Windows Analysis Report https://spark.adobe.com/page/4WTm5hB6jd6VX/

AV Detection:

Antivirus / Scanner detection for submitted sample

Source: https://spark.adobe.com/page/4WTm5hB6jd6VX/

SlashNext: detection malicious, Label: Fake Login Page type: Phishing & Social usering

Antivirus detection for URL or domain

Source: https://spark.adobe.com/page/4WTm5hB6jd6VX/?page-mode=static	SlashNext: Label: Fake Login Page type: Phishing & Social usering
Source: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/	SlashNext: Label: Fake Login Page type: Phishing & Social usering

Phishing:

Yara detected HtmlPhish10

Source: Yara match

File source: 18336.3.pages.csv, type: HTML

Yara detected HtmlPhish29

Source: Yara match	File source: 78387.0.pages.csv, type: HTML
Source: Yara match	File source: 56049.1.pages.csv, type: HTML

Yara detected HtmlPhish7

Source: Yara match

File source: 18336.3.pages.csv, type: HTML

No HTML title found

Source: https://spark.adobe.com/page/4WTm5hB6jd6VX/	HTTP Parser: HTML title missing
Source: https://spark.adobe.com/page/4WTm5hB6jd6VX/	HTTP Parser: HTML title missing
Source: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/	HTTP Parser: HTML title missing

HTML body contains low number of good links

Source: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/

HTTP Parser: Number of links: 0

META author tag missing

Source: https://spark.adobe.com/page/4WTm5hB6jd6VX/	HTTP Parser: No <meta name="author".. found
Source: https://spark.adobe.com/page/4WTm5hB6jd6VX/	HTTP Parser: No <meta name="author".. found
Source: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://spark.adobe.com/page/4WTm5hB6jd6VX/	HTTP Parser: No <meta name="copyright".. found
Source: https://spark.adobe.com/page/4WTm5hB6jd6VX/	HTTP Parser: No <meta name="copyright".. found
Source: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/	HTTP Parser: No <meta name="copyright".. found

Compliance:

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 13.33.48.62:443 -> 192.168.2.6:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.48.110:443 -> 192.168.2.6:50306 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.48.110:443 -> 192.168.2.6:50307 version: TLS 1.2

Networking:

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50407
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50408
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50213
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 50408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49686
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49680
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 50351 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50385 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 50304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 50354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 50376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50379
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50378
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50385
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50388
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50387
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50389
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50391
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50390
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50392
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50398
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50398 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 50367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 50344 -> 443

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 8.248.145.254
Source: unknown	TCP traffic detected without corresponding DNS query: 104.89.26.236
Source: unknown	TCP traffic detected without corresponding DNS query: 104.89.26.236
Source: unknown	TCP traffic detected without corresponding DNS query: 104.89.26.236
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.185
Source: unknown	TCP traffic detected without corresponding DNS query: 23.0.174.185
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.152.11
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.131
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.131
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.131
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.131
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.131
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.131
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.72
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.72
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29

Tries to download or post to a non-existing HTTP route (HTTP/1.1 404 Not Found / 503 Service Unavailable)

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlContent-Length: 14212Connection: closeDate: Mon, 27 Sep 2021 17:17:35 GMTLast-Modified: Thu, 23 Sep 2021 20:22:28 GMTETag: "bd699160584214b8d7c0b7bfcc95c7dc"Cache-Control: max-age=31536000Content-Encoding: gzipx-amz-version-id: IjdHt6BUN5MXNqYi9mXBWJp4RBeX6XoqAccept-Ranges: bytesServer: AmazonS3X-Edge-Origin-Shield-Skipped: 0X-Cache: Error from cloudfrontVia: 1.1 4873a61089aa468fcbc3cd8d45169cb3.cloudfront.net (CloudFront)X-Amz-Cf-Pop: MAN50-C1X-Amz-Cf-Id: WzdBrl25uLNE519QhQ1mC1zPrOONNSdYq4I-EmNns59mHy1QQjZL8Q==

Found strings which match to known social media urls

Source: Cookies.2.dr	String found in binary or memory: .www.linkedin.combscookie/ equals www.linkedin.com (Linkedin)
Source: Cookies.2.dr	String found in binary or memory: .www.linkedin.combscookie//e equals www.linkedin.com (Linkedin)
Source: Cookies.2.dr	String found in binary or memory: .www.linkedin.combscookie/: equals www.linkedin.com (Linkedin)
Source: Reporting and NEL.2.dr	String found in binary or memory: coep_reporthttps://www.facebook.com/browser_reporting/?minimize=0 equals www.facebook.com (Facebook)
Source: Reporting and NEL.2.dr	String found in binary or memory: network-errorshttps://www.linkedin.com/li/rep equals www.linkedin.com (Linkedin)
Source: Ruleset Data.0.dr	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: Ruleset Data.0.dr	String found in binary or memory: www.facebook.com/ajax/ads/ equals www.facebook.com (Facebook)

