951380968 CEST	192.168.2.4	8.8.8.8	0x4dcc	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.972047091 CEST	192.168.2.4	8.8.8.8	0x58f3	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.057329893 CEST	192.168.2.4	8.8.8.8	0x6a53	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.071065903 CEST	192.168.2.4	8.8.8.8	0xdd5c	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.103681087 CEST	192.168.2.4	8.8.8.8	0xda9e	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.106689930 CEST	192.168.2.4	8.8.8.8	0xd068	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.309973001 CEST	192.168.2.4	8.8.8.8	0x74aa	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.415992022 CEST	192.168.2.4	8.8.8.8	0xa49c	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.475191116 CEST	192.168.2.4	8.8.8.8	0x650e	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.767616987 CEST	192.168.2.4	8.8.8.8	0x1abc	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.923906088 CEST	192.168.2.4	8.8.8.8	0x27c9	Standard query (0)	ads.creative-serving.com	A (IP address)	IN (0x0001)
May 4, 2021 21:47:35.212680101 CEST	192.168.2.4	8.8.8.8	0xa5ce	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)
May 4, 2021 21:47:35.612819910 CEST	192.168.2.4	8.8.8.8	0x1e59	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
May 4, 2021 21:47:00.127500057 CEST	8.8.8.8	192.168.2.4	0xe6a9	No error (0)	www.casella.com		52.87.65.167	A (IP address)	IN (0x0001)
May 4, 2021 21:47:00.649588108 CEST	8.8.8.8	192.168.2.4	0x4601	No error (0)	pixel.mathtag.com	pixel.mathtag.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:00.672338963 CEST	8.8.8.8	192.168.2.4	0x21a9	No error (0)	cdn.rlets.com	d3bi9sbave64gz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:00.672338963 CEST	8.8.8.8	192.168.2.4	0x21a9	No error (0)	d3bi9sbave64gz.cloudfront.net		65.9.66.129	A (IP address)	IN (0x0001)
May 4, 2021 21:47:00.672338963 CEST	8.8.8.8	192.168.2.4	0x21a9	No error (0)	d3bi9sbave64gz.cloudfront.net		65.9.66.58	A (IP address)	IN (0x0001)
May 4, 2021 21:47:00.672338963 CEST	8.8.8.8	192.168.2.4	0x21a9	No error (0)	d3bi9sbave64gz.cloudfront.net		65.9.66.74	A (IP address)	IN (0x0001)
May 4, 2021 21:47:00.672338963 CEST	8.8.8.8	192.168.2.4	0x21a9	No error (0)	d3bi9sbave64gz.cloudfront.net		65.9.66.120	A (IP address)	IN (0x0001)
May 4, 2021 21:47:00.675894976 CEST	8.8.8.8	192.168.2.4	0xf643	No error (0)	tag.simpli.fi		169.50.137.179	A (IP address)	IN (0x0001)
May 4, 2021 21:47:00.790458918 CEST	8.8.8.8	192.168.2.4	0x29fa	No error (0)	apps.twinesocial.com	awseb-awseb-eghbt6mzdw45-44179265.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:00.790458918 CEST	8.8.8.8	192.168.2.4	0x29fa	No error (0)	awseb-awseb-eghbt6mzdw45-44179265.us-east-1.elb.amazonaws.com		52.0.228.129	A (IP address)	IN (0x0001)
May 4, 2021 21:47:00.790458918 CEST	8.8.8.8	192.168.2.4	0x29fa	No error (0)	awseb-awseb-eghbt6mzdw45-44179265.us-east-1.elb.amazonaws.com		3.216.17.5	A (IP address)	IN (0x0001)
May 4, 2021 21:47:02.163095951 CEST	8.8.8.8	192.168.2.4	0x7a85	No error (0)	googleads.g.doubleclick.net		216.58.212.162	A (IP address)	IN (0x0001)
May 4, 2021 21:47:02.646836042 CEST	8.8.8.8	192.168.2.4	0x3d77	No error (0)	61870c77-2e72-45dc-9f17-2f74952d866e.rlets.com		52.88.192.45	A (IP address)	IN (0x0001)
May 4, 2021 21:47:02.646836042 CEST	8.8.8.8	192.168.2.4	0x3d77	No error (0)	61870c77-2e72-45dc-9f17-2f74952d866e.rlets.com		52.24.66.224	A (IP address)	IN (0x0001)
May 4, 2021 21:47:02.881665945 CEST	8.8.8.8	192.168.2.4	0xe0f9	No error (0)	www.google.de		142.250.185.227	A (IP address)	IN (0x0001)
May 4, 2021 21:47:02.947521925 CEST	8.8.8.8	192.168.2.4	0xa7d5	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:02.947521925 CEST	8.8.8.8	192.168.2.4	0xa7d5	No error (0)	scontent.xx.fbcdn.net		31.13.92.14	A (IP address)	IN (0x0001)
May 4, 2021 21:47:03.316596031 CEST	8.8.8.8	192.168.2.4	0xf01f	No error (0)	stats.g.doubleclick.net	stats.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:03.316596031 CEST	8.8.8.8	192.168.2.4	0xf01f	No error (0)	stats.l.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)
May 4, 2021 21:47:03.316596031 CEST	8.8.8.8	192.168.2.4	0xf01f	No error (0)	stats.l.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)
May 4, 2021 21:47:03.316596031 CEST	8.8.8.8	192.168.2.4	0xf01f	No error (0)	stats.l.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)
May 4, 2021 21:47:03.316596031 CEST	8.8.8.8	192.168.2.4	0xf01f	No error (0)	stats.l.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)
May 4, 2021 21:47:03.622142076 CEST	8.8.8.8	192.168.2.4	0xe30	No error (0)	capture-api.reachlocalservices.com		99.86.2.69	A (IP address)	IN (0x0001)
May 4, 2021 21:47:03.622142076 CEST	8.8.8.8	192.168.2.4	0xe30	No error (0)	capture-api.reachlocalservices.com		99.86.2.73	A (IP address)	IN (0x0001)
May 4, 2021 21:47:03.622142076 CEST	8.8.8.8	192.168.2.4	0xe30	No error (0)	capture-api.reachlocalservices.com		99.86.2.17	A (IP address)	IN (0x0001)
