Windows Analysis Report
http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html

Overview

General Information

Sample URL:	http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html
Analysis ID:	1467904
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Phishing site detected (based on favicon image match)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Signatures

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	Avira URL Cloud: detection malicious, Label: phishing
Source: http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Antivirus detection for URL or domain

Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/FontManifest.json	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/manifest.json	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/main.dart.js	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.bin	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/icons/Icon-192.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/cupertino_icons/assets/CupertinoIcons.ttf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter.js	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/bg.jpg	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/fbv2.jpg	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.json	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/fonts/MaterialIcons-Regular.otf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/avatar.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/metav2.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/favicon.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/meta.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464	Avira URL Cloud: Label: phishing

Phishing

Phishing site detected (based on favicon image match)

Source: https://amplifyapp.com	Matcher: Template: facebook matched with high similarity
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	Matcher: Template: facebook matched with high similarity
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/#/	Matcher: Template: facebook matched with high similarity

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49760 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49778 version: TLS 1.2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49760 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flutter.js HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flutter_service_worker.js?v=1157178464 HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /icons/Icon-192.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.dart.js HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/AssetManifest.json HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/FontManifest.json HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/Icon-192.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.dart.js HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "8311e439dc154163771ac561c8cfcddd"If-Modified-Since: Mon, 01 Jul 2024 18:55:45 GMT
Source: global traffic	HTTP traffic detected: GET /assets/fonts/MaterialIcons-Regular.otf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/packages/cupertino_icons/assets/CupertinoIcons.ttf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/AssetManifest.bin HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/metav2.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/meta.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/fbv2.jpg HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/avatar.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/bg.jpg HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_98.2.dr

String found in binary or memory: else if(b===8)window.location.href="https://www.facebook.com/business/help" equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ipapi.co