URLs found in memory or binary data

Source: 67a473248953641b_0.0.dr	String found in binary or memory: http://braze.com
Source: 226a3495a1d48b58_0.0.dr	String found in binary or memory: http://cdn.clicktale.net/
Source: 08c6b90a4dee433e_0.0.dr	String found in binary or memory: http://ct.contentsquare.net/pcc/
Source: 08c6b90a4dee433e_0.0.dr	String found in binary or memory: http://ct.contentsquare.net/www/
Source: 226a3495a1d48b58_0.0.dr	String found in binary or memory: http://s.clicktale.net/
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr	String found in binary or memory: https://9212252.fls.doubleclick.net
Source: Current Session.0.dr	String found in binary or memory: https://9212252.fls.doubleclick.net/activityi;dc_pre=CMTOpLnUn_MCFeV_0wodibIOLg;src=9212252;type=inv
Source: Current Session.0.dr	String found in binary or memory: https://9212252.fls.doubleclick.net/activityi;dc_pre=CPfErLbUn_MCFagK0wodI48EDA;src=9212252;type=inv
Source: Reporting and NEL.2.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=fv8myC4yCiVlgv2Kq3b%2FkPq0NjFQZFnre%2BvpzKniptkDMHTYEgcasO0
Source: Reporting and NEL.2.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=qqtqcKORDzS4ngRqJpS6dZuVrtx4dCQMVigSVL3owLQqMeh6x3eZd%2BJlR
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr, manifest.json0.0.dr, 5e843f98-8a61-4996-9c56-406ffd8845c9.tmp.2.dr	String found in binary or memory: https://accounts.google.com
Source: a22039cd92bba997_0.0.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-us/articles/218956027
Source: a22039cd92bba997_0.0.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-us/articles/219243657
Source: a22039cd92bba997_0.0.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-us/articles/219243657-Can-students-use-Adobe-Spark-
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://adobesparkpost.app.link/qtImaging
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://adobesparkpost.app.link/qtResize
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr	String found in binary or memory: https://adservice.google.com
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr	String found in binary or memory: https://ajax.googleapis.com
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://ajax.googleapis.com/
Source: 644d7017e122e1ca_0.0.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: 2e4b9f9c179079cb_0.0.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.jsa
Source: 2e4b9f9c179079cb_0.0.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.jsaD
Source: e3e43ec7c331d0ef_0.0.dr	String found in binary or memory: https://analytics.tiktok.com/i18n/pixel/events.js?sdkid=C3B6I6D63S9JQHUOKGCG&lib=ttq
Source: 4ad50f0b3691d694_0.0.dr	String found in binary or memory: https://analytics.tiktok.com/i18n/pixel/identify.js
Source: a3a599ec6a6536db_0.0.dr	String found in binary or memory: https://api.demandbase.com/api/v2/ip.json?key=e4086fa3ea9d74ac2aae2719a0e5285dc7075d7b&rnd=9759&call
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr, manifest.json0.0.dr, 5e843f98-8a61-4996-9c56-406ffd8845c9.tmp.2.dr	String found in binary or memory: https://apis.google.com
Source: e25c8c9884a7ba3d_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/26013ad5259b/RC096e15dffcd740b9a945d0211aaa518
Source: c7de4b4d794d23f6_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/26013ad5259b/RC1674e0ea4dce447aad8dad64d01bb27
Source: 639bcbdbc90e8679_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/26013ad5259b/RC3459a37bb5364bcdb417b5671a49c7d
Source: fee552a8b3b8076b_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/26013ad5259b/RC392ee1eba87c4c0fb096ec09f1327ec
Source: aa817b3c14a0e316_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/26013ad5259b/RC6f46e43fa6d44dbeb45cc5801ffded0
Source: f4ea5f9a65f388d8_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/26013ad5259b/RC75c80e292613438982f0f535da2d662
Source: 02e6b87cf26c3f60_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/26013ad5259b/RCd685f8c6c09c43808ebe3d73ec90e0e
Source: a6942155eb9698ff_0.0.dr	String found in binary or memory: https://assets.adobedtm.com/launch-EN919758db9a654a17bac7d184b99c4820.min.js
Source: Network Action Predictor-journal.0.dr, 494544af254555d8_0.0.dr	String found in binary or memory: https://blacktechworld.com/
Source: History-journal.0.dr	String found in binary or memory: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure
Source: Current Session.0.dr	String found in binary or memory: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/
Source: History-journal.0.dr	String found in binary or memory: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/Share
Source: History-journal.0.dr	String found in binary or memory: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/SecureShare
Source: 07ba938e66011558_0.0.dr	String found in binary or memory: https://blacktechworld.com/w
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://blog.adobespark.com/wp-json/wp/v2/
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://bumper.adobeprojectm.com/status
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://cc-api-behance.adobe.io/v2/users/
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://cc-api-data.adobe.io
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://cclight-transient-user.adobe.io
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://cctypekit.adobe.io
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://cdn.cookielaw.org/
Source: 2354abbff3a2b46a_0.0.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/6.9.0/otBannerSdk.js
Source: 0ba91aa6ae29d08a_0.0.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: 55c077073672c897_0.0.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: 55c077073672c897_0.0.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.jsaD
Source: 226a3495a1d48b58_0.0.dr	String found in binary or memory: https://cdnssl.clicktale.net/
Source: 08c6b90a4dee433e_0.0.dr	String found in binary or memory: https://cdnssl.clicktale.net/ss/4451/df7e164d-c711-4376-a4c8-8b364d648be0/9/
Source: 9b976e67b745f230_0.0.dr	String found in binary or memory: https://cdnssl.clicktale.net/ss/4451/df7e164d-c711-4376-a4c8-8b364d648be0/9/pcc.js
Source: 9b976e67b745f230_0.0.dr	String found in binary or memory: https://cdnssl.clicktale.net/ss/4451/df7e164d-c711-4376-a4c8-8b364d648be0/9/pcc.jsaD
Source: 08c6b90a4dee433e_0.0.dr	String found in binary or memory: https://cdnssl.clicktale.net/ss/4451/df7e164d-c711-4376-a4c8-8b364d648be0/9/ptc.js
Source: 08c6b90a4dee433e_0.0.dr	String found in binary or memory: https://cdnssl.clicktale.net/ss/4451/df7e164d-c711-4376-a4c8-8b364d648be0/9/ptc.jsaD
Source: c0dce968f13388e6_0.0.dr	String found in binary or memory: https://cdnssl.clicktale.net/ss/4451/df7e164d-c711-4376-a4c8-8b364d648be0/9/uxa.js
Source: 1330a39b3dde3fd5_0.0.dr, 226a3495a1d48b58_0.0.dr	String found in binary or memory: https://cdnssl.clicktale.net/ss/4451/df7e164d-c711-4376-a4c8-8b364d648be0/9/wr.js
Source: 226a3495a1d48b58_0.0.dr	String found in binary or memory: https://cdnssl.clicktale.net/ss/4451/df7e164d-c711-4376-a4c8-8b364d648be0/9/wr.jsaD
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://classroom.adobe.io
Source: 226a3495a1d48b58_0.0.dr	String found in binary or memory: https://clicktale.pantherssl.com/
Source: 226a3495a1d48b58_0.0.dr	String found in binary or memory: https://clicktalecdn.sslcs.cdngc.net/
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr, 5e843f98-8a61-4996-9c56-406ffd8845c9.tmp.2.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json1.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr, 5e843f98-8a61-4996-9c56-406ffd8845c9.tmp.2.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://code.jquery.com/
Source: 0f0886dc1df9f2c5_0.0.dr, 37729ecc6986e9a4_0.0.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: 0f0886dc1df9f2c5_0.0.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.jsaD
Source: 07ba938e66011558_0.0.dr	String found in binary or memory: https://code.jquery.com/jquery-3.2.1.slim.min.js
Source: 44c49097cc205184_0.0.dr	String found in binary or memory: https://code.jquery.com/jquery-3.2.1.slim.min.jsa
Source: 44c49097cc205184_0.0.dr	String found in binary or memory: https://code.jquery.com/jquery-3.2.1.slim.min.jsaD
Source: d6595452d2846755_0.0.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: 5983721c06c847ef_0.0.dr	String found in binary or memory: https://connect.facebook.net/signals/config/1772359959706965?v=2.9.46&r=stable
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr	String found in binary or memory: https://content-autofill.googleapis.com
Source: manifest.json0.0.dr	String found in binary or memory: https://content.googleapis.com
Source: Reporting and NEL.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers
Source: 08c6b90a4dee433e_0.0.dr	String found in binary or memory: https://ct.contentsquare.net/pcc/
Source: 08c6b90a4dee433e_0.0.dr	String found in binary or memory: https://ct.contentsquare.net/www/
