hxxp://links[.]notification[.]intuit[.]com/ls/click?upn=u001[.]SkyGoo-2FemZT6Xc-2Fn1lGbnolA50y-2BF9TWqkK0lI1Lm8fNvXP5-2FxDdNExe3CY544wPZVOkx-2Bsb4ktfZUcbQ6XLB0umkYGUQHHILweKuKpYjdzhF0uPLuei0-2BVlMRjPRLAo1fCXOjfoFIpID1YHPjFt9X6YM6IErfqKEFBoo2pDesv3b1J6kPlpjElQuqu-2FVRouDnTCFSAej3YnsTJqAMSzBAVgxVv0vk98gmowvMrxtOvx10r9-2FdMZ10Xg71orxPeKfym7hmo-2F-2B8bdWu2rgTnSJg-3D-3DVaXj_16M6GKGeDmPkOzr09KdAzqmyxUJbZgaDi4h0RkPzCPHSbphs600vF4t7eTVtxwS81PfmMEj5-2B9tPYTYr1Ra0wbm5UiruOjcBoWIgXfGuGH9tYP7xbxDMmjL9fkKZ4JfvCaNg-2Bys0zwPgn1fZOvnimj7qQPgls-2BFE6-2B5lNgqa6ubH5FQuQScBxeXRncgLx1el6VmKkrsx8CwJMsDYo1QdvvV1U7tkDk9vEy-2BEpH-2B-2BDs7y0BUutgYGzeZNK3L-2B5p4IRl2q-2Fds96PBYof6Iza0UehShNwZBUgBnCgrBJs2D8eidHnQw9B4gNCTAMX95itPs-2FhdD3ibREGfkU0WvmEqO-2B6aR7VniPP84QyRY1wFlZtD4YEsT9HTzA6TPgrAG8HiQZbLEKycscoYOl1Alrk-2BAIbW1T-2FIQa-2B2-2BGacg9tBNszXEPnQ4VJ9hFgYvamk4fr047D0vYGonXeLPdjKE-2Fr32SvZ98KaPiPYd3PV5DQAYLyujoYWhbMs1WDsg05e4-2BCQFmhaTtxUOUSgzCI0H2q-2FpCvNF-2FDBW8uzSk1ZjmFr7pvLCZgehH7uMQryCx30DMfVqgH4WWJeEMepIYaFLiAHouUzsePnUwcN8lQO6e07eBY3MZEmTXmQfrmtobpFjjqD5wgVvngxFPIHJMccdcSQK8qTAEMLqO5n1nTGGOnvchLJuqpB6CWZi1Q5kPhnV3WdJ1jairAGFHhadrWuN-2BFVUlAyBAtDyAjTQbEtCP-2BzmMkJfvOX7gdv0ElvRu3zKl11uKVOdRb69sUAvPgYEqjVh2ZTDN-2Ffot6W-2F7Vt1XmrU-2BcJU6TGCpSu-2Be2AYQLdIRhFuN9MvxXRET5OuHWdBBO79iG-2FKEq8rfeU-2Fixrg6-2Ba0UONX6zX0IH-2B3BwXI-2BI-2FPQ5WEr2iu9eyHXYoQKu-2B06glKnQYBi-2FtxI7JpewOjeeGU-2BjMgQBRkXBw4BIfXe816CsgPLOwQvz-2BdYCl3VAW4zocoXS-2BOANK6Cr06mswoUxSy1BKiWlvxO0cJyviRvPEJtc5jIKLddyBymMOokvQcUZswQWCUc03WUmBzGkTyGKn2xYw8m9Q82en00yWk9zUB47Uv7ijKzlrp7083t3-2B-2FnAZ0oSq1a1LfrHZr90VYaqorgJXRDiuhju1j-2BvQWgSjX2Tymc4xOTv-2B7GYwywbSm-2BVZrWx7ZLPEI9CKlTJ2NGMcSBv-2BtA7uk-2FnARbK0v5rJy-2FJpkdgOXXSKaLtLhMABoYMgdURFnIBP3S5ykqzX1mt2m4UDyiZQ0Xk-2Bca7aMj2cFDq-2FoonQ-2FhxjwG6nMIhLxeaaxP1F2S10fVKX7JdiMYcOyowt-2F6DbwN6LCEq2xf2iwVUGYriFY7GGfxrg9Dil0s-2FUqHEOiyTLLgXDvkbA2IwFPv6VGvPeBzdQ9klMs2fpxcADpkM21jYdFPVLZy13-2BdyYyhLhZagGhYVHIrXLXQUq-2FSS6hO2wsXItAithp-2BoB0Msq-2BEDQMaSaAyauZvE-2FfHY3weg-3D-3D

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
13/08/2024, 15:21 UTC

Sharing

Behavioral task

behavioral1

Sample

http://links.notification.intuit.com/ls/click?upn=u001.SkyGoo-2FemZT6Xc-2Fn1lGbnolA50y-2BF9TWqkK0lI1Lm8fNvXP5-2FxDdNExe3CY544wPZVOkx-2Bsb4ktfZUcbQ6XLB0umkYGUQHHILweKuKpYjdzhF0uPLuei0-2BVlMRjPRLAo1fCXOjfoFIpID1YHPjFt9X6YM6IErfqKEFBoo2pDesv3b1J6kPlpjElQuqu-2FVRouDnTCFSAej3YnsTJqAMSzBAVgxVv0vk98gmowvMrxtOvx10r9-2FdMZ10Xg71orxPeKfym7hmo-2F-2B8bdWu2rgTnSJg-3D-3DVaXj_16M6GKGeDmPkOzr09KdAzqmyxUJbZgaDi4h0RkPzCPHSbphs600vF4t7eTVtxwS81PfmMEj5-2B9tPYTYr1Ra0wbm5UiruOjcBoWIgXfGuGH9tYP7xbxDMmjL9fkKZ4JfvCaNg-2Bys0zwPgn1fZOvnimj7qQPgls-2BFE6-2B5lNgqa6ubH5FQuQScBxeXRncgLx1el6VmKkrsx8CwJMsDYo1QdvvV1U7tkDk9vEy-2BEpH-2B-2BDs7y0BUutgYGzeZNK3L-2B5p4IRl2q-2Fds96PBYof6Iza0UehShNwZBUgBnCgrBJs2D8eidHnQw9B4gNCTAMX95itPs-2FhdD3ibREGfkU0WvmEqO-2B6aR7VniPP84QyRY1wFlZtD4YEsT9HTzA6TPgrAG8HiQZbLEKycscoYOl1Alrk-2BAIbW1T-2FIQa-2B2-2BGacg9tBNszXEPnQ4VJ9hFgYvamk4fr047D0vYGonXeLPdjKE-2Fr32SvZ98KaPiPYd3PV5DQAYLyujoYWhbMs1WDsg05e4-2BCQFmhaTtxUOUSgzCI0H2q-2FpCvNF-2FDBW8uzSk1ZjmFr7pvLCZgehH7uMQryCx30DMfVqgH4WWJeEMepIYaFLiAHouUzsePnUwcN8lQO6e07eBY3MZEmTXmQfrmtobpFjjqD5wgVvngxFPIHJMccdcSQK8qTAEMLqO5n1nTGGOnvchLJuqpB6CWZi1Q5kPhnV3WdJ1jairAGFHhadrWuN-2BFVUlAyBAtDyAjTQbEtCP-2BzmMkJfvOX7gdv0ElvRu3zKl11uKVOdRb69sUAvPgYEqjVh2ZTDN-2Ffot6W-2F7Vt1XmrU-2BcJU6TGCpSu-2Be2AYQLdIRhFuN9MvxXRET5OuHWdBBO79iG-2FKEq8rfeU-2Fixrg6-2Ba0UONX6zX0IH-2B3BwXI-2BI-2FPQ5WEr2iu9eyHXYoQKu-2B06glKnQYBi-2FtxI7JpewOjeeGU-2BjMgQBRkXBw4BIfXe816CsgPLOwQvz-2BdYCl3VAW4zocoXS-2BOANK6Cr06mswoUxSy1BKiWlvxO0cJyviRvPEJtc5jIKLddyBymMOokvQcUZswQWCUc03WUmBzGkTyGKn2xYw8m9Q82en00yWk9zUB47Uv7ijKzlrp7083t3-2B-2FnAZ0oSq1a1LfrHZr90VYaqorgJXRDiuhju1j-2BvQWgSjX2Tymc4xOTv-2B7GYwywbSm-2BVZrWx7ZLPEI9CKlTJ2NGMcSBv-2BtA7uk-2FnARbK0v5rJy-2FJpkdgOXXSKaLtLhMABoYMgdURFnIBP3S5ykqzX1mt2m4UDyiZQ0Xk-2Bca7aMj2cFDq-2FoonQ-2FhxjwG6nMIhLxeaaxP1F2S10fVKX7JdiMYcOyowt-2F6DbwN6LCEq2xf2iwVUGYriFY7GGfxrg9Dil0s-2FUqHEOiyTLLgXDvkbA2IwFPv6VGvPeBzdQ9klMs2fpxcADpkM21jYdFPVLZy13-2BdyYyhLhZagGhYVHIrXLXQUq-2FSS6hO2wsXItAithp-2BoB0Msq-2BEDQMaSaAyauZvE-2FfHY3weg-3D-3D

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Report Analysis Logs

General

Target

http://links.notification.intuit.com/ls/click?upn=u001.SkyGoo-2FemZT6Xc-2Fn1lGbnolA50y-2BF9TWqkK0lI1Lm8fNvXP5-2FxDdNExe3CY544wPZVOkx-2Bsb4ktfZUcbQ6XLB0umkYGUQHHILweKuKpYjdzhF0uPLuei0-2BVlMRjPRLAo1fCXOjfoFIpID1YHPjFt9X6YM6IErfqKEFBoo2pDesv3b1J6kPlpjElQuqu-2FVRouDnTCFSAej3YnsTJqAMSzBAVgxVv0vk98gmowvMrxtOvx10r9-2FdMZ10Xg71orxPeKfym7hmo-2F-2B8bdWu2rgTnSJg-3D-3DVaXj_16M6GKGeDmPkOzr09KdAzqmyxUJbZgaDi4h0RkPzCPHSbphs600vF4t7eTVtxwS81PfmMEj5-2B9tPYTYr1Ra0wbm5UiruOjcBoWIgXfGuGH9tYP7xbxDMmjL9fkKZ4JfvCaNg-2Bys0zwPgn1fZOvnimj7qQPgls-2BFE6-2B5lNgqa6ubH5FQuQScBxeXRncgLx1el6VmKkrsx8CwJMsDYo1QdvvV1U7tkDk9vEy-2BEpH-2B-2BDs7y0BUutgYGzeZNK3L-2B5p4IRl2q-2Fds96PBYof6Iza0UehShNwZBUgBnCgrBJs2D8eidHnQw9B4gNCTAMX95itPs-2FhdD3ibREGfkU0WvmEqO-2B6aR7VniPP84QyRY1wFlZtD4YEsT9HTzA6TPgrAG8HiQZbLEKycscoYOl1Alrk-2BAIbW1T-2FIQa-2B2-2BGacg9tBNszXEPnQ4VJ9hFgYvamk4fr047D0vYGonXeLPdjKE-2Fr32SvZ98KaPiPYd3PV5DQAYLyujoYWhbMs1WDsg05e4-2BCQFmhaTtxUOUSgzCI0H2q-2FpCvNF-2FDBW8uzSk1ZjmFr7pvLCZgehH7uMQryCx30DMfVqgH4WWJeEMepIYaFLiAHouUzsePnUwcN8lQO6e07eBY3MZEmTXmQfrmtobpFjjqD5wgVvngxFPIHJMccdcSQK8qTAEMLqO5n1nTGGOnvchLJuqpB6CWZi1Q5kPhnV3WdJ1jairAGFHhadrWuN-2BFVUlAyBAtDyAjTQbEtCP-2BzmMkJfvOX7gdv0ElvRu3zKl11uKVOdRb69sUAvPgYEqjVh2ZTDN-2Ffot6W-2F7Vt1XmrU-2BcJU6TGCpSu-2Be2AYQLdIRhFuN9MvxXRET5OuHWdBBO79iG-2FKEq8rfeU-2Fixrg6-2Ba0UONX6zX0IH-2B3BwXI-2BI-2FPQ5WEr2iu9eyHXYoQKu-2B06glKnQYBi-2FtxI7JpewOjeeGU-2BjMgQBRkXBw4BIfXe816CsgPLOwQvz-2BdYCl3VAW4zocoXS-2BOANK6Cr06mswoUxSy1BKiWlvxO0cJyviRvPEJtc5jIKLddyBymMOokvQcUZswQWCUc03WUmBzGkTyGKn2xYw8m9Q82en00yWk9zUB47Uv7ijKzlrp7083t3-2B-2FnAZ0oSq1a1LfrHZr90VYaqorgJXRDiuhju1j-2BvQWgSjX2Tymc4xOTv-2B7GYwywbSm-2BVZrWx7ZLPEI9CKlTJ2NGMcSBv-2BtA7uk-2FnARbK0v5rJy-2FJpkdgOXXSKaLtLhMABoYMgdURFnIBP3S5ykqzX1mt2m4UDyiZQ0Xk-2Bca7aMj2cFDq-2FoonQ-2FhxjwG6nMIhLxeaaxP1F2S10fVKX7JdiMYcOyowt-2F6DbwN6LCEq2xf2iwVUGYriFY7GGfxrg9Dil0s-2FUqHEOiyTLLgXDvkbA2IwFPv6VGvPeBzdQ9klMs2fpxcADpkM21jYdFPVLZy13-2BdyYyhLhZagGhYVHIrXLXQUq-2FSS6hO2wsXItAithp-2BoB0Msq-2BEDQMaSaAyauZvE-2FfHY3weg-3D-3D

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1132	msedge.exe
1132	msedge.exe
3424	msedge.exe
3424	msedge.exe
2216	identity_helper.exe
2216	identity_helper.exe
5644	msedge.exe
5644	msedge.exe
5644	msedge.exe
5644	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3424 wrote to memory of 2420	3424	msedge.exe	84
PID 3424 wrote to memory of 2420	3424	msedge.exe	84
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 2608	3424	msedge.exe	85
PID 3424 wrote to memory of 1132	3424	msedge.exe	86
PID 3424 wrote to memory of 1132	3424	msedge.exe	86
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87
PID 3424 wrote to memory of 1020	3424	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://links.notification.intuit.com/ls/click?upn=u001.SkyGoo-2FemZT6Xc-2Fn1lGbnolA50y-2BF9TWqkK0lI1Lm8fNvXP5-2FxDdNExe3CY544wPZVOkx-2Bsb4ktfZUcbQ6XLB0umkYGUQHHILweKuKpYjdzhF0uPLuei0-2BVlMRjPRLAo1fCXOjfoFIpID1YHPjFt9X6YM6IErfqKEFBoo2pDesv3b1J6kPlpjElQuqu-2FVRouDnTCFSAej3YnsTJqAMSzBAVgxVv0vk98gmowvMrxtOvx10r9-2FdMZ10Xg71orxPeKfym7hmo-2F-2B8bdWu2rgTnSJg-3D-3DVaXj_16M6GKGeDmPkOzr09KdAzqmyxUJbZgaDi4h0RkPzCPHSbphs600vF4t7eTVtxwS81PfmMEj5-2B9tPYTYr1Ra0wbm5UiruOjcBoWIgXfGuGH9tYP7xbxDMmjL9fkKZ4JfvCaNg-2Bys0zwPgn1fZOvnimj7qQPgls-2BFE6-2B5lNgqa6ubH5FQuQScBxeXRncgLx1el6VmKkrsx8CwJMsDYo1QdvvV1U7tkDk9vEy-2BEpH-2B-2BDs7y0BUutgYGzeZNK3L-2B5p4IRl2q-2Fds96PBYof6Iza0UehShNwZBUgBnCgrBJs2D8eidHnQw9B4gNCTAMX95itPs-2FhdD3ibREGfkU0WvmEqO-2B6aR7VniPP84QyRY1wFlZtD4YEsT9HTzA6TPgrAG8HiQZbLEKycscoYOl1Alrk-2BAIbW1T-2FIQa-2B2-2BGacg9tBNszXEPnQ4VJ9hFgYvamk4fr047D0vYGonXeLPdjKE-2Fr32SvZ98KaPiPYd3PV5DQAYLyujoYWhbMs1WDsg05e4-2BCQFmhaTtxUOUSgzCI0H2q-2FpCvNF-2FDBW8uzSk1ZjmFr7pvLCZgehH7uMQryCx30DMfVqgH4WWJeEMepIYaFLiAHouUzsePnUwcN8lQO6e07eBY3MZEmTXmQfrmtobpFjjqD5wgVvngxFPIHJMccdcSQK8qTAEMLqO5n1nTGGOnvchLJuqpB6CWZi1Q5kPhnV3WdJ1jairAGFHhadrWuN-2BFVUlAyBAtDyAjTQbEtCP-2BzmMkJfvOX7gdv0ElvRu3zKl11uKVOdRb69sUAvPgYEqjVh2ZTDN-2Ffot6W-2F7Vt1XmrU-2BcJU6TGCpSu-2Be2AYQLdIRhFuN9MvxXRET5OuHWdBBO79iG-2FKEq8rfeU-2Fixrg6-2Ba0UONX6zX0IH-2B3BwXI-2BI-2FPQ5WEr2iu9eyHXYoQKu-2B06glKnQYBi-2FtxI7JpewOjeeGU-2BjMgQBRkXBw4BIfXe816CsgPLOwQvz-2BdYCl3VAW4zocoXS-2BOANK6Cr06mswoUxSy1BKiWlvxO0cJyviRvPEJtc5jIKLddyBymMOokvQcUZswQWCUc03WUmBzGkTyGKn2xYw8m9Q82en00yWk9zUB47Uv7ijKzlrp7083t3-2B-2FnAZ0oSq1a1LfrHZr90VYaqorgJXRDiuhju1j-2BvQWgSjX2Tymc4xOTv-2B7GYwywbSm-2BVZrWx7ZLPEI9CKlTJ2NGMcSBv-2BtA7uk-2FnARbK0v5rJy-2FJpkdgOXXSKaLtLhMABoYMgdURFnIBP3S5ykqzX1mt2m4UDyiZQ0Xk-2Bca7aMj2cFDq-2FoonQ-2FhxjwG6nMIhLxeaaxP1F2S10fVKX7JdiMYcOyowt-2F6DbwN6LCEq2xf2iwVUGYriFY7GGfxrg9Dil0s-2FUqHEOiyTLLgXDvkbA2IwFPv6VGvPeBzdQ9klMs2fpxcADpkM21jYdFPVLZy13-2BdyYyhLhZagGhYVHIrXLXQUq-2FSS6hO2wsXItAithp-2BoB0Msq-2BEDQMaSaAyauZvE-2FfHY3weg-3D-3D
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa0a3d46f8,0x7ffa0a3d4708,0x7ffa0a3d4718
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4112 /prefetch:1
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --lang=en-US --extension-process --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --lang=en-US --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=5276 /prefetch:6
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,12244259781003756187,12377361901667727485,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4120 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5644