May 4, 2021 21:47:03.622142076 CEST	8.8.8.8	192.168.2.4	0xe30	No error (0)	capture-api.reachlocalservices.com		99.86.2.10	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.521476030 CEST	8.8.8.8	192.168.2.4	0xb895	No error (0)	js-agent.newrelic.com	f4.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:04.622266054 CEST	8.8.8.8	192.168.2.4	0xd20b	No error (0)	a.adroll.com	a.adroll.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:04.815541029 CEST	8.8.8.8	192.168.2.4	0x2cf3	No error (0)	apps-cdn.twinesocial.com	dyrxq3369g3sr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:04.815541029 CEST	8.8.8.8	192.168.2.4	0x2cf3	No error (0)	dyrxq3369g3sr.cloudfront.net		65.9.66.12	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.815541029 CEST	8.8.8.8	192.168.2.4	0x2cf3	No error (0)	dyrxq3369g3sr.cloudfront.net		65.9.66.116	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.815541029 CEST	8.8.8.8	192.168.2.4	0x2cf3	No error (0)	dyrxq3369g3sr.cloudfront.net		65.9.66.48	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.815541029 CEST	8.8.8.8	192.168.2.4	0x2cf3	No error (0)	dyrxq3369g3sr.cloudfront.net		65.9.66.84	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.835377932 CEST	8.8.8.8	192.168.2.4	0x6ca0	No error (0)	s.adroll.com	sadroll.edgekey.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:04.841289043 CEST	8.8.8.8	192.168.2.4	0x13af	No error (0)	d.adroll.mgr.consensu.org	d.adroll.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:04.841289043 CEST	8.8.8.8	192.168.2.4	0x13af	No error (0)	d.adroll.com	adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:04.841289043 CEST	8.8.8.8	192.168.2.4	0x13af	No error (0)	adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com		52.215.226.121	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.841289043 CEST	8.8.8.8	192.168.2.4	0x13af	No error (0)	adserver-vpc-alb-3-890571764.eu-west-1.elb.amazonaws.com		3.248.28.111	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.945970058 CEST	8.8.8.8	192.168.2.4	0x97a2	No error (0)	bam.nr-data.net		162.247.242.18	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.945970058 CEST	8.8.8.8	192.168.2.4	0x97a2	No error (0)	bam.nr-data.net		162.247.242.20	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.945970058 CEST	8.8.8.8	192.168.2.4	0x97a2	No error (0)	bam.nr-data.net		162.247.242.21	A (IP address)	IN (0x0001)
May 4, 2021 21:47:04.945970058 CEST	8.8.8.8	192.168.2.4	0x97a2	No error (0)	bam.nr-data.net		162.247.242.19	A (IP address)	IN (0x0001)
May 4, 2021 21:47:05.217474937 CEST	8.8.8.8	192.168.2.4	0xc361	No error (0)	d.adroll.com	adserver-vpc-alb-2-1264451658.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:05.217474937 CEST	8.8.8.8	192.168.2.4	0xc361	No error (0)	adserver-vpc-alb-2-1264451658.eu-west-1.elb.amazonaws.com		54.78.31.47	A (IP address)	IN (0x0001)
May 4, 2021 21:47:05.217474937 CEST	8.8.8.8	192.168.2.4	0xc361	No error (0)	adserver-vpc-alb-2-1264451658.eu-west-1.elb.amazonaws.com		54.74.23.153	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.828888893 CEST	8.8.8.8	192.168.2.4	0x2553	No error (0)	ws.pusherapp.com	ws-mt1.pusher.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:06.828888893 CEST	8.8.8.8	192.168.2.4	0x2553	No error (0)	ws-mt1.pusher.com	mt1-ws-1895636413.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:06.828888893 CEST	8.8.8.8	192.168.2.4	0x2553	No error (0)	mt1-ws-1895636413.us-east-1.elb.amazonaws.com		3.208.175.180	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.828888893 CEST	8.8.8.8	192.168.2.4	0x2553	No error (0)	mt1-ws-1895636413.us-east-1.elb.amazonaws.com		52.20.28.166	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.828888893 CEST	8.8.8.8	192.168.2.4	0x2553	No error (0)	mt1-ws-1895636413.us-east-1.elb.amazonaws.com		3.222.249.116	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.828888893 CEST	8.8.8.8	192.168.2.4	0x2553	No error (0)	mt1-ws-1895636413.us-east-1.elb.amazonaws.com		52.44.236.26	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.828888893 CEST	8.8.8.8	192.168.2.4	0x2553	No error (0)	mt1-ws-1895636413.us-east-1.elb.amazonaws.com		100.24.155.60	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.828888893 CEST	8.8.8.8	192.168.2.4	0x2553	No error (0)	mt1-ws-1895636413.us-east-1.elb.amazonaws.com		52.205.213.135	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.828888893 CEST	8.8.8.8	192.168.2.4	0x2553	No error (0)	mt1-ws-1895636413.us-east-1.elb.amazonaws.com		52.23.0.251	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.828888893 CEST	8.8.8.8	192.168.2.4	0x2553	No error (0)	mt1-ws-1895636413.us-east-1.elb.amazonaws.com		107.20.105.92	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.845320940 CEST	8.8.8.8	192.168.2.4	0xbb95	No error (0)	liqadprdct-capture-prod-east.gannettdigital.com	envoy-public.liqadprdct-capture-production-us-east1.gke-eric-eyre-svc.gannettdigital.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:06.845320940 CEST	8.8.8.8	192.168.2.4	0xbb95	No error (0)	envoy-public.liqadprdct-capture-production-us-east1.gke-eric-eyre-svc.gannettdigital.com		34.75.237.118	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.919132948 CEST	8.8.8.8	192.168.2.4	0x8281	No error (0)	simage2.pubmatic.com	pug22000nfc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:06.919132948 CEST	8.8.8.8	192.168.2.4	0x8281	No error (0)	pug22000nfc.pubmatic.com	pug22000nf.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:06.919132948 CEST	8.8.8.8	192.168.2.4	0x8281	No error (0)	pug22000nf.pubmatic.com		185.64.189.110	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.919375896 CEST	8.8.8.8	192.168.2.4	0x5f46	No error (0)	pixel.advertising.com	prod.ups-adcom.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:06.919375896 CEST	8.8.8.8	192.168.2.4	0x5f46	No error (0)	prod.ups-adcom.aolp-ds-prd.aws.oath.cloud	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:06.919375896 CEST	8.8.8.8	192.168.2.4	0x5f46	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		52.57.10.248	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.919375896 CEST	8.8.8.8	192.168.2.4	0x5f46	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		52.28.254.214	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.919375896 CEST	8.8.8.8	192.168.2.4	0x5f46	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		35.156.106.231	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.919375896 CEST	8.8.8.8	192.168.2.4	0x5f46	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		52.59.28.101	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.919375896 CEST	8.8.8.8	192.168.2.4	