Source: History-journal.0.dr	String found in binary or memory: https://cutt.ly/7EcckDX
Source: History-journal.0.dr	String found in binary or memory: https://cutt.ly/7EcckDXShare
Source: 9f7e885e8c444e3d_0.0.dr	String found in binary or memory: https://d9.flashtalking.com/d9core
Source: 9f7e885e8c444e3d_0.0.dr	String found in binary or memory: https://d9.flashtalking.com/d9coreaD
Source: Current Session.0.dr	String found in binary or memory: https://disq.us
Source: History-journal.0.dr	String found in binary or memory: https://disq.us/?url=https%3A%2F%2Fblacktechworld.com%2Fabsolutelymortgages%2F1337_prv8%2F1337_prv8%
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr, 5e843f98-8a61-4996-9c56-406ffd8845c9.tmp.2.dr, 9dae80c1-2071-4e0b-bbb0-5bf2217ef9bf.tmp.2.dr, 539239cd-ec2c-4273-b91c-e6d258ed9097.tmp.2.dr	String found in binary or memory: https://dns.google
Source: manifest.json0.0.dr	String found in binary or memory: https://feedback.googleusercontent.com
Source: 9f7e885e8c444e3d_0.0.dr	String found in binary or memory: https://flashtalking.com/
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://fonts.adobespark.com/typekit-metrics
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr, 5e843f98-8a61-4996-9c56-406ffd8845c9.tmp.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://fonts.googleapis.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.googleapis.com;
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr, 5e843f98-8a61-4996-9c56-406ffd8845c9.tmp.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.gstatic.com;
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://giphy.com/
Source: 67a473248953641b_0.0.dr	String found in binary or memory: https://github.com/Appboy/appboy-web-sdk/blob/master/LICENSE
Source: 304b8f8f5a9a7109_0.0.dr	String found in binary or memory: https://github.com/webpack-contrib/style-loader#insertat)
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: c0c428a0b3cd83d1_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1004494713/?random=1632795476680&cv
Source: 0d5e9c2ce70a08b7_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/752015178/?random=1632795476676&cv=
Source: a2964bd1e404c410_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/752015178/?random=1632795478949&cv=
Source: 677a9a2c6f84bb77_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1632795476652&cv=
Source: c45af8131a889d51_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/951622910/?random=1632795478948&cv=
Source: ae02cf7e37a7bd4e_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1632795476663&cv=
Source: 8eddab4197bc75ce_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/983956512/?random=1632795478945&cv=
Source: da4672e4a1c8360e_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/987390658/?random=1632795469045&cv=
Source: manifest.json0.0.dr	String found in binary or memory: https://hangouts.google.com/
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://ims-na1.adobelogin.com
Source: a8448f8e0f201664_0.0.dr	String found in binary or memory: https://ims-na1.adobelogin.com/ims/authorize/v1
Source: a8448f8e0f201664_0.0.dr	String found in binary or memory: https://ims-na1.adobelogin.com/ims/avatar/download
Source: a8448f8e0f201664_0.0.dr	String found in binary or memory: https://ims-na1.adobelogin.com/ims/profile/v1
Source: a8448f8e0f201664_0.0.dr	String found in binary or memory: https://ims-na1.adobelogin.com/ims/userinfo/v1
Source: a8448f8e0f201664_0.0.dr	String found in binary or memory: https://ims-na1.adobelogin.com/ims/validate_token/v1
Source: 11e8b01695d846a4_0.0.dr	String found in binary or memory: https://js-agent.newrelic.com/nr-spa-1210.min.js
Source: 304b8f8f5a9a7109_0.0.dr	String found in binary or memory: https://json-schema.org/
Source: 304b8f8f5a9a7109_0.0.dr	String found in binary or memory: https://json-schema.org/draft/2019-09/vocab/
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://ka-f.fontawesome.com/
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://kit.fontawesome.com/
Source: afa46b3c3136cf33_0.0.dr	String found in binary or memory: https://kit.fontawesome.com/585b051251.js
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/
Source: 494544af254555d8_0.0.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Source: 494544af254555d8_0.0.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.jsaD
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://mt.adobe.io/api/v4/translate
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://notify.adobe.io/ans/v1/notifications
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://notify.adobe.io/ans/v2/notifications/search
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://notify.adobe.io/ans/v2/notifications/timeline
Source: c8dd83c2c31e1c37_0.0.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr, 5e843f98-8a61-4996-9c56-406ffd8845c9.tmp.2.dr	String found in binary or memory: https://ogs.google.com
Source: a22039cd92bba997_0.0.dr	String found in binary or memory: https://opsparc.gsfc.nasa.gov/?sdid=MC95SNMJ&mv=social
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://p.typekit.net/
Source: 04e3f25e64ef23bc_0.0.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: Network Action Predictor-journal.0.dr, ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://page.adobespark-assets.com/
Source: 4e3a906930897002_0.0.dr	String found in binary or memory: https://page.adobespark-assets.com/experiments/base/logo.png);background-repeat:
Source: 7b591f1b28f5c3c3_0.0.dr	String found in binary or memory: https://page.adobespark-assets.com/experiments/chrome/chrome.js
Source: 4e3a906930897002_0.0.dr	String found in binary or memory: https://page.adobespark-assets.com/experiments/chrome/chrome.jsaD
Source: Favicons.0.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/images/favicon.ico
Source: Favicons-journal.0.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/images/favicon.ico7DI
Source: Favicons-journal.0.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/images/favicon.ico=
Source: 8faec8b628066d9d_0.0.dr, c0fe5a57f56fe483_0.0.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/runtime-prod.gz.js
Source: c0fe5a57f56fe483_0.0.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/runtime-prod.gz.jsaD
Source: ec08776eb4299c6a_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: manifest.json1.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://photos.adobe.io/v2/
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://platform-cs-va6.adobe.io
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://premiererush.app.link/GkzXqLsE0db
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://prod.adobeccstatic.com/
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://prod.adobeccstatic.com/utilnav/8.2/utilitynav.css
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://prod.adobeccstatic.com/utilnav/8.2/utilitynav.js
Source: c1edc6da6ebfc6d9_0.0.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr	String found in binary or memory: https://r1---sn-1gi7znes.gvt1.com
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr	String found in binary or memory: https://redirector.gvt1.com
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://s.go-mpulse.net/
Source: c04cde203932c13d_0.0.dr, 47b6abe61c9e2603_0.0.dr	String found in binary or memory: https://s.go-mpulse.net/boomerang/EHLGM-B6VHF-ZVPEW-5D8FX-L8P4H
Source: c04cde203932c13d_0.0.dr	String found in binary or memory: https://s.go-mpulse.net/boomerang/EHLGM-B6VHF-ZVPEW-5D8FX-L8P4HaD
Source: 226a3495a1d48b58_0.0.dr	String found in binary or memory: https://s2.clicktale.net/
Source: 08c6b90a4dee433e_0.0.dr	String found in binary or memory: https://s3.amazonaws.com/nv-p1-s3-assets-01/
Source: manifest.json1.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: 7812293e5d091f0b_0.0.dr	String found in binary or memory: https://sc-static.net/scevent.min.js
Source: 6a9fad8381d66bfe_0.0.dr	String found in binary or memory: https://scripts.demandbase.com/qQQxkRp0.min.js
Source: 000003.log0.0.dr	String found in binary or memory: https://sd.iperceptions.com/ius-359cd6b861125d638f6cea04ffb14739/29293_637680246311032883
Source: Current Session.0.dr	String found in binary or memory: https://servedby.flashtalking.com
Source: 000003.log0.0.dr	String found in binary or memory: https://servedby.flashtalking.com/
Source: Current Session.0.dr	String found in binary or memory: https://servedby.flashtalking.com/container/13539;99030;10307;iframe/?ftXRef=&ftXValue=&ftXType=&ftX
Source: c1edc6da6ebfc6d9_0.0.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: c1edc6da6ebfc6d9_0.0.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.jsaD
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://spark-content-publish.adobe.io
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://spark-cs.adobe.io
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://spark-design-variations-v2.adobe.io
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://spark-design-variations.adobe.io