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3512

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1724

Network

DNS

8.8.8.8.in-addr.arpa

Remote address:

8.8.8.8:53

Request

8.8.8.8.in-addr.arpa

IN PTR

Response

8.8.8.8.in-addr.arpa

IN PTR

dnsgoogle
DNS

196.249.167.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

196.249.167.52.in-addr.arpa

IN PTR

Response
DNS

links.notification.intuit.com

msedge.exe

Remote address:

8.8.8.8:53

Request

links.notification.intuit.com

IN A

Response

links.notification.intuit.com

IN CNAME

sendgrid.net

sendgrid.net

IN A

167.89.115.56

sendgrid.net

IN A

167.89.115.120

sendgrid.net

IN A

167.89.118.109

sendgrid.net

IN A

167.89.118.83

sendgrid.net

IN A

167.89.115.61

sendgrid.net

IN A

167.89.115.28

sendgrid.net

IN A

167.89.118.52

sendgrid.net

IN A

167.89.118.95

sendgrid.net

IN A

167.89.115.150

sendgrid.net

IN A

167.89.115.52

sendgrid.net

IN A

167.89.118.120

sendgrid.net

IN A

167.89.118.128
GET

http://links.notification.intuit.com/ls/click?upn=u001.SkyGoo-2FemZT6Xc-2Fn1lGbnolA50y-2BF9TWqkK0lI1Lm8fNvXP5-2FxDdNExe3CY544wPZVOkx-2Bsb4ktfZUcbQ6XLB0umkYGUQHHILweKuKpYjdzhF0uPLuei0-2BVlMRjPRLAo1fCXOjfoFIpID1YHPjFt9X6YM6IErfqKEFBoo2pDesv3b1J6kPlpjElQuqu-2FVRouDnTCFSAej3YnsTJqAMSzBAVgxVv0vk98gmowvMrxtOvx10r9-2FdMZ10Xg71orxPeKfym7hmo-2F-2B8bdWu2rgTnSJg-3D-3DVaXj_16M6GKGeDmPkOzr09KdAzqmyxUJbZgaDi4h0RkPzCPHSbphs600vF4t7eTVtxwS81PfmMEj5-2B9tPYTYr1Ra0wbm5UiruOjcBoWIgXfGuGH9tYP7xbxDMmjL9fkKZ4JfvCaNg-2Bys0zwPgn1fZOvnimj7qQPgls-2BFE6-2B5lNgqa6ubH5FQuQScBxeXRncgLx1el6VmKkrsx8CwJMsDYo1QdvvV1U7tkDk9vEy-2BEpH-2B-2BDs7y0BUutgYGzeZNK3L-2B5p4IRl2q-2Fds96PBYof6Iza0UehShNwZBUgBnCgrBJs2D8eidHnQw9B4gNCTAMX95itPs-2FhdD3ibREGfkU0WvmEqO-2B6aR7VniPP84QyRY1wFlZtD4YEsT9HTzA6TPgrAG8HiQZbLEKycscoYOl1Alrk-2BAIbW1T-2FIQa-2B2-2BGacg9tBNszXEPnQ4VJ9hFgYvamk4fr047D0vYGonXeLPdjKE-2Fr32SvZ98KaPiPYd3PV5DQAYLyujoYWhbMs1WDsg05e4-2BCQFmhaTtxUOUSgzCI0H2q-2FpCvNF-2FDBW8uzSk1ZjmFr7pvLCZgehH7uMQryCx30DMfVqgH4WWJeEMepIYaFLiAHouUzsePnUwcN8lQO6e07eBY3MZEmTXmQfrmtobpFjjqD5wgVvngxFPIHJMccdcSQK8qTAEMLqO5n1nTGGOnvchLJuqpB6CWZi1Q5kPhnV3WdJ1jairAGFHhadrWuN-2BFVUlAyBAtDyAjTQbEtCP-2BzmMkJfvOX7gdv0ElvRu3zKl11uKVOdRb69sUAvPgYEqjVh2ZTDN-2Ffot6W-2F7Vt1XmrU-2BcJU6TGCpSu-2Be2AYQLdIRhFuN9MvxXRET5OuHWdBBO79iG-2FKEq8rfeU-2Fixrg6-2Ba0UONX6zX0IH-2B3BwXI-2BI-2FPQ5WEr2iu9eyHXYoQKu-2B06glKnQYBi-2FtxI7JpewOjeeGU-2BjMgQBRkXBw4BIfXe816CsgPLOwQvz-2BdYCl3VAW4zocoXS-2BOANK6Cr06mswoUxSy1BKiWlvxO0cJyviRvPEJtc5jIKLddyBymMOokvQcUZswQWCUc03WUmBzGkTyGKn2xYw8m9Q82en00yWk9zUB47Uv7ijKzlrp7083t3-2B-2FnAZ0oSq1a1LfrHZr90VYaqorgJXRDiuhju1j-2BvQWgSjX2Tymc4xOTv-2B7GYwywbSm-2BVZrWx7ZLPEI9CKlTJ2NGMcSBv-2BtA7uk-2FnARbK0v5rJy-2FJpkdgOXXSKaLtLhMABoYMgdURFnIBP3S5ykqzX1mt2m4UDyiZQ0Xk-2Bca7aMj2cFDq-2FoonQ-2FhxjwG6nMIhLxeaaxP1F2S10fVKX7JdiMYcOyowt-2F6DbwN6LCEq2xf2iwVUGYriFY7GGfxrg9Dil0s-2FUqHEOiyTLLgXDvkbA2IwFPv6VGvPeBzdQ9klMs2fpxcADpkM21jYdFPVLZy13-2BdyYyhLhZagGhYVHIrXLXQUq-2FSS6hO2wsXItAithp-2BoB0Msq-2BEDQMaSaAyauZvE-2FfHY3weg-3D-3D

msedge.exe

Remote address:

167.89.115.56:80

Request

GET /ls/click?upn=u001.SkyGoo-2FemZT6Xc-2Fn1lGbnolA50y-2BF9TWqkK0lI1Lm8fNvXP5-2FxDdNExe3CY544wPZVOkx-2Bsb4ktfZUcbQ6XLB0umkYGUQHHILweKuKpYjdzhF0uPLuei0-2BVlMRjPRLAo1fCXOjfoFIpID1YHPjFt9X6YM6IErfqKEFBoo2pDesv3b1J6kPlpjElQuqu-2FVRouDnTCFSAej3YnsTJqAMSzBAVgxVv0vk98gmowvMrxtOvx10r9-2FdMZ10Xg71orxPeKfym7hmo-2F-2B8bdWu2rgTnSJg-3D-3DVaXj_16M6GKGeDmPkOzr09KdAzqmyxUJbZgaDi4h0RkPzCPHSbphs600vF4t7eTVtxwS81PfmMEj5-2B9tPYTYr1Ra0wbm5UiruOjcBoWIgXfGuGH9tYP7xbxDMmjL9fkKZ4JfvCaNg-2Bys0zwPgn1fZOvnimj7qQPgls-2BFE6-2B5lNgqa6ubH5FQuQScBxeXRncgLx1el6VmKkrsx8CwJMsDYo1QdvvV1U7tkDk9vEy-2BEpH-2B-2BDs7y0BUutgYGzeZNK3L-2B5p4IRl2q-2Fds96PBYof6Iza0UehShNwZBUgBnCgrBJs2D8eidHnQw9B4gNCTAMX95itPs-2FhdD3ibREGfkU0WvmEqO-2B6aR7VniPP84QyRY1wFlZtD4YEsT9HTzA6TPgrAG8HiQZbLEKycscoYOl1Alrk-2BAIbW1T-2FIQa-2B2-2BGacg9tBNszXEPnQ4VJ9hFgYvamk4fr047D0vYGonXeLPdjKE-2Fr32SvZ98KaPiPYd3PV5DQAYLyujoYWhbMs1WDsg05e4-2BCQFmhaTtxUOUSgzCI0H2q-2FpCvNF-2FDBW8uzSk1ZjmFr7pvLCZgehH7uMQryCx30DMfVqgH4WWJeEMepIYaFLiAHouUzsePnUwcN8lQO6e07eBY3MZEmTXmQfrmtobpFjjqD5wgVvngxFPIHJMccdcSQK8qTAEMLqO5n1nTGGOnvchLJuqpB6CWZi1Q5kPhnV3WdJ1jairAGFHhadrWuN-2BFVUlAyBAtDyAjTQbEtCP-2BzmMkJfvOX7gdv0ElvRu3zKl11uKVOdRb69sUAvPgYEqjVh2ZTDN-2Ffot6W-2F7Vt1XmrU-2BcJU6TGCpSu-2Be2AYQLdIRhFuN9MvxXRET5OuHWdBBO79iG-2FKEq8rfeU-2Fixrg6-2Ba0UONX6zX0IH-2B3BwXI-2BI-2FPQ5WEr2iu9eyHXYoQKu-2B06glKnQYBi-2FtxI7JpewOjeeGU-2BjMgQBRkXBw4BIfXe816CsgPLOwQvz-2BdYCl3VAW4zocoXS-2BOANK6Cr06mswoUxSy1BKiWlvxO0cJyviRvPEJtc5jIKLddyBymMOokvQcUZswQWCUc03WUmBzGkTyGKn2xYw8m9Q82en00yWk9zUB47Uv7ijKzlrp7083t3-2B-2FnAZ0oSq1a1LfrHZr90VYaqorgJXRDiuhju1j-2BvQWgSjX2Tymc4xOTv-2B7GYwywbSm-2BVZrWx7ZLPEI9CKlTJ2NGMcSBv-2BtA7uk-2FnARbK0v5rJy-2FJpkdgOXXSKaLtLhMABoYMgdURFnIBP3S5ykqzX1mt2m4UDyiZQ0Xk-2Bca7aMj2cFDq-2FoonQ-2FhxjwG6nMIhLxeaaxP1F2S10fVKX7JdiMYcOyowt-2F6DbwN6LCEq2xf2iwVUGYriFY7GGfxrg9Dil0s-2FUqHEOiyTLLgXDvkbA2IwFPv6VGvPeBzdQ9klMs2fpxcADpkM21jYdFPVLZy13-2BdyYyhLhZagGhYVHIrXLXQUq-2FSS6hO2wsXItAithp-2BoB0Msq-2BEDQMaSaAyauZvE-2FfHY3weg-3D-3D HTTP/1.1
Host: links.notification.intuit.com
Connection: keep-alive
DNT: 1
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 302 Found

Server: nginx
Date: Tue, 13 Aug 2024 15:21:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 221
Connection: keep-alive
Location: https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US
X-Robots-Tag: noindex, nofollow
DNS

connect.intuit.com

msedge.exe

Remote address:

8.8.8.8:53

Request

connect.intuit.com

IN A

Response

connect.intuit.com

IN CNAME

gtm.icn.a.intuit.com

gtm.icn.a.intuit.com

IN CNAME

cpclient.api.intuit.com

cpclient.api.intuit.com

IN CNAME

cpclient.prd.api.a.intuit.com

cpclient.prd.api.a.intuit.com

IN CNAME

cpclient-us-west-2.prd.api.a.intuit.com

cpclient-us-west-2.prd.api.a.intuit.com

IN CNAME

sw4_us-west-2_web.prd.api.a.intuit.com

sw4_us-west-2_web.prd.api.a.intuit.com

IN CNAME

prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com

prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com

IN A

54.70.16.125

prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com

IN A

52.42.222.96

prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com

IN A

35.82.127.17

prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com

IN A

52.25.47.190

prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com

IN A

54.148.192.65

prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com

IN A

35.164.2.132

prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com

IN A

34.211.66.164

prd-sb04.apigwsbgprdusw2.iks2.a.intuit.com

IN A

54.68.216.87
GET

https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US

msedge.exe

Remote address:

54.70.16.125:443

Request

GET /portal/app/CommerceNetwork/view/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US HTTP/2.0
host: connect.intuit.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

date: Tue, 13 Aug 2024 15:21:58 GMT
content-type: text/html;charset=utf-8
content-length: 328
x-spanid: 0482e3a9-d7e3-d87c-106e-0d6b50a8cb67
x-amzn-trace-id: Root=1-66bb7a16-5c4c64ef2e6c993d0d157e99
x-content-type-options: nosniff
set-cookie: AWSALB=Shu/+lqz08YHgtuWD9Iy8FbzvNbEzySjvI4yb9WBaQNq+HfTK+0jD1UakG/SgnW97GLmnGQWbMwVNfiHektj2URX9TimyDat33mgZ5qmMyRBZrfhYrwirswGALv0; Expires=Tue, 20 Aug 2024 15:21:58 GMT; Path=/
set-cookie: AWSALBCORS=Shu/+lqz08YHgtuWD9Iy8FbzvNbEzySjvI4yb9WBaQNq+HfTK+0jD1UakG/SgnW97GLmnGQWbMwVNfiHektj2URX9TimyDat33mgZ5qmMyRBZrfhYrwirswGALv0; Expires=Tue, 20 Aug 2024 15:21:58 GMT; Path=/; SameSite=None; Secure
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate
cache-control: no-store
location: /t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US
vary: Accept, Accept-Encoding
x-envoy-upstream-service-time: 6
strict-transport-security: max-age=31536000
intuit_tid: 1-66bb7a16-5c4c64ef2e6c993d0d157e99
x-request-id: 1-66bb7a16-5c4c64ef2e6c993d0d157e99
server: istio-envoy
GET

https://connect.intuit.com/t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US

msedge.exe

Remote address:

54.70.16.125:443

Request

GET /t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US HTTP/2.0
host: connect.intuit.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=Shu/+lqz08YHgtuWD9Iy8FbzvNbEzySjvI4yb9WBaQNq+HfTK+0jD1UakG/SgnW97GLmnGQWbMwVNfiHektj2URX9TimyDat33mgZ5qmMyRBZrfhYrwirswGALv0
cookie: AWSALBCORS=Shu/+lqz08YHgtuWD9Iy8FbzvNbEzySjvI4yb9WBaQNq+HfTK+0jD1UakG/SgnW97GLmnGQWbMwVNfiHektj2URX9TimyDat33mgZ5qmMyRBZrfhYrwirswGALv0

Response

HTTP/2.0 200

date: Tue, 13 Aug 2024 15:21:59 GMT
content-type: text/html;charset=utf-8
x-spanid: 357908b2-e131-075b-552c-d3ce8f2bd40d
x-amzn-trace-id: Root=1-66bb7a16-73619dd903e96c14244de2e0
x-content-type-options: nosniff
set-cookie: AWSALB=HtYwDgqOEZTX6u2eXK6SYAhGNUwiprPU8pM69jzyVuyYokRrFJew/XXSTYbXZaxXZYe3hwOjkvWTuqurqGklGSOodQ5YmkumMg12IvvuQ8eSkNf8E5xzVv0BaBQi; Expires=Tue, 20 Aug 2024 15:21:58 GMT; Path=/
set-cookie: AWSALBCORS=HtYwDgqOEZTX6u2eXK6SYAhGNUwiprPU8pM69jzyVuyYokRrFJew/XXSTYbXZaxXZYe3hwOjkvWTuqurqGklGSOodQ5YmkumMg12IvvuQ8eSkNf8E5xzVv0BaBQi; Expires=Tue, 20 Aug 2024 15:21:58 GMT; Path=/; SameSite=None; Secure
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate
cache-control: no-store
set-cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34; Domain=.intuit.com; Path=/; Expires=Mon, 13 Aug 2029 15:21:59 GMT; Secure
etag: W/"1d85b-6k/EDoGXlBGfM7Tok2M9Cborynw"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 1206
strict-transport-security: max-age=31536000
intuit_tid: 1-66bb7a16-73619dd903e96c14244de2e0
x-request-id: 1-66bb7a16-73619dd903e96c14244de2e0
server: istio-envoy
GET

https://connect.intuit.com/portal/rest/pdf/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f/invoice.pdf

msedge.exe

Remote address:

54.70.16.125:443

Request

GET /portal/rest/pdf/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f/invoice.pdf HTTP/2.0
host: connect.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
intuit-realmid: 9341452893796309
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLThjNmExMWIyNzhkNTQxOWZhY2JkZDgyOThkYjY3ODQwMWQ0N2FlNzYwYjM5NDExY2FkMzNkNjZhODJhZDYyY2VkZDRjNDBjM2FkYzk0Nzg1ODNmMGM0MjUzM2IxYjI5ZiIsInJlYWxtSWQiOiI5MzQxNDUyODkzNzk2MzA5In0sImlhdCI6MTcyMzU2MjUxOCwiZXhwIjoxNzIzNTkxMzE4fQ.JKgQFDk9tMk7uBoC0Fm7Ighke93_JA3eaYttp3l8DOQ
accept: application/pdf
intuit_tid: cp-c4008-53cf-4ac3-aad5-919c054072a8
baggage: sentry-environment=production,sentry-release=1.27.1-release_1.27.1-7499608,sentry-transaction=%2F,sentry-public_key=ebe3b2c7c21247ebaee17c5bf4ca67c3,sentry-trace_id=5121471ddc444eb6a8cc3aad0fa2c77e,sentry-replay_id=abda3ea0f623487ab64174dd24f5c506
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
sentry-trace: 5121471ddc444eb6a8cc3aad0fa2c77e-baccc0fdbd07e2b2-0
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=HtYwDgqOEZTX6u2eXK6SYAhGNUwiprPU8pM69jzyVuyYokRrFJew/XXSTYbXZaxXZYe3hwOjkvWTuqurqGklGSOodQ5YmkumMg12IvvuQ8eSkNf8E5xzVv0BaBQi
cookie: AWSALBCORS=HtYwDgqOEZTX6u2eXK6SYAhGNUwiprPU8pM69jzyVuyYokRrFJew/XXSTYbXZaxXZYe3hwOjkvWTuqurqGklGSOodQ5YmkumMg12IvvuQ8eSkNf8E5xzVv0BaBQi
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34
cookie: ajs_anonymous_id=4c20acf5-4315-4f26-a280-808aaa69c01a

Response

HTTP/2.0 200

date: Tue, 13 Aug 2024 15:22:01 GMT
content-type: text/plain;charset=utf-8
content-length: 2
x-spanid: 5c2ba265-7c5c-ec08-4fa2-5609f758f173
x-amzn-trace-id: Root=1-66bb7a19-3b7de50c6a49629464c3894e
x-content-type-options: nosniff
set-cookie: AWSALB=Go40AGcRCNdkgcnvpZjH+n63WnVKahg2zDFf8Y3P2LjDwPr0VTvlAY0PboHEyOUvj7wI9NNUm7q/tJYSA3zGnR8SemyQxO+yYaa2dWDKl5usqmS5bkfNdpF8cu9Q; Expires=Tue, 20 Aug 2024 15:22:01 GMT; Path=/
set-cookie: AWSALBCORS=Go40AGcRCNdkgcnvpZjH+n63WnVKahg2zDFf8Y3P2LjDwPr0VTvlAY0PboHEyOUvj7wI9NNUm7q/tJYSA3zGnR8SemyQxO+yYaa2dWDKl5usqmS5bkfNdpF8cu9Q; Expires=Tue, 20 Aug 2024 15:22:01 GMT; Path=/; SameSite=None; Secure
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate
cache-control: no-store
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
x-envoy-upstream-service-time: 41
strict-transport-security: max-age=31536000
intuit_tid: cp-cf04f-74c6-4a40-a298-e588f515a9aa
x-request-id: cp-cf04f-74c6-4a40-a298-e588f515a9aa
server: istio-envoy
POST

https://connect.intuit.com/portal/rest/experiments

msedge.exe

Remote address:

54.70.16.125:443

Request

POST /portal/rest/experiments HTTP/2.0
host: connect.intuit.com
content-length: 284
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
intuit-realmid: 9341452893796309
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLThjNmExMWIyNzhkNTQxOWZhY2JkZDgyOThkYjY3ODQwMWQ0N2FlNzYwYjM5NDExY2FkMzNkNjZhODJhZDYyY2VkZDRjNDBjM2FkYzk0Nzg1ODNmMGM0MjUzM2IxYjI5ZiIsInJlYWxtSWQiOiI5MzQxNDUyODkzNzk2MzA5In0sImlhdCI6MTcyMzU2MjUxOCwiZXhwIjoxNzIzNTkxMzE4fQ.JKgQFDk9tMk7uBoC0Fm7Ighke93_JA3eaYttp3l8DOQ
content-type: application/json
accept: application/json, text/javascript, */*; q=0.01
intuit-domainid: INVOICE:9341452893796309_1
intuit-acstoken: scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f
intuit_tid: cp-c6433-31df-43e9-9a53-97a40ef893fe
user-signed-in: false
baggage: sentry-environment=production,sentry-release=1.27.1-release_1.27.1-7499608,sentry-transaction=%2F,sentry-public_key=ebe3b2c7c21247ebaee17c5bf4ca67c3,sentry-trace_id=5121471ddc444eb6a8cc3aad0fa2c77e,sentry-replay_id=abda3ea0f623487ab64174dd24f5c506
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
sentry-trace: 5121471ddc444eb6a8cc3aad0fa2c77e-bf2b8d083f2dd707-0
ssr-session-id: cd0f5048-ca33-40fa-905f-705c6d6ccbbf
origin: https://connect.intuit.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=HtYwDgqOEZTX6u2eXK6SYAhGNUwiprPU8pM69jzyVuyYokRrFJew/XXSTYbXZaxXZYe3hwOjkvWTuqurqGklGSOodQ5YmkumMg12IvvuQ8eSkNf8E5xzVv0BaBQi
cookie: AWSALBCORS=HtYwDgqOEZTX6u2eXK6SYAhGNUwiprPU8pM69jzyVuyYokRrFJew/XXSTYbXZaxXZYe3hwOjkvWTuqurqGklGSOodQ5YmkumMg12IvvuQ8eSkNf8E5xzVv0BaBQi
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34
cookie: ajs_anonymous_id=4c20acf5-4315-4f26-a280-808aaa69c01a

Response

HTTP/2.0 200

date: Tue, 13 Aug 2024 15:22:01 GMT
x-spanid: 6fbddfb5-e8d5-8d1b-a6f3-3f999f9e9e3a
x-amzn-trace-id: Root=1-66bb7a19-5c731a911c4d47f038d7b864
set-cookie: AWSALB=8Em12kPlU7B/LMVL5ehW1f5yCVEv5Usw58IspBI/CDs1zC+wp2s2D8vktMov8cYvcBMkIWVAchwHQ55pzHCmGPI+1kN+ExY1wwHcQ6FBwle458kZxLsw2PtHcdBU; Expires=Tue, 20 Aug 2024 15:22:01 GMT; Path=/
set-cookie: AWSALBCORS=8Em12kPlU7B/LMVL5ehW1f5yCVEv5Usw58IspBI/CDs1zC+wp2s2D8vktMov8cYvcBMkIWVAchwHQ55pzHCmGPI+1kN+ExY1wwHcQ6FBwle458kZxLsw2PtHcdBU; Expires=Tue, 20 Aug 2024 15:22:01 GMT; Path=/; SameSite=None; Secure
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate
cache-control: no-store
x-envoy-upstream-service-time: 137
strict-transport-security: max-age=31536000
intuit_tid: cp-c1361-7f45-4e03-bfa0-bfc57629ea18
x-request-id: cp-c1361-7f45-4e03-bfa0-bfc57629ea18
server: istio-envoy
POST

https://connect.intuit.com/portal/rest/invoice/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f/view

msedge.exe

Remote address:

54.70.16.125:443

Request

POST /portal/rest/invoice/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f/view HTTP/2.0
host: connect.intuit.com
content-length: 67
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
intuit-realmid: 9341452893796309
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLThjNmExMWIyNzhkNTQxOWZhY2JkZDgyOThkYjY3ODQwMWQ0N2FlNzYwYjM5NDExY2FkMzNkNjZhODJhZDYyY2VkZDRjNDBjM2FkYzk0Nzg1ODNmMGM0MjUzM2IxYjI5ZiIsInJlYWxtSWQiOiI5MzQxNDUyODkzNzk2MzA5In0sImlhdCI6MTcyMzU2MjUxOCwiZXhwIjoxNzIzNTkxMzE4fQ.JKgQFDk9tMk7uBoC0Fm7Ighke93_JA3eaYttp3l8DOQ
content-type: application/json
accept: application/json, text/javascript, */*; q=0.01
intuit-domainid: INVOICE:9341452893796309_1
intuit-acstoken: scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f
intuit_tid: cp-c1361-7f45-4e03-bfa0-bfc57629ea18
baggage: sentry-environment=production,sentry-release=1.27.1-release_1.27.1-7499608,sentry-transaction=%2F,sentry-public_key=ebe3b2c7c21247ebaee17c5bf4ca67c3,sentry-trace_id=5121471ddc444eb6a8cc3aad0fa2c77e,sentry-replay_id=abda3ea0f623487ab64174dd24f5c506
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
sentry-trace: 5121471ddc444eb6a8cc3aad0fa2c77e-a140a2cb363d0ed4-0
origin: https://connect.intuit.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=HtYwDgqOEZTX6u2eXK6SYAhGNUwiprPU8pM69jzyVuyYokRrFJew/XXSTYbXZaxXZYe3hwOjkvWTuqurqGklGSOodQ5YmkumMg12IvvuQ8eSkNf8E5xzVv0BaBQi
cookie: AWSALBCORS=HtYwDgqOEZTX6u2eXK6SYAhGNUwiprPU8pM69jzyVuyYokRrFJew/XXSTYbXZaxXZYe3hwOjkvWTuqurqGklGSOodQ5YmkumMg12IvvuQ8eSkNf8E5xzVv0BaBQi
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34
cookie: ajs_anonymous_id=4c20acf5-4315-4f26-a280-808aaa69c01a

Response

HTTP/2.0 201

date: Tue, 13 Aug 2024 15:22:01 GMT
content-type: application/json;charset=utf-8
content-length: 36
x-spanid: 85c43fe7-d277-af06-cad8-bd46a49d2822
x-amzn-trace-id: Root=1-66bb7a19-165920c1516c46b320d6f2d3
x-content-type-options: nosniff
set-cookie: AWSALB=Yzfo4RTPINJdW99lxHz26xmyE+Ul2mMagLh3EcboM8Wb2wOcM6pDiw+yUTKYBbtDAVGY/JX9kuEvfozAIt1a79G4tN6ngGQpMzSulh/uh2hTyLdoXLxTYKCzuqo5; Expires=Tue, 20 Aug 2024 15:22:01 GMT; Path=/
set-cookie: AWSALBCORS=Yzfo4RTPINJdW99lxHz26xmyE+Ul2mMagLh3EcboM8Wb2wOcM6pDiw+yUTKYBbtDAVGY/JX9kuEvfozAIt1a79G4tN6ngGQpMzSulh/uh2hTyLdoXLxTYKCzuqo5; Expires=Tue, 20 Aug 2024 15:22:01 GMT; Path=/; SameSite=None; Secure
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate
cache-control: no-store
etag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI"
vary: Accept-Encoding
x-envoy-upstream-service-time: 103
strict-transport-security: max-age=31536000
intuit_tid: cp-c5c79-43f7-43d7-b019-c6cdb722ef61
x-request-id: cp-c5c79-43f7-43d7-b019-c6cdb722ef61
server: istio-envoy
POST

https://connect.intuit.com/portal/rest/reporting/prometheus/view

msedge.exe

Remote address:

54.70.16.125:443

Request

POST /portal/rest/reporting/prometheus/view HTTP/2.0
host: connect.intuit.com
content-length: 84
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
intuit-realmid: 9341452893796309
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLThjNmExMWIyNzhkNTQxOWZhY2JkZDgyOThkYjY3ODQwMWQ0N2FlNzYwYjM5NDExY2FkMzNkNjZhODJhZDYyY2VkZDRjNDBjM2FkYzk0Nzg1ODNmMGM0MjUzM2IxYjI5ZiIsInJlYWxtSWQiOiI5MzQxNDUyODkzNzk2MzA5In0sImlhdCI6MTcyMzU2MjUxOCwiZXhwIjoxNzIzNTkxMzE4fQ.JKgQFDk9tMk7uBoC0Fm7Ighke93_JA3eaYttp3l8DOQ
content-type: application/json
accept: application/json, text/javascript, */*; q=0.01
intuit-domainid: INVOICE:9341452893796309_1
intuit-acstoken: scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f
intuit_tid: cp-cf04f-74c6-4a40-a298-e588f515a9aa
user-signed-in: false
baggage: sentry-environment=production,sentry-release=1.27.1-release_1.27.1-7499608,sentry-transaction=%2F,sentry-public_key=ebe3b2c7c21247ebaee17c5bf4ca67c3,sentry-trace_id=5121471ddc444eb6a8cc3aad0fa2c77e,sentry-replay_id=abda3ea0f623487ab64174dd24f5c506
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
sentry-trace: 5121471ddc444eb6a8cc3aad0fa2c77e-8d0718f790e751eb-0
ssr-session-id: cd0f5048-ca33-40fa-905f-705c6d6ccbbf
origin: https://connect.intuit.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AWSALB=HtYwDgqOEZTX6u2eXK6SYAhGNUwiprPU8pM69jzyVuyYokRrFJew/XXSTYbXZaxXZYe3hwOjkvWTuqurqGklGSOodQ5YmkumMg12IvvuQ8eSkNf8E5xzVv0BaBQi
cookie: AWSALBCORS=HtYwDgqOEZTX6u2eXK6SYAhGNUwiprPU8pM69jzyVuyYokRrFJew/XXSTYbXZaxXZYe3hwOjkvWTuqurqGklGSOodQ5YmkumMg12IvvuQ8eSkNf8E5xzVv0BaBQi
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34
cookie: ajs_anonymous_id=4c20acf5-4315-4f26-a280-808aaa69c01a

Response

HTTP/2.0 200

date: Tue, 13 Aug 2024 15:22:02 GMT
content-type: application/json;charset=utf-8
content-length: 428
x-spanid: bef75403-caab-c38b-ca20-091c9708a2b1
x-amzn-trace-id: Root=1-66bb7a19-4f55abbe590030e23a3a03e5
x-content-type-options: nosniff
set-cookie: AWSALB=ATp7dCVgsEcJ368RIIWaZGeN8LeGWooS7n+MhZvNzSNrjAwgp/HfLEE2W7qz0R7l4taeJjv6DxGGt9gHWZrtk2Yn30xgdrtZ5QbM3nTLTYo/Q6kjMLuFLFvda7L1; Expires=Tue, 20 Aug 2024 15:22:01 GMT; Path=/
set-cookie: AWSALBCORS=ATp7dCVgsEcJ368RIIWaZGeN8LeGWooS7n+MhZvNzSNrjAwgp/HfLEE2W7qz0R7l4taeJjv6DxGGt9gHWZrtk2Yn30xgdrtZ5QbM3nTLTYo/Q6kjMLuFLFvda7L1; Expires=Tue, 20 Aug 2024 15:22:01 GMT; Path=/; SameSite=None; Secure
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate
cache-control: no-store
etag: W/"1ac-/YCSWt0YmsofVc5YgRKV3tgu1KQ"
vary: Accept-Encoding
x-envoy-upstream-service-time: 595
strict-transport-security: max-age=31536000
intuit_tid: cp-c6433-31df-43e9-9a53-97a40ef893fe
x-request-id: cp-c6433-31df-43e9-9a53-97a40ef893fe
server: istio-envoy
POST

https://connect.intuit.com/portal/rest/reporting/batch

msedge.exe

Remote address:

54.70.16.125:443

Request

POST /portal/rest/reporting/batch HTTP/2.0
host: connect.intuit.com
content-length: 8258
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
intuit_tid: cp-c5c79-43f7-43d7-b019-c6cdb722ef61
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLThjNmExMWIyNzhkNTQxOWZhY2JkZDgyOThkYjY3ODQwMWQ0N2FlNzYwYjM5NDExY2FkMzNkNjZhODJhZDYyY2VkZDRjNDBjM2FkYzk0Nzg1ODNmMGM0MjUzM2IxYjI5ZiIsInJlYWxtSWQiOiI5MzQxNDUyODkzNzk2MzA5In0sImlhdCI6MTcyMzU2MjUxOCwiZXhwIjoxNzIzNTkxMzE4fQ.JKgQFDk9tMk7uBoC0Fm7Ighke93_JA3eaYttp3l8DOQ
content-type: application/json
intuit-realmid: 9341452893796309
accept: application/json, text/plain, */*
intuit-acstoken: scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
user-signed-in: false
baggage: sentry-environment=production,sentry-release=1.27.1-release_1.27.1-7499608,sentry-transaction=%2F,sentry-public_key=ebe3b2c7c21247ebaee17c5bf4ca67c3,sentry-trace_id=5121471ddc444eb6a8cc3aad0fa2c77e,sentry-replay_id=abda3ea0f623487ab64174dd24f5c506
sentry-trace: 5121471ddc444eb6a8cc3aad0fa2c77e-9382419aff2962c9-0
intuit-domainid: INVOICE:9341452893796309_1
ssr-session-id: cd0f5048-ca33-40fa-905f-705c6d6ccbbf
origin: https://connect.intuit.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34
cookie: ajs_anonymous_id=4c20acf5-4315-4f26-a280-808aaa69c01a
cookie: AWSALB=Go40AGcRCNdkgcnvpZjH+n63WnVKahg2zDFf8Y3P2LjDwPr0VTvlAY0PboHEyOUvj7wI9NNUm7q/tJYSA3zGnR8SemyQxO+yYaa2dWDKl5usqmS5bkfNdpF8cu9Q
cookie: AWSALBCORS=Go40AGcRCNdkgcnvpZjH+n63WnVKahg2zDFf8Y3P2LjDwPr0VTvlAY0PboHEyOUvj7wI9NNUm7q/tJYSA3zGnR8SemyQxO+yYaa2dWDKl5usqmS5bkfNdpF8cu9Q

Response

HTTP/2.0 201

date: Tue, 13 Aug 2024 15:22:02 GMT
content-type: application/json;charset=utf-8
content-length: 36
x-spanid: 42f9b961-fbf6-1c48-dbd3-f16a1b499d38
x-amzn-trace-id: Root=1-66bb7a1a-4a604b050c6d5c6f4eaa5091
x-content-type-options: nosniff
set-cookie: AWSALB=I5mm4eWTUPtkuwGtfFfPfyQCNNAJIsZGn2CKMlqwkdeQDNi1dHgAYRGJFP5MOvL2NjVw+16YV8g5T5teNoZwt9CnG2iQTh6MTrOkQXBX11jDqDULgGQ3St47Yn0i; Expires=Tue, 20 Aug 2024 15:22:02 GMT; Path=/
set-cookie: AWSALBCORS=I5mm4eWTUPtkuwGtfFfPfyQCNNAJIsZGn2CKMlqwkdeQDNi1dHgAYRGJFP5MOvL2NjVw+16YV8g5T5teNoZwt9CnG2iQTh6MTrOkQXBX11jDqDULgGQ3St47Yn0i; Expires=Tue, 20 Aug 2024 15:22:02 GMT; Path=/; SameSite=None; Secure
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate
cache-control: no-store
etag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI"
vary: Accept-Encoding
x-envoy-upstream-service-time: 30
strict-transport-security: max-age=31536000
intuit_tid: cp-ca4f1-6345-4b82-bc98-c49ebc3ea492
x-request-id: cp-ca4f1-6345-4b82-bc98-c49ebc3ea492
server: istio-envoy
POST

https://connect.intuit.com/portal/rest/reporting/batch

msedge.exe

Remote address:

54.70.16.125:443

Request

POST /portal/rest/reporting/batch HTTP/2.0
host: connect.intuit.com
content-length: 2314
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
intuit_tid: cp-ca4f1-6345-4b82-bc98-c49ebc3ea492
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLThjNmExMWIyNzhkNTQxOWZhY2JkZDgyOThkYjY3ODQwMWQ0N2FlNzYwYjM5NDExY2FkMzNkNjZhODJhZDYyY2VkZDRjNDBjM2FkYzk0Nzg1ODNmMGM0MjUzM2IxYjI5ZiIsInJlYWxtSWQiOiI5MzQxNDUyODkzNzk2MzA5In0sImlhdCI6MTcyMzU2MjUxOCwiZXhwIjoxNzIzNTkxMzE4fQ.JKgQFDk9tMk7uBoC0Fm7Ighke93_JA3eaYttp3l8DOQ
content-type: application/json
intuit-realmid: 9341452893796309
accept: application/json, text/plain, */*
intuit-acstoken: scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
user-signed-in: false
baggage: sentry-environment=production,sentry-release=1.27.1-release_1.27.1-7499608,sentry-transaction=%2F,sentry-public_key=ebe3b2c7c21247ebaee17c5bf4ca67c3,sentry-trace_id=5121471ddc444eb6a8cc3aad0fa2c77e,sentry-replay_id=abda3ea0f623487ab64174dd24f5c506
sentry-trace: 5121471ddc444eb6a8cc3aad0fa2c77e-a72a0b2b4b424db5-0
intuit-domainid: INVOICE:9341452893796309_1
ssr-session-id: cd0f5048-ca33-40fa-905f-705c6d6ccbbf
origin: https://connect.intuit.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34
cookie: ajs_anonymous_id=4c20acf5-4315-4f26-a280-808aaa69c01a
cookie: AWSALB=Yzfo4RTPINJdW99lxHz26xmyE+Ul2mMagLh3EcboM8Wb2wOcM6pDiw+yUTKYBbtDAVGY/JX9kuEvfozAIt1a79G4tN6ngGQpMzSulh/uh2hTyLdoXLxTYKCzuqo5
cookie: AWSALBCORS=Yzfo4RTPINJdW99lxHz26xmyE+Ul2mMagLh3EcboM8Wb2wOcM6pDiw+yUTKYBbtDAVGY/JX9kuEvfozAIt1a79G4tN6ngGQpMzSulh/uh2hTyLdoXLxTYKCzuqo5

Response

HTTP/2.0 200

date: Tue, 13 Aug 2024 15:22:02 GMT
content-type: application/pdf
x-spanid: 3044e361-cb15-a937-2306-69bdea18de47
x-amzn-trace-id: Root=1-66bb7a19-1429ea6f0c78f8c74263a205
x-content-type-options: nosniff
set-cookie: AWSALB=mWRMHqEUBuAXTNKciz4AHeIS6nTfEMZ8Z+o6yloVEGH74wRvqtg6Qby/Ve5X7ZbB9gXWLGzFLWyLJHPiSvbYqj2eyM4ic/caxiYpdWM+H3wSrd7+BYg+iRn3Uw9r; Expires=Tue, 20 Aug 2024 15:22:01 GMT; Path=/
set-cookie: AWSALBCORS=mWRMHqEUBuAXTNKciz4AHeIS6nTfEMZ8Z+o6yloVEGH74wRvqtg6Qby/Ve5X7ZbB9gXWLGzFLWyLJHPiSvbYqj2eyM4ic/caxiYpdWM+H3wSrd7+BYg+iRn3Uw9r; Expires=Tue, 20 Aug 2024 15:22:01 GMT; Path=/; SameSite=None; Secure
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate
cache-control: no-store
x-envoy-upstream-service-time: 988
strict-transport-security: max-age=31536000
intuit_tid: cp-c4008-53cf-4ac3-aad5-919c054072a8
x-request-id: cp-c4008-53cf-4ac3-aad5-919c054072a8
server: istio-envoy
POST

https://connect.intuit.com/portal/rest/reporting/batch

msedge.exe

Remote address:

54.70.16.125:443

Request

POST /portal/rest/reporting/batch HTTP/2.0
host: connect.intuit.com
content-length: 2203
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
intuit_tid: cp-c56fd-6169-40d9-9fbe-a54c372c14f9
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLThjNmExMWIyNzhkNTQxOWZhY2JkZDgyOThkYjY3ODQwMWQ0N2FlNzYwYjM5NDExY2FkMzNkNjZhODJhZDYyY2VkZDRjNDBjM2FkYzk0Nzg1ODNmMGM0MjUzM2IxYjI5ZiIsInJlYWxtSWQiOiI5MzQxNDUyODkzNzk2MzA5In0sImlhdCI6MTcyMzU2MjUxOCwiZXhwIjoxNzIzNTkxMzE4fQ.JKgQFDk9tMk7uBoC0Fm7Ighke93_JA3eaYttp3l8DOQ
content-type: application/json
intuit-realmid: 9341452893796309
accept: application/json, text/plain, */*
intuit-acstoken: scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
user-signed-in: false
intuit-domainid: INVOICE:9341452893796309_1
ssr-session-id: cd0f5048-ca33-40fa-905f-705c6d6ccbbf
origin: https://connect.intuit.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34
cookie: ajs_anonymous_id=4c20acf5-4315-4f26-a280-808aaa69c01a
cookie: AWSALB=I5mm4eWTUPtkuwGtfFfPfyQCNNAJIsZGn2CKMlqwkdeQDNi1dHgAYRGJFP5MOvL2NjVw+16YV8g5T5teNoZwt9CnG2iQTh6MTrOkQXBX11jDqDULgGQ3St47Yn0i
cookie: AWSALBCORS=I5mm4eWTUPtkuwGtfFfPfyQCNNAJIsZGn2CKMlqwkdeQDNi1dHgAYRGJFP5MOvL2NjVw+16YV8g5T5teNoZwt9CnG2iQTh6MTrOkQXBX11jDqDULgGQ3St47Yn0i

Response

HTTP/2.0 201

date: Tue, 13 Aug 2024 15:22:02 GMT
content-type: application/json;charset=utf-8
content-length: 36
x-spanid: 67d46622-6a36-bcce-4e0b-7ec1fcd00ef0
x-amzn-trace-id: Root=1-66bb7a1a-416ad02e19a3ae330003b844
x-content-type-options: nosniff
set-cookie: AWSALB=dmNHGLdOr/MlLInlh7nnSv5h4FgQgmafJh4dMEsIeDyLUpOGwpT7Yv1rmrf+SRJXOCQK8JrqEs74s4aXmY3cM4t5gnioiNqdNAwBargYENsuDE2SNXfjoSQAqERb; Expires=Tue, 20 Aug 2024 15:22:02 GMT; Path=/
set-cookie: AWSALBCORS=dmNHGLdOr/MlLInlh7nnSv5h4FgQgmafJh4dMEsIeDyLUpOGwpT7Yv1rmrf+SRJXOCQK8JrqEs74s4aXmY3cM4t5gnioiNqdNAwBargYENsuDE2SNXfjoSQAqERb; Expires=Tue, 20 Aug 2024 15:22:02 GMT; Path=/; SameSite=None; Secure
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate
cache-control: no-store
etag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI"
vary: Accept-Encoding
x-envoy-upstream-service-time: 22
strict-transport-security: max-age=31536000
intuit_tid: cp-c56fd-6169-40d9-9fbe-a54c372c14f9
x-request-id: cp-c56fd-6169-40d9-9fbe-a54c372c14f9
server: istio-envoy
POST

https://connect.intuit.com/portal/rest/reporting/batch

msedge.exe

Remote address:

54.70.16.125:443

Request

POST /portal/rest/reporting/batch HTTP/2.0
host: connect.intuit.com
content-length: 2332
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
intuit_tid: cp-cd9ae-a4c4-4515-a706-5f3c1b682c1b
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLThjNmExMWIyNzhkNTQxOWZhY2JkZDgyOThkYjY3ODQwMWQ0N2FlNzYwYjM5NDExY2FkMzNkNjZhODJhZDYyY2VkZDRjNDBjM2FkYzk0Nzg1ODNmMGM0MjUzM2IxYjI5ZiIsInJlYWxtSWQiOiI5MzQxNDUyODkzNzk2MzA5In0sImlhdCI6MTcyMzU2MjUxOCwiZXhwIjoxNzIzNTkxMzE4fQ.JKgQFDk9tMk7uBoC0Fm7Ighke93_JA3eaYttp3l8DOQ
content-type: application/json
intuit-realmid: 9341452893796309
accept: application/json, text/plain, */*
intuit-acstoken: scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
user-signed-in: false
intuit-domainid: INVOICE:9341452893796309_1
ssr-session-id: cd0f5048-ca33-40fa-905f-705c6d6ccbbf
origin: https://connect.intuit.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34
cookie: ajs_anonymous_id=4c20acf5-4315-4f26-a280-808aaa69c01a
cookie: AWSALB=dmNHGLdOr/MlLInlh7nnSv5h4FgQgmafJh4dMEsIeDyLUpOGwpT7Yv1rmrf+SRJXOCQK8JrqEs74s4aXmY3cM4t5gnioiNqdNAwBargYENsuDE2SNXfjoSQAqERb
cookie: AWSALBCORS=dmNHGLdOr/MlLInlh7nnSv5h4FgQgmafJh4dMEsIeDyLUpOGwpT7Yv1rmrf+SRJXOCQK8JrqEs74s4aXmY3cM4t5gnioiNqdNAwBargYENsuDE2SNXfjoSQAqERb
cookie: _gcl_au=1.1.1955935916.1723562522

Response

HTTP/2.0 201

date: Tue, 13 Aug 2024 15:22:03 GMT
content-type: application/json;charset=utf-8
content-length: 36
x-spanid: 47c9eeb4-90ea-d6a2-2d29-c71f76a8251d
x-amzn-trace-id: Root=1-66bb7a1b-7aa208413b64af557fc1f369
x-content-type-options: nosniff
set-cookie: AWSALB=8b4pvOqCw3OzYXkwHIDBao91hJsbrke/aYyHbia/DRiXZ3AsUqRraU/E9lyztt2HbvljrRv700UY6ujIhBAdHyvmQenCL3swtBpIIf3aWjDobWQYVqfl0NQYqY2V; Expires=Tue, 20 Aug 2024 15:22:03 GMT; Path=/
set-cookie: AWSALBCORS=8b4pvOqCw3OzYXkwHIDBao91hJsbrke/aYyHbia/DRiXZ3AsUqRraU/E9lyztt2HbvljrRv700UY6ujIhBAdHyvmQenCL3swtBpIIf3aWjDobWQYVqfl0NQYqY2V; Expires=Tue, 20 Aug 2024 15:22:03 GMT; Path=/; SameSite=None; Secure
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate
cache-control: no-store
etag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI"
vary: Accept-Encoding
x-envoy-upstream-service-time: 30
strict-transport-security: max-age=31536000
intuit_tid: cp-cd9ae-a4c4-4515-a706-5f3c1b682c1b
x-request-id: cp-cd9ae-a4c4-4515-a706-5f3c1b682c1b
server: istio-envoy
POST

https://connect.intuit.com/portal/rest/reporting/prometheus/pageLoad

msedge.exe

Remote address:

54.70.16.125:443

Request

POST /portal/rest/reporting/prometheus/pageLoad HTTP/2.0
host: connect.intuit.com
content-length: 100
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
intuit-realmid: 9341452893796309
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLThjNmExMWIyNzhkNTQxOWZhY2JkZDgyOThkYjY3ODQwMWQ0N2FlNzYwYjM5NDExY2FkMzNkNjZhODJhZDYyY2VkZDRjNDBjM2FkYzk0Nzg1ODNmMGM0MjUzM2IxYjI5ZiIsInJlYWxtSWQiOiI5MzQxNDUyODkzNzk2MzA5In0sImlhdCI6MTcyMzU2MjUxOCwiZXhwIjoxNzIzNTkxMzE4fQ.JKgQFDk9tMk7uBoC0Fm7Ighke93_JA3eaYttp3l8DOQ
content-type: application/json
accept: application/json, text/javascript, */*; q=0.01
intuit-domainid: INVOICE:9341452893796309_1
intuit-acstoken: scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f
intuit_tid: cp-c4392-c094-47f1-8066-318c2ded9950
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
user-signed-in: false
ssr-session-id: cd0f5048-ca33-40fa-905f-705c6d6ccbbf
origin: https://connect.intuit.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34
cookie: ajs_anonymous_id=4c20acf5-4315-4f26-a280-808aaa69c01a
cookie: AWSALB=dmNHGLdOr/MlLInlh7nnSv5h4FgQgmafJh4dMEsIeDyLUpOGwpT7Yv1rmrf+SRJXOCQK8JrqEs74s4aXmY3cM4t5gnioiNqdNAwBargYENsuDE2SNXfjoSQAqERb
cookie: AWSALBCORS=dmNHGLdOr/MlLInlh7nnSv5h4FgQgmafJh4dMEsIeDyLUpOGwpT7Yv1rmrf+SRJXOCQK8JrqEs74s4aXmY3cM4t5gnioiNqdNAwBargYENsuDE2SNXfjoSQAqERb
cookie: _gcl_au=1.1.1955935916.1723562522

Response

HTTP/2.0 200

date: Tue, 13 Aug 2024 15:22:03 GMT
content-type: text/plain;charset=utf-8
content-length: 2
x-spanid: 457d5ee6-607b-439d-b7f5-752575e56774
x-amzn-trace-id: Root=1-66bb7a1b-1639dbf31d6edd5f05d3e97d
x-content-type-options: nosniff
set-cookie: AWSALB=t45V+RWMNstU8HTE61WewObrJRpy/bw0BtnRn49d050Wm7PPlE/a8ATSPqfXzTXxWCLHek335wId2dw7uBtPTSAEh4R8DYP7kNrHOpQemt25VFeudeulpLD15kzG; Expires=Tue, 20 Aug 2024 15:22:03 GMT; Path=/
set-cookie: AWSALBCORS=t45V+RWMNstU8HTE61WewObrJRpy/bw0BtnRn49d050Wm7PPlE/a8ATSPqfXzTXxWCLHek335wId2dw7uBtPTSAEh4R8DYP7kNrHOpQemt25VFeudeulpLD15kzG; Expires=Tue, 20 Aug 2024 15:22:03 GMT; Path=/; SameSite=None; Secure
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate
cache-control: no-store
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
x-envoy-upstream-service-time: 26
strict-transport-security: max-age=31536000
intuit_tid: cp-c4392-c094-47f1-8066-318c2ded9950
x-request-id: cp-c4392-c094-47f1-8066-318c2ded9950
server: istio-envoy
POST

https://connect.intuit.com/portal/rest/reporting/batch

msedge.exe

Remote address:

54.70.16.125:443

Request

POST /portal/rest/reporting/batch HTTP/2.0
host: connect.intuit.com
content-length: 2271
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
intuit_tid: cp-cd735-fa5e-496b-968e-7ee6ee04cc5e
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7InRva2VuIjoic2NzLXYxLThjNmExMWIyNzhkNTQxOWZhY2JkZDgyOThkYjY3ODQwMWQ0N2FlNzYwYjM5NDExY2FkMzNkNjZhODJhZDYyY2VkZDRjNDBjM2FkYzk0Nzg1ODNmMGM0MjUzM2IxYjI5ZiIsInJlYWxtSWQiOiI5MzQxNDUyODkzNzk2MzA5In0sImlhdCI6MTcyMzU2MjUxOCwiZXhwIjoxNzIzNTkxMzE4fQ.JKgQFDk9tMk7uBoC0Fm7Ighke93_JA3eaYttp3l8DOQ
content-type: application/json
intuit-realmid: 9341452893796309
accept: application/json, text/plain, */*
intuit-acstoken: scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
user-signed-in: false
intuit-domainid: INVOICE:9341452893796309_1
ssr-session-id: cd0f5048-ca33-40fa-905f-705c6d6ccbbf
origin: https://connect.intuit.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34
cookie: ajs_anonymous_id=4c20acf5-4315-4f26-a280-808aaa69c01a
cookie: _gcl_au=1.1.1955935916.1723562522
cookie: AWSALB=t45V+RWMNstU8HTE61WewObrJRpy/bw0BtnRn49d050Wm7PPlE/a8ATSPqfXzTXxWCLHek335wId2dw7uBtPTSAEh4R8DYP7kNrHOpQemt25VFeudeulpLD15kzG
cookie: AWSALBCORS=t45V+RWMNstU8HTE61WewObrJRpy/bw0BtnRn49d050Wm7PPlE/a8ATSPqfXzTXxWCLHek335wId2dw7uBtPTSAEh4R8DYP7kNrHOpQemt25VFeudeulpLD15kzG

Response

HTTP/2.0 201

date: Tue, 13 Aug 2024 15:22:04 GMT
content-type: application/json;charset=utf-8
content-length: 36
x-spanid: d77d70ae-2977-3dad-c833-d0d6822fd523
x-amzn-trace-id: Root=1-66bb7a1b-4cc0954b199b0311501f9fcf
x-content-type-options: nosniff
set-cookie: AWSALB=xN6hyPrE/ABJLQoxQLSMnOo/N+RTnw2u0FBbWCq2E/p0o/usZPaQ+4jrVu5XqQhAq5iVyeAg6IxZrUBXzUq/6CH1k84f5ajm1KRcNCH/2quTz9dvNc/7dGL0BoTe; Expires=Tue, 20 Aug 2024 15:22:04 GMT; Path=/
set-cookie: AWSALBCORS=xN6hyPrE/ABJLQoxQLSMnOo/N+RTnw2u0FBbWCq2E/p0o/usZPaQ+4jrVu5XqQhAq5iVyeAg6IxZrUBXzUq/6CH1k84f5ajm1KRcNCH/2quTz9dvNc/7dGL0BoTe; Expires=Tue, 20 Aug 2024 15:22:04 GMT; Path=/; SameSite=None; Secure
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, notranslate
cache-control: no-store
etag: W/"24-pPS9OQF6dTkxaRJ0BRvHIXnQQCI"
vary: Accept-Encoding
x-envoy-upstream-service-time: 26
strict-transport-security: max-age=31536000
intuit_tid: cp-cd735-fa5e-496b-968e-7ee6ee04cc5e
x-request-id: cp-cd735-fa5e-496b-968e-7ee6ee04cc5e
server: istio-envoy
DNS

21.58.20.217.in-addr.arpa

Remote address:

8.8.8.8:53

Request

21.58.20.217.in-addr.arpa

IN PTR

Response
DNS

56.115.89.167.in-addr.arpa

Remote address:

8.8.8.8:53

Request

56.115.89.167.in-addr.arpa

IN PTR

Response

56.115.89.167.in-addr.arpa

IN PTR

o16789115x56 outbound-mailsendgridnet
DNS

125.16.70.54.in-addr.arpa

Remote address:

8.8.8.8:53

Request

125.16.70.54.in-addr.arpa

IN PTR

Response

125.16.70.54.in-addr.arpa

IN PTR

ec2-54-70-16-125 us-west-2compute amazonawscom
DNS

125.16.70.54.in-addr.arpa

Remote address:

8.8.8.8:53

Request

125.16.70.54.in-addr.arpa

IN PTR
DNS

smx.intuit.com

msedge.exe

Remote address:

8.8.8.8:53

Request

smx.intuit.com

IN A

Response

smx.intuit.com

IN CNAME

http-download.intuit.com.edgekey.net

http-download.intuit.com.edgekey.net

IN CNAME

e4424.g.akamaiedge.net

e4424.g.akamaiedge.net

IN A

23.49.161.51
DNS

static.cns-icn-prod.a.intuit.com

msedge.exe

Remote address:

8.8.8.8:53

Request

static.cns-icn-prod.a.intuit.com

IN A

Response

static.cns-icn-prod.a.intuit.com

IN A

52.222.144.48

static.cns-icn-prod.a.intuit.com

IN A

52.222.144.73

static.cns-icn-prod.a.intuit.com

IN A

52.222.144.10

static.cns-icn-prod.a.intuit.com

IN A

52.222.144.120
GET

https://static.cns-icn-prod.a.intuit.com/truste.svg

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /truste.svg HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Aug 2024 08:18:04 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: Bu3F5_wZ7h3L2d49hX6AZCZMZQGTH8yq
server: AmazonS3
content-encoding: gzip
date: Tue, 13 Aug 2024 01:15:54 GMT
etag: W/"f69d3b30a1263332b5a03cd48576c018"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: zOtxy1MkMyMsRpwjCkXOfSQ6GUa0wH74rIrNO87N4R5tKklp_qcZ2w==
age: 51448
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/1193.3dd404b7ea3c36c8.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/1193.3dd404b7ea3c36c8.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: image/svg+xml
date: Mon, 22 Apr 2024 01:35:08 GMT
last-modified: Mon, 13 May 2019 07:16:15 GMT
etag: W/"6dcc0db5446ac677d011c9e531400a08"
cache-control: public, max-age=31536000
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: VIbh6LQdr80-YipqRsQmP_8pcQKEAx9LUx4NXpSelOnsmxredzbv3Q==
age: 9812813
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/9835.59c20536643b9726.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/9835.59c20536643b9726.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
content-length: 955
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Aug 2024 08:18:05 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: O.KpUscfQQzuCZLkI12eaRIB2Jv_rAq6
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Aug 2024 04:03:51 GMT
etag: "54378336344b3de8529083ef5d0707ab"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: P6gPBQuuvXwm2A0pkh2IGbwPtFfbvX5j86dH652o6-hrkMiD8Rl3Wg==
age: 41948
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/main-593e743601aca717.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/main-593e743601aca717.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Aug 2024 08:18:05 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: wnZiaN4qddFdvGmWCXqtjfE1jgO9.fjt
server: AmazonS3
content-encoding: br
date: Tue, 13 Aug 2024 04:36:15 GMT
etag: W/"575f0dd2d17bbece23c4e3266a51a5c2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: a_BwlSCs6Cgj0DhM613BxwDK1iU2_mKjbTV3wvp7_3QTSZUmEqOVrw==
age: 38962
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/7868.851b65ef7fa1a422.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/7868.851b65ef7fa1a422.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
content-length: 973
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Aug 2024 08:18:05 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: sIGJW1QWf1v.LaIZoSEin2YRLRimm.ji
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Aug 2024 10:35:14 GMT
etag: "6b64452b69b814fa56db74365d21d6fe"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: salzyDieAmtSuRbcN-43JbcjbZU-5dlIGDLEMCa_FLp16OHz-isxfw==
age: 17329
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/framework-560765ab0625ba27.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/framework-560765ab0625ba27.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
date: Tue, 13 Aug 2024 10:36:47 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 13 Aug 2024 09:00:56 GMT
etag: W/"8b90c0d4b135a5f7f5662fc67e48e296"
x-amz-server-side-encryption: AES256
x-amz-version-id: g9tNQdKIrwfZJYcLRkvjcN8mO803cvYi
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: _ouWCqykSmUn676EiDU2WwqkijLoOtrkmsbnsnE04N6175kAGQaodg==
age: 17114
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/webpack-7bf7424d79abb07c.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/webpack-7bf7424d79abb07c.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Aug 2024 08:18:05 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: h50Fuggx14WErZ.Faq0oAjEmvWhuG8ch
server: AmazonS3
content-encoding: gzip
date: Tue, 13 Aug 2024 07:23:16 GMT
etag: W/"650f21ac4fd9546e505724abe1db85e7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: C0b8tHE_wDdS6SaKLOFSviNQ5Rok3gI59JvJTZKdhVWBzYv6hlto9g==
age: 38116
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/_app-139980d28336c189.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/pages/_app-139980d28336c189.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Aug 2024 08:18:05 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: Jzz9U4OEhE.7dd1_cM9kKesNiLMUxDz.
server: AmazonS3
content-encoding: gzip
date: Tue, 13 Aug 2024 04:03:51 GMT
etag: W/"d80243304aa96aa47f087c7b6fd7d648"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: euqrjUEqaaQB-n0WCDOQS4rDT_Wac7ul8CiNB-UmZs6N8TMXuZSnqw==
age: 41949
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6859-0e318ca24b4b6137.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/6859-0e318ca24b4b6137.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Aug 2024 08:18:05 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: oAAdPEnUNzTaSL4lbuxW1K7iaC9KxeHE
server: AmazonS3
content-encoding: gzip
date: Tue, 13 Aug 2024 04:31:22 GMT
etag: W/"2bc7756c97287fd2bf8865be28b1dfda"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: KSpnUOnddMFKVL-c_M3qfMUoTUIMWgudVUNrhR2ovjKw7kwhRTmCbg==
age: 39039
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/3161-4814bf9a60fc5a8d.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/3161-4814bf9a60fc5a8d.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
date: Tue, 13 Aug 2024 10:36:47 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 13 Aug 2024 09:00:55 GMT
etag: W/"11972c9dfb1e26e572d153a0c7be564c"
x-amz-server-side-encryption: AES256
x-amz-version-id: 5A4zTjsnK7.Bk5tIFAdSO22Ws68811No
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: pYuYL3ctPDKlKwdbMe4LU9RubMdQwK-4T7d_XHhUJVYFB4geGaE6Fg==
age: 17115
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/7465-1b3ac9cfccea5cb5.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/7465-1b3ac9cfccea5cb5.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Aug 2024 08:18:05 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: rYFhDHxzlhWu3wCo5ZcAKdCNZdJFOPK3
server: AmazonS3
content-encoding: gzip
date: Tue, 13 Aug 2024 04:03:51 GMT
etag: W/"c77199c85ab7b66e992e696525485ef1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: e1z-WMyPCyk3Qhtl6IEKFmzPk3uGRVIE_top4pKq7TXhS6VX7vWEiw==
age: 46693
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8804-0df16ebd6cb32488.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/8804-0df16ebd6cb32488.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
content-length: 77
date: Tue, 13 Aug 2024 10:52:14 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 13 Aug 2024 09:00:54 GMT
etag: "b6652df95db52feb4daf4eca35380933"
x-amz-server-side-encryption: AES256
x-amz-version-id: 0d0NisXSE8qWwk_1whF87Cv3bZxHXxQi
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: zUupRQyCuklhI9UyHSOzet3g0qzCvcTbCxDk5vZ_PWu0Ws56lStCbA==
age: 16187
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6019-156a31d24def11fe.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/6019-156a31d24def11fe.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
date: Tue, 13 Aug 2024 10:36:47 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 13 Aug 2024 09:00:55 GMT
etag: W/"d3d19a95a50e448dc9ec4025864ceb11"
x-amz-server-side-encryption: AES256
x-amz-version-id: FLG6e3csua.dFpH.Wdzasw_qKKKp1H1a
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: -L-ctrXuhjmSWYGJ2gWMOMF3ScAjd3RJzBdDQ3fzLinmJgxOxpbxPg==
age: 17115
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6139-3bd6b0b4def91944.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/6139-3bd6b0b4def91944.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
date: Tue, 13 Aug 2024 10:36:47 GMT
x-amz-replication-status: COMPLETED
last-modified: Tue, 13 Aug 2024 09:00:54 GMT
etag: W/"c4216a9449ae6f0cd18db958f90fe795"
x-amz-server-side-encryption: AES256
x-amz-version-id: GaTeNbICGWRJnf3z_xrDT_NjZ.5nMfpG
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: jnQwW6pydiGtSaYNeCmLo5gpDKYZ7hbamGgThbeLxiQUMDIJWTASjg==
age: 17115
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/index-94dd346e6cd9cd1d.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/pages/index-94dd346e6cd9cd1d.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Aug 2024 08:18:05 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: RLQBvcwuIauXjt0C0NwclMYpYIe9bI8J
server: AmazonS3
content-encoding: gzip
date: Tue, 13 Aug 2024 04:03:51 GMT
etag: W/"1add2336d61254530666ae403cf7d68a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: Z16dV7PWY_ujm8eFwej1DLqZ5B4tCzSY1XlihiBAqTL7286FI79jxw==
age: 41949
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/1.27.1-release_1.27.1-7499608/_buildManifest.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/1.27.1-release_1.27.1-7499608/_buildManifest.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Aug 2024 08:18:05 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: TquKAWtkURP2_eLD.dTVsWDXP3NUCi8_
server: AmazonS3
content-encoding: gzip
date: Tue, 13 Aug 2024 02:25:47 GMT
etag: W/"e468249bc66ea8eca59b054340dd7b33"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: hrCbbwh1bkJNipezlqZ75-uqMiVywoeIivKTJvUgqKxiYV3hpBvjNw==
age: 49798
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/1.27.1-release_1.27.1-7499608/_ssgManifest.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/1.27.1-release_1.27.1-7499608/_ssgManifest.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/2.0 200

content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Aug 2024 08:18:05 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 2gf2OTLF7rKnEAj7lEREeoTZ5s9jHG1e
server: AmazonS3
content-encoding: br
date: Tue, 13 Aug 2024 04:03:51 GMT
etag: W/"37eb804273791af5f1a8acac5775fd06"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: vNCRQSulHByxpMgS763y5vk5GuU07nsUq9aMqe_TdL5krfp5txBXOw==
age: 41578
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2766.b29c036bad593b19.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/2766.b29c036bad593b19.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34
cookie: ajs_anonymous_id=4c20acf5-4315-4f26-a280-808aaa69c01a

Response

HTTP/2.0 200

content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Aug 2024 08:18:04 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: g2yNDsF0BYUxqffzpycayt6QqNQXRpDy
server: AmazonS3
content-encoding: br
date: Tue, 13 Aug 2024 05:31:08 GMT
etag: W/"9507d9bd19ef23cfa07cf7346001111b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: adHuCzfpb_V8SST7csgaNzKsyuyzvKDshz5R5732k0aGthobyf0jMQ==
age: 35708
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8482.b28cf868ec59260b.js

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /_next/static/chunks/8482.b28cf868ec59260b.js HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34
cookie: ajs_anonymous_id=4c20acf5-4315-4f26-a280-808aaa69c01a

Response

HTTP/2.0 200

content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Aug 2024 08:18:05 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: lu4ak_vXDL5tH_IgZhVzt8wSF3AQp6qi
server: AmazonS3
content-encoding: br
date: Tue, 13 Aug 2024 04:03:51 GMT
etag: W/"5d3acbee67e89b42766e3833a9ef5b9a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: _wN8brjACrTQu_DAKxFkgDcVryF7beiAce-bahvKrw_ulCMmzsoD9Q==
age: 41948
vary: Origin
GET

https://static.cns-icn-prod.a.intuit.com/favicon.png

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /favicon.png HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34
cookie: ajs_anonymous_id=4c20acf5-4315-4f26-a280-808aaa69c01a
cookie: _gcl_au=1.1.1955935916.1723562522

Response

HTTP/2.0 200

content-type: image/png
content-length: 2785
date: Mon, 15 Jan 2024 13:01:15 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
last-modified: Mon, 13 May 2019 07:16:14 GMT
etag: "7dbe4596b420ff7fdac169a69e4bbfc9"
cache-control: public, max-age=31536000
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1976c726f5a49e79daf18d11f7fa62da.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: n4BUXhU4WexLISdGm0_6g2MNt8OT6J26cUQmxcCmhKdRS0vQiU6diA==
age: 18238849
GET

https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Rg_web.woff2

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Rg_web.woff2 HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
origin: https://connect.intuit.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
dnt: 1
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: binary/octet-stream
content-length: 35152
x-amz-replication-status: COMPLETED
last-modified: Tue, 12 Jan 2021 11:38:29 GMT
x-amz-version-id: ER4n9r0bgQC73W_rMirrtGRmEaqFzUq9
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Aug 2024 10:35:14 GMT
etag: "476fe09cbbbbf74ba00b93f8595ee5ed"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e193dc7153d24abe4297798fbf91a678.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: fze1Lf21Fvb9bnUL7nd-zE_AbkIMDRSbvfQMGQ6QCYOX_Pgefl1wnA==
age: 17321
access-control-allow-origin: *
access-control-expose-headers: *
GET

https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Demi_web.woff2

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Demi_web.woff2 HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
origin: https://connect.intuit.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
dnt: 1
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: binary/octet-stream
content-length: 35236
access-control-allow-origin: *
access-control-allow-methods: GET
x-amz-replication-status: COMPLETED
last-modified: Tue, 12 Jan 2021 11:38:24 GMT
x-amz-version-id: EYWb1BkOwqM0JBhy7AHAPt11DikRQL3u
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Aug 2024 04:03:51 GMT
etag: "4451062c2d96d0eb928e7a55a7c7da34"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e193dc7153d24abe4297798fbf91a678.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: 9uZlgYKXelKJpwg4S9G45y1PH_DR9ep3XsiYgo9KO039_ADKCfaFOg==
age: 41101
GET

https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2

msedge.exe

Remote address:

52.222.144.48:443

Request

GET /fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2 HTTP/2.0
host: static.cns-icn-prod.a.intuit.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
origin: https://connect.intuit.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
dnt: 1
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: binary/octet-stream
content-length: 35228
access-control-allow-origin: *
access-control-allow-methods: GET
x-amz-replication-status: COMPLETED
last-modified: Tue, 12 Jan 2021 11:38:18 GMT
x-amz-version-id: eWJvGZvOztSr3hMiY_jDKfHtC28kH6yJ
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Aug 2024 00:51:04 GMT
etag: "0acd962351f0b06e9a1f472e692ed680"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e193dc7153d24abe4297798fbf91a678.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: kX_6F8JR01E7QLI3DIs22ceYai7Tu4piiCretMwrBKuauDY2EmRYKw==
age: 53464
DNS

cdn.segment.com

msedge.exe

Remote address:

8.8.8.8:53

Request

cdn.segment.com

IN A

Response

cdn.segment.com

IN CNAME

d296je7bbdd650.cloudfront.net

d296je7bbdd650.cloudfront.net

IN A

204.246.175.76
GET

https://smx.intuit.com/mr/v2/giant-v.js

msedge.exe

Remote address:

23.49.161.51:443

Request

GET /mr/v2/giant-v.js HTTP/1.1
Host: smx.intuit.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
DNT: 1
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: */*
Sec-Fetch-Site: same-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://connect.intuit.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: ivid=344c847c-0df0-43bb-82f6-9a4fa3f58f34

Response

HTTP/1.1 200 OK

Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 07 Nov 2023 08:21:34 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: k76DsRzzMb8zHHFZ3Rwkae._DZlvuDdH
Server: AmazonS3
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
ETag: W/"3d35aa43e2b3e0061f455e8a37bf20be"
Vary: Accept-Encoding
X-Amz-Cf-Pop: LHR62-C5
X-Amz-Cf-Id: TFYcsNQeVpu2ruDQQ7G301byqi1ixOV4DIwpq6phYEvgEHO0m65xTg==
Expires: Tue, 13 Aug 2024 15:22:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Tue, 13 Aug 2024 15:22:00 GMT
Content-Length: 12159
Connection: keep-alive
GET

https://cdn.segment.com/analytics.js/v1/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/analytics.min.js

msedge.exe

Remote address:

204.246.175.76:443

Request

GET /analytics.js/v1/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/analytics.min.js HTTP/2.0
host: cdn.segment.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Tue, 30 Jul 2024 21:28:33 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 4mvb9o8UUXh8TqnRkosr5wilSZwqCqiv
server: AmazonS3
content-encoding: br
date: Tue, 13 Aug 2024 15:22:00 GMT
cache-control: public, max-age=120
etag: W/"8f973ac4bdf60f81fbdae9b37e78047b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 05ef390c85f3303ec2fddab8e867c170.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: a1-PvpPcLr3UpH6uR3p8pA-4QUcpdO3KrHxIaFDDG6yqd6MQz11EAg==
age: 17
GET

https://cdn.segment.com/analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js

msedge.exe

Remote address:

204.246.175.76:443

Request

GET /analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js HTTP/2.0
host: cdn.segment.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/javascript
date: Tue, 16 Jul 2024 21:54:32 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Tue, 16 Jul 2024 17:27:05 GMT
etag: W/"00e9c65cbba11c07c4bf4a6e2727b8ea"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=31536000,immutable
x-amz-version-id: mUKhKkDsTlV_L45onrBdOfv9_aAUrh2t
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 05ef390c85f3303ec2fddab8e867c170.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: jlcuNaIrDrnCOq16wcFnH44nhWlb0Rav3dkF1OLmI_xdbYoZbEh-GQ==
age: 2395650
GET

https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js

msedge.exe

Remote address:

204.246.175.76:443

Request

GET /analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js HTTP/2.0
host: cdn.segment.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/javascript
date: Mon, 15 Apr 2024 05:58:34 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Fri, 12 Apr 2024 22:19:51 GMT
etag: W/"3867b2388b619ff7fddc29ef359fc9aa"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=31536000,immutable
x-amz-version-id: Yw3_Qtko75ayfD57fhuMKy0z.t7FgyPk
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 05ef390c85f3303ec2fddab8e867c170.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: 0kgsJkp1yT74XGYPBdZgM3zxNbBeOhQ539TVG1XlNnYPYzVnpV7_tA==
age: 10401808
GET

https://cdn.segment.com/next-integrations/integrations/google-adwords-new/1.3.0/google-adwords-new.dynamic.js.gz

msedge.exe

Remote address:

204.246.175.76:443

Request

GET /next-integrations/integrations/google-adwords-new/1.3.0/google-adwords-new.dynamic.js.gz HTTP/2.0
host: cdn.segment.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/javascript
content-length: 1655
date: Tue, 21 May 2024 22:39:34 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Fri, 05 Apr 2024 16:42:47 GMT
etag: "d151cb0874ed5e13006e5f38364ec01e"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
x-amz-version-id: wry_apqdd2NUiPtQjgnoSNAJnT.F8VpX
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 05ef390c85f3303ec2fddab8e867c170.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: Fy65q-iAVFKyFtMANtPWjFjceLLgzffQzbAQ2QcE33nPIBE5rUGVAg==
age: 7231348
GET

https://cdn.segment.com/next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz

msedge.exe

Remote address:

204.246.175.76:443

Request

GET /next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz HTTP/2.0
host: cdn.segment.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/javascript
content-length: 21911
date: Fri, 05 Apr 2024 16:51:43 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Fri, 05 Apr 2024 16:42:46 GMT
etag: "c467a63b2e7c3a99be423ace649014d8"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=31536000,immutable
content-encoding: gzip
x-amz-version-id: 1Y99HfuTczPsGIDdcPhw1L1EusEviR19
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 05ef390c85f3303ec2fddab8e867c170.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: esoKuE3bDtYjpme888dGYX8ZlwekGcx808inoJWAz5GB17yu_BfifQ==
age: 11226619
DNS

48.144.222.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

48.144.222.52.in-addr.arpa

IN PTR

Response

48.144.222.52.in-addr.arpa

IN PTR

server-52-222-144-48mrs52r cloudfrontnet
DNS

51.161.49.23.in-addr.arpa

Remote address:

8.8.8.8:53

Request

51.161.49.23.in-addr.arpa

IN PTR

Response

51.161.49.23.in-addr.arpa

IN PTR

a23-49-161-51deploystaticakamaitechnologiescom
DNS

76.175.246.204.in-addr.arpa

Remote address:

8.8.8.8:53

Request

76.175.246.204.in-addr.arpa

IN PTR

Response

76.175.246.204.in-addr.arpa

IN PTR

server-204-246-175-76mrs52r cloudfrontnet
DNS

38.97.161.18.in-addr.arpa

Remote address:

8.8.8.8:53

Request

38.97.161.18.in-addr.arpa

IN PTR

Response

38.97.161.18.in-addr.arpa

IN PTR

server-18-161-97-38mrs52r cloudfrontnet
GET

https://cdn.segment.com/v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings

msedge.exe

Remote address:

204.246.175.76:443

Request

GET /v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings HTTP/2.0
host: cdn.segment.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
origin: https://connect.intuit.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 25 Jul 2024 19:17:34 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 4hoYBvYQgJthTLgLG5DZEcC2mBG6hFyA
server: AmazonS3
content-encoding: br
date: Tue, 13 Aug 2024 15:12:37 GMT
cache-control: public, max-age=10800
etag: W/"26ee0147b7d243991d94b48a2b8b5675"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4d7b5de37aeab9fce259cf61156ea4a4.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS52-C2
x-amz-cf-id: _VBCb2aULFxG4P43DSiEBfGLN3dsHpOF1x6-gfIfb24h9cyUcx6w8A==
age: 747
DNS

eventbus.intuit.com

msedge.exe

Remote address:

8.8.8.8:53

Request

eventbus.intuit.com

IN A

Response

eventbus.intuit.com

IN CNAME

eventbus.a.intuit.com

eventbus.a.intuit.com

IN A

52.42.176.145

eventbus.a.intuit.com

IN A

54.187.141.242

eventbus.a.intuit.com

IN A

35.164.23.18

eventbus.a.intuit.com

IN A

54.149.125.224

eventbus.a.intuit.com

IN A

52.25.88.219

eventbus.a.intuit.com

IN A

35.164.43.86

eventbus.a.intuit.com

IN A

52.35.214.237

eventbus.a.intuit.com

IN A

54.148.181.101
POST

https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/p

msedge.exe

Remote address:

52.42.176.145:443

Request

POST /v2/segment/sbseg-qbo-clickstream/p HTTP/2.0
host: eventbus.intuit.com
content-length: 1461
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain
accept: */*
origin: https://connect.intuit.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 202

date: Tue, 13 Aug 2024 15:22:01 GMT
content-type: text/plain
content-length: 0
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: ADRUM_BTa=R:27|g:9dfad183-22cd-4ab2-9233-2ca834438fe1|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Tue, 13-Aug-2024 15:22:31 GMT
set-cookie: SameSite=None;Path=/;Expires=Tue, 13-Aug-2024 15:22:31 GMT;Secure
cache-control: private, no-cache, no-transform
access-control-allow-origin: *
access-control-allow-headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain
access-control-allow-methods: GET,POST,OPTIONS
access-control-request-method: GET,POST,OPTIONS
access-control-allow-credentials: true
strict-transport-security: max-age=10886400; includeSubDomains; preload
intuit_appid: Intuit.ldcp.mds.trinity
intuit_offeringid: Intuit.ldcp.mds.trinity
x-application-id: event-bus
server: Jetty
event_id: 55bc04a8-96da-4027-a313-ac3ab502b0d4
intuit_received_at: 1723562521659
set-cookie: ADRUM_BT1=R:27|i:636215|e:3|d:2;Path=/;Expires=Tue, 13-Aug-2024 15:22:31 GMT
POST

https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/t

msedge.exe

Remote address:

52.42.176.145:443

Request

POST /v2/segment/sbseg-qbo-clickstream/t HTTP/2.0
host: eventbus.intuit.com
content-length: 1512
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain
accept: */*
origin: https://connect.intuit.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 202

date: Tue, 13 Aug 2024 15:22:01 GMT
content-type: text/plain
content-length: 0
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: ADRUM_BTa=R:27|g:6fb1720c-248e-4dfb-ba98-0bf192750cb4|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Tue, 13-Aug-2024 15:22:31 GMT
set-cookie: SameSite=None;Path=/;Expires=Tue, 13-Aug-2024 15:22:31 GMT;Secure
cache-control: private, no-cache, no-transform
access-control-allow-origin: *
access-control-allow-headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain
access-control-allow-methods: GET,POST,OPTIONS
access-control-request-method: GET,POST,OPTIONS
access-control-allow-credentials: true
strict-transport-security: max-age=10886400; includeSubDomains; preload
intuit_appid: Intuit.ldcp.mds.trinity
intuit_offeringid: Intuit.ldcp.mds.trinity
x-application-id: event-bus
server: Jetty
event_id: 4682d3b5-8ca7-4457-9dda-3c76971d8621
intuit_received_at: 1723562521659
set-cookie: ADRUM_BT1=R:27|i:636215|e:2|d:3;Path=/;Expires=Tue, 13-Aug-2024 15:22:31 GMT
POST

https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/t

msedge.exe

Remote address:

52.42.176.145:443

Request

POST /v2/segment/sbseg-qbo-clickstream/t HTTP/2.0
host: eventbus.intuit.com
content-length: 3531
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain
accept: */*
origin: https://connect.intuit.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 202

date: Tue, 13 Aug 2024 15:22:01 GMT
content-type: text/plain
content-length: 0
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: ADRUM_BTa=R:27|g:ac17544a-f6ed-4036-bb2d-d749691b63dd|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Tue, 13-Aug-2024 15:22:31 GMT
set-cookie: SameSite=None;Path=/;Expires=Tue, 13-Aug-2024 15:22:31 GMT;Secure
cache-control: private, no-cache, no-transform
access-control-allow-origin: *
access-control-allow-headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain
access-control-allow-methods: GET,POST,OPTIONS
access-control-request-method: GET,POST,OPTIONS
access-control-allow-credentials: true
strict-transport-security: max-age=10886400; includeSubDomains; preload
intuit_appid: Intuit.ldcp.mds.trinity
intuit_offeringid: Intuit.ldcp.mds.trinity
x-application-id: event-bus
server: Jetty
event_id: f635b8fe-2741-4e17-b96b-ca1f389bdace
intuit_received_at: 1723562521659
set-cookie: ADRUM_BT1=R:27|i:636215|e:3|d:2;Path=/;Expires=Tue, 13-Aug-2024 15:22:31 GMT
POST

https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/t

msedge.exe

Remote address:

52.42.176.145:443

Request

POST /v2/segment/sbseg-qbo-clickstream/t HTTP/2.0
host: eventbus.intuit.com
content-length: 2686
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain
accept: */*
origin: https://connect.intuit.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 202

date: Tue, 13 Aug 2024 15:22:01 GMT
content-type: text/plain
content-length: 0
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: ADRUM_BTa=R:27|g:7fb04f74-ec20-4102-99a9-4f177331de1a|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Tue, 13-Aug-2024 15:22:31 GMT
set-cookie: SameSite=None;Path=/;Expires=Tue, 13-Aug-2024 15:22:31 GMT;Secure
cache-control: private, no-cache, no-transform
access-control-allow-origin: *
access-control-allow-headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain
access-control-allow-methods: GET,POST,OPTIONS
access-control-request-method: GET,POST,OPTIONS
access-control-allow-credentials: true
strict-transport-security: max-age=10886400; includeSubDomains; preload
intuit_appid: Intuit.ldcp.mds.trinity
intuit_offeringid: Intuit.ldcp.mds.trinity
x-application-id: event-bus
server: Jetty
event_id: 31a5f53c-14c0-4053-9a4b-129443bbefb4
intuit_received_at: 1723562521661
set-cookie: ADRUM_BT1=R:27|i:636215|e:3|d:5;Path=/;Expires=Tue, 13-Aug-2024 15:22:31 GMT
POST

https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/m

msedge.exe

Remote address:

52.42.176.145:443

Request

POST /v2/segment/sbseg-qbo-clickstream/m HTTP/2.0
host: eventbus.intuit.com
content-length: 224
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain
accept: */*
origin: https://connect.intuit.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Tue, 13 Aug 2024 15:22:31 GMT
content-type: text/plain
content-length: 0
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: ADRUM_BTa=R:27|g:d9c66f52-a045-4b9c-b29e-770545c226da|n:intuit-ss-prod_7a1601f5-8dd7-4643-a3b6-efec7482015f;Path=/;Expires=Tue, 13-Aug-2024 15:23:01 GMT
set-cookie: SameSite=None;Path=/;Expires=Tue, 13-Aug-2024 15:23:01 GMT;Secure
cache-control: private, no-cache, no-transform
access-control-allow-origin: *
access-control-allow-headers: Authorization,X-Forwarded-For,Accept-Language,Content-Type,intuit_tid,intuit_appid,intuit_offeringid,intuit_originatingip,intuit_test,intuit_locale,intuit_country,intuit_iddomain
access-control-allow-methods: GET,POST,OPTIONS
access-control-request-method: GET,POST,OPTIONS
access-control-allow-credentials: true
strict-transport-security: max-age=10886400; includeSubDomains; preload
intuit_appid: Intuit.ldcp.mds.trinity
intuit_offeringid: Intuit.ldcp.mds.trinity
x-application-id: event-bus
server: Jetty
set-cookie: ADRUM_BT1=R:27|i:636215|e:3|d:0;Path=/;Expires=Tue, 13-Aug-2024 15:23:01 GMT
DNS

prd.sentry-io.a.intuit.com

msedge.exe

Remote address:

8.8.8.8:53

Request

prd.sentry-io.a.intuit.com

IN A

Response

prd.sentry-io.a.intuit.com

IN CNAME

platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com

platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com

IN A

52.39.169.71

platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com

IN A

35.82.141.98

platformexps-prd-sentry-io-stable.qbcapitalprdusw2.iks2.a.intuit.com

IN A

35.167.31.3
POST

https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1

msedge.exe

Remote address:

52.39.169.71:443

Request

POST /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/2.0
host: prd.sentry-io.a.intuit.com
content-length: 500
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
content-type: text/plain;charset=UTF-8
accept: */*
origin: https://connect.intuit.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Tue, 13 Aug 2024 15:22:01 GMT
content-type: application/json
content-length: 2
server: nginx
access-control-allow-origin: *
vary: origin
vary: access-control-request-method
vary: access-control-request-headers
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
cross-origin-resource-policy: cross-origin
x-frame-options: SAMEORIGIN
POST

https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1

msedge.exe

Remote address:

52.39.169.71:443

Request

POST /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/2.0
host: prd.sentry-io.a.intuit.com
content-length: 13396
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
origin: https://connect.intuit.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Tue, 13 Aug 2024 15:22:01 GMT
content-type: application/json
content-length: 41
server: nginx
access-control-allow-origin: *
vary: origin
vary: access-control-request-method
vary: access-control-request-headers
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
cross-origin-resource-policy: cross-origin
x-frame-options: SAMEORIGIN
POST

https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1

msedge.exe

Remote address:

52.39.169.71:443

Request

POST /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/2.0
host: prd.sentry-io.a.intuit.com
content-length: 12601
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
origin: https://connect.intuit.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Tue, 13 Aug 2024 15:22:08 GMT
content-type: application/json
content-length: 41
server: nginx
access-control-allow-origin: *
vary: origin
vary: access-control-request-method
vary: access-control-request-headers
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
cross-origin-resource-policy: cross-origin
x-frame-options: SAMEORIGIN
POST

https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1

msedge.exe

Remote address:

52.39.169.71:443

Request

POST /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/2.0
host: prd.sentry-io.a.intuit.com
content-length: 2069
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
origin: https://connect.intuit.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Tue, 13 Aug 2024 15:22:14 GMT
content-type: application/json
content-length: 41
server: nginx
access-control-allow-origin: *
vary: origin
vary: access-control-request-method
vary: access-control-request-headers
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
cross-origin-resource-policy: cross-origin
x-frame-options: SAMEORIGIN
POST

https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1

msedge.exe

Remote address:

52.39.169.71:443

Request

POST /api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1 HTTP/2.0
host: prd.sentry-io.a.intuit.com
content-length: 2035
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
origin: https://connect.intuit.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Tue, 13 Aug 2024 15:22:20 GMT
content-type: application/json
content-length: 41
server: nginx
access-control-allow-origin: *
vary: origin
vary: access-control-request-method
vary: access-control-request-headers
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
cross-origin-resource-policy: cross-origin
x-frame-options: SAMEORIGIN
DNS

plugin.intuitcdn.net

msedge.exe

Remote address:

8.8.8.8:53

Request

plugin.intuitcdn.net

IN A

Response

plugin.intuitcdn.net

IN CNAME

int-qbo.intuitcdn.net.edgekey.net

int-qbo.intuitcdn.net.edgekey.net

IN CNAME

e4047.b.akamaiedge.net

e4047.b.akamaiedge.net

IN A

2.22.143.207
GET

https://plugin.intuitcdn.net/gdpr-util/0.1.8/dist/gdprUtilBundle.js

msedge.exe

Remote address:

2.22.143.207:443

Request

GET /gdpr-util/0.1.8/dist/gdprUtilBundle.js HTTP/2.0
host: plugin.intuitcdn.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/javascript; charset=utf-8
last-modified: Wed, 05 Dec 2018 01:40:34 GMT
etag: W/"a953815cdc636c3be5d100f7cea3cc90"
x-amz-version-id: null
server: AmazonS3
timing-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
vary: Accept-Encoding
x-amz-cf-pop: ORD53-C3
x-amz-cf-id: hFedemmTALtHEY5j15bAov9eflfsq6OVHdwirKmxu2LGDBOIQMWoVQ==
content-length: 10511
date: Tue, 13 Aug 2024 15:22:01 GMT
timing-allow-origin: *
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: public, max-age=31556926, immutable
x-origin-src: uxf
GET

https://plugin.intuitcdn.net/gdpr-widget/0.2.5/dist/gdpr-widget-en-gb.js

msedge.exe

Remote address:

2.22.143.207:443

Request

GET /gdpr-widget/0.2.5/dist/gdpr-widget-en-gb.js HTTP/2.0
host: plugin.intuitcdn.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/javascript; charset=utf-8
last-modified: Wed, 05 Dec 2018 01:40:36 GMT
etag: W/"ecac4efbf22c2b33e85ee1af1a3b2e9a"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-version-id: null
server: AmazonS3
timing-allow-origin: *
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
vary: Accept-Encoding
x-amz-cf-pop: ORD52-C2
x-amz-cf-id: N20un7c3kjKEigKaW6UjzcjB1XMfAMtPECpZuiOKILbvr9QDxnUfYw==
content-length: 104191
date: Tue, 13 Aug 2024 15:22:01 GMT
timing-allow-origin: *
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: public, max-age=31556926, immutable
x-origin-src: uxf
DNS

145.176.42.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

145.176.42.52.in-addr.arpa

IN PTR

Response

145.176.42.52.in-addr.arpa

IN PTR

ec2-52-42-176-145 us-west-2compute amazonawscom
DNS

71.169.39.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

71.169.39.52.in-addr.arpa

IN PTR

Response

71.169.39.52.in-addr.arpa

IN PTR

ec2-52-39-169-71 us-west-2compute amazonawscom
DNS

assets.intuitcdn.net

msedge.exe

Remote address:

8.8.8.8:53

Request

assets.intuitcdn.net

IN A

Response

assets.intuitcdn.net

IN CNAME

int-qbo.intuitcdn.net.edgekey.net

int-qbo.intuitcdn.net.edgekey.net

IN CNAME

e4047.b.akamaiedge.net

e4047.b.akamaiedge.net

IN A

2.22.143.207
GET

https://assets.intuitcdn.net/fonts/avenir-400.woff2

msedge.exe

Remote address:

2.22.143.207:443

Request

GET /fonts/avenir-400.woff2 HTTP/2.0
host: assets.intuitcdn.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
origin: https://connect.intuit.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
dnt: 1
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

accept-ranges: bytes
content-type: font/woff2
etag: "ca8c2af7f604634390ef3e68b80fa189:1667239935.290512"
last-modified: Wed, 07 Aug 2019 21:23:45 GMT
server: AkamaiNetStorage
content-length: 33176
cache-control: max-age=15552000
expires: Sun, 09 Feb 2025 15:22:02 GMT
date: Tue, 13 Aug 2024 15:22:02 GMT
timing-allow-origin: *
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-methods: GET
access-control-allow-origin: *
GET

https://assets.intuitcdn.net/fonts/avenir-600.woff2

msedge.exe

Remote address:

2.22.143.207:443

Request

GET /fonts/avenir-600.woff2 HTTP/2.0
host: assets.intuitcdn.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
origin: https://connect.intuit.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
dnt: 1
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://connect.intuit.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

accept-ranges: bytes
content-type: font/woff2
etag: "7c0278113ae5f34e8198a2cea65c3bac:1667239939.278919"
last-modified: Wed, 07 Aug 2019 21:23:45 GMT
server: AkamaiNetStorage
content-length: 33100
cache-control: max-age=15552000
expires: Sun, 09 Feb 2025 15:22:02 GMT
date: Tue, 13 Aug 2024 15:22:02 GMT
timing-allow-origin: *
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-methods: GET
access-control-allow-origin: *
DNS

207.143.22.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

207.143.22.2.in-addr.arpa

IN PTR

Response

207.143.22.2.in-addr.arpa

IN PTR

a2-22-143-207deploystaticakamaitechnologiescom
DNS

168.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

168.179.250.142.in-addr.arpa

IN PTR

Response

168.179.250.142.in-addr.arpa

IN PTR

ams15s41-in-f81e100net
DNS

168.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

168.179.250.142.in-addr.arpa

IN PTR
DNS

50.23.12.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

50.23.12.20.in-addr.arpa

IN PTR

Response
DNS

206.23.85.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

206.23.85.13.in-addr.arpa

IN PTR

Response
DNS

40.58.20.217.in-addr.arpa

Remote address:

8.8.8.8:53

Request

40.58.20.217.in-addr.arpa

IN PTR

Response
DNS

25.140.123.92.in-addr.arpa

Remote address:

8.8.8.8:53

Request

25.140.123.92.in-addr.arpa

IN PTR

Response

25.140.123.92.in-addr.arpa

IN PTR

a92-123-140-25deploystaticakamaitechnologiescom
DNS

57.169.31.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

57.169.31.20.in-addr.arpa

IN PTR

Response
DNS

14.227.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

14.227.111.52.in-addr.arpa

IN PTR

Response
DNS

26.35.223.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

26.35.223.20.in-addr.arpa

IN PTR

Response
DNS

tse1.mm.bing.net

Remote address:

8.8.8.8:53

Request

tse1.mm.bing.net

IN A

Response

tse1.mm.bing.net

IN CNAME

mm-mm.bing.net.trafficmanager.net

mm-mm.bing.net.trafficmanager.net

IN CNAME

ax-0001.ax-msedge.net

ax-0001.ax-msedge.net

IN A

150.171.27.10

ax-0001.ax-msedge.net

IN A

150.171.28.10
GET

https://tse1.mm.bing.net/th?id=OADD2.10239340418559_1LXGGCLQWFST3067K&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

Remote address:

150.171.27.10:443

Request

GET /th?id=OADD2.10239340418559_1LXGGCLQWFST3067K&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 540045
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3FF9F4A01386446EBEA1AB688B9F0484 Ref B: LON04EDGE0809 Ref C: 2024-08-13T15:23:41Z
date: Tue, 13 Aug 2024 15:23:41 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239360284735_1J9G8ZRD0Q7KNETKQ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

Remote address:

150.171.27.10:443

Request

GET /th?id=OADD2.10239360284735_1J9G8ZRD0Q7KNETKQ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 474395
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A184E8624369443BA7A38A82017DA343 Ref B: LON04EDGE0809 Ref C: 2024-08-13T15:23:41Z
date: Tue, 13 Aug 2024 15:23:41 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239340418560_12H05GS2AXF1O4KMU&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

Remote address:

150.171.27.10:443

Request

GET /th?id=OADD2.10239340418560_12H05GS2AXF1O4KMU&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 666327
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 04F7835F7DC04E3A932E7444BEF0B7EC Ref B: LON04EDGE0809 Ref C: 2024-08-13T15:23:41Z
date: Tue, 13 Aug 2024 15:23:41 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239339388115_1OIS3ERNXZ6FC49JX&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

Remote address:

150.171.27.10:443

Request

GET /th?id=OADD2.10239339388115_1OIS3ERNXZ6FC49JX&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 512342
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A21151DD4966408D8BF7C4519631076E Ref B: LON04EDGE0809 Ref C: 2024-08-13T15:23:41Z
date: Tue, 13 Aug 2024 15:23:41 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239339388116_1HBZ24TGK6VST5MLJ&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

Remote address:

150.171.27.10:443

Request

GET /th?id=OADD2.10239339388116_1HBZ24TGK6VST5MLJ&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 504006
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 535E2868D92D4B89998CA66120FAA04A Ref B: LON04EDGE0809 Ref C: 2024-08-13T15:23:41Z
date: Tue, 13 Aug 2024 15:23:41 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239360284736_11427X8L96F0YA4AW&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

Remote address:

150.171.27.10:443

Request

GET /th?id=OADD2.10239360284736_11427X8L96F0YA4AW&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 679182
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 28835A96D51B4BA7AF534038E64E1C44 Ref B: LON04EDGE0809 Ref C: 2024-08-13T15:23:41Z
date: Tue, 13 Aug 2024 15:23:41 GMT
DNS

10.27.171.150.in-addr.arpa

Remote address:

8.8.8.8:53

Request

10.27.171.150.in-addr.arpa

IN PTR

Response

167.89.115.56:80

http://links.notification.intuit.com/ls/click?upn=u001.SkyGoo-2FemZT6Xc-2Fn1lGbnolA50y-2BF9TWqkK0lI1Lm8fNvXP5-2FxDdNExe3CY544wPZVOkx-2Bsb4ktfZUcbQ6XLB0umkYGUQHHILweKuKpYjdzhF0uPLuei0-2BVlMRjPRLAo1fCXOjfoFIpID1YHPjFt9X6YM6IErfqKEFBoo2pDesv3b1J6kPlpjElQuqu-2FVRouDnTCFSAej3YnsTJqAMSzBAVgxVv0vk98gmowvMrxtOvx10r9-2FdMZ10Xg71orxPeKfym7hmo-2F-2B8bdWu2rgTnSJg-3D-3DVaXj_16M6GKGeDmPkOzr09KdAzqmyxUJbZgaDi4h0RkPzCPHSbphs600vF4t7eTVtxwS81PfmMEj5-2B9tPYTYr1Ra0wbm5UiruOjcBoWIgXfGuGH9tYP7xbxDMmjL9fkKZ4JfvCaNg-2Bys0zwPgn1fZOvnimj7qQPgls-2BFE6-2B5lNgqa6ubH5FQuQScBxeXRncgLx1el6VmKkrsx8CwJMsDYo1QdvvV1U7tkDk9vEy-2BEpH-2B-2BDs7y0BUutgYGzeZNK3L-2B5p4IRl2q-2Fds96PBYof6Iza0UehShNwZBUgBnCgrBJs2D8eidHnQw9B4gNCTAMX95itPs-2FhdD3ibREGfkU0WvmEqO-2B6aR7VniPP84QyRY1wFlZtD4YEsT9HTzA6TPgrAG8HiQZbLEKycscoYOl1Alrk-2BAIbW1T-2FIQa-2B2-2BGacg9tBNszXEPnQ4VJ9hFgYvamk4fr047D0vYGonXeLPdjKE-2Fr32SvZ98KaPiPYd3PV5DQAYLyujoYWhbMs1WDsg05e4-2BCQFmhaTtxUOUSgzCI0H2q-2FpCvNF-2FDBW8uzSk1ZjmFr7pvLCZgehH7uMQryCx30DMfVqgH4WWJeEMepIYaFLiAHouUzsePnUwcN8lQO6e07eBY3MZEmTXmQfrmtobpFjjqD5wgVvngxFPIHJMccdcSQK8qTAEMLqO5n1nTGGOnvchLJuqpB6CWZi1Q5kPhnV3WdJ1jairAGFHhadrWuN-2BFVUlAyBAtDyAjTQbEtCP-2BzmMkJfvOX7gdv0ElvRu3zKl11uKVOdRb69sUAvPgYEqjVh2ZTDN-2Ffot6W-2F7Vt1XmrU-2BcJU6TGCpSu-2Be2AYQLdIRhFuN9MvxXRET5OuHWdBBO79iG-2FKEq8rfeU-2Fixrg6-2Ba0UONX6zX0IH-2B3BwXI-2BI-2FPQ5WEr2iu9eyHXYoQKu-2B06glKnQYBi-2FtxI7JpewOjeeGU-2BjMgQBRkXBw4BIfXe816CsgPLOwQvz-2BdYCl3VAW4zocoXS-2BOANK6Cr06mswoUxSy1BKiWlvxO0cJyviRvPEJtc5jIKLddyBymMOokvQcUZswQWCUc03WUmBzGkTyGKn2xYw8m9Q82en00yWk9zUB47Uv7ijKzlrp7083t3-2B-2FnAZ0oSq1a1LfrHZr90VYaqorgJXRDiuhju1j-2BvQWgSjX2Tymc4xOTv-2B7GYwywbSm-2BVZrWx7ZLPEI9CKlTJ2NGMcSBv-2BtA7uk-2FnARbK0v5rJy-2FJpkdgOXXSKaLtLhMABoYMgdURFnIBP3S5ykqzX1mt2m4UDyiZQ0Xk-2Bca7aMj2cFDq-2FoonQ-2FhxjwG6nMIhLxeaaxP1F2S10fVKX7JdiMYcOyowt-2F6DbwN6LCEq2xf2iwVUGYriFY7GGfxrg9Dil0s-2FUqHEOiyTLLgXDvkbA2IwFPv6VGvPeBzdQ9klMs2fpxcADpkM21jYdFPVLZy13-2BdyYyhLhZagGhYVHIrXLXQUq-2FSS6hO2wsXItAithp-2BoB0Msq-2BEDQMaSaAyauZvE-2FfHY3weg-3D-3D

http

msedge.exe

2.8kB
883 B
8
6

HTTP Request

GET http://links.notification.intuit.com/ls/click?upn=u001.SkyGoo-2FemZT6Xc-2Fn1lGbnolA50y-2BF9TWqkK0lI1Lm8fNvXP5-2FxDdNExe3CY544wPZVOkx-2Bsb4ktfZUcbQ6XLB0umkYGUQHHILweKuKpYjdzhF0uPLuei0-2BVlMRjPRLAo1fCXOjfoFIpID1YHPjFt9X6YM6IErfqKEFBoo2pDesv3b1J6kPlpjElQuqu-2FVRouDnTCFSAej3YnsTJqAMSzBAVgxVv0vk98gmowvMrxtOvx10r9-2FdMZ10Xg71orxPeKfym7hmo-2F-2B8bdWu2rgTnSJg-3D-3DVaXj_16M6GKGeDmPkOzr09KdAzqmyxUJbZgaDi4h0RkPzCPHSbphs600vF4t7eTVtxwS81PfmMEj5-2B9tPYTYr1Ra0wbm5UiruOjcBoWIgXfGuGH9tYP7xbxDMmjL9fkKZ4JfvCaNg-2Bys0zwPgn1fZOvnimj7qQPgls-2BFE6-2B5lNgqa6ubH5FQuQScBxeXRncgLx1el6VmKkrsx8CwJMsDYo1QdvvV1U7tkDk9vEy-2BEpH-2B-2BDs7y0BUutgYGzeZNK3L-2B5p4IRl2q-2Fds96PBYof6Iza0UehShNwZBUgBnCgrBJs2D8eidHnQw9B4gNCTAMX95itPs-2FhdD3ibREGfkU0WvmEqO-2B6aR7VniPP84QyRY1wFlZtD4YEsT9HTzA6TPgrAG8HiQZbLEKycscoYOl1Alrk-2BAIbW1T-2FIQa-2B2-2BGacg9tBNszXEPnQ4VJ9hFgYvamk4fr047D0vYGonXeLPdjKE-2Fr32SvZ98KaPiPYd3PV5DQAYLyujoYWhbMs1WDsg05e4-2BCQFmhaTtxUOUSgzCI0H2q-2FpCvNF-2FDBW8uzSk1ZjmFr7pvLCZgehH7uMQryCx30DMfVqgH4WWJeEMepIYaFLiAHouUzsePnUwcN8lQO6e07eBY3MZEmTXmQfrmtobpFjjqD5wgVvngxFPIHJMccdcSQK8qTAEMLqO5n1nTGGOnvchLJuqpB6CWZi1Q5kPhnV3WdJ1jairAGFHhadrWuN-2BFVUlAyBAtDyAjTQbEtCP-2BzmMkJfvOX7gdv0ElvRu3zKl11uKVOdRb69sUAvPgYEqjVh2ZTDN-2Ffot6W-2F7Vt1XmrU-2BcJU6TGCpSu-2Be2AYQLdIRhFuN9MvxXRET5OuHWdBBO79iG-2FKEq8rfeU-2Fixrg6-2Ba0UONX6zX0IH-2B3BwXI-2BI-2FPQ5WEr2iu9eyHXYoQKu-2B06glKnQYBi-2FtxI7JpewOjeeGU-2BjMgQBRkXBw4BIfXe816CsgPLOwQvz-2BdYCl3VAW4zocoXS-2BOANK6Cr06mswoUxSy1BKiWlvxO0cJyviRvPEJtc5jIKLddyBymMOokvQcUZswQWCUc03WUmBzGkTyGKn2xYw8m9Q82en00yWk9zUB47Uv7ijKzlrp7083t3-2B-2FnAZ0oSq1a1LfrHZr90VYaqorgJXRDiuhju1j-2BvQWgSjX2Tymc4xOTv-2B7GYwywbSm-2BVZrWx7ZLPEI9CKlTJ2NGMcSBv-2BtA7uk-2FnARbK0v5rJy-2FJpkdgOXXSKaLtLhMABoYMgdURFnIBP3S5ykqzX1mt2m4UDyiZQ0Xk-2Bca7aMj2cFDq-2FoonQ-2FhxjwG6nMIhLxeaaxP1F2S10fVKX7JdiMYcOyowt-2F6DbwN6LCEq2xf2iwVUGYriFY7GGfxrg9Dil0s-2FUqHEOiyTLLgXDvkbA2IwFPv6VGvPeBzdQ9klMs2fpxcADpkM21jYdFPVLZy13-2BdyYyhLhZagGhYVHIrXLXQUq-2FSS6hO2wsXItAithp-2BoB0Msq-2BEDQMaSaAyauZvE-2FfHY3weg-3D-3D

HTTP Response

302
167.89.115.56:80

links.notification.intuit.com

msedge.exe

236 B
144 B
5
3
54.70.16.125:443

https://connect.intuit.com/portal/rest/reporting/batch

tls, http2

msedge.exe

30.4kB
74.5kB
85
94

HTTP Request

GET https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US

HTTP Response

302

HTTP Request

GET https://connect.intuit.com/t/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f?cta=viewinvoicenow&locale=en_US

HTTP Response

200

HTTP Request

GET https://connect.intuit.com/portal/rest/pdf/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f/invoice.pdf

HTTP Request

POST https://connect.intuit.com/portal/rest/experiments

HTTP Request

POST https://connect.intuit.com/portal/rest/invoice/scs-v1-8c6a11b278d5419facbdd8298db678401d47ae760b39411cad33d66a82ad62cedd4c40c3adc9478583f0c42533b1b29f/view