0x5f46	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		3.126.63.176	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.919375896 CEST	8.8.8.8	192.168.2.4	0x5f46	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		18.184.153.186	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.919375896 CEST	8.8.8.8	192.168.2.4	0x5f46	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		18.197.99.6	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.919375896 CEST	8.8.8.8	192.168.2.4	0x5f46	No error (0)	prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud		52.59.102.119	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.919523954 CEST	8.8.8.8	192.168.2.4	0x9f78	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:06.919523954 CEST	8.8.8.8	192.168.2.4	0x9f78	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:06.919523954 CEST	8.8.8.8	192.168.2.4	0x9f78	No error (0)	nydc1.outbrain.org		64.202.112.127	A (IP address)	IN (0x0001)
May 4, 2021 21:47:06.929482937 CEST	8.8.8.8	192.168.2.4	0x9628	No error (0)	dsum-sec.casalemedia.com	dsum-sec.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:07.014250040 CEST	8.8.8.8	192.168.2.4	0xfd1a	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:07.521699905 CEST	8.8.8.8	192.168.2.4	0x5949	No error (0)	ads.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:07.521699905 CEST	8.8.8.8	192.168.2.4	0x5949	No error (0)	edge.gycpi.b.yahoodns.net		87.248.118.22	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.521699905 CEST	8.8.8.8	192.168.2.4	0x5949	No error (0)	edge.gycpi.b.yahoodns.net		87.248.118.23	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.524616957 CEST	8.8.8.8	192.168.2.4	0x249a	No error (0)	ib.adnxs.com	g.geogslb.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:07.524616957 CEST	8.8.8.8	192.168.2.4	0x249a	No error (0)	g.geogslb.com	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:07.524616957 CEST	8.8.8.8	192.168.2.4	0x249a	No error (0)	ib.anycast.adnxs.com		185.33.221.15	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.524616957 CEST	8.8.8.8	192.168.2.4	0x249a	No error (0)	ib.anycast.adnxs.com		185.33.220.244	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.524616957 CEST	8.8.8.8	192.168.2.4	0x249a	No error (0)	ib.anycast.adnxs.com		185.33.221.11	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.524616957 CEST	8.8.8.8	192.168.2.4	0x249a	No error (0)	ib.anycast.adnxs.com		185.33.221.91	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.524616957 CEST	8.8.8.8	192.168.2.4	0x249a	No error (0)	ib.anycast.adnxs.com		185.33.220.243	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.524616957 CEST	8.8.8.8	192.168.2.4	0x249a	No error (0)	ib.anycast.adnxs.com		185.33.220.242	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.524616957 CEST	8.8.8.8	192.168.2.4	0x249a	No error (0)	ib.anycast.adnxs.com		185.33.221.88	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.524616957 CEST	8.8.8.8	192.168.2.4	0x249a	No error (0)	ib.anycast.adnxs.com		185.33.221.52	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.526782990 CEST	8.8.8.8	192.168.2.4	0xd017	No error (0)	eb2.3lift.com	us-west-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:07.526782990 CEST	8.8.8.8	192.168.2.4	0xd017	No error (0)	us-west-eb2.3lift.com	dualstack.engagement-bus-prod-713264365.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:07.526782990 CEST	8.8.8.8	192.168.2.4	0xd017	No error (0)	dualstack.engagement-bus-prod-713264365.us-east-1.elb.amazonaws.com		3.228.139.221	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.526782990 CEST	8.8.8.8	192.168.2.4	0xd017	No error (0)	dualstack.engagement-bus-prod-713264365.us-east-1.elb.amazonaws.com		54.236.155.222	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.526782990 CEST	8.8.8.8	192.168.2.4	0xd017	No error (0)	dualstack.engagement-bus-prod-713264365.us-east-1.elb.amazonaws.com		54.80.39.215	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.526782990 CEST	8.8.8.8	192.168.2.4	0xd017	No error (0)	dualstack.engagement-bus-prod-713264365.us-east-1.elb.amazonaws.com		18.213.254.247	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.526782990 CEST	8.8.8.8	192.168.2.4	0xd017	No error (0)	dualstack.engagement-bus-prod-713264365.us-east-1.elb.amazonaws.com		52.200.179.205	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.526782990 CEST	8.8.8.8	192.168.2.4	0xd017	No error (0)	dualstack.engagement-bus-prod-713264365.us-east-1.elb.amazonaws.com		54.146.205.114	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.526782990 CEST	8.8.8.8	192.168.2.4	0xd017	No error (0)	dualstack.engagement-bus-prod-713264365.us-east-1.elb.amazonaws.com		54.84.57.130	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.526782990 CEST	8.8.8.8	192.168.2.4	0xd017	No error (0)	dualstack.engagement-bus-prod-713264365.us-east-1.elb.amazonaws.com		34.230.209.57	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.533051014 CEST	8.8.8.8	192.168.2.4	0x199d	No error (0)	sync.taboola.com	am-sync.taboola.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:07.533051014 CEST	8.8.8.8	192.168.2.4	0x199d	No error (0)	am-sync.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:07.533051014 CEST	8.8.8.8	192.168.2.4	0x199d	No error (0)	am-vip001.taboola.com		141.226.228.48	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.537305117 CEST	8.8.8.8	192.168.2.4	0xff82	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.542895079 CEST	8.8.8.8	192.168.2.4	0x9555	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.542895079 CEST	8.8.8.8	192.168.2.4	0x9555	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.543185949 CEST	8.8.8.8	192.168.2.4	0xca28	No error (0)	cm.g.