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://spark-pdf-export.adobe.io
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://spark-pgm-render.adobe.io
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://spark-saliency.adobe.io
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://sparkcore.tt.omtrdc.net/m2/sparkcore/ubox/raw?mbox=target-global-mbox&mboxDefault=dfdf
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr, 5e843f98-8a61-4996-9c56-406ffd8845c9.tmp.2.dr	String found in binary or memory: https://ssl.gstatic.com
Source: a8448f8e0f201664_0.0.dr	String found in binary or memory: https://static.adobelogin.com/imslib/imslib.min.js
Source: a8448f8e0f201664_0.0.dr	String found in binary or memory: https://static.adobelogin.com/imslib/imslib.min.jsaD
Source: a8448f8e0f201664_0.0.dr	String found in binary or memory: https://static.adobelogin.com/renga-idprovider/resources/js/json2-min.js
Source: 528df7fa00e0aa0d_0.0.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: ba23d8ecda68de77_1.0.dr	String found in binary or memory: https://stock.adobe.io
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr	String found in binary or memory: https://storage.googleapis.com
Source: f1cdccba37924bda_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/4.3.1
Source: 000003.log8.0.dr, 013888a1cda32b90_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/4.3.1/workbox-core.prod.js
Source: 013888a1cda32b90_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/4.3.1/workbox-core.prod.jsaD
Source: 000003.log8.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/4.3.1/workbox-navigation-preload.prod.js
Source: 000003.log8.0.dr, 297ecea5cebb5dfe_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/4.3.1/workbox-routing.prod.js
Source: 297ecea5cebb5dfe_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/4.3.1/workbox-routing.prod.jsaD
Source: 000003.log8.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/4.3.1/workbox-strategies.prod.js
Source: b6c28cea6ed9dfc1_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/4.3.1/workbox-strategies.prod.jsa
Source: b6c28cea6ed9dfc1_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/4.3.1/workbox-strategies.prod.jsaD
Source: 2cc80dabc69f58b6_0.0.dr, 000003.log8.0.dr, 2cc80dabc69f58b6_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/4.3.1/workbox-sw.js
Source: f1cdccba37924bda_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/4.3.1/workbox-sw.jsaD
Source: a22039cd92bba997_0.0.dr	String found in binary or memory: https://support.google.com/chrome/answer/9658361
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: ec08776eb4299c6a_0.0.dr	String found in binary or memory: https://tagassistant.google.com/
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr	String found in binary or memory: https://tr.snapchat.com
Source: Current Session.0.dr	String found in binary or memory: https://tr.snapchat.com/cm/i
Source: Current Session.0.dr	String found in binary or memory: https://tr.snapchat.com/cm/i?pid=93f19646-2418-418d-98af-f244ebb7c1cc
Source: Current Session.0.dr	String found in binary or memory: https://tr.snapchat.com/p
Source: 000003.log6.0.dr	String found in binary or memory: https://universal.iperceptions.com
Source: 000003.log0.0.dr	String found in binary or memory: https://universal.iperceptions.com/
Source: 850d10ed47f5161b_0.0.dr	String found in binary or memory: https://universal.iperceptions.com/core/Ipuser_v78.0.js
Source: 850d10ed47f5161b_0.0.dr	String found in binary or memory: https://universal.iperceptions.com/core/Ipuser_v78.0.jsaD
Source: Current Session.0.dr	String found in binary or memory: https://universal.iperceptions.com/iFrame.html
Source: ce2c17b9c6edf534_0.0.dr	String found in binary or memory: https://universal.iperceptions.com/wrapper.js
Source: ce2c17b9c6edf534_0.0.dr	String found in binary or memory: https://universal.iperceptions.com/wrapper.jsaD
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://use.typekit.net/
Source: 36d0235949f31082_0.0.dr	String found in binary or memory: https://use.typekit.net/af/180c9d/00000000000000003b9b3f8a/27/
Source: 36d0235949f31082_0.0.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/
Source: 04e3f25e64ef23bc_0.0.dr	String found in binary or memory: https://use.typekit.net/af/3d913c/000000000000000000017709/26/
Source: 04e3f25e64ef23bc_0.0.dr	String found in binary or memory: https://use.typekit.net/af/6c57c4/0000000000000000000158d6/26/
Source: 04e3f25e64ef23bc_0.0.dr	String found in binary or memory: https://use.typekit.net/af/74fc30/0000000000000000000158d4/26/
Source: 36d0235949f31082_0.0.dr	String found in binary or memory: https://use.typekit.net/af/949f99/00000000000000003b9b3068/27/
Source: 36d0235949f31082_0.0.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/
Source: 04e3f25e64ef23bc_0.0.dr	String found in binary or memory: https://use.typekit.net/af/9951d2/0000000000000000000158d7/26/
Source: 04e3f25e64ef23bc_0.0.dr	String found in binary or memory: https://use.typekit.net/af/9d1933/00000000000000000001705b/26/
Source: 36d0235949f31082_0.0.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/
Source: 04e3f25e64ef23bc_0.0.dr	String found in binary or memory: https://use.typekit.net/af/d5d9b2/00000000000000000000ffd9/26/
Source: 04e3f25e64ef23bc_0.0.dr	String found in binary or memory: https://use.typekit.net/af/e030d3/0000000000000000000158d3/26/
Source: 04e3f25e64ef23bc_0.0.dr	String found in binary or memory: https://use.typekit.net/af/edcf1e/0000000000000000000158d9/26/
Source: 04e3f25e64ef23bc_0.0.dr	String found in binary or memory: https://use.typekit.net/af/fe9c8e/0000000000000000000158d8/26/
Source: 36d0235949f31082_0.0.dr	String found in binary or memory: https://use.typekit.net/onz5gap.js
Source: 36d0235949f31082_0.0.dr	String found in binary or memory: https://use.typekit.net/onz5gap.jsaD
Source: 04e3f25e64ef23bc_0.0.dr	String found in binary or memory: https://use.typekit.net/rbi5aua.js
Source: 04e3f25e64ef23bc_0.0.dr	String found in binary or memory: https://use.typekit.net/rbi5aua.jsaD
Source: 226a3495a1d48b58_0.0.dr	String found in binary or memory: https://wr.clicktale.net/v1/
Source: 1aed6b6619289abf_0.0.dr	String found in binary or memory: https://www.everestjs.net/static/le/last-event-tag-latest.min.js
Source: 1aed6b6619289abf_0.0.dr	String found in binary or memory: https://www.everestjs.net/static/le/last-event-tag-latest.min.jsa
Source: 1aed6b6619289abf_0.0.dr	String found in binary or memory: https://www.everestjs.net/static/le/last-event-tag-latest.min.jsaD
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr	String found in binary or memory: https://www.google.ch
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr, manifest.json0.0.dr, 5e843f98-8a61-4996-9c56-406ffd8845c9.tmp.2.dr	String found in binary or memory: https://www.google.com
Source: manifest.json1.0.dr	String found in binary or memory: https://www.google.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://www.google.com;
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: ec08776eb4299c6a_0.0.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion_async.js
Source: ec08776eb4299c6a_0.0.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion_async.jsaD
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr, 5e843f98-8a61-4996-9c56-406ffd8845c9.tmp.2.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json1.0.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json1.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json1.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json1.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json1.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: ec08776eb4299c6a_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: 78076ae97804cb59_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-1004494713&l=dataLayer&cx=c
Source: c2ea2693bfe47e62_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-752015178&l=dataLayer&cx=c
Source: 00a73600649a63ce_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-951622910&l=dataLayer&cx=c
Source: db4718e9c146cf75_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-983956512&l=dataLayer&cx=c
Source: 9f5aed4e4f46c7af_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-987390658
Source: c06cca6d9cb8adac_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=DC-10402079&l=dataLayer&cx=c
Source: 7599370324cb669f_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=DC-10740885&l=dataLayer&cx=c
Source: b12d010a25b4c1d0_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=DC-9212252&l=dataLayer&cx=c
Source: fd7e2917-abf7-4fd2-9b85-6c12e6a469e9.tmp.2.dr, 5e843f98-8a61-4996-9c56-406ffd8845c9.tmp.2.dr	String found in binary or memory: https://www.gstatic.com
Source: manifest.json0.0.dr	String found in binary or memory: https://www.gstatic.com;
Source: Reporting and NEL.2.dr	String found in binary or memory: https://www.linkedin.com/li/rep