HTTP Request

POST https://connect.intuit.com/portal/rest/reporting/prometheus/view

HTTP Response

200

HTTP Request

POST https://connect.intuit.com/portal/rest/reporting/batch

HTTP Response

200

HTTP Response

201

HTTP Request

POST https://connect.intuit.com/portal/rest/reporting/batch

HTTP Response

200

HTTP Response

201

HTTP Request

POST https://connect.intuit.com/portal/rest/reporting/batch

HTTP Response

200

HTTP Response

201

HTTP Request

POST https://connect.intuit.com/portal/rest/reporting/batch

HTTP Request

POST https://connect.intuit.com/portal/rest/reporting/prometheus/pageLoad

HTTP Response

201

HTTP Response

200

HTTP Request

POST https://connect.intuit.com/portal/rest/reporting/batch

HTTP Response

201
52.222.144.48:443

static.cns-icn-prod.a.intuit.com

tls, http2

msedge.exe

1.1kB
6.2kB
12
12
52.222.144.48:443

static.cns-icn-prod.a.intuit.com

tls, http2

msedge.exe

1.1kB
6.2kB
12
12
52.222.144.48:443

https://static.cns-icn-prod.a.intuit.com/favicon.png

tls, http2

msedge.exe

20.4kB
443.6kB
330
339

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/truste.svg

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/1193.3dd404b7ea3c36c8.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/9835.59c20536643b9726.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/main-593e743601aca717.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/7868.851b65ef7fa1a422.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/framework-560765ab0625ba27.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/webpack-7bf7424d79abb07c.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/_app-139980d28336c189.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6859-0e318ca24b4b6137.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/3161-4814bf9a60fc5a8d.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/7465-1b3ac9cfccea5cb5.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8804-0df16ebd6cb32488.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6019-156a31d24def11fe.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/6139-3bd6b0b4def91944.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/pages/index-94dd346e6cd9cd1d.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/1.27.1-release_1.27.1-7499608/_buildManifest.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/1.27.1-release_1.27.1-7499608/_ssgManifest.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/2766.b29c036bad593b19.js

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/_next/static/chunks/8482.b28cf868ec59260b.js

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/favicon.png

HTTP Response

200
52.222.144.48:443

static.cns-icn-prod.a.intuit.com

tls, http2

msedge.exe

1.1kB
6.2kB
12
12
52.222.144.48:443

static.cns-icn-prod.a.intuit.com

tls

msedge.exe

1.1kB
6.6kB
11
11
52.222.144.48:443

static.cns-icn-prod.a.intuit.com

tls

msedge.exe

1.1kB
6.1kB
11
11
52.222.144.48:443

https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2

tls, http2

msedge.exe

6.4kB
117.1kB
97
97

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Rg_web.woff2

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Demi_web.woff2

HTTP Request

GET https://static.cns-icn-prod.a.intuit.com/fonts/AvenirNext-forINTUIT-Web-Fonts/AvenirNext+forINTUIT+W05+Mediu_web.woff2

HTTP Response

200

HTTP Response

200

HTTP Response

200
52.222.144.48:443

static.cns-icn-prod.a.intuit.com

tls, http2

msedge.exe

1.1kB
6.2kB
11
11
52.222.144.48:443

static.cns-icn-prod.a.intuit.com

tls, http2

msedge.exe

1.1kB
6.2kB
11
11
23.49.161.51:443

https://smx.intuit.com/mr/v2/giant-v.js

tls, http

msedge.exe

1.9kB
17.9kB
15
21

HTTP Request

GET https://smx.intuit.com/mr/v2/giant-v.js

HTTP Response

200
204.246.175.76:443

https://cdn.segment.com/next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz

tls, http2

msedge.exe

4.0kB
68.2kB
52
61

HTTP Request

GET https://cdn.segment.com/analytics.js/v1/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/analytics.min.js

HTTP Response

200

HTTP Request

GET https://cdn.segment.com/analytics-next/bundles/ajs-destination.bundle.ed53a26b6edc80c65d73.js

HTTP Response

200

HTTP Request

GET https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js

HTTP Response

200

HTTP Request

GET https://cdn.segment.com/next-integrations/integrations/google-adwords-new/1.3.0/google-adwords-new.dynamic.js.gz

HTTP Response

200

HTTP Request

GET https://cdn.segment.com/next-integrations/integrations/vendor/commons.a61d7bea37d2de5d4b69.js.gz

HTTP Response

200
52.222.144.48:443

static.cns-icn-prod.a.intuit.com

tls, http2

msedge.exe

1.5kB
798 B
9
8
204.246.175.76:443

https://cdn.segment.com/v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings

tls, http2

msedge.exe

1.8kB
8.5kB
16
18

HTTP Request

GET https://cdn.segment.com/v1/projects/xCFNzXfegnqVeUJzI6KkruZL5ZzL7iXy/settings

HTTP Response

200
52.42.176.145:443

https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/m

tls, http2

msedge.exe

12.5kB
10.4kB
31
24

HTTP Request

POST https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/p

HTTP Request

POST https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/t

HTTP Request

POST https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/t

HTTP Request

POST https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/t

HTTP Response

202

HTTP Response

202

HTTP Response

202

HTTP Response

202

HTTP Request

POST https://eventbus.intuit.com/v2/segment/sbseg-qbo-clickstream/m

HTTP Response

200
52.39.169.71:443

https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1

tls, http2

msedge.exe

48.6kB
8.7kB
57
39

HTTP Request

POST https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1

HTTP Request

POST https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1

HTTP Response

200

HTTP Response

200

HTTP Request

POST https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1

HTTP Response

200

HTTP Request

POST https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1

HTTP Response

200

HTTP Request

POST https://prd.sentry-io.a.intuit.com/api/3/envelope/?sentry_key=ebe3b2c7c21247ebaee17c5bf4ca67c3&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.53.1

HTTP Response

200
52.42.176.145:443

eventbus.intuit.com

msedge.exe

98 B
52 B
2
1
52.42.176.145:443

eventbus.intuit.com

msedge.exe

98 B
52 B
2
1
52.42.176.145:443

eventbus.intuit.com

msedge.exe

98 B
52 B
2
1
2.22.143.207:443

plugin.intuitcdn.net

tls

msedge.exe

1.1kB
4.5kB
9
9
2.22.143.207:443

https://plugin.intuitcdn.net/gdpr-widget/0.2.5/dist/gdpr-widget-en-gb.js

tls, http2

msedge.exe

5.2kB
124.6kB
82
102

HTTP Request

GET https://plugin.intuitcdn.net/gdpr-util/0.1.8/dist/gdprUtilBundle.js

HTTP Request

GET https://plugin.intuitcdn.net/gdpr-widget/0.2.5/dist/gdpr-widget-en-gb.js

HTTP Response

200

HTTP Response

200
52.39.169.71:443

prd.sentry-io.a.intuit.com

msedge.exe

98 B
52 B
2
1
2.22.143.207:443

https://assets.intuitcdn.net/fonts/avenir-600.woff2

tls, http2

msedge.exe

3.5kB
74.1kB
49
65

HTTP Request

GET https://assets.intuitcdn.net/fonts/avenir-400.woff2

HTTP Request

GET https://assets.intuitcdn.net/fonts/avenir-600.woff2

HTTP Response

200

HTTP Response

200
2.22.143.207:443

assets.intuitcdn.net

tls

msedge.exe

1.1kB
4.5kB
9
9
150.171.27.10:443

tse1.mm.bing.net

tls, http2

1.2kB
6.9kB
15
13
150.171.27.10:443

tse1.mm.bing.net

tls, http2

1.2kB
6.9kB
15
13
150.171.27.10:443

tse1.mm.bing.net

tls, http2

1.2kB
6.9kB
15
13
150.171.27.10:443

tse1.mm.bing.net

tls, http2

1.2kB
6.9kB
15
13
150.171.27.10:443

https://tse1.mm.bing.net/th?id=OADD2.10239360284736_11427X8L96F0YA4AW&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

tls, http2

120.7kB
3.5MB
2555
2551

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239340418559_1LXGGCLQWFST3067K&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239360284735_1J9G8ZRD0Q7KNETKQ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239340418560_12H05GS2AXF1O4KMU&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239339388115_1OIS3ERNXZ6FC49JX&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239339388116_1HBZ24TGK6VST5MLJ&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239360284736_11427X8L96F0YA4AW&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

HTTP Response

200

8.8.8.8:53

8.8.8.8.in-addr.arpa

dns

66 B
90 B
1
1

DNS Request

8.8.8.8.in-addr.arpa
8.8.8.8:53

196.249.167.52.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

196.249.167.52.in-addr.arpa
8.8.8.8:53

links.notification.intuit.com

dns

msedge.exe

75 B
293 B
1
1

DNS Request

links.notification.intuit.com

DNS Response

167.89.115.56

167.89.115.120

167.89.118.109

167.89.118.83

167.89.115.61

167.89.115.28

167.89.118.52

167.89.118.95

167.89.115.150

167.89.115.52

167.89.118.120

167.89.118.128
8.8.8.8:53

connect.intuit.com

dns

msedge.exe

64 B
383 B
1
1

DNS Request

connect.intuit.com

DNS Response

54.70.16.125

52.42.222.96

35.82.127.17

52.25.47.190

54.148.192.65

35.164.2.132

34.211.66.164

54.68.216.87
8.8.8.8:53

21.58.20.217.in-addr.arpa

dns

71 B
131 B
1
1

DNS Request

21.58.20.217.in-addr.arpa
8.8.8.8:53

56.115.89.167.in-addr.arpa

dns

72 B
125 B
1
1

DNS Request

56.115.89.167.in-addr.arpa
8.8.8.8:53

125.16.70.54.in-addr.arpa

dns

142 B
133 B
2
1

DNS Request

125.16.70.54.in-addr.arpa

DNS Request

125.16.70.54.in-addr.arpa
8.8.8.8:53

smx.intuit.com

dns

msedge.exe

60 B
159 B
1
1

DNS Request

smx.intuit.com

DNS Response

23.49.161.51
8.8.8.8:53

static.cns-icn-prod.a.intuit.com

dns

msedge.exe

78 B
142 B
1
1

DNS Request

static.cns-icn-prod.a.intuit.com

DNS Response

52.222.144.48

52.222.144.73

52.222.144.10

52.222.144.120
8.8.8.8:53

cdn.segment.com

dns

msedge.exe

61 B
120 B
1
1

DNS Request

cdn.segment.com

DNS Response

204.246.175.76
8.8.8.8:53

48.144.222.52.in-addr.arpa

dns

72 B
129 B
1
1

DNS Request

48.144.222.52.in-addr.arpa
8.8.8.8:53

51.161.49.23.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

51.161.49.23.in-addr.arpa
8.8.8.8:53

76.175.246.204.in-addr.arpa

dns

73 B
131 B
1
1

DNS Request

76.175.246.204.in-addr.arpa
8.8.8.8:53

38.97.161.18.in-addr.arpa

dns

71 B
127 B
1
1

DNS Request

38.97.161.18.in-addr.arpa
8.8.8.8:53

eventbus.intuit.com

dns

msedge.exe

65 B
218 B
1
1

DNS Request

eventbus.intuit.com

DNS Response

52.42.176.145

54.187.141.242

35.164.23.18

54.149.125.224

52.25.88.219

35.164.43.86

52.35.214.237

54.148.181.101
8.8.8.8:53

prd.sentry-io.a.intuit.com

dns

msedge.exe

72 B
190 B
1
1

DNS Request

prd.sentry-io.a.intuit.com

DNS Response

52.39.169.71

35.82.141.98

35.167.31.3
8.8.8.8:53

plugin.intuitcdn.net

dns

msedge.exe

66 B
159 B
1
1

DNS Request

plugin.intuitcdn.net

DNS Response

2.22.143.207
8.8.8.8:53

145.176.42.52.in-addr.arpa

dns

72 B
135 B
1
1

DNS Request

145.176.42.52.in-addr.arpa
8.8.8.8:53

71.169.39.52.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

71.169.39.52.in-addr.arpa
8.8.8.8:53

assets.intuitcdn.net

dns

msedge.exe

66 B
159 B
1
1

DNS Request

assets.intuitcdn.net

DNS Response

2.22.143.207
8.8.8.8:53

207.143.22.2.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

207.143.22.2.in-addr.arpa
8.8.8.8:53

168.179.250.142.in-addr.arpa

dns

148 B
112 B
2
1

DNS Request

168.179.250.142.in-addr.arpa

DNS Request

168.179.250.142.in-addr.arpa
224.0.0.251:5353

msedge.exe

441 B
7
8.8.8.8:53

50.23.12.20.in-addr.arpa

dns

70 B
156 B
1
1

DNS Request

50.23.12.20.in-addr.arpa
8.8.8.8:53

206.23.85.13.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

206.23.85.13.in-addr.arpa
8.8.8.8:53

40.58.20.217.in-addr.arpa

dns

71 B
131 B
1
1

DNS Request

40.58.20.217.in-addr.arpa
8.8.8.8:53

25.140.123.92.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

25.140.123.92.in-addr.arpa
8.8.8.8:53

57.169.31.20.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

57.169.31.20.in-addr.arpa
8.8.8.8:53

14.227.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

14.227.111.52.in-addr.arpa
8.8.8.8:53

26.35.223.20.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

26.35.223.20.in-addr.arpa
8.8.8.8:53

tse1.mm.bing.net

dns

62 B
170 B
1
1

DNS Request

tse1.mm.bing.net

DNS Response

150.171.27.10

150.171.28.10
8.8.8.8:53

10.27.171.150.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

10.27.171.150.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Filesize
328B

MD5
d810c66073d4931de1ef5dab38583bba

SHA1
260ec22ad491a7655a1972022e4fc06960be96dd

SHA256
d792d2cf0b1ecab3e566854c59216c2f85c16c8917eca70c28eff61eb5e07006

SHA512
1e839e7c5f133d2fa0041afd3284c1d850c19069b882c3459e0b25e903e0907ecf9fd826e1f13bdeb8a71c056dfd56248abee8e36c6d3cbe2e65f7089df8a038

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f9664c896e19205022c094d725f820b6

SHA1
f8f1baf648df755ba64b412d512446baf88c0184

SHA256
7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e

SHA512
3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
847d47008dbea51cb1732d54861ba9c9

SHA1
f2099242027dccb88d6f05760b57f7c89d926c0d

SHA256
10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1

SHA512
bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\85654631-c1d1-4420-a2ed-153569b1e668.tmp

Filesize
6KB

MD5
7c609639c97b6e7ee26cbb98a6a77638

SHA1
6a3b2aa9a2dbd094cb7c0621e743bd90effe6d7f

SHA256
c4d1aca7b5c36b04c92d3c0873edbad5150e3406d21a3af0d1e5fea071ab0dd0

SHA512
44de89a49dbe073699bcce66c0b97d1a64c7a1efb6b5682d5aa43203b72b4cfa5cad00a48a82d660fdd958f715ca1533ae01b9e2f82b7dcc42a7e7e25d4e9eb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
624B

MD5
238d6233d3596cba5c33755cfea9de03

SHA1
5318e3e167f01b6cf7ae405c88b1759b0de13fed

SHA256
83b6e9b56ee15fd717c673286c5f27f4cc7fc1cabf440d18aa4921a80476a9aa

SHA512
5f0a9de154c5ffe47fbef4edc65d5123b49c88c3dec7b1eec6a8a5cb64d35ed1e6eafb4ac80392c491e52078cce9ef17eb88f11e26175e1e6b61a537b096f66e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
869B

MD5
ff1457a0c6c3f6734fda450d1c5d72dd

SHA1
28285fcebde8d8afb37ea5026cbe1b01750a4264

SHA256
fdc9a954701439b17c0a0e00fcd53c3e4e401449f681336090094b05c264e169

SHA512
fb96924e0a217a657037d9328db1507f21c4895ea0fb2da503433d25a283184c090ceade658daa8e79d7fe238d0b4e82f33a2b000fc58c84189bf609b4fdd52c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d0b17ffbab6e7226d3d48733e6d46195

SHA1
46f318eb42f96201b3fa292de426323c1b68c63f

SHA256
d49d40e720ff688a54f69f3e6310d46067a9e36e9a8031a119a386e0c1a95578

SHA512
82d2da1f754109cd586fdfc213e09c2a5599b744b196130cc2c54eb1f5822165dfa5d9011eee93d0db112834c2ec4beab80183504ea8d944703b4a467b4386f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
954af025e04e5b11dfd568ecdac83b64

SHA1
844a5a07a9543ba02959ef99778a87c289722b17

SHA256
0c42b5577acf3501563b0b6fa35282b939a6f34c73b5941b76e01b50acf5e689

SHA512
269f3f489c64c975e175ab33d5d9d6f485a3e84ccd6564214ce504176e0cd1e379a287d75b3ac1c72b97d65cd5f02b4429c67444424c8f8f22b15fb2c1171703

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581f3b.TMP

Filesize
538B

MD5
79dd0b0f8102336b8554e40d6d08d0d7

SHA1
af86ab860c1eda71eba399b85714bedb8d746cb1

SHA256
98cd2ec2d4355c45fb8a23f3b9ec4513bdd88591479ae6b1297ec6c75a8091d6

SHA512
9e680e1a7572bb65cf18334c4c2435a52d085270488e64282f1d7d6fc4742e58a2b160d5d1daf7440ef7d4df94ed2858c52c934dad30b15867921d60e7c915b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ae21a7e39d562ab16bf0bf1b3b13867d

SHA1
e6b74f638be8380102383d8ffb1c7c77b9e4d9d5

SHA256
3f9e04603361a9705f0898866f886ee09ed38718b508682e4645a9e5eca8017b

SHA512
e15249af957effaecccd1a0555895a11547e94f986fa41ec70118f73c1d1063d4a9db7c816e2bc35878910aa9d6b48619f2d0c2b9b96ae3f5b383a63ec399d76

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Request