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.553245068 CEST	8.8.8.8	192.168.2.4	0xe5b2	No error (0)	x.bidswitch.net	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:07.553245068 CEST	8.8.8.8	192.168.2.4	0xe5b2	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		18.195.73.36	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.553245068 CEST	8.8.8.8	192.168.2.4	0xe5b2	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		35.158.9.168	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.553245068 CEST	8.8.8.8	192.168.2.4	0xe5b2	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		52.59.128.17	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.553245068 CEST	8.8.8.8	192.168.2.4	0xe5b2	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		52.58.55.232	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.553245068 CEST	8.8.8.8	192.168.2.4	0xe5b2	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		35.156.143.112	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.553245068 CEST	8.8.8.8	192.168.2.4	0xe5b2	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		35.157.168.25	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.553245068 CEST	8.8.8.8	192.168.2.4	0xe5b2	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		3.124.251.221	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.553245068 CEST	8.8.8.8	192.168.2.4	0xe5b2	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		52.28.82.26	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.862582922 CEST	8.8.8.8	192.168.2.4	0x7b7c	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:07.862582922 CEST	8.8.8.8	192.168.2.4	0x7b7c	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:07.862582922 CEST	8.8.8.8	192.168.2.4	0x7b7c	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		18.156.0.31	A (IP address)	IN (0x0001)
May 4, 2021 21:47:07.862582922 CEST	8.8.8.8	192.168.2.4	0x7b7c	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		3.126.56.137	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.170245886 CEST	8.8.8.8	192.168.2.4	0xabbb	No error (0)	graph.facebook.com	api.facebook.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:08.170245886 CEST	8.8.8.8	192.168.2.4	0xabbb	No error (0)	api.facebook.com	star.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:08.170245886 CEST	8.8.8.8	192.168.2.4	0xabbb	No error (0)	star.c10r.facebook.com		31.13.92.10	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.173726082 CEST	8.8.8.8	192.168.2.4	0xc4db	No error (0)	scontent-iad3-1.xx.fbcdn.net		31.13.66.19	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.306127071 CEST	8.8.8.8	192.168.2.4	0x14bc	No error (0)	stats.pusher.com	timeline49-clientstats1.pusher.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:08.306127071 CEST	8.8.8.8	192.168.2.4	0x14bc	No error (0)	timeline49-clientstats1.pusher.com	ec2-18-233-7-102.compute-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:08.306127071 CEST	8.8.8.8	192.168.2.4	0x14bc	No error (0)	ec2-18-233-7-102.compute-1.amazonaws.com		18.233.7.102	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.387563944 CEST	8.8.8.8	192.168.2.4	0x5de2	No error (0)	scontent-iad3-2.xx.fbcdn.net		157.240.229.1	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.389131069 CEST	8.8.8.8	192.168.2.4	0x7c6a	No error (0)	scontent-dfw5-1.xx.fbcdn.net		157.240.19.26	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.413079977 CEST	8.8.8.8	192.168.2.4	0xfc4a	No error (0)	external-iad3-1.xx.fbcdn.net	scontent-iad3-1.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:08.413079977 CEST	8.8.8.8	192.168.2.4	0xfc4a	No error (0)	scontent-iad3-1.xx.fbcdn.net		31.13.66.19	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.437108994 CEST	8.8.8.8	192.168.2.4	0x399c	No error (0)	scontent-ort2-2.xx.fbcdn.net		157.240.18.19	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.441335917 CEST	8.8.8.8	192.168.2.4	0xc948	No error (0)	scontent-bos3-1.xx.fbcdn.net		157.240.220.14	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.492016077 CEST	8.8.8.8	192.168.2.4	0x9fd2	No error (0)	scontent-mia3-2.xx.fbcdn.net		157.240.14.19	A (IP address)	IN (0x0001)
May 4, 2021 21:47:08.509032965 CEST	8.8.8.8	192.168.2.4	0xb68d	No error (0)	scontent-frx5-1.xx.fbcdn.net		185.60.216.19	A (IP address)	IN (0x0001)
May 4, 2021 21:47:17.575119972 CEST	8.8.8.8	192.168.2.4	0xfb3e	No error (0)	www.casella.com		52.87.65.167	A (IP address)	IN (0x0001)
May 4, 2021 21:47:21.121818066 CEST	8.8.8.8	192.168.2.4	0x8838	No error (0)	secure3.i-doxs.net		209.112.4.23	A (IP address)	IN (0x0001)
May 4, 2021 21:47:25.149420023 CEST	8.8.8.8	192.168.2.4	0x329e	No error (0)	ir.casella.com	casellawastesystems.gcs-web.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:25.149420023 CEST	8.8.8.8	192.168.2.4	0x329e	No error (0)	casellawastesystems.gcs-web.com	leapfrog-ssl-15399.edgekey.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:25.179223061 CEST	8.8.8.8	192.168.2.4	0x9613	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:25.179223061 CEST	8.8.8.8	192.168.2.4	0x9613	No error (0)	pixel-origin.mathtag.com		185.29.133.52	A (IP address)	IN (0x0001)
May 4, 2021 21:47:25.179223061 CEST	8.8.8.8	192.168.2.4	0x9613	No error (0)	pixel-origin.mathtag.com		185.29.135.190	A (IP address)	IN (0x0001)
May 4, 2021 21:47:25.179223061 CEST	8.8.8.8	192.168.2.4	0x9613	No error (0)	pixel-origin.mathtag.com		185.29.133.208	A (IP address)	IN (0x0001)
May 4, 2021 21:47:25.179223061 CEST	8.8.8.8	192.168.2.4	0x9613	No error (0)	pixel-origin.mathtag.com		185.29.135.227	A (IP address)	IN (0x0001)
May 4, 2021 21:47:26.141103029 CEST	8.8.8.8	192.168.2.4	0x40d0	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:26.253917933 CEST	8.8.8.8	192.168.2.4	0x5719	No error (0)	api.nasdaqomx.wallst.com		209.234.234.58	A (IP address)	IN (0x0001)