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=314559&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20210928T021702Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=21a16430ff2c4ff980c609ca52be5ae1&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1185504&metered=false&nettype=ethernet&npid=sc-314559&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&smBiosDm=VMware7%2C1&tl=2&tsu=1185504&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32345&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: DashZrouL0SRQa9P.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /client/config?cc=US&setlang=en-US HTTP/1.1X-Search-CortanaAvailableCapabilities: CortanaExperience,SpeechLanguageX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {A2AB526A-D38D-4FC9-8BA0-E34B8D6354E8}X-UserAgeClass: UnknownX-BM-Market: USX-BM-DateFormat: M/d/yyyyX-CortanaAccessAboveLock: falseX-Device-OSSKU: 48X-BM-DTZ: -420X-BM-FirstEnabledTime: 132061387448759736X-DeviceID: 0100748C09001CEAX-Search-TimeZone: Bias=480; DaylightBias=-60; TimeZoneKeyName=Pacific Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDgAkR8BAAUW3WS0TDKGu2jEbBhB%2BXls4oNzBQAAXoPj%2BRAC5hGBjwFWmaHZRt0YroxvWDp4oOK%2BoPdkcXmtNs6B6AqH/5GJvKCyYedgvjXLU7Q2k6ZoAHicVQ8ecHO2DDGiQKBd2N0yEjgAmmTusrsdLrL1pfWEcNe7afsynLKYDzvY/9KevxXdvSVM22DwKMwSsFXPITEoUV8%2Brm2ew5754PE9AOdRY2ZcxMfiJVqrkqwiaGtfdiOz9sXJDORibnoEaLEHetm1X4T22bLusIGUvysucwq950J6FJJX%2Bl/OP%2BP1R/Mj0/4OKd8NaYKM99IUpN6bVuFNEAk%2B97eWcXgEzJpl1C0Kx%2BRdHoLbS0jdELucYUhQpwRXpTftwoDZgAACIwNw5SXqsdEsAFeKEHTEaxbPAgIXCfH2nPYRDZUlcoIA5eVDeIuugOnl0QH6GhtMfOE4usly//EoXjmZOLE7ASI7URntchtMrwqE0UuR/ipc7YzntEXHqOZIuLLbHbmBudkxTOpjP0RBhRmjh5ER7N057qb6HHIGFwXvz54IFe3PzeHMGNI9czZ/wpBujM/2Ya2mZNwnArkIAmiGcqDPkb5brkRBJJnao%2B3T6F6ZUvAEyY3nwbfG%2BMI0CRrHaPuDKJGnahVr%2BPuT9yljTUNT9MNJ4CKXlcqdYyd7oeI1%2Bic7eK2RxQh8SHuAFwXh0EYW/nU8EwBim/WOWYBosUyDHeqmR61LTCbdjW8k/q3AbYhlScaoWKWpkwrj6mG25wCgGwjTri9j9Pp32z9F7xCIgZhwxn5GXuofWBmaBRXT6GbMTehGGTQsMyxROfM2kyFWRJxSHptG9JGPa7AkoB51GxkVjxuRp89PaEZwSwUD7mKaZpFrJ/i8XWpq6Mf/8//juNpKE5TENP3lW3pqYdxymwIzhQqCw7NsS8gLp4eg4NzRwrg5nYCQc%2BAjD74zZADphymC5mRz0EVB6/YAQ%3D%3D%26p%3DX-Agent-DeviceId: 0100748C09001CEAX-BM-CBT: 1632795422User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.10.7.17134; 10.0.0.0.17134.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134X-Device-isOptin: trueAccept-language: en-US, enX-Device-Touch: falseX-Device-ClientSession: DC806300BFB94DD19B9BCF04E70FFF21X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-BM-ClientFeatures: pbitcpdisabled,AmbientWidescreen,rs1musicprod,CortanaSPAXamlHeaderHost: www.bing.comConnection: Keep-AliveCookie: MUID=54AD14FB4D1E4A6C815A867991009454
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=310091&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:BE8AB8DF-DCD1-3523-4A95-3A04EAFF1CBA&ctry=US&time=20210928T021702Z&lc=en-US&pl=en-US&idtp=mid&uid=b029da70-c67b-4a7e-9bd5-517f7e302ed9&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=f7a470252d7b44be8b5d8580f64a1256&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1185504&metered=false&nettype=ethernet&npid=sc-310091&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=VMware7%2C1&tl=2&tsu=1185504&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32345&sc=6X-SDK-HW-TOKEN: t=EwDYAppeBAAU+CVBfQcFvEv2DZI9cfqZBAbEzGMAAb3+fDRCmgQhEaR5KFpqkK8hgAZcb/jkRk7yv7LubIh2iZPDyVzSjZvv8Fk2jh3g1klVhRVCYz55S2V/Z8Sbgaq10TOaY8gK/S2OPNTXug7WF04sDFCtnW2TpSQOh3n3/GEJTT+rra9oSkc2ZreI1ZNrllFJd5g09J7kBnMznViAsxneNQVRbiSzqVP20/1tPgxfMP8j1lHllNkTiRybx0KGQYzxMVB6MJBNkisvlqGIDEkMqY6Qqut+eB+jYKeaMBNheWJbuEnEm3tMysxkUS6I6gUKRcOewKnVqDIaH81xJCvuRrwh9R81NbdRMW3SKNnWejUlrL43ZUIbpOkIC+ADZgAACD6OleWj36PbqAFLUXRET1/LJyB0GSq7M+6ttGIv5EdZ9E8BXtCpGBxpRNtO6YYj5cTp2Nb64v+q7X6ygt5IqRM++eO/v0gr2x5PDY0mdPwTkMBo0zbingci6Qn9tGpYMFMnYsVyOSC1K8I8nQwmWgkc+p17MwkqSXgxDnhVZK1EnMzBHsssnRVwvkGZUUQilBpaLoJmobjRF320xUqeuptHjDccmGFzliU3GT9kx8DTrPcHny+H6x6qJBzTBojOLbLq05BdzX/WtWzJwHTP0dWx4bX2eZoc6qdAGUx0v9N5+XmjguBZfj9lnVdwWj7a1TLiy2hhaT1bFo4CixHy8cUk5fP1InlSRru+/87rLGOvNmeMFZdrsYIDXksamtO5G/yg3RlTUR6H/EKf9V1zkKnluO16pbKNu0e971D9M/heRZhu9802y6tj74UM9cxyGR82Cq5jZMn79d/AAfwK0rDPoj3x2UgFAi+fyOC34mQP1Lbqwz2MsH65uvYXU1hL6XhgOw5p2mBmePXPVYB4xylJZ3jdg/SCjeZhWJzQQqTu0/0Q07nojQTAOV3W+uMTizTC2AE=&p=Cache-Control: no-cacheMS-CV: DashZrouL0SRQa9P.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfmX-Goog-Update-Updater: chromecrx-85.0.4183.121Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page/4WTm5hB6jd6VX/ HTTP/1.1Host: spark.adobe.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime/1.22/runtime.gz.css HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime/1.22/base-fonts.gz.js HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime/1.22/themes/crisp-fonts.gz.js HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime/1.22/typekit-load.gz.js HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime/1.22/runtime-prod.gz.js HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page/4WTm5hB6jd6VX/images/cc8fa72e-7bd4-4e74-ad70-a7d3391aea43.png?asset_id=e15b8c57-3958-4d66-a643-31131f07f7f6&img_etag=%220dfe1271c4feee62a37d4f324ddee500%22&size=1024 HTTP/1.1Host: spark.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime/1.22/images/spark_app_white@2x.svg HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://page.adobespark-assets.com/runtime/1.22/runtime.gz.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /experiments/chrome/chrome.js HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /experiments/chrome/images/spark_logo_v2.svg HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /experiments/chrome/images/adobe-logo-gray.png HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime/1.22/images/right-arrow.png HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://page.adobespark-assets.com/runtime/1.22/runtime.gz.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime/1.22/images/left-arrow.png HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://page.adobespark-assets.com/runtime/1.22/runtime.gz.