Source: chromecache_91.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_98.2.dr	String found in binary or memory: https://api.flutter.dev/flutter/material/Scaffold/of.html
Source: chromecache_105.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base
Source: chromecache_99.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts
Source: chromecache_99.2.dr	String found in binary or memory: https://developers.google.com/web/fundamentals/primers/service-workers
Source: chromecache_98.2.dr, chromecache_99.2.dr	String found in binary or memory: https://docs.flutter.dev/development/platform-integration/web/initialization
Source: chromecache_98.2.dr	String found in binary or memory: https://flutter.dev/docs/cookbook/design/fonts
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/a/
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v24/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFab5s79iz64w.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notoemoji/v34/bMrnmSyK7YY-MEu6aWjPDs-ar6uWaGWuob-r0jwvS-FGJCMY.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNb4j5Ba_2c7A.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansadlam/v21/neIczCCpqp0s5pPusPamd81eMfjPonvqdbYxxpgufnv0TGnBZLwhuv
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansanatolianhieroglyphs/v14/ijw9s4roRME5LLRxjsRb8A0gKPSWq4BbDmHHu6j
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansarabic/v18/nwpxtLGrOAZMl5nJ_wfgRg3DrWFZWsnVBJ_sS6tlqHHFlhQ5l3sQW
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansarmenian/v42/ZgN0jOZKPa7CHqq0h37c7ReDUubm2SEdFXp7ig73qtTY5idb74R
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansavestan/v20/bWti7ejKfBziStx7lIzKOLQZKhIJkyu9SASLji8U.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbalinese/v23/NaPwcYvSBuhTirw6IaFn6UrRDaqje-lpbbRtYf-Fwu2Ov7fdhE5
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbamum/v26/uk-0EGK3o6EruUbnwovcbBTkkklK_Ya_PBHfNGTPEddO-_gLykxEkx
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbassavah/v17/PN_bRee-r3f7LnqsD5sax12gjZn7mBpL5YwUpA2MBdcFn4MaAc6
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbatak/v16/gok2H6TwAEdtF9N8-mdTCQvT-Zdgo4_PHuk74A.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbengali/v20/Cn-SJsCGWQxOjaGwMQ6fIiMywrNJIky6nvd8BjzVMvJx2mcSPVFp
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbhaiksuki/v15/UcC63EosKniBH4iELXATsSBWdvUHXxhj8rLUdU4wh9U.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbrahmi/v15/vEFK2-VODB8RrNDvZSUmQQIIByV18tK1W77HtMo.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbuginese/v17/esDM30ldNv-KYGGJpKGk18phe_7Da6_gtfuEXLmNtw.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbuhid/v17/Dxxy8jiXMW75w3OmoDXVWJD7YwzAe6tgnaFoGA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscanadianaboriginal/v21/4C_TLjTuEqPj-8J01CwaGkiZ9os0iGVkezM1mUT-j
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscarian/v15/LDIpaoiONgYwA9Yc6f0gUILeMIOgs7ob9yGLmfI.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscaucasianalbanian/v16/nKKA-HM_FYFRJvXzVXaANsU0VzsAc46QGOkWytlTs-
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanschakma/v17/Y4GQYbJ8VTEp4t3MKJSMjg5OIzhi4JjTQhYBeYo.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscham/v27/pe06MIySN5pO62Z5YkFyQb_bbuRhe6D4yip43qfcERwcv7GykboaLg.
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscherokee/v19/KFOPCm6Yu8uF-29fiz9vQF9YWK6Z8O10cHNA0cSkZCHYWi5PDkm
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscoptic/v17/iJWfBWmUZi_OHPqn4wq6kgqumOEd78u_VG0xR4Y.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscuneiform/v15/bMrrmTWK7YY-MF22aHGGd7H8PhJtvBDWgb9JlRQueeQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscypriot/v15/8AtzGta9PYqQDjyp79a6f8Cj-3a3cxIsK5MPpahF.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansdeseret/v15/MwQsbgPp1eKH6QsAVuFb9AZM6MMr2Vq9ZnJSZtQG.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansdevanagari/v24/TuGoUUFzXI5FBtUq5a8bjKYTZjtRU6Sgv3NaV_SNmI0b8QQCQ
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansduployan/v16/gokzH7nwAEdtF9N8-mdTDx_X9JM5wsvrFsIn6WYDvA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansegyptianhieroglyphs/v26/vEF42-tODB8RrNDvZSUmRhcQHzx1s7y_F9-j3qSz
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanselbasan/v15/-F6rfiZqLzI2JPCgQBnw400qp1trvHdlre4dFcFh.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanselymaic/v15/UqyKK9YTJW5liNMhTMqe9vUFP65ZD4AjWOT0zi2V.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgeorgian/v41/PlIaFke5O6RzLfvNNVSitxkr76PRHBC4Ytyq-Gof7PUs4S7zWn-
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansglagolitic/v15/1q2ZY4-BBFBst88SU_tOj4J-4yuNF_HI4ERK4Amu7nM1.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgothic/v15/TuGKUUVzXI5FBtUq5a8bj6wRbzxTFMX40kFQRx0.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgrantha/v17/3y976akwcCjmsU8NDyrKo3IQfQ4o-r8cFeulHc6N.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgujarati/v22/wlpWgx_HC1ti5ViekvcxnhMlCVo3f5pv17ivlzsUB14gg1TMR2G
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgunjalagondi/v15/bWto7e7KfBziStx7lIzKPrcSMwcEnCv6DW7n5hcVXYMTK4q
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgurmukhi/v25/w8g9H3EvQP81sInb43inmyN9zZ7hb7ATbSWo4q8dJ74a3cVrYFQ
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanshanunoo/v17/f0Xs0fCv8dxkDWlZSoXOj6CphMloFsEsEpgL_ix2.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanshatran/v15/A2BBn4Ne0RgnVF3Lnko-0sOBIfL_mM83r1nwzDs.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanshebrew/v42/or3HQ7v33eiDljA1IufXTtVf7V6RvEEdhQlk0LlGxCyaeNKYZC0sq
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansimperialaramaic/v15/a8IMNpjwKmHXpgXbMIsbTc_kvks91LlLetBr5itQrtdm
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansindicsiyaqnumbers/v15/6xK5dTJFKcWIu4bpRBjRZRpsIYHabOeZ8UZLubTzpX
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansinscriptionalpahlavi/v15/ll8UK3GaVDuxR-TEqFPIbsR79Xxz9WEKbwsjpz7
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansinscriptionalparthian/v15/k3k7o-IMPvpLmixcA63oYi-yStDkgXuXncL7dz
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansjavanese/v21/2V01KJkDAIA6Hp4zoSScDjV0Y-eoHAHT-Z3MngEefiidxJnkFFl
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskaithi/v16/buEtppS9f8_vkXadMBJJu0tWjLwjQi0KdoZIKlo.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskannada/v21/8vIs7xs32H97qzQKnzfeXycxXZyUmySvZWItmf1fe6TVmgop9ndp
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskayahli/v20/B50nF61OpWTRcGrhOVJJwOMXdca6Yecki3E06x2jVTX3WCc3CZH4
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskharoshthi/v15/Fh4qPiLjKS30-P4-pGMMXCCfvkc5Vd7KE5z4rFyx5mR1.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskhmer/v23/ijw3s5roRME5LLRxjsRb-gssOenAyendxrgV2c-Zw-9vbVUti_Z_dW
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskhojki/v16/-nFnOHM29Oofr2wohFbTuPPKVWpmK_d709jy92k.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskhudawadi/v16/fdNi9t6ZsWBZ2k5ltHN73zZ5hc8HANlHIjRnVVXz9MY.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslao/v24/bx6lNx2Ol_ixgdYWLm9BwxM3NW6BOkuf763Clj73CiQ_J1Djx9pidOt4
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslepcha/v16/0QI7MWlB_JWgA166SKhu05TekNS32AJstqBXgd4.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslimbu/v22/3JnlSDv90Gmq2mrzckOBBRRoNJVj0MF3OHRDnA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslineara/v16/oPWS_l16kP4jCuhpgEGmwJOiA18FZj22zmHQAGQicw.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslinearb/v15/HhyJU4wt9vSgfHoORYOiXOckKNB737IV3BkFTq4EPw.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslisu/v25/uk-3EGO3o6EruUbnwovcYhz6kh57_nqbcTdjJnHP2Vwt29IlxkVdig.
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslycian/v15/QldVNSNMqAsHtsJ7UmqxBQA9r8wA5_naCJwn00E.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslydian/v15/c4m71mVzGN7s8FmIukZJ1v4ZlcPReUPXMoIjEQI.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmahajani/v15/-F6sfiVqLzI2JPCgQBnw60Agp0JrvD5Fh8ARHNh4zg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmalayalam/v21/sJoi3K5XjsSdcnzn071rL37lpAOsUThnDZIfPdbeSNzVakglNM
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmandaic/v15/cIfnMbdWt1w_HgCcilqhKQBo_OsMI5_A_gMk0izH.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmanichaean/v15/taiVGntiC4--qtsfi4Jp9-_GkPZZCcrfekqCNTtFCtdX.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmarchen/v17/aFTO7OZ_Y282EP-WyG6QTOX_C8WZMHhPk652ZaHk.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmasaramgondi/v17/6xK_dThFKcWIu4bpRBjRYRV7KZCbUq6n_1kPnuGe7RI9WSW
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmath/v15/7Aump_cpkSecTWaHRlH2hyV5UHkG-V048PW0.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmayannumerals/v15/PlIuFk25O6RzLfvNNVSivR09_KqYMwvvDKYjfIiE68oo6e
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmedefaidrin/v21/WwkzxOq6Dk-wranENynkfeVsNbRZtbOIdLb1exeM4ZeuabBf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmeeteimayek/v14/HTxAL3QyKieByqY9eZPFweO0be7M21uSphSdhqILnmrRfJ8t