May 4, 2021 21:47:26.799416065 CEST	8.8.8.8	192.168.2.4	0x168f	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:26.799416065 CEST	8.8.8.8	192.168.2.4	0x168f	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:26.799416065 CEST	8.8.8.8	192.168.2.4	0x168f	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:26.799416065 CEST	8.8.8.8	192.168.2.4	0x168f	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		18.200.157.96	A (IP address)	IN (0x0001)
May 4, 2021 21:47:26.799416065 CEST	8.8.8.8	192.168.2.4	0x168f	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.194.220.26	A (IP address)	IN (0x0001)
May 4, 2021 21:47:26.799416065 CEST	8.8.8.8	192.168.2.4	0x168f	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.48.201.185	A (IP address)	IN (0x0001)
May 4, 2021 21:47:26.799416065 CEST	8.8.8.8	192.168.2.4	0x168f	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.51.81.153	A (IP address)	IN (0x0001)
May 4, 2021 21:47:26.799416065 CEST	8.8.8.8	192.168.2.4	0x168f	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.250.160.147	A (IP address)	IN (0x0001)
May 4, 2021 21:47:26.799416065 CEST	8.8.8.8	192.168.2.4	0x168f	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		63.33.31.50	A (IP address)	IN (0x0001)
May 4, 2021 21:47:26.799416065 CEST	8.8.8.8	192.168.2.4	0x168f	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.214.120.236	A (IP address)	IN (0x0001)
May 4, 2021 21:47:26.799416065 CEST	8.8.8.8	192.168.2.4	0x168f	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.17.73.77	A (IP address)	IN (0x0001)
May 4, 2021 21:47:27.114224911 CEST	8.8.8.8	192.168.2.4	0xd1b1	No error (0)	thenasdaqomxgroup.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:27.114224911 CEST	8.8.8.8	192.168.2.4	0xd1b1	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:27.114224911 CEST	8.8.8.8	192.168.2.4	0xd1b1	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:27.114224911 CEST	8.8.8.8	192.168.2.4	0xd1b1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.210.171.182	A (IP address)	IN (0x0001)
May 4, 2021 21:47:27.114224911 CEST	8.8.8.8	192.168.2.4	0xd1b1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.250.160.147	A (IP address)	IN (0x0001)
May 4, 2021 21:47:27.114224911 CEST	8.8.8.8	192.168.2.4	0xd1b1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.246.133.154	A (IP address)	IN (0x0001)
May 4, 2021 21:47:27.114224911 CEST	8.8.8.8	192.168.2.4	0xd1b1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.251.60.147	A (IP address)	IN (0x0001)
May 4, 2021 21:47:27.114224911 CEST	8.8.8.8	192.168.2.4	0xd1b1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.31.176.223	A (IP address)	IN (0x0001)
May 4, 2021 21:47:27.114224911 CEST	8.8.8.8	192.168.2.4	0xd1b1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		63.33.31.50	A (IP address)	IN (0x0001)
May 4, 2021 21:47:27.114224911 CEST	8.8.8.8	192.168.2.4	0xd1b1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.252.115.248	A (IP address)	IN (0x0001)
May 4, 2021 21:47:27.114224911 CEST	8.8.8.8	192.168.2.4	0xd1b1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.194.220.26	A (IP address)	IN (0x0001)
May 4, 2021 21:47:27.125487089 CEST	8.8.8.8	192.168.2.4	0xbd6c	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:27.562458038 CEST	8.8.8.8	192.168.2.4	0x537f	No error (0)	bam-cell.nr-data.net	tls12.newrelic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:28.254123926 CEST	8.8.8.8	192.168.2.4	0x2c0c	No error (0)	careers-casella.icims.com	wildcard.icims.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:28.607528925 CEST	8.8.8.8	192.168.2.4	0x5a63	No error (0)	c-11158-20201221-www-casella-com.i.icims.com	wildcard.icims.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:28.753602982 CEST	8.8.8.8	192.168.2.4	0x44cd	No error (0)	cdn07.icims.com	wildcard.icims.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:28.836409092 CEST	8.8.8.8	192.168.2.4	0x4394	No error (0)	i.simpli.fi		169.50.137.179	A (IP address)	IN (0x0001)
May 4, 2021 21:47:29.603988886 CEST	8.8.8.8	192.168.2.4	0xa256	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:30.310184002 CEST	8.8.8.8	192.168.2.4	0x3f04	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:33.848016024 CEST	8.8.8.8	192.168.2.4	0x44c8	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.848016024 CEST	8.8.8.8	192.168.2.4	0x44c8	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.868005991 CEST	8.8.8.8	192.168.2.4	0x9f35	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:33.877723932 CEST	8.8.8.8	192.168.2.4	0xb683	No error (0)	sync.go.sonobi.com	ams-1-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:33.877723932 CEST	8.8.8.8	192.168.2.4	0xb683	No error (0)	ams-1-sync.go.sonobi.com		178.162.133.149	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.887022018 CEST	8.8.8.8	192.168.2.4	0xe4d6	No error (0)	pixel.tapad.com		35.227.248.159	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.887732029 CEST	8.8.8.8	192.168.2.4	0xf3f4	No error (0)	ce.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:33.887732029 CEST	8.8.8.8	192.168.2.4	0xf3f4	No error (0)	vap.lijit.com	naw.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:33.887732029 CEST	8.8.8.8	192.168.2.4	0xf3f4	No error (0)	naw.vap.lijit.com		63.251.14.14	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.887732029 CEST	8.8.8.8	192.168.2.4	0xf3f4	No error (0)	naw.vap.lijit.com		63.251.14.3	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.887732029 CEST	8.8.8.8	192.168.2.4	0xf3f4	No error (0)	naw.vap.lijit.com		209.191.163.209	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.897351980 CEST	8.8.8.8	192.168.2.4	0xe6a7	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:33.906697989 CEST	8.8.8.8	192.168.2.4	0x675f	No error (0)	uip.semasio.net		77.243.60.138	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.922898054 CEST	8.8.8.8	192.168.2.4	0x855f	No error (0)	rtb-csync.smartadserver.com	2-01-275d-002d.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:33.922898054 CEST	8.8.8.8	192.168.2.4	0x855f	No error (0)	rtb-csync-itx4.smartadserver.com		185.86.139.89	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.922898054 CEST	8.8.8.8	192.168.2.4	0x855f	No error (0)	rtb-csync-itx4.smartadserver.com		185.86.139.115	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.922898054 CEST	8.8.8.8	192.168.2.4	0x855f	No error (0)	rtb-csync-itx4.smartadserver.com		185.86.139.114	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.922898054 CEST	8.8.8.8	192.168.2.4	0x855f	No error (0)	rtb-csync-itx4.smartadserver.com		185.86.139.113	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.925658941 CEST	8.8.8.8	192.168.2.4	0xf57c	No error (0)	sync.search.spotxchange.com	sync.search-gtm.spotxchange.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:33.925658941 CEST	8.8.8.8	192.168.2.4	0xf57c	No error (0)	ams01.sync.search.spotxchange.com		185.94.180.125	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.925658941 CEST	8.8.8.8	192.168.2.4	0xf57c	No error (0)	ams01.sync.search.spotxchange.com		185.94.180.126	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.952184916 CEST	8.8.8.8	192.168.2.4	0xca33	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:33.952184916 CEST	8.8.8.8	192.168.2.4	0xca33	No error (0)	ssp.ads.betweendigital.com		96.46.186.57	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.952184916 CEST	8.8.8.8	192.168.2.4	0xca33	No error (0)	ssp.ads.betweendigital.com		96.46.183.20	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.970755100 CEST	8.8.8.8	192.168.2.4	0x17fb	No error (0)	ih.adscale.de		18.197.81.144	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.970755100 CEST	8.8.8.8	192.168.2.4	0x17fb	No error (0)	ih.adscale.de		18.158.173.146	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.970755100 CEST	8.8.8.8	192.168.2.4	0x17fb	No error (0)	ih.adscale.de		3.123.78.164	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.971723080 CEST	8.8.8.8	192.168.2.4	0x3c39	No error (0)	mwzeom.zeotap.com		172.67.13.182	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.971723080 CEST	8.8.8.8	192.168.2.4	0x3c39	No error (0)	mwzeom.zeotap.com		104.22.24.87	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.971723080 CEST	8.8.8.8	192.168.2.4	0x3c39	No error (0)	mwzeom.zeotap.com		104.22.25.87	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.977993011 CEST	8.8.8.8	192.168.2.4	0x7a11	No error (0)	loadm.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:33.977993011 CEST	8.8.8.8	192.168.2.4	0x7a11	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:33.977993011 CEST	8.8.8.8	192.168.2.4	0x7a11	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:33.977993011 CEST	8.8.8.8	192.168.2.4	0x7a11	No error (0)	load-euw1.exelator.com		54.78.254.47	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.995016098 CEST	8.8.8.8	192.168.2.4	0x2966	No error (0)	ad.sxp.smartclip.net		34.252.166.236	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.995016098 CEST	8.8.8.8	192.168.2.4	0x2966	No error (0)	ad.sxp.smartclip.net		52.48.138.155	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.995016098 CEST	8.8.8.8	192.168.2.4	0x2966	No error (0)	ad.sxp.smartclip.net		54.228.50.17	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.995016098 CEST	8.8.8.8	192.168.2.4	0x2966	No error (0)	ad.sxp.smartclip.net		108.128.72.76	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.995016098 CEST	8.8.8.8	192.168.2.4	0x2966	No error (0)	ad.sxp.smartclip.net		52.19.39.131	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.995016098 CEST	8.8.8.8	192.168.2.4	0x2966	No error (0)	ad.sxp.smartclip.net		52.215.165.29	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.995016098 CEST	8.8.8.8	192.168.2.4	0x2966	No error (0)	ad.sxp.smartclip.net		52.17.174.227	A (IP address)	IN (0x0001)
May 4, 2021 21:47:33.995016098 CEST	8.8.8.8	192.168.2.4	0x2966	No error (0)	ad.sxp.smartclip.net		52.17.244.53	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.000679970 CEST	8.8.8.8	192.168.2.4	0x4dcc	No error (0)	beacon.krxd.net	beacon-dub-prod.krxd.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:34.000679970 CEST	8.8.8.8	192.168.2.4	0x4dcc	No error (0)	beacon-dub-prod.krxd.net	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:34.000679970 CEST	8.8.8.8	192.168.2.4	0x4dcc	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		34.246.207.243	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.000679970 CEST	8.8.8.8	192.168.2.4	0x4dcc	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		54.170.10.95	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.000679970 CEST	8.8.8.8	192.168.2.4	0x4dcc	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		34.252.41.130	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.000679970 CEST	8.8.8.8	192.168.2.4	0x4dcc	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.49.95.65	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.000679970 CEST	8.8.8.8	192.168.2.4	0x4dcc	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.48.21.41	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.000679970 CEST	8.8.8.8	192.168.2.4	0x4dcc	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		63.35.129.75	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.000679970 CEST	8.8.8.8	192.168.2.4	0x4dcc	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.48.82.49	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.000679970 CEST	8.8.8.8	192.168.2.4	0x4dcc	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		34.255.31.14	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.013077021 CEST	8.8.8.8	192.168.2.4	0x9284	No error (0)	su.addthis.com	m.addthisedge.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:34.013077021 CEST	8.8.8.8	192.168.2.4	0x9284	No error (0)	m.addthisedge.com	ds-m.addthisedge.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:34.043961048 CEST	8.8.8.8	192.168.2.4	0x58f3	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:34.117476940 CEST	8.8.8.8	192.168.2.4	0x6a53	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:34.117476940 CEST	8.8.8.8	192.168.2.4	0x6a53	No error (0)	idaas-ext.cph.liveintent.com		54.81.208.30	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.117476940 CEST	8.8.8.8	192.168.2.4	0x6a53	No error (0)	idaas-ext.cph.liveintent.com		54.209.231.92	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.117476940 CEST	8.8.8.8	192.168.2.4	0x6a53	No error (0)	idaas-ext.cph.liveintent.com		52.205.241.172	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.117476940 CEST	8.8.8.8	192.168.2.4	0x6a53	No error (0)	idaas-ext.cph.liveintent.com		54.81.204.200	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.117476940 CEST	8.8.8.8	192.168.2.4	0x6a53	No error (0)	idaas-ext.cph.liveintent.com		52.73.155.220	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.117476940 CEST	8.8.8.8	192.168.2.4	0x6a53	No error (0)	idaas-ext.cph.liveintent.com		52.86.51.18	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.117476940 CEST	8.8.8.8	192.168.2.4	0x6a53	No error (0)	idaas-ext.cph.liveintent.com		52.55.124.30	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.117476940 CEST	8.8.8.8	192.168.2.4	0x6a53	No error (0)	idaas-ext.cph.liveintent.com		54.82.140.152	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.133951902 CEST	8.8.8.8	192.168.2.4	0xdd5c	No error (0)	sync.crwdcntrl.net		54.194.226.253	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.133951902 CEST	8.8.8.8	192.168.2.4	0xdd5c	No error (0)	sync.crwdcntrl.net		34.251.130.56	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.133951902 CEST	8.8.8.8	192.168.2.4	0xdd5c	No error (0)	sync.crwdcntrl.net		52.30.140.199	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.133951902 CEST	8.8.8.8	192.168.2.4	0xdd5c	No error (0)	sync.crwdcntrl.net		54.171.173.220	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.133951902 CEST	8.8.8.8	192.168.2.4	0xdd5c	No error (0)	sync.crwdcntrl.net		52.48.137.92	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.133951902 CEST	8.8.8.8	192.168.2.4	0xdd5c	No error (0)	sync.crwdcntrl.net		52.208.103.128	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.133951902 CEST	8.8.8.8	192.168.2.4	0xdd5c	No error (0)	sync.crwdcntrl.net		34.253.111.115	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.133951902 CEST	8.8.8.8	192.168.2.4	0xdd5c	No error (0)	sync.crwdcntrl.net		52.30.14.23	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.155416965 CEST	8.8.8.8	192.168.2.4	0xda9e	No error (0)	aa.agkn.com	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:34.155416965 CEST	8.8.8.8	192.168.2.4	0xda9e	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		35.176.232.241	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.155416965 CEST	8.8.8.8	192.168.2.4	0xda9e	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		18.132.239.61	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.155416965 CEST	8.8.8.8	192.168.2.4	0xda9e	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		18.133.35.94	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.155416965 CEST	8.8.8.8	192.168.2.4	0xda9e	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		52.56.207.211	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.155416965 CEST	8.8.8.8	192.168.2.4	0xda9e	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		52.56.111.113	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.155416965 CEST	8.8.8.8	192.168.2.4	0xda9e	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		3.11.29.5	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.358489990 CEST	8.8.8.8	192.168.2.4	0x74aa	No error (0)	match.adsrvr.org	match-243508202.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:34.358489990 CEST	8.8.8.8	192.168.2.4	0x74aa	No error (0)	match-243508202.us-west-2.elb.amazonaws.com		44.241.59.199	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.358489990 CEST	8.8.8.8	192.168.2.4	0x74aa	No error (0)	match-243508202.us-west-2.elb.amazonaws.com		54.186.22.124	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.358489990 CEST	8.8.8.8	192.168.2.4	0x74aa	No error (0)	match-243508202.us-west-2.elb.amazonaws.com		52.25.20.110	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.358489990 CEST	8.8.8.8	192.168.2.4	0x74aa	No error (0)	match-243508202.us-west-2.elb.amazonaws.com		54.148.24.135	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.358489990 CEST	8.8.8.8	192.168.2.4	0x74aa	No error (0)	match-243508202.us-west-2.elb.amazonaws.com		52.41.50.195	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.358489990 CEST	8.8.8.8	192.168.2.4	0x74aa	No error (0)	match-243508202.us-west-2.elb.amazonaws.com		44.239.245.89	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.358489990 CEST	8.8.8.8	192.168.2.4	0x74aa	No error (0)	match-243508202.us-west-2.elb.amazonaws.com		52.43.153.20	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.358489990 CEST	8.8.8.8	192.168.2.4	0x74aa	No error (0)	match-243508202.us-west-2.elb.amazonaws.com		100.20.9.202	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.480756998 CEST	8.8.8.8	192.168.2.4	0xa49c	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:34.480756998 CEST	8.8.8.8	192.168.2.4	0xa49c	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:34.480756998 CEST	8.8.8.8	192.168.2.4	0xa49c	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		52.28.108.245	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.480756998 CEST	8.8.8.8	192.168.2.4	0xa49c	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.194.113.221	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.480756998 CEST	8.8.8.8	192.168.2.4	0xa49c	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.195.77.77	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.480756998 CEST	8.8.8.8	192.168.2.4	0xa49c	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		52.29.48.214	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.480756998 CEST	8.8.8.8	192.168.2.4	0xa49c	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.196.98.222	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.480756998 CEST	8.8.8.8	192.168.2.4	0xa49c	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.195.194.125	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.537678003 CEST	8.8.8.8	192.168.2.4	0x650e	No error (0)	ice.360yield.com	eu2-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:34.537678003 CEST	8.8.8.8	192.168.2.4	0x650e	No error (0)	eu2-ice.360yield.com		52.58.206.142	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.537678003 CEST	8.8.8.8	192.168.2.4	0x650e	No error (0)	eu2-ice.360yield.com		52.28.69.126	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.537678003 CEST	8.8.8.8	192.168.2.4	0x650e	No error (0)	eu2-ice.360yield.com		52.57.77.12	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.537678003 CEST	8.8.8.8	192.168.2.4	0x650e	No error (0)	eu2-ice.360yield.com		52.57.228.122	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.537678003 CEST	8.8.8.8	192.168.2.4	0x650e	No error (0)	eu2-ice.360yield.com		54.93.141.230	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.537678003 CEST	8.8.8.8	192.168.2.4	0x650e	No error (0)	eu2-ice.360yield.com		52.57.243.4	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.537678003 CEST	8.8.8.8	192.168.2.4	0x650e	No error (0)	eu2-ice.360yield.com		54.93.160.53	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.537678003 CEST	8.8.8.8	192.168.2.4	0x650e	No error (0)	eu2-ice.360yield.com		18.158.182.200	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.819392920 CEST	8.8.8.8	192.168.2.4	0x1abc	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:34.819392920 CEST	8.8.8.8	192.168.2.4	0x1abc	No error (0)	idaas6.cph.liveintent.com		3.209.93.152	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.819392920 CEST	8.8.8.8	192.168.2.4	0x1abc	No error (0)	idaas6.cph.liveintent.com		34.202.20.24	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.819392920 CEST	8.8.8.8	192.168.2.4	0x1abc	No error (0)	idaas6.cph.liveintent.com		52.70.165.207	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.819392920 CEST	8.8.8.8	192.168.2.4	0x1abc	No error (0)	idaas6.cph.liveintent.com		52.73.168.142	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.819392920 CEST	8.8.8.8	192.168.2.4	0x1abc	No error (0)	idaas6.cph.liveintent.com		52.20.143.54	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.819392920 CEST	8.8.8.8	192.168.2.4	0x1abc	No error (0)	idaas6.cph.liveintent.com		34.231.219.220	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.819392920 CEST	8.8.8.8	192.168.2.4	0x1abc	No error (0)	idaas6.cph.liveintent.com		34.198.52.7	A (IP address)	IN (0x0001)
May 4, 2021 21:47:34.819392920 CEST	8.8.8.8	192.168.2.4	0x1abc	No error (0)	idaas6.cph.liveintent.com		34.202.24.13	A (IP address)	IN (0x0001)
May 4, 2021 21:47:35.072402000 CEST	8.8.8.8	192.168.2.4	0x27c9	No error (0)	ads.creative-serving.com	elb-aws-fr-clickdistrict-1651093077.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:35.072402000 CEST	8.8.8.8	192.168.2.4	0x27c9	No error (0)	elb-aws-fr-clickdistrict-1651093077.eu-central-1.elb.amazonaws.com		3.123.96.39	A (IP address)	IN (0x0001)
May 4, 2021 21:47:35.072402000 CEST	8.8.8.8	192.168.2.4	0x27c9	No error (0)	elb-aws-fr-clickdistrict-1651093077.eu-central-1.elb.amazonaws.com		18.185.0.221	A (IP address)	IN (0x0001)
May 4, 2021 21:47:35.072402000 CEST	8.8.8.8	192.168.2.4	0x27c9	No error (0)	elb-aws-fr-clickdistrict-1651093077.eu-central-1.elb.amazonaws.com		3.127.51.194	A (IP address)	IN (0x0001)
May 4, 2021 21:47:35.072402000 CEST	8.8.8.8	192.168.2.4	0x27c9	No error (0)	elb-aws-fr-clickdistrict-1651093077.eu-central-1.elb.amazonaws.com		18.158.167.137	A (IP address)	IN (0x0001)
May 4, 2021 21:47:35.269735098 CEST	8.8.8.8	192.168.2.4	0xa5ce	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:35.269735098 CEST	8.8.8.8	192.168.2.4	0xa5ce	No error (0)	uip.semasio.net		77.243.60.138	A (IP address)	IN (0x0001)
May 4, 2021 21:47:35.672290087 CEST	8.8.8.8	192.168.2.4	0x1e59	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)
May 4, 2021 21:47:35.672290087 CEST	8.8.8.8	192.168.2.4	0x1e59	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)

HTTP Request Dependency Graph

www.casella.com

cdn.rlets.com

apps.twinesocial.com

apps-cdn.twinesocial.com

stats.pusher.com

connect.facebook.net

ws.pusherapp.com

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 5488 Parent PID: 800

General

Start time:	21:46:57
Start date:	04/05/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff619a50000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: iexplore.exe PID: 5840 Parent PID: 5488

General

Start time:	21:46:58
Start date:	04/05/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5488 CREDAT:17410 /prefetch:2
Imagebase:	0xbc0000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report http://www.casella.com/

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Phishing:

Compliance:

Networking:

System Summary:

Malware Analysis System Evasion:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

Code Manipulations

Statistics

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 5488 Parent PID: 800

General

Analysis Process: iexplore.exe PID: 5840 Parent PID: 5488

General

Disassembly