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime/1.22/images/lightbox_close@2x.png HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://page.adobespark-assets.com/runtime/1.22/runtime.gz.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime/1.22/images/favicon.ico HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page/4WTm5hB6jd6VX/images/ef2841c4-7219-4942-af30-73fd615482a8.jpg?asset_id=4a38d403-faa5-4acf-9c51-96364a044a29&img_etag=%2254149f4c8a6730544e57e0f99fa17c62%22&size=1024 HTTP/1.1Host: spark.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page/4WTm5hB6jd6VX/images/cc8fa72e-7bd4-4e74-ad70-a7d3391aea43.png?asset_id=e15b8c57-3958-4d66-a643-31131f07f7f6&img_etag=%220dfe1271c4feee62a37d4f324ddee500%22&size=3140 HTTP/1.1Host: spark.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page/4WTm5hB6jd6VX/images/ef2841c4-7219-4942-af30-73fd615482a8.jpg?asset_id=4a38d403-faa5-4acf-9c51-96364a044a29&img_etag=%2254149f4c8a6730544e57e0f99fa17c62%22&size=2665 HTTP/1.1Host: spark.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime/1.22/images/favicon.ico HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: page.adobespark-assets.com
Source: global traffic	HTTP traffic detected: GET /crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page/4WTm5hB6jd6VX/?page-mode=static HTTP/1.1Host: spark.adobe.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime/1.22/noscript.gz.css HTTP/1.1Host: page.adobespark-assets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/?page-mode=staticAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: spark.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spark.adobe.com/page/4WTm5hB6jd6VX/images/ef2841c4-7219-4942-af30-73fd615482a8.jpg?asset_id=4a38d403-faa5-4acf-9c51-96364a044a29&img_etag=%2254149f4c8a6730544e57e0f99fa17c62%22&size=1024Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7EcckDX HTTP/1.1Host: cutt.lyConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?url=https%3A%2F%2Fblacktechworld.com%2Fabsolutelymortgages%2F1337_prv8%2F1337_prv8%2FOffice365%2FPDF%2FSecure&key=-MkqJoVWdZ-6SyvdC4hP7Q HTTP/1.1Host: disq.usConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure HTTP/1.1Host: blacktechworld.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://disq.us/?url=https%3A%2F%2Fblacktechworld.com%2Fabsolutelymortgages%2F1337_prv8%2F1337_prv8%2FOffice365%2FPDF%2FSecure&key=-MkqJoVWdZ-6SyvdC4hP7QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/ HTTP/1.1Host: blacktechworld.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://disq.us/?url=https%3A%2F%2Fblacktechworld.com%2Fabsolutelymortgages%2F1337_prv8%2F1337_prv8%2FOffice365%2FPDF%2FSecure&key=-MkqJoVWdZ-6SyvdC4hP7QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://blacktechworld.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/css/hover.css HTTP/1.1Host: blacktechworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://blacktechworld.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://blacktechworld.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1Rvzzk8/gmail1.png HTTP/1.1Host: i.ibb.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: blacktechworld.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://blacktechworld.com/absolutelymortgages/1337_prv8/1337_prv8/Office365/PDF/Secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page/4WTm5hB6jd6VX HTTP/1.1Host: spark.adobe.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page/4WTm5hB6jd6VX/ HTTP/1.1Host: spark.adobe.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "877f16c59e706217acdc9cb5559ecb12"
Source: global traffic	HTTP traffic detected: GET /about?r=reader_page_logo HTTP/1.1Host: spark.adobe.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /imslib/imslib.min.js HTTP/1.1Host: static.adobelogin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.0.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1632795466115 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?cache_bust=dada3431f5138 HTTP/1.1Host: ims-na1.adobelogin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: application/signed-exchange;v=b3;q=0.9,*/*;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=5.0.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1632795466115 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=08283790427599868922403102990478807869
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.0.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=08078587664795059862382791699820668851&ts=1632795466565 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://www.adobe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; feds_visitor_id=nI4ymRMJGtE0aueVi82Fe; feds_visitor_audience=%7B%22visitor%22%3A%22nI4ymRMJGtE0aueVi82Fe%22%2C%22cohort%22%3Atrue%7D; sat_domain=A; s_nr=1632795466188-New; fg=VZ5I2Y5CFLE5CTEGEAQRBGQA2Y======; mbox=session#282e97995bb642358752325e7a004403#1632797327; at_check=true; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=870038026%7CMCMID%7C08078587664795059862382791699820668851%7CMCAAMLH-1633400266%7C6%7CMCAAMB-1633400266%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1632802666s%7CNONE%7CvVersion%7C5.0.0
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveOrigin: https://www.adobe.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/7a5eb705-95ed-4cc4-a11d-0cc5760e93db/7a5eb705-95ed-4cc4-a11d-0cc5760e93db.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveaccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.9.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveOrigin: https://www.adobe.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/7a5eb705-95ed-4cc4-a11d-0cc5760e93db/394a4f88-7fe0-49f1-924d-a901a0001be9/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.9.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.9.0/assets/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/ip.json?key=e4086fa3ea9d74ac2aae2719a0e5285dc7075d7b&rnd=9759&callback=Request_5675483 HTTP/1.1Host: api.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gtag/js?id=AW-987390658 HTTP/1.1Host: www.googletagmanager.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wrapper.js HTTP/1.1Host: universal.iperceptions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qQQxkRp0.min.js HTTP/1.1Host: scripts.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=99999999999999& HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://servedby.flashtalking.com/container/13539;99030;10307;iframe/?ftXRef=&ftXValue=&ftXType=&ftXName=&ftXNumItems=&ftXCurrency=&U1=&U2=&U3=08078587664795059862382791699820668851&U4=adobe.com:express&U5=&U6=&U7=&U8=&U9=&U10=&U11=&U12=&U13=&U14=&U15=&U16=&U17=&U18=&U19=&U20=&ft_referrer=https%3A%2F%2Fwww.adobe.com%2Fexpress%2F&ns=&cb=270173.62329499674Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=08283790427599868922403102990478807869