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmeroitic/v16/IFS5HfRJndhE3P4b5jnZ3ITPvC6i00UDgDhTiKY9KQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmiao/v17/Dxxz8jmXMW75w3OmoDXVV4zyZUjgUYVslLhx.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmodi/v20/pe03MIySN5pO62Z5YkFyT7jeav5qWVAgVol-.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmongolian/v17/VdGCAYADGIwE0EopZx8xQfHlgEAMsrToxLsg6-av1x0.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmro/v18/qWcsB6--pZv9TqnUQMhe9b39WDzRtjkho4M.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmultani/v20/9Bty3ClF38_RfOpe1gCaZ8p30BOFO1A0pfCs5Kos.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmyanmar/v20/AlZq_y1ZtY3ymOryg38hOCSdOnFq0En23OU4o1AC.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnabataean/v15/IFS4HfVJndhE3P4b5jnZ34DfsjO330dNoBJ9hK8kMK4.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnewa/v16/7r3fqXp6utEsO9pI4f8ok8sWg8n_qN4R5lNU.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnewtailue/v19/H4cKBW-Pl9DZ0Xe_nHUapt7PovLXAhAnY7wqaLy-OJgU3p_pde
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnko/v2/esDX31ZdNv-KYGGJpKGk2_RpMpCMHMLBrdA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnushu/v18/rnCw-xRQ3B7652emAbAe_Ai1IYaFWFAMArZKqQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansogham/v15/kmKlZqk1GBDGN0mY6k5lmEmww4hrt5laQxcoCA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansolchiki/v20/N0b92TJNOPt-eHmFZCdQbrL32r-4CvhzDzRwlxOQYuVALWk267I6
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldhungarian/v15/E213_cD6hP3GwCJPEUssHEM0KqLaHJXg2PiIgRfjbg5nCYX
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansolditalic/v15/TuGOUUFzXI5FBtUq5a8bh68BJxxEVam7tWlRdRhtCC4d.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldnortharabian/v15/esDF30BdNv-KYGGJpKGk2tNiMt7Jar6olZDyNdr81zBQ
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldpermic/v16/snf1s1q1-dF8pli1TesqcbUY4Mr-ElrwKLdXgv_dKYB5.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldpersian/v15/wEOjEAbNnc5caQTFG18FHrZr9Bp6-8CmIJ_tqOlQfx9CjA.tt
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldsogdian/v15/3JnjSCH90Gmq2mrzckOBBhFhdrMst48aURt7neIqM-9uyg.tt
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldsoutharabian/v15/3qT5oiOhnSyU8TNFIdhZTice3hB_HWKsEnF--0XCHiKx
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldturkic/v15/yMJNMJVya43H0SUF_WmcGEQVqoEMKDKbsE2RjEw-Vyws.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoriya/v26/AYCppXfzfccDCstK_hrjDyADv5e9748vhj3CJBLHIARtgD6TJQS0dJ
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansosage/v18/oPWX_kB6kP4jCuhpgEGmw4mtAVtXRlaSxkrMCQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansosmanya/v18/8vIS7xs32H97qzQKnzfeWzUyUpOJmz6kR47NCV5Z.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanspahawhhmong/v17/bWtp7e_KfBziStx7lIzKKaMUOBEA3UPQDW7krzc_c48aMpM.
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanspalmyrene/v15/ZgNPjOdKPa7CHqq0h37c_ASCWvH93SFCPnK5ZpdNtcA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanspaucinhau/v19/x3d-cl3IZKmUqiMg_9wBLLtzl22EayN7ehIdjEWqKMxsKw.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansphagspa/v15/pxiZyoo6v8ZYyWh5WuPeJzMkd4SrGChkqkSsrvNXiA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansphoenician/v15/jizFRF9Ksm4Bt9PvcTaEkIHiTVtxmFtS5X7Jot-p5561.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanspsalterpahlavi/v15/rP2Vp3K65FkAtHfwd-eISGznYihzggmsicPfud3w1G3Ks
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansrejang/v18/Ktk2AKuMeZjqPnXgyqrib7DIogqwN4O3WYZB_sU.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansrunic/v15/H4c_BXWPl9DZ0Xe_nHUaus7W68WWaxpvHtgIYg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssaurashtra/v18/ea8GacQ0Wfz_XKWXe6OtoA8w8zvmYwTef9ndjhPTSIx9.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssc/v26/k3kXo84MPvpLmixcA63oeALhL4iJ-Q7m8w.otf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssharada/v16/gok0H7rwAEdtF9N8-mdTGALG6p0kwoXLPOwr4H8a.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansshavian/v15/CHy5V_HZE0jxJBQlqAeCKjJvQBNF4EFQSplv2Cwg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssiddham/v17/OZpZg-FwqiNLe9PELUikxTWDoCCeGqndk3Ic92ZH.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssinhala/v26/yMJ2MJBya43H0SUF_WmcBEEf4rQVO2P524V5N_MxQzQtb-tf5dJb
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssogdian/v15/taiQGn5iC4--qtsfi4Jp6eHPnfxQBo--Pm6KHidM.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssorasompeng/v24/PlIRFkO5O6RzLfvNNVSioxM2_OTrEhPyDLolKvCsHzCxWuGk
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssoyombo/v15/RWmSoL-Y6-8q5LTtXs6MF6q7xsxgY0FrIFOcK25W.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssundanese/v24/FwZw7_84xUkosG2xJo2gm7nFwSLQkdymq2mkz3Gz1_b6ctxpNN
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssylotinagri/v20/uU9eCAQZ75uhfF9UoWDRiY3q7Sf_VFV3m4dGFVfxN87gsj0.
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssymbols/v40/rP2up3q65FkAtHfwd-eIS2brbDN6gxP34F9jRRCe4W3gfQ8gavVF
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssymbols2/v17/I_uyMoGduATTei9eI8daxVHDyfisHr71ypPqfX71-AI.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssyriac/v15/Ktk2AKuMeZjqPnXgyqribqzQqgW0N4O3WYZB_sU.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstagalog/v17/J7aFnoNzCnFcV9ZI-sUYuvote1R0wwEAA8jHexnL.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstagbanwa/v17/Y4GWYbB8VTEp4t3MKJSMmQdIKjRtt_nZRjQEaYpGoQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstaile/v17/vEFK2-VODB8RrNDvZSUmVxEATwR58tK1W77HtMo.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstaitham/v19/kJEbBv0U4hgtwxDUw2x9q7tbjLIfbPGHBoaVSAZ3MdLJBCUbPgqu
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstaiviet/v16/8QIUdj3HhN_lv4jf9vsE-9GMOLsaSPZr644fWsRO9w.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstakri/v21/TuGJUVpzXI5FBtUq5a8bnKIOdTwQNO_W3khJXg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstamil/v26/ieVc2YdFI3GCY6SyQy1KfStzYKZgzN1z4LKDbeZce-0429tBManUkt
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstamilsupplement/v19/DdTz78kEtnooLS5rXF1DaruiCd_bFp_Ph4sGcn7ax_vs
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstelugu/v19/0FlxVOGZlE2Rrtr-HmgkMWJNjJ5_RyT8o8c7fHkeg-esVC5dzHkHI
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansthaana/v23/C8c14dM-vnz-s-3jaEsxlxHkBH-WZOETXfoQrfQ9Y4XrbhLhnu4-t
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansthai/v20/iJWnBXeUZi_OHPqn4wq6hQ2_hbJ1xyN9wd43SofNWcd1MKVQt_So_9C
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstifinagh/v17/I_uzMoCduATTei9eI8dawkHIwvmhCvbn6rnEcXfs4Q.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstirhuta/v15/t5t6IQYRNJ6TWjahPR6X-M-apUyby7uGUBsTrn5P.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansugaritic/v15/3qTwoiqhnSyU8TNFIdhZVCwbjCpkAXXkMhoIkiazfg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansvai/v17/NaPecZTSBuhTirw6IaFn_UrURMTsDIRSfr0.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanswancho/v17/zrf-0GXXyfn6Fs0lH9P4cUubP0GBqAPopiRfKp8.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanswarangciti/v17/EYqtmb9SzL1YtsZSScyKDXIeOv3w-zgsNvKRpeVCCXzdgA.tt
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansyi/v18/sJoD3LFXjsSdcnzn071rO3apxVDJNVgSNg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanszanabazarsquare/v16/Cn-jJsuGWQxOjaGwMQ6fOicyxLBEMRfDtkzl4uagQtJx
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Me5WZLCzYlKw.ttf
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/flutter/user/blob/main/lib/web_ui/lib/src/user/js_interop/js_loader.dart#L42
Source: chromecache_95.2.dr, chromecache_94.2.dr, chromecache_122.2.dr, chromecache_97.2.dr, chromecache_107.2.dr, chromecache_110.2.dr	String found in binary or memory: https://github.com/itfoundry/Poppins)
Source: chromecache_98.2.dr	String found in binary or memory: https://github.com/material-foundation/flutter-packages/issues/new/choose.
Source: chromecache_98.2.dr	String found in binary or memory: https://ipapi.co/json
Source: chromecache_94.2.dr, chromecache_122.2.dr	String found in binary or memory: https://scripts.sil.org/OFLPoppins-Bold4.004Poppins
Source: chromecache_95.2.dr, chromecache_110.2.dr	String found in binary or memory: https://scripts.sil.org/OFLPoppins-Regular4.004Poppins
Source: chromecache_97.2.dr, chromecache_107.2.dr	String found in binary or memory: https://scripts.sil.org/OFLPoppins-SemiBold4.004ITFO;
Source: chromecache_98.2.dr	String found in binary or memory: https://www.gstatic.com/flutter-canvaskit/45f6e009110df4f34ec2cf99f63cf73b71b7a420/
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/conversations/addConversations
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/conversations/conversationsDelete/
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/email/send
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/users/
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/users/update/

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49778 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@17/60@10/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1896,i,14678065025971338511,13714765998862464718,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1896,i,14678065025971338511,13714765998862464718,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.8.44	ipapi.co	United States	13335	CLOUDFLARENETUS	false
18.65.39.51	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com	United States	3	MIT-GATEWAYSUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.65.39.113	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

Contacted Domains

Name	IP	Active
ipapi.co	104.26.8.44	true
bg.microsoft.map.fastly.net	199.232.210.172	true
www.google.com	142.250.186.132	true
helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com	18.65.39.51	true
fp2e7a.wpc.phicdn.net	192.229.221.95	true
windowsupdatebg.s.llnwi.net	87.248.204.0	true

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/#/	true		unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/FontManifest.json	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/manifest.json	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/main.dart.js	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/icons/Icon-192.png	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/cupertino_icons/assets/CupertinoIcons.ttf	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.bin	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/fbv2.jpg	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter.js	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/bg.jpg	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/fonts/MaterialIcons-Regular.otf	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.json	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/avatar.png	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/metav2.png	false	Avira URL Cloud: phishing	unknown
http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	true		unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/favicon.png	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	true		unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/meta.png	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464	false	Avira URL Cloud: phishing	unknown
https://ipapi.co/json	false	Avira URL Cloud: safe	unknown

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 100	PNG image data, 54 x 12, 8-bit gray+alpha, non-interlaced	82F724AA56DB0DA424F206B9991FD62E	C0334262E1A6720EFB47FA3334E8DD6437377836	D96115050F54FD0C168F20FB496755CE4A6857A57446DBDAD9310BFC1D79FCB8
Chrome Cache Entry: 101	PNG image data, 662 x 664, 8-bit/color RGBA, non-interlaced	02FB04256D936E0D83A6340A1D1F3AF4	B8BFE3B59F0DC0D7841D17F4352AC2CE0FEB2238	0734468737B7EAF71A997B518A6B70A4EC17D136F41BF3BB562429BBEA1DE8CB
Chrome Cache Entry: 102	JSON data	B0169C8E4A2B589E3C0D226AA86F67CB	B269DEB4E5E67D133ADF5CB00900B24CE4E14B04	2702332E380A68612FD1005614E684C839421D7C317FAA466D903C6C13887103
Chrome Cache Entry: 103	PNG image data, 480 x 480, 8-bit/color RGBA, non-interlaced	7A2DBFDEC08B3A38D668B605D78DF964	87DBA0BAA4BFFBB072A921C7C6A5199C26F83ABA	C770CE547AF85DF31198C63F7EBA9CBA64FF3A48F8EB127D4EA12181453036C8
Chrome Cache Entry: 104	JSON data	5A32D4310A6F5D9A6B651E75BA0D7372	1EEA93FDD82FAD31CE32E9B9428E415DFC737DA3	2CD9411B540E5C6E15AC65523A3601BEE668AECA9104E1DE136FC34B3A912771
Chrome Cache Entry: 105	HTML document, ASCII text, with CRLF, LF line terminators	0A13749DFA99C24F040C7F444DF96DFD	FB1903DC2695265F109D9DD3EB7104D6089920C6	DDF84E67A663A8B0254842E41C87B7AEF6D10D118AA9E4AD61771450AD4A6042
Chrome Cache Entry: 106	PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced	AC9A721A12BBC803B44F645561ECB1E1	293B2825C89D2ABD4B17E2F5AC30C30F5BA3724F	3DCE99077602F70421C1C6B2A240BC9B83D64D86681D45F2154143310C980BE3
Chrome Cache Entry: 107	TrueType Font data, 13 tables, 1st "GDEF", 8 names, Microsoft, language 0x409	8360FDD61FD8609EF10E61C40C0ECA11	C80E173F72D4F31827D75C4EC934EDE660D35B16	A24A61E9A408F85504DCDCD11EDC4995ADCEB4AB585C0011F39CFBE193248B71
Chrome Cache Entry: 108	OpenType font data	0F341CB48F96334DFC114136D18A1DB6	091CFB252BEBB642FEF1F98BB2E912B9293E407C	2418EC80C4672B4CDB3AF33E6AC4314A559D88000636BE249B3CEF5A4F37D1CD
Chrome Cache Entry: 109	TrueType Font data, 12 tables, 1st "OS/2", 7 names, Microsoft, language 0x409	57D849D738900CFD590E9ADC7E208250	41985B8972E5289666D6054B2242F562F1D6E11A	7FAEBFC34FCF9AEED5ED14C8D859995DA91D26EE4D515A5D5A632A14CC6B3D98
Chrome Cache Entry: 110	TrueType Font data, 13 tables, 1st "GDEF", 8 names, Microsoft, language 0x409	9BA5C294B162C2688A1541EA64F36FB3	257C4AFC8725D026F06E0208E2AE7BFE079F1452	705290B12F58C6D70AAFCAAF461DBC3D2F7F19D0F4362AF1843B107D95D4960A
Chrome Cache Entry: 111	TrueType Font data, 10 tables, 1st "OS/2", 7 names, Microsoft, language 0x409	658B490C9DA97710B01BD0F8825FCE94	0C454D0B88EA5736402CDD5A19AE767765DCBA6D	2395721EC2A7BA59D9EA05E0567339CA73D280E8768FB3F7ECEB6FD2C1824913
Chrome Cache Entry: 112	WebAssembly (wasm) binary module version 0x1 (MVP)	FC18C3010856029414B70CAE1AFC5CD9	98A8566757D4776826962E54DC1AA9784C4A8965	C163375D22119DDB60045F34F2C838B42550A9E9FFCCD52511E892B2E1BCBA53
Chrome Cache Entry: 114	JSON data	3849201717DD51D96B654574CCED466A	E24F74FECAB382E723EDA00292AA9EC36DC35EC0	842748142398582957A7231B1D55996C3036ECB3182289C2C0D48A387BB4DBCE
Chrome Cache Entry: 115	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 236x236, segment length 16, progressive, precision 8, 236x236, components 3	E165AF495D51EF5B46CAD3D602A2A5F8	E3D73BF45F360750678F666B4FA51553AAD7090D	171F1B3AC7B11EF605B96F91537ED2CC32AB21D7233733114A923D21D552B021
Chrome Cache Entry: 116	WebAssembly (wasm) binary module version 0x1 (MVP)	FC18C3010856029414B70CAE1AFC5CD9	98A8566757D4776826962E54DC1AA9784C4A8965	C163375D22119DDB60045F34F2C838B42550A9E9FFCCD52511E892B2E1BCBA53
Chrome Cache Entry: 117	JPEG image data, baseline, precision 8, 1920x175, components 3	49A366B72644F04EA8EFCCF9550FB0A5	54492AA337FC8EE34297A04FD789D202FBA78D58	289D99B21FAE145C868238C0C499DCF8E84BEA445B63E47E3406ACFE98E20A34
Chrome Cache Entry: 118	PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced	AC9A721A12BBC803B44F645561ECB1E1	293B2825C89D2ABD4B17E2F5AC30C30F5BA3724F	3DCE99077602F70421C1C6B2A240BC9B83D64D86681D45F2154143310C980BE3
Chrome Cache Entry: 119	TrueType Font data, 10 tables, 1st "OS/2", 7 names, Microsoft, language 0x409	D7791EF376C159F302B8AD90A748D2AB	8484EBFC7EFECDB9ABE12F03F94014A32B6781CC	E68CB27BED42FE434BE64D0D6296D8DC5B81686A725FE31D4293509F8598636E
Chrome Cache Entry: 120	TrueType Font data, 10 tables, 1st "OS/2", 7 names, Microsoft, language 0x409	5070443340D1D8CCEB516D02C3D6DEE7	2EDCBF8F12C01EF48617B87FD497C07FBE85087C	6B04AD8CD0E6BE09EB285526CC0E4F66F84AE231D7EEFFA4569F65B9FC3D511D
Chrome Cache Entry: 121	ASCII text, with CRLF, LF line terminators	DE0B30E26243DA6A9CB202CD20B4E88F	F2F8CF8FFCA9E73D91E354AE0069A41A3C8C433D	1583EBADF83E01BB081A0ABCDE021B998B64948952FD541AEC38C4BB6ED73318
Chrome Cache Entry: 122	TrueType Font data, 13 tables, 1st "GDEF", 8 names, Microsoft, language 0x409	C67DB2AD4A5CA29B517DA8EABAFD2459	C54A0034E60D6445CAEE8533684B3CEA13420C81	9ECFD020E9CC0B676025DF8390C0DC8CC2062523540887DD04BEC0EF4D5A449C
Chrome Cache Entry: 123	JSON data	FFCCE918F60617FED6FDD5C787356CC5	846A32513232598402EB182379F105EADECB2BE3	8C0D3BECCAC7837C17CE065F6F02B169D4E865ADA6D59E0DB8C0CF1B25B16AE7
Chrome Cache Entry: 90	data	8B1CF21A141E282CC9FCC19AD6B2028B	C7EFBC9D05F7E18D34D946A736E5487E1E1C550E	65597AF2671C420356B08D5CDBBEFB567B1BDA6B6613B32908C970B9342631FB
Chrome Cache Entry: 91	TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob	11EABCA2251325CFC5589C9C6FB57B46	096C9245B6A192D1403A82848E104A65F578A8EC	017C0BE9AAA6D0359737E1FA762AD304C0E0107927FAFF5A6C1F415C7F5244ED
Chrome Cache Entry: 92	ASCII text, with very long lines (545)	8C8392CE4A4364CBB240AA09B5652E05	9975BD51172FFC15DC947020B9141EA8CA1263A8	36E982E5547689D39881245052762524D943CE03E936FB414AF0A5E803C6283A
Chrome Cache Entry: 93	PNG image data, 480 x 480, 8-bit/color RGBA, non-interlaced	7A2DBFDEC08B3A38D668B605D78DF964	87DBA0BAA4BFFBB072A921C7C6A5199C26F83ABA	C770CE547AF85DF31198C63F7EBA9CBA64FF3A48F8EB127D4EA12181453036C8
Chrome Cache Entry: 94	TrueType Font data, 13 tables, 1st "GDEF", 8 names, Microsoft, language 0x409	C67DB2AD4A5CA29B517DA8EABAFD2459	C54A0034E60D6445CAEE8533684B3CEA13420C81	9ECFD020E9CC0B676025DF8390C0DC8CC2062523540887DD04BEC0EF4D5A449C
Chrome Cache Entry: 95	TrueType Font data, 13 tables, 1st "GDEF", 8 names, Microsoft, language 0x409	9BA5C294B162C2688A1541EA64F36FB3	257C4AFC8725D026F06E0208E2AE7BFE079F1452	705290B12F58C6D70AAFCAAF461DBC3D2F7F19D0F4362AF1843B107D95D4960A
Chrome Cache Entry: 96	PNG image data, 54 x 12, 8-bit gray+alpha, non-interlaced	82F724AA56DB0DA424F206B9991FD62E	C0334262E1A6720EFB47FA3334E8DD6437377836	D96115050F54FD0C168F20FB496755CE4A6857A57446DBDAD9310BFC1D79FCB8
Chrome Cache Entry: 97	TrueType Font data, 13 tables, 1st "GDEF", 8 names, Microsoft, language 0x409	8360FDD61FD8609EF10E61C40C0ECA11	C80E173F72D4F31827D75C4EC934EDE660D35B16	A24A61E9A408F85504DCDCD11EDC4995ADCEB4AB585C0011F39CFBE193248B71
Chrome Cache Entry: 98	ASCII text, with very long lines (727)	8311E439DC154163771AC561C8CFCDDD	03BF67566FA55360D8F9451E17FA69B296ED1DC4	EE86AA323D6EA1CC0B7AA375BA7BEEC43B22DD3B682D84C49200979A2CAE126F
Chrome Cache Entry: 99	ASCII text, with CRLF line terminators	6B515E434CEA20006B3EF1726D2C8894	65E782370BC35A4F5E37922F12DEBFAE61EFF946	EBEF4683C7634467E3E792E993CD8E28D44940D4299DD8F3F8CE8EA3C1F20B67

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	Avira URL Cloud: detection malicious, Label: phishing
Source: http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Antivirus detection for URL or domain

Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/FontManifest.json	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/manifest.json	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/main.dart.js	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.bin	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/icons/Icon-192.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/cupertino_icons/assets/CupertinoIcons.ttf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter.js	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/bg.jpg	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/fbv2.jpg	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.json	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/fonts/MaterialIcons-Regular.otf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/avatar.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/metav2.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/favicon.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/meta.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464	Avira URL Cloud: Label: phishing

Phishing

Phishing site detected (based on favicon image match)

Source: https://amplifyapp.com	Matcher: Template: facebook matched with high similarity
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	Matcher: Template: facebook matched with high similarity
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/#/	Matcher: Template: facebook matched with high similarity

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49760 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49778 version: TLS 1.2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49760 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flutter.js HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flutter_service_worker.js?v=1157178464 HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /icons/Icon-192.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.dart.js HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/AssetManifest.json HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/FontManifest.json HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/Icon-192.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.dart.js HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "8311e439dc154163771ac561c8cfcddd"If-Modified-Since: Mon, 01 Jul 2024 18:55:45 GMT
Source: global traffic	HTTP traffic detected: GET /assets/fonts/MaterialIcons-Regular.otf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/packages/cupertino_icons/assets/CupertinoIcons.ttf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/AssetManifest.bin HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/metav2.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/meta.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/fbv2.jpg HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/avatar.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/bg.jpg HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_98.2.dr

String found in binary or memory: else if(b===8)window.location.href="https://www.facebook.com/business/help" equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ipapi.co

Source: chromecache_91.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_98.2.dr	String found in binary or memory: https://api.flutter.dev/flutter/material/Scaffold/of.html
Source: chromecache_105.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base
Source: chromecache_99.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts
Source: chromecache_99.2.dr	String found in binary or memory: https://developers.google.com/web/fundamentals/primers/service-workers
Source: chromecache_98.2.dr, chromecache_99.2.dr	String found in binary or memory: https://docs.flutter.dev/development/platform-integration/web/initialization
Source: chromecache_98.2.dr	String found in binary or memory: https://flutter.dev/docs/cookbook/design/fonts
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/a/
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v24/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFab5s79iz64w.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notoemoji/v34/bMrnmSyK7YY-MEu6aWjPDs-ar6uWaGWuob-r0jwvS-FGJCMY.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNb4j5Ba_2c7A.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansadlam/v21/neIczCCpqp0s5pPusPamd81eMfjPonvqdbYxxpgufnv0TGnBZLwhuv
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansanatolianhieroglyphs/v14/ijw9s4roRME5LLRxjsRb8A0gKPSWq4BbDmHHu6j
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansarabic/v18/nwpxtLGrOAZMl5nJ_wfgRg3DrWFZWsnVBJ_sS6tlqHHFlhQ5l3sQW
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansarmenian/v42/ZgN0jOZKPa7CHqq0h37c7ReDUubm2SEdFXp7ig73qtTY5idb74R
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansavestan/v20/bWti7ejKfBziStx7lIzKOLQZKhIJkyu9SASLji8U.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbalinese/v23/NaPwcYvSBuhTirw6IaFn6UrRDaqje-lpbbRtYf-Fwu2Ov7fdhE5
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbamum/v26/uk-0EGK3o6EruUbnwovcbBTkkklK_Ya_PBHfNGTPEddO-_gLykxEkx
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbassavah/v17/PN_bRee-r3f7LnqsD5sax12gjZn7mBpL5YwUpA2MBdcFn4MaAc6
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbatak/v16/gok2H6TwAEdtF9N8-mdTCQvT-Zdgo4_PHuk74A.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbengali/v20/Cn-SJsCGWQxOjaGwMQ6fIiMywrNJIky6nvd8BjzVMvJx2mcSPVFp
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbhaiksuki/v15/UcC63EosKniBH4iELXATsSBWdvUHXxhj8rLUdU4wh9U.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbrahmi/v15/vEFK2-VODB8RrNDvZSUmQQIIByV18tK1W77HtMo.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbuginese/v17/esDM30ldNv-KYGGJpKGk18phe_7Da6_gtfuEXLmNtw.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbuhid/v17/Dxxy8jiXMW75w3OmoDXVWJD7YwzAe6tgnaFoGA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscanadianaboriginal/v21/4C_TLjTuEqPj-8J01CwaGkiZ9os0iGVkezM1mUT-j
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscarian/v15/LDIpaoiONgYwA9Yc6f0gUILeMIOgs7ob9yGLmfI.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscaucasianalbanian/v16/nKKA-HM_FYFRJvXzVXaANsU0VzsAc46QGOkWytlTs-
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanschakma/v17/Y4GQYbJ8VTEp4t3MKJSMjg5OIzhi4JjTQhYBeYo.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscham/v27/pe06MIySN5pO62Z5YkFyQb_bbuRhe6D4yip43qfcERwcv7GykboaLg.
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscherokee/v19/KFOPCm6Yu8uF-29fiz9vQF9YWK6Z8O10cHNA0cSkZCHYWi5PDkm
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscoptic/v17/iJWfBWmUZi_OHPqn4wq6kgqumOEd78u_VG0xR4Y.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscuneiform/v15/bMrrmTWK7YY-MF22aHGGd7H8PhJtvBDWgb9JlRQueeQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscypriot/v15/8AtzGta9PYqQDjyp79a6f8Cj-3a3cxIsK5MPpahF.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansdeseret/v15/MwQsbgPp1eKH6QsAVuFb9AZM6MMr2Vq9ZnJSZtQG.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansdevanagari/v24/TuGoUUFzXI5FBtUq5a8bjKYTZjtRU6Sgv3NaV_SNmI0b8QQCQ
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansduployan/v16/gokzH7nwAEdtF9N8-mdTDx_X9JM5wsvrFsIn6WYDvA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansegyptianhieroglyphs/v26/vEF42-tODB8RrNDvZSUmRhcQHzx1s7y_F9-j3qSz
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanselbasan/v15/-F6rfiZqLzI2JPCgQBnw400qp1trvHdlre4dFcFh.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanselymaic/v15/UqyKK9YTJW5liNMhTMqe9vUFP65ZD4AjWOT0zi2V.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgeorgian/v41/PlIaFke5O6RzLfvNNVSitxkr76PRHBC4Ytyq-Gof7PUs4S7zWn-
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansglagolitic/v15/1q2ZY4-BBFBst88SU_tOj4J-4yuNF_HI4ERK4Amu7nM1.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgothic/v15/TuGKUUVzXI5FBtUq5a8bj6wRbzxTFMX40kFQRx0.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgrantha/v17/3y976akwcCjmsU8NDyrKo3IQfQ4o-r8cFeulHc6N.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgujarati/v22/wlpWgx_HC1ti5ViekvcxnhMlCVo3f5pv17ivlzsUB14gg1TMR2G
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgunjalagondi/v15/bWto7e7KfBziStx7lIzKPrcSMwcEnCv6DW7n5hcVXYMTK4q
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgurmukhi/v25/w8g9H3EvQP81sInb43inmyN9zZ7hb7ATbSWo4q8dJ74a3cVrYFQ
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanshanunoo/v17/f0Xs0fCv8dxkDWlZSoXOj6CphMloFsEsEpgL_ix2.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanshatran/v15/A2BBn4Ne0RgnVF3Lnko-0sOBIfL_mM83r1nwzDs.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanshebrew/v42/or3HQ7v33eiDljA1IufXTtVf7V6RvEEdhQlk0LlGxCyaeNKYZC0sq
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansimperialaramaic/v15/a8IMNpjwKmHXpgXbMIsbTc_kvks91LlLetBr5itQrtdm
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansindicsiyaqnumbers/v15/6xK5dTJFKcWIu4bpRBjRZRpsIYHabOeZ8UZLubTzpX
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansinscriptionalpahlavi/v15/ll8UK3GaVDuxR-TEqFPIbsR79Xxz9WEKbwsjpz7
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansinscriptionalparthian/v15/k3k7o-IMPvpLmixcA63oYi-yStDkgXuXncL7dz
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansjavanese/v21/2V01KJkDAIA6Hp4zoSScDjV0Y-eoHAHT-Z3MngEefiidxJnkFFl
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskaithi/v16/buEtppS9f8_vkXadMBJJu0tWjLwjQi0KdoZIKlo.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskannada/v21/8vIs7xs32H97qzQKnzfeXycxXZyUmySvZWItmf1fe6TVmgop9ndp
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskayahli/v20/B50nF61OpWTRcGrhOVJJwOMXdca6Yecki3E06x2jVTX3WCc3CZH4
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskharoshthi/v15/Fh4qPiLjKS30-P4-pGMMXCCfvkc5Vd7KE5z4rFyx5mR1.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskhmer/v23/ijw3s5roRME5LLRxjsRb-gssOenAyendxrgV2c-Zw-9vbVUti_Z_dW
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskhojki/v16/-nFnOHM29Oofr2wohFbTuPPKVWpmK_d709jy92k.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskhudawadi/v16/fdNi9t6ZsWBZ2k5ltHN73zZ5hc8HANlHIjRnVVXz9MY.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslao/v24/bx6lNx2Ol_ixgdYWLm9BwxM3NW6BOkuf763Clj73CiQ_J1Djx9pidOt4
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslepcha/v16/0QI7MWlB_JWgA166SKhu05TekNS32AJstqBXgd4.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslimbu/v22/3JnlSDv90Gmq2mrzckOBBRRoNJVj0MF3OHRDnA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslineara/v16/oPWS_l16kP4jCuhpgEGmwJOiA18FZj22zmHQAGQicw.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslinearb/v15/HhyJU4wt9vSgfHoORYOiXOckKNB737IV3BkFTq4EPw.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslisu/v25/uk-3EGO3o6EruUbnwovcYhz6kh57_nqbcTdjJnHP2Vwt29IlxkVdig.
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslycian/v15/QldVNSNMqAsHtsJ7UmqxBQA9r8wA5_naCJwn00E.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslydian/v15/c4m71mVzGN7s8FmIukZJ1v4ZlcPReUPXMoIjEQI.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmahajani/v15/-F6sfiVqLzI2JPCgQBnw60Agp0JrvD5Fh8ARHNh4zg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmalayalam/v21/sJoi3K5XjsSdcnzn071rL37lpAOsUThnDZIfPdbeSNzVakglNM
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmandaic/v15/cIfnMbdWt1w_HgCcilqhKQBo_OsMI5_A_gMk0izH.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmanichaean/v15/taiVGntiC4--qtsfi4Jp9-_GkPZZCcrfekqCNTtFCtdX.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmarchen/v17/aFTO7OZ_Y282EP-WyG6QTOX_C8WZMHhPk652ZaHk.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmasaramgondi/v17/6xK_dThFKcWIu4bpRBjRYRV7KZCbUq6n_1kPnuGe7RI9WSW
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmath/v15/7Aump_cpkSecTWaHRlH2hyV5UHkG-V048PW0.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmayannumerals/v15/PlIuFk25O6RzLfvNNVSivR09_KqYMwvvDKYjfIiE68oo6e
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmedefaidrin/v21/WwkzxOq6Dk-wranENynkfeVsNbRZtbOIdLb1exeM4ZeuabBf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmeeteimayek/v14/HTxAL3QyKieByqY9eZPFweO0be7M21uSphSdhqILnmrRfJ8t
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmeroitic/v16/IFS5HfRJndhE3P4b5jnZ3ITPvC6i00UDgDhTiKY9KQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmiao/v17/Dxxz8jmXMW75w3OmoDXVV4zyZUjgUYVslLhx.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmodi/v20/pe03MIySN5pO62Z5YkFyT7jeav5qWVAgVol-.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmongolian/v17/VdGCAYADGIwE0EopZx8xQfHlgEAMsrToxLsg6-av1x0.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmro/v18/qWcsB6--pZv9TqnUQMhe9b39WDzRtjkho4M.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmultani/v20/9Bty3ClF38_RfOpe1gCaZ8p30BOFO1A0pfCs5Kos.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmyanmar/v20/AlZq_y1ZtY3ymOryg38hOCSdOnFq0En23OU4o1AC.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnabataean/v15/IFS4HfVJndhE3P4b5jnZ34DfsjO330dNoBJ9hK8kMK4.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnewa/v16/7r3fqXp6utEsO9pI4f8ok8sWg8n_qN4R5lNU.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnewtailue/v19/H4cKBW-Pl9DZ0Xe_nHUapt7PovLXAhAnY7wqaLy-OJgU3p_pde
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnko/v2/esDX31ZdNv-KYGGJpKGk2_RpMpCMHMLBrdA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnushu/v18/rnCw-xRQ3B7652emAbAe_Ai1IYaFWFAMArZKqQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansogham/v15/kmKlZqk1GBDGN0mY6k5lmEmww4hrt5laQxcoCA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansolchiki/v20/N0b92TJNOPt-eHmFZCdQbrL32r-4CvhzDzRwlxOQYuVALWk267I6
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldhungarian/v15/E213_cD6hP3GwCJPEUssHEM0KqLaHJXg2PiIgRfjbg5nCYX
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansolditalic/v15/TuGOUUFzXI5FBtUq5a8bh68BJxxEVam7tWlRdRhtCC4d.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldnortharabian/v15/esDF30BdNv-KYGGJpKGk2tNiMt7Jar6olZDyNdr81zBQ
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldpermic/v16/snf1s1q1-dF8pli1TesqcbUY4Mr-ElrwKLdXgv_dKYB5.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldpersian/v15/wEOjEAbNnc5caQTFG18FHrZr9Bp6-8CmIJ_tqOlQfx9CjA.tt
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldsogdian/v15/3JnjSCH90Gmq2mrzckOBBhFhdrMst48aURt7neIqM-9uyg.tt
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldsoutharabian/v15/3qT5oiOhnSyU8TNFIdhZTice3hB_HWKsEnF--0XCHiKx
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldturkic/v15/yMJNMJVya43H0SUF_WmcGEQVqoEMKDKbsE2RjEw-Vyws.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoriya/v26/AYCppXfzfccDCstK_hrjDyADv5e9748vhj3CJBLHIARtgD6TJQS0dJ
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansosage/v18/oPWX_kB6kP4jCuhpgEGmw4mtAVtXRlaSxkrMCQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansosmanya/v18/8vIS7xs32H97qzQKnzfeWzUyUpOJmz6kR47NCV5Z.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanspahawhhmong/v17/bWtp7e_KfBziStx7lIzKKaMUOBEA3UPQDW7krzc_c48aMpM.
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanspalmyrene/v15/ZgNPjOdKPa7CHqq0h37c_ASCWvH93SFCPnK5ZpdNtcA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanspaucinhau/v19/x3d-cl3IZKmUqiMg_9wBLLtzl22EayN7ehIdjEWqKMxsKw.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansphagspa/v15/pxiZyoo6v8ZYyWh5WuPeJzMkd4SrGChkqkSsrvNXiA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansphoenician/v15/jizFRF9Ksm4Bt9PvcTaEkIHiTVtxmFtS5X7Jot-p5561.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanspsalterpahlavi/v15/rP2Vp3K65FkAtHfwd-eISGznYihzggmsicPfud3w1G3Ks
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansrejang/v18/Ktk2AKuMeZjqPnXgyqrib7DIogqwN4O3WYZB_sU.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansrunic/v15/H4c_BXWPl9DZ0Xe_nHUaus7W68WWaxpvHtgIYg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssaurashtra/v18/ea8GacQ0Wfz_XKWXe6OtoA8w8zvmYwTef9ndjhPTSIx9.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssc/v26/k3kXo84MPvpLmixcA63oeALhL4iJ-Q7m8w.otf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssharada/v16/gok0H7rwAEdtF9N8-mdTGALG6p0kwoXLPOwr4H8a.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansshavian/v15/CHy5V_HZE0jxJBQlqAeCKjJvQBNF4EFQSplv2Cwg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssiddham/v17/OZpZg-FwqiNLe9PELUikxTWDoCCeGqndk3Ic92ZH.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssinhala/v26/yMJ2MJBya43H0SUF_WmcBEEf4rQVO2P524V5N_MxQzQtb-tf5dJb
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssogdian/v15/taiQGn5iC4--qtsfi4Jp6eHPnfxQBo--Pm6KHidM.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssorasompeng/v24/PlIRFkO5O6RzLfvNNVSioxM2_OTrEhPyDLolKvCsHzCxWuGk
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssoyombo/v15/RWmSoL-Y6-8q5LTtXs6MF6q7xsxgY0FrIFOcK25W.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssundanese/v24/FwZw7_84xUkosG2xJo2gm7nFwSLQkdymq2mkz3Gz1_b6ctxpNN
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssylotinagri/v20/uU9eCAQZ75uhfF9UoWDRiY3q7Sf_VFV3m4dGFVfxN87gsj0.
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssymbols/v40/rP2up3q65FkAtHfwd-eIS2brbDN6gxP34F9jRRCe4W3gfQ8gavVF
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssymbols2/v17/I_uyMoGduATTei9eI8daxVHDyfisHr71ypPqfX71-AI.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssyriac/v15/Ktk2AKuMeZjqPnXgyqribqzQqgW0N4O3WYZB_sU.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstagalog/v17/J7aFnoNzCnFcV9ZI-sUYuvote1R0wwEAA8jHexnL.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstagbanwa/v17/Y4GWYbB8VTEp4t3MKJSMmQdIKjRtt_nZRjQEaYpGoQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstaile/v17/vEFK2-VODB8RrNDvZSUmVxEATwR58tK1W77HtMo.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstaitham/v19/kJEbBv0U4hgtwxDUw2x9q7tbjLIfbPGHBoaVSAZ3MdLJBCUbPgqu
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstaiviet/v16/8QIUdj3HhN_lv4jf9vsE-9GMOLsaSPZr644fWsRO9w.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstakri/v21/TuGJUVpzXI5FBtUq5a8bnKIOdTwQNO_W3khJXg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstamil/v26/ieVc2YdFI3GCY6SyQy1KfStzYKZgzN1z4LKDbeZce-0429tBManUkt
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstamilsupplement/v19/DdTz78kEtnooLS5rXF1DaruiCd_bFp_Ph4sGcn7ax_vs
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstelugu/v19/0FlxVOGZlE2Rrtr-HmgkMWJNjJ5_RyT8o8c7fHkeg-esVC5dzHkHI
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansthaana/v23/C8c14dM-vnz-s-3jaEsxlxHkBH-WZOETXfoQrfQ9Y4XrbhLhnu4-t
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansthai/v20/iJWnBXeUZi_OHPqn4wq6hQ2_hbJ1xyN9wd43SofNWcd1MKVQt_So_9C
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstifinagh/v17/I_uzMoCduATTei9eI8dawkHIwvmhCvbn6rnEcXfs4Q.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstirhuta/v15/t5t6IQYRNJ6TWjahPR6X-M-apUyby7uGUBsTrn5P.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansugaritic/v15/3qTwoiqhnSyU8TNFIdhZVCwbjCpkAXXkMhoIkiazfg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansvai/v17/NaPecZTSBuhTirw6IaFn_UrURMTsDIRSfr0.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanswancho/v17/zrf-0GXXyfn6Fs0lH9P4cUubP0GBqAPopiRfKp8.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanswarangciti/v17/EYqtmb9SzL1YtsZSScyKDXIeOv3w-zgsNvKRpeVCCXzdgA.tt
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansyi/v18/sJoD3LFXjsSdcnzn071rO3apxVDJNVgSNg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanszanabazarsquare/v16/Cn-jJsuGWQxOjaGwMQ6fOicyxLBEMRfDtkzl4uagQtJx
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Me5WZLCzYlKw.ttf
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/flutter/user/blob/main/lib/web_ui/lib/src/user/js_interop/js_loader.dart#L42
Source: chromecache_95.2.dr, chromecache_94.2.dr, chromecache_122.2.dr, chromecache_97.2.dr, chromecache_107.2.dr, chromecache_110.2.dr	String found in binary or memory: https://github.com/itfoundry/Poppins)
Source: chromecache_98.2.dr	String found in binary or memory: https://github.com/material-foundation/flutter-packages/issues/new/choose.
Source: chromecache_98.2.dr	String found in binary or memory: https://ipapi.co/json
Source: chromecache_94.2.dr, chromecache_122.2.dr	String found in binary or memory: https://scripts.sil.org/OFLPoppins-Bold4.004Poppins
Source: chromecache_95.2.dr, chromecache_110.2.dr	String found in binary or memory: https://scripts.sil.org/OFLPoppins-Regular4.004Poppins
Source: chromecache_97.2.dr, chromecache_107.2.dr	String found in binary or memory: https://scripts.sil.org/OFLPoppins-SemiBold4.004ITFO;
Source: chromecache_98.2.dr	String found in binary or memory: https://www.gstatic.com/flutter-canvaskit/45f6e009110df4f34ec2cf99f63cf73b71b7a420/
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/conversations/addConversations
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/conversations/conversationsDelete/
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/email/send
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/users/
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/users/update/

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49778 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@17/60@10/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1896,i,14678065025971338511,13714765998862464718,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1896,i,14678065025971338511,13714765998862464718,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

ID:	1467904
Product:	CloudBasic
Start time:	00:48:37
Start date:	05.07.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html