Source: global traffic	HTTP traffic detected: GET /signals/config/1772359959706965?v=2.9.46&r=stable HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?type=javascript&version=2.0.4&p_id=Twitter&p_user_id=0&txn_id=o1w4k&events=%5B%5B%22pageview%22%2Cnull%5D%5D&tw_sale_amount=0&tw_order_quantity=0&tw_iframe_status=0&event_id=c9399b8a-f653-4e9a-8900-1db6b42c4a34&tw_document_href=https%3A%2F%2Fwww.adobe.com%2Fexpress%2F%3Fr%3Dreader_page_logo HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?type=javascript&version=2.0.4&p_id=Twitter&p_user_id=0&txn_id=o1w4k&events=%5B%5B%22pageview%22%2Cnull%5D%5D&tw_sale_amount=0&tw_order_quantity=0&tw_iframe_status=0&event_id=c9399b8a-f653-4e9a-8900-1db6b42c4a34&tw_document_href=https%3A%2F%2Fwww.adobe.com%2Fexpress%2F%3Fr%3Dreader_page_logo&tpx_cb=twttr.conversion.loadPixels HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.adobe.com%2Fexpress%2F%3Fr%3Dreader_page_logo&page_title=Make%20Social%20Graphics%2C%20Short%20Videos%2C%20and%20Web%20Pages%20To%20Stand%20Out%E2%80%94In%20Minutes%20%7C%20Adobe%20Spark&src=tag&key=b561357daf8504abd0ca9cc239218ae0 HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/demandbase HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/i?pid=93f19646-2418-418d-98af-f244ebb7c1cc HTTP/1.1Host: tr.snapchat.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iFrame.html HTTP/1.1Host: universal.iperceptions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=872&time=1632795467898&url=https%3A%2F%2Fwww.adobe.com%2Fexpress%2F%3Fr%3Dreader_page_logo HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /make/logo-maker?r=reader_page_learnmore HTTP/1.1Host: spark.adobe.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; feds_visitor_id=nI4ymRMJGtE0aueVi82Fe; feds_visitor_audience=%7B%22visitor%22%3A%22nI4ymRMJGtE0aueVi82Fe%22%2C%22cohort%22%3Atrue%7D; s_nr=1632795466188-New; fg=VZ5I2Y5CFLE5CTEGEAQRBGQA2Y======; at_check=true; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C08078587664795059862382791699820668851; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=870038026%7CMCMID%7C08078587664795059862382791699820668851%7CMCAAMLH-1633400266%7C6%7CMCAAMB-1633400266%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1632802666s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.0.0; mbox=session#282e97995bb642358752325e7a004403#1632797327|PC#282e97995bb642358752325e7a004403.37_0#1696040267; OptanonConsent=isIABGlobal=false&datestamp=Mon+Sep+27+2021+19%3A17%3A47+GMT-0700+(Pacific+Daylight+Time)&version=6.9.0&hosts=&consentId=c817404e-4872-4064-b303-0b6628da64ea&interactionCount=0&landingPath=https%3A%2F%2Fwww.adobe.com%2Fexpress%2F%3Fr%3Dreader_page_logo&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; feds_privacy_consent={"hasUserProvidedConsent":true,"userHasCustomConsent":false}; OptanonChoice=1; s_dmdbase=1; _uetsid=461535a0200211eca92b199709cfff97; _uetvid=4616bf20200211ecaeae7ddc70aff1f8; _gcl_au=1.1.783182393.1632795468; kndctr_9E1005A551ED61CA0A490D45_AdobeOrg_identity=CiYwODA3ODU4NzY2NDc5NTA1OTg2MjM4Mjc5MTY5OTgyMDY2ODg1MVIPCOyBjcLCLxgBKgRJUkwx8AHsgY3Cwi8=; kndctr_9E1005A551ED61CA0A490D45_AdobeOrg_consent=general=in; kndctr_9E1005A551ED61CA0A490D45_AdobeOrg_consent_check=1; _scid=a8449040-ff37-4fdd-88e6-a1df2fbc7c58
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/987390658/?random=1632795469045&cv=9&fst=1632795469045&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=1&u_nmime=2&gtm=2oa9m0&sendb=1&ig=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.adobe.com%2Fexpress%2F%3Fr%3Dreader_page_logo&tiba=Make%20Social%20Graphics%2C%20Short%20Videos%2C%20and%20Web%20Pages%20To%20Stand%20Out%E2%80%94In%20Minutes%20%7C%20Adobe%20Spark&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/?r=reader_page_logoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d9core HTTP/1.1Host: d9.flashtalking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://servedby.flashtalking.com/container/13539;99030;10307;iframe/?ftXRef=&ftXValue=&ftXType=&ftXName=&ftXNumItems=&ftXCurrency=&U1=&U2=&U3=08078587664795059862382791699820668851&U4=adobe.com:express&U5=&U6=&U7=&U8=&U9=&U10=&U11=&U12=&U13=&U14=&U15=&U16=&U17=&U18=&U19=&U20=&ft_referrer=https%3A%2F%2Fwww.adobe.com%2Fexpress%2F&ns=&cb=270173.62329499674Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=9212252;type=invmedia;cat=japan000;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=8478390455001.732? HTTP/1.1Host: 9212252.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://servedby.flashtalking.com/container/13539;99030;10307;iframe/?ftXRef=&ftXValue=&ftXType=&ftXName=&ftXNumItems=&ftXCurrency=&U1=&U2=&U3=08078587664795059862382791699820668851&U4=adobe.com:express&U5=&U6=&U7=&U8=&U9=&U10=&U11=&U12=&U13=&U14=&U15=&U16=&U17=&U18=&U19=&U20=&ft_referrer=https%3A%2F%2Fwww.adobe.com%2Fexpress%2F&ns=&cb=270173.62329499674Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?cache_bust=03a5de75b79aa HTTP/1.1Host: ims-na1.adobelogin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: application/signed-exchange;v=b3;q=0.9,*/*;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event?d_dst=1&d_rtbd=json&d_cb=__audienceManagerSegments&d_cts=2&d_mid=08078587664795059862382791699820668851 HTTP/1.1Host: adobe.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=08283790427599868922403102990478807869
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveOrigin: https://www.adobe.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Wed, 04 Aug 2021 01:49:58 GMT
Source: global traffic	HTTP traffic detected: GET /consent/7a5eb705-95ed-4cc4-a11d-0cc5760e93db/7a5eb705-95ed-4cc4-a11d-0cc5760e93db.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 05 Aug 2021 15:46:39 GMT
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveaccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.9.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveOrigin: https://www.adobe.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Fri, 20 Nov 2020 16:34:12 GMT
Source: global traffic	HTTP traffic detected: GET /consent/7a5eb705-95ed-4cc4-a11d-0cc5760e93db/394a4f88-7fe0-49f1-924d-a901a0001be9/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 05 Aug 2021 15:49:20 GMT
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.9.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Fri, 20 Nov 2020 16:34:03 GMT
Source: global traffic	HTTP traffic detected: GET /scripttemplates/6.9.0/assets/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Fri, 20 Nov 2020 16:34:03 GMT
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "8dc11b7ca1d5ed9ec3b1ab1beb621c75"If-Modified-Since: Wed, 22 Sep 2021 00:02:22 GMT
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qQQxkRp0.min.js HTTP/1.1Host: scripts.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "aebde5fbd87b5bdc6048dacc4ead5fef"If-Modified-Since: Tue, 08 Dec 2020 23:29:10 GMT
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-AB=0d6e407936704bd380072f5891d28b0e
Source: global traffic	HTTP traffic detected: GET /iFrame.html HTTP/1.1Host: universal.iperceptions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0x8D7A40B8ED974A8If-Modified-Since: Tue, 28 Jan 2020 16:03:04 GMT
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=5018E8889AB42C& HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://servedby.flashtalking.com/container/13539;99030;10307;iframe/?ftXRef=&ftXValue=&ftXType=&ftXName=&ftXNumItems=&ftXCurrency=&U1=&U2=&U3=08078587664795059862382791699820668851&U4=adobe.com:express:create:logo&U5=&U6=&U7=&U8=&U9=&U10=&U11=&U12=&U13=&U14=&U15=&U16=&U17=&U18=&U19=&U20=&ft_referrer=https%3A%2F%2Fwww.adobe.com%2Fexpress%2Fcreate%2Flogo&ns=&cb=591997.527402732Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=08283790427599868922403102990478807869; dpm=08283790427599868922403102990478807869
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=872&time=1632795475186&url=https%3A%2F%2Fwww.adobe.com%2Fexpress%2Fcreate%2Flogo%3Fr%3Dreader_page_learnmore HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UserMatchHistory=AQJlleaTYXzWxAAAAXwoQ0RWaYiVJmqfDS23EhB6e5GPoyMhE8XkDWO5mHkYDA6uT2e3umwDJIg81Q; AnalyticsSyncHistory=AQKFOvA6GjNjawAAAXwoQ0RW40al-DRrcKxzdzhikj0cttPXLy3Iuejc9KwPvlBIMhHI9gmuvMRRkv-6JrTjGg; lang=v=2&lang=en-us; bcookie="v=2&3ea64adb-499b-4e8c-8f75-668da48cb905"; lidc="b=OGST04:s=O:r=O:a=O:p=O:g=2449:u=1:x=1:i=1632763069:t=1632849469:v=2:sig=AQGi_C5ZQJzeml_i4zwQefC0MyGtI-yU"
Source: global traffic	HTTP traffic detected: GET /signals/config/1772359959706965?v=2.9.46&r=stable HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.adobe.com%2Fexpress%2Fcreate%2Flogo%3Fr%3Dreader_page_learnmore&page_title=Free%20Logo%20Maker%3A%20Design%20Custom%20Logos%20%7C%20Adobe%20Spark&src=tag&key=b561357daf8504abd0ca9cc239218ae0 HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Origin: https://www.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/demandbase HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /i/adsct?type=javascript&version=2.0.4&p_id=Twitter&p_user_id=0&txn_id=o1w4k&events=%5B%5B%22pageview%22%2Cnull%5D%5D&tw_sale_amount=0&tw_order_quantity=0&tw_iframe_status=0&event_id=c73b0511-6e87-41db-a7b4-cdccd811bd88&tw_document_href=https%3A%2F%2Fwww.adobe.com%2Fexpress%2Fcreate%2Flogo%3Fr%3Dreader_page_learnmore&tpx_cb=twttr.conversion.loadPixels HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_/AgwvT3PaLiFUm40OxN3oQ=="
Source: global traffic	HTTP traffic detected: GET /i/adsct?type=javascript&version=2.0.4&p_id=Twitter&p_user_id=0&txn_id=o1w4k&events=%5B%5B%22pageview%22%2Cnull%5D%5D&tw_sale_amount=0&tw_order_quantity=0&tw_iframe_status=0&event_id=c73b0511-6e87-41db-a7b4-cdccd811bd88&tw_document_href=https%3A%2F%2Fwww.adobe.com%2Fexpress%2Fcreate%2Flogo%3Fr%3Dreader_page_learnmore HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.adobe.com/express/create/logo?r=reader_page_learnmoreAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 13.33.48.62:443 -> 192.168.2.6:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.48.110:443 -> 192.168.2.6:50306 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.48.110:443 -> 192.168.2.6:50307 version: TLS 1.2

System Summary:

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://spark.adobe.com/page/4WTm5hB6jd6VX/'
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1628,14564879731351383447,5569332593134329760,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1728 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1628,14564879731351383447,5569332593134329760,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1728 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Creates files inside the program directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-61527B2F-E34.pma

Jump to behavior

Creates temporary files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\be31c696-6461-44a2-8690-fb3b1f9f830f.tmp

Jump to behavior

Classification label

Source: classification engine

Classification label: mal80.phis.win@59/406@67/50

SQL strings found in memory and binary data

Source: QuotaManager.0.dr

Binary or memory string: CREATE TABLE HostQuotaTable(host TEXT NOT NULL, type INTEGER NOT NULL, quota INTEGER DEFAULT 0, UNIQUE(host, type));

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior