Edit tour

Windows Analysis Report
http://DIRECT.LC.CHAT

Overview

General Information

Sample URL:	http://DIRECT.LC.CHAT
Analysis ID:	1544940
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 4884 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1988,i,6654846373635944256,5091475662245315899,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://DIRECT.LC.CHAT" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /v1/p HTTP/1.1Host: app.clearbit.comConnection: keep-aliveContent-Length: 1190sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.livechat.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.livechat.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6FDC2X
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://livechat.containers.piwik.pro/28a0a095-db17-4f24-8d11-19c9de6721cc/noscript.html
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6FDC2X
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://livechat.containers.piwik.pro/28a0a095-db17-4f24-8d11-19c9de6721cc/noscript.html
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/804139102?random=1730234593565&cv=11&fst=1730234593565&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9193753630z8810521060za201zb810521060&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878898~101878942~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.livechat.com%2F%3Futm_campaign%3Dchat_link%26utm_source%3Dchat_link_nolicense%26utm_medium%3Dreferral&ref=https%3A%2F%2Fdirect.lc.chat%2F&hn=www.googleadservices.com&frm=0&tiba=Business%20%F0%9F%92%AC%20Live%20Chat%20Software%20for%20E-commerce%20%7C%20LiveChat&npa=0&pscdl=noapi&auid=602389988.1730234588&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-RG7WP5L9Y1&gacid=191789544.1730234594&gtm=45je4as0v9131753014z8810521060za200zb810521060&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533421~101823848~101925629&z=1913867439
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://accounts.livechat.com/static/hub.html
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://secure-lc.livechatinc.com/customer/action/open_chat?license_id=1520&group=121&embedded=1&widget_version=3&unique_groups=0&use_parent_storage=1
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-M6FDC2X
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://livechat.containers.piwik.pro/28a0a095-db17-4f24-8d11-19c9de6721cc/noscript.html
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/804139102?random=1730234593565&cv=11&fst=1730234593565&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0v9193753630z8810521060za201zb810521060&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878898~101878942~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.livechat.com%2F%3Futm_campaign%3Dchat_link%26utm_source%3Dchat_link_nolicense%26utm_medium%3Dreferral&ref=https%3A%2F%2Fdirect.lc.chat%2F&hn=www.googleadservices.com&frm=0&tiba=Business%20%F0%9F%92%AC%20Live%20Chat%20Software%20for%20E-commerce%20%7C%20LiveChat&npa=0&pscdl=noapi&auid=602389988.1730234588&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-RG7WP5L9Y1&gacid=191789544.1730234594&gtm=45je4as0v9131753014z8810521060za200zb810521060&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533421~101823848~101925629&z=1913867439
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://accounts.livechat.com/static/hub.html
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: Iframe src: https://secure-lc.livechatinc.com/customer/action/open_chat?license_id=1520&group=121&embedded=1&widget_version=3&unique_groups=0&use_parent_storage=1

Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: No favicon
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: No favicon
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: No favicon

Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: No <meta name="author".. found
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: No <meta name="author".. found
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: No <meta name="author".. found

Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: No <meta name="copyright".. found
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: No <meta name="copyright".. found
Source: https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49906 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: chromecache_226.1.dr	String found in binary or memory: <a href="https://twitter.com/intent/follow?screen_name=LiveChat" class=" u-text-black"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none"><path fill="currentColor" d="M18.2 2.3h3.3l-7.2 8.2 8.5 11.3H16L11 14.8l-6 6.8H1.6L9.4 13 1.2 2.2H8l4.8 6.3 5.4-6.3ZM17 19.8H19L7 4H5l12 15.7Z"/></svg> equals www.twitter.com (Twitter)
Source: chromecache_226.1.dr	String found in binary or memory: <a href="https://www.facebook.com/livechat" class=" u-text-black"><svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M24 12.07a12 12 0 1 0-13.88 11.86v-8.39H7.08v-3.47h3.04V9.43c0-3 1.8-4.67 4.54-4.67 1.31 0 2.68.23 2.68.23v2.96h-1.51c-1.5 0-1.96.92-1.96 1.87v2.25h3.33l-.53 3.47h-2.8v8.39A12 12 0 0 0 24 12.07Z" fill="currentColor"/></svg> equals www.facebook.com (Facebook)
Source: chromecache_226.1.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/livechat/" class=" u-text-black"><svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M20.45 20.45H16.9v-5.57c0-1.33-.02-3.04-1.85-3.04-1.85 0-2.13 1.45-2.13 2.95v5.66H9.35V9h3.41v1.56h.05a3.74 3.74 0 0 1 3.37-1.85c3.6 0 4.27 2.37 4.27 5.46v6.28ZM5.34 7.43a2.06 2.06 0 1 1 0-4.13 2.06 2.06 0 0 1 0 4.13ZM3.55 20.45h3.57V9H3.55v11.45ZM22.22 0H1.77C.79 0 0 .77 0 1.73v20.54C0 23.22.8 24 1.77 24h20.45c.98 0 1.78-.78 1.78-1.73V1.73C24 .77 23.2 0 22.22 0Z" fill="currentColor"/></svg> equals www.linkedin.com (Linkedin)
Source: chromecache_226.1.dr	String found in binary or memory: <a href="https://www.youtube.com/livechat?sub_confirmation=1" class=" u-text-black"><svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M9.52 15.59V8.82l6.49 3.4-6.49 3.37Zm14.24-7.94s-.23-1.66-.95-2.39c-.92-.96-1.94-.96-2.4-1.02C17.03 4 12 4 12 4h-.02s-5.03 0-8.4.24c-.46.06-1.48.06-2.4 1.02-.72.73-.95 2.4-.95 2.4S0 9.6 0 11.54v1.82c0 1.95.24 3.9.24 3.9s.23 1.66.95 2.39c.92.96 2.12.93 2.65 1.03 1.92.18 8.16.24 8.16.24s5.04 0 8.4-.25c.47-.06 1.5-.06 2.4-1.02.73-.73.96-2.39.96-2.39s.24-1.95.24-3.9v-1.82c0-1.95-.24-3.9-.24-3.9Z" fill="currentColor"/></svg></a> equals www.youtube.com (Youtube)
Source: chromecache_226.1.dr	String found in binary or memory: "@graph":[{"@type":"WebSite","description":"Expand your online sales through an all-in-one live chat app. Support and sell simultaneously. Start a free trial today! Trusted by over 37000+ businesses.","name":"LiveChat","potentialAction":[{"@type":"SearchAction","query-input":"required name=search_term_string","target":"https://www.livechat.com/help/search/?query={search_term_string}"}],"url":"https://www.livechat.com"},{"@type":"SoftwareApplication","aggregateRating":{"@type":"AggregateRating","bestRating":"5","ratingCount":"1675","ratingValue":"4.6","reviewCount":"1675","worstRating":"1"},"applicationCategory":"BusinessApplication","description":"Expand your online sales through an all-in-one live chat app. Support and sell simultaneously. Start a free trial today! Trusted by over 37000+ businesses.","name":"LiveChat for Customer Support","offers":{"@type":"AggregateOffer","highPrice":"59","lowPrice":"0","offerCount":"8","priceCurrency":"USD","seller":{"@type":"Organization","name":"LiveChat","url":"https://www.livechat.com"},"url":"https://www.livechat.com"}},{"@type":"Product","aggregateRating":{"@type":"AggregateRating","bestRating":"5","ratingCount":"1675","ratingValue":"4.6","reviewCount":"1675","worstRating":"1"},"brand":{"@type":"Brand","name":"LiveChat","url":"https://www.livechat.com"},"category":"Software","description":"Expand your online sales through an all-in-one live chat app. Support and sell simultaneously. Start a free trial today! Trusted by over 37000+ businesses.","name":"LiveChat for Customer Support","offers":{"@type":"AggregateOffer","highPrice":"59","lowPrice":"0","offerCount":"8","priceCurrency":"USD"},"url":"https://www.livechat.com"},{"@type":"Organization","brand":{"description":"Secure \u0026 user-friendly web communication app. Join over 37,000+ companies from 150 countries that use LiveChat. Try now, chat for free!","name":"LiveChat","url":"https://www.livechat.com"},"description":"AI-powered technology for customer service software","name":"Text, Inc.","sameAs":["https://www.facebook.com/livechat","https://www.instagram.com/livechat/","https://www.linkedin.com/company/livechat/","https://www.pinterest.com/livechat/","https://x.com/livechat","https://en.wikipedia.org/wiki/LiveChat","https://www.youtube.com/livechat"],"url":"https://text.com"},{"@type":"WebPage","description":"Expand your online sales through an all-in-one live chat app. Support and sell simultaneously. Start a free trial today! Trusted by over 37,000+ businesses.","name":"Business equals www.facebook.com (Facebook)
Source: chromecache_226.1.dr	String found in binary or memory: "@graph":[{"@type":"WebSite","description":"Expand your online sales through an all-in-one live chat app. Support and sell simultaneously. Start a free trial today! Trusted by over 37000+ businesses.","name":"LiveChat","potentialAction":[{"@type":"SearchAction","query-input":"required name=search_term_string","target":"https://www.livechat.com/help/search/?query={search_term_string}"}],"url":"https://www.livechat.com"},{"@type":"SoftwareApplication","aggregateRating":{"@type":"AggregateRating","bestRating":"5","ratingCount":"1675","ratingValue":"4.6","reviewCount":"1675","worstRating":"1"},"applicationCategory":"BusinessApplication","description":"Expand your online sales through an all-in-one live chat app. Support and sell simultaneously. Start a free trial today! Trusted by over 37000+ businesses.","name":"LiveChat for Customer Support","offers":{"@type":"AggregateOffer","highPrice":"59","lowPrice":"0","offerCount":"8","priceCurrency":"USD","seller":{"@type":"Organization","name":"LiveChat","url":"https://www.livechat.com"},"url":"https://www.livechat.com"}},{"@type":"Product","aggregateRating":{"@type":"AggregateRating","bestRating":"5","ratingCount":"1675","ratingValue":"4.6","reviewCount":"1675","worstRating":"1"},"brand":{"@type":"Brand","name":"LiveChat","url":"https://www.livechat.com"},"category":"Software","description":"Expand your online sales through an all-in-one live chat app. Support and sell simultaneously. Start a free trial today! Trusted by over 37000+ businesses.","name":"LiveChat for Customer Support","offers":{"@type":"AggregateOffer","highPrice":"59","lowPrice":"0","offerCount":"8","priceCurrency":"USD"},"url":"https://www.livechat.com"},{"@type":"Organization","brand":{"description":"Secure \u0026 user-friendly web communication app. Join over 37,000+ companies from 150 countries that use LiveChat. Try now, chat for free!","name":"LiveChat","url":"https://www.livechat.com"},"description":"AI-powered technology for customer service software","name":"Text, Inc.","sameAs":["https://www.facebook.com/livechat","https://www.instagram.com/livechat/","https://www.linkedin.com/company/livechat/","https://www.pinterest.com/livechat/","https://x.com/livechat","https://en.wikipedia.org/wiki/LiveChat","https://www.youtube.com/livechat"],"url":"https://text.com"},{"@type":"WebPage","description":"Expand your online sales through an all-in-one live chat app. Support and sell simultaneously. Start a free trial today! Trusted by over 37,000+ businesses.","name":"Business equals www.linkedin.com (Linkedin)
Source: chromecache_226.1.dr	String found in binary or memory: "@graph":[{"@type":"WebSite","description":"Expand your online sales through an all-in-one live chat app. Support and sell simultaneously. Start a free trial today! Trusted by over 37000+ businesses.","name":"LiveChat","potentialAction":[{"@type":"SearchAction","query-input":"required name=search_term_string","target":"https://www.livechat.com/help/search/?query={search_term_string}"}],"url":"https://www.livechat.com"},{"@type":"SoftwareApplication","aggregateRating":{"@type":"AggregateRating","bestRating":"5","ratingCount":"1675","ratingValue":"4.6","reviewCount":"1675","worstRating":"1"},"applicationCategory":"BusinessApplication","description":"Expand your online sales through an all-in-one live chat app. Support and sell simultaneously. Start a free trial today! Trusted by over 37000+ businesses.","name":"LiveChat for Customer Support","offers":{"@type":"AggregateOffer","highPrice":"59","lowPrice":"0","offerCount":"8","priceCurrency":"USD","seller":{"@type":"Organization","name":"LiveChat","url":"https://www.livechat.com"},"url":"https://www.livechat.com"}},{"@type":"Product","aggregateRating":{"@type":"AggregateRating","bestRating":"5","ratingCount":"1675","ratingValue":"4.6","reviewCount":"1675","worstRating":"1"},"brand":{"@type":"Brand","name":"LiveChat","url":"https://www.livechat.com"},"category":"Software","description":"Expand your online sales through an all-in-one live chat app. Support and sell simultaneously. Start a free trial today! Trusted by over 37000+ businesses.","name":"LiveChat for Customer Support","offers":{"@type":"AggregateOffer","highPrice":"59","lowPrice":"0","offerCount":"8","priceCurrency":"USD"},"url":"https://www.livechat.com"},{"@type":"Organization","brand":{"description":"Secure \u0026 user-friendly web communication app. Join over 37,000+ companies from 150 countries that use LiveChat. Try now, chat for free!","name":"LiveChat","url":"https://www.livechat.com"},"description":"AI-powered technology for customer service software","name":"Text, Inc.","sameAs":["https://www.facebook.com/livechat","https://www.instagram.com/livechat/","https://www.linkedin.com/company/livechat/","https://www.pinterest.com/livechat/","https://x.com/livechat","https://en.wikipedia.org/wiki/LiveChat","https://www.youtube.com/livechat"],"url":"https://text.com"},{"@type":"WebPage","description":"Expand your online sales through an all-in-one live chat app. Support and sell simultaneously. Start a free trial today! Trusted by over 37,000+ businesses.","name":"Business equals www.youtube.com (Youtube)
Source: chromecache_238.1.dr, chromecache_264.1.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},rk:function(){e=pb()},zd:function(){d()}}};var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_264.1.dr	String found in binary or memory: N.getElementsByTagName("iframe"),ia=M.length,la=0;la<ia;la++)if(!v&&c(M[la],I.Qe)){fK("https://www.youtube.com/iframe_api");v=!0;break}})}}else G(t.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},u,v=!1;Y.__ytl=n;Y.__ytl.o="ytl";Y.__ytl.isVendorTemplate=!0;Y.__ytl.priorityOverride=0;Y.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_293.1.dr, chromecache_223.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=UA(a,c,e);S(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return S(122),!0;if(d&&f){for(var m=Ab(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},XA=function(){var a=[],b=function(c){return db(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_279.1.dr, chromecache_288.1.dr, chromecache_293.1.dr, chromecache_223.1.dr, chromecache_240.1.dr, chromecache_169.1.dr	String found in binary or memory: return b}lD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_296.1.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_296.1.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_296.1.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_293.1.dr, chromecache_223.1.dr	String found in binary or memory: var AC=function(a,b,c,d,e){var f=rA("fsl",c?"nv.mwt":"mwt",0),g;g=c?rA("fsl","nv.ids",[]):rA("fsl","ids",[]);if(!g.length)return!0;var k=wA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);S(121);if(m==="https://www.facebook.com/tr/")return S(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!dz(k,fz(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: direct.lc.chat
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.livechat.com
Source: global traffic	DNS traffic detected: DNS query: cdn.livechatinc.com
Source: global traffic	DNS traffic detected: DNS query: api.livechatinc.com
Source: global traffic	DNS traffic detected: DNS query: tag.clearbitscripts.com
Source: global traffic	DNS traffic detected: DNS query: s.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: c.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: livechat.containers.piwik.pro
Source: global traffic	DNS traffic detected: DNS query: x.clearbitjs.com
Source: global traffic	DNS traffic detected: DNS query: accounts.livechat.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: app.clearbit.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: api.staging.livechatinc.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: secure-lc.livechatinc.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: accounts.staging.livechatinc.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/javascript;charset=utf-8Content-Length: 82Connection: closecache-control: private, max-age=600vary: Accept-Encodingdate: Tue, 29 Oct 2024 20:43:07 GMTx-envoy-response-flags: -server: Clearbitstrict-transport-security: max-age=63072000; includeSubDomains; preloadx-content-type-options: nosniffX-Cache: Error from cloudfrontVia: 1.1 e47c87f8fd9c4c08ac7559d0bcc2b4c2.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P9X-Amz-Cf-Id: 6HSDkL-zWNuypJkjRDLpC949ZldOkGd8jwMOrhfYU7olCFEJz8w40g==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 20:43:09 GMTContent-Type: text/htmlContent-Length: 548Connection: closeStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddencache-control: private, max-age=600content-type: application/jsonvary: Accept-Encodingcontent-length: 28date: Tue, 29 Oct 2024 20:43:12 GMTx-envoy-response-flags: -server: Clearbitstrict-transport-security: max-age=63072000; includeSubDomains; preloadx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddencache-control: private, max-age=600content-type: application/jsonvary: Accept-Encodingcontent-length: 28date: Tue, 29 Oct 2024 20:43:12 GMTx-envoy-response-flags: -server: Clearbitstrict-transport-security: max-age=63072000; includeSubDomains; preloadx-content-type-options: nosniffconnection: close

Source: chromecache_251.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_225.1.dr, chromecache_243.1.dr, chromecache_162.1.dr, chromecache_289.1.dr, chromecache_204.1.dr, chromecache_232.1.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_226.1.dr	String found in binary or memory: https://accounts.livechat.com/signup
Source: chromecache_226.1.dr	String found in binary or memory: https://accounts.livechat.com/signup?source_id=footer_cta_button&source_type=website&source_url=http
Source: chromecache_226.1.dr	String found in binary or memory: https://accounts.livechat.com/signup?source_id=header_cta&source_url=https://www.livechat.com/&sourc
Source: chromecache_169.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_277.1.dr	String found in binary or memory: https://api.livechatinc.com
Source: chromecache_193.1.dr, chromecache_245.1.dr	String found in binary or memory: https://api.livechatinc.com/v2/partners/affiliates/visit?$
Source: chromecache_279.1.dr, chromecache_238.1.dr, chromecache_288.1.dr, chromecache_293.1.dr, chromecache_223.1.dr, chromecache_264.1.dr, chromecache_240.1.dr, chromecache_169.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_265.1.dr, chromecache_236.1.dr	String found in binary or memory: https://cdn-staging.livechat-files.com/api/file/lc/main/1520/121/logo/70ad81baf5b1df0f41482aafd1a5d9
Source: chromecache_277.1.dr	String found in binary or memory: https://cdn.livechatinc.com
Source: chromecache_277.1.dr	String found in binary or memory: https://cdn.livechatinc.com/direct-link/livechat-chat-with-us.png
Source: chromecache_226.1.dr	String found in binary or memory: https://cdn.livechatinc.com/partners/tracking/track.js
Source: chromecache_226.1.dr	String found in binary or memory: https://cdn.livechatinc.com/staging/tracking.js
Source: chromecache_277.1.dr	String found in binary or memory: https://cdn.livechatinc.com/widget/staging/static/js/livechat.snLroMlu.js
Source: chromecache_189.1.dr	String found in binary or memory: https://cdn.segment.com/analytics.js/v1/
Source: chromecache_189.1.dr	String found in binary or memory: https://checkout.stripe.com/checkout.js
Source: chromecache_244.1.dr, chromecache_296.1.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_244.1.dr, chromecache_296.1.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_251.1.dr	String found in binary or memory: https://developers.google.com/web/updates/2017/02/navigation-preload
Source: chromecache_226.1.dr	String found in binary or memory: https://developers.livechat.com
Source: chromecache_226.1.dr	String found in binary or memory: https://developers.livechat.com/
Source: chromecache_226.1.dr	String found in binary or memory: https://dribbble.com/textcom
Source: chromecache_218.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_266.1.dr, chromecache_218.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Inter:wght
Source: chromecache_189.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto:wght
Source: chromecache_189.1.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: chromecache_218.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_224.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2)
Source: chromecache_224.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2)
Source: chromecache_224.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2)
Source: chromecache_224.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2)
Source: chromecache_224.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2)
Source: chromecache_224.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2)
Source: chromecache_224.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2)
Source: chromecache_220.1.dr, chromecache_307.1.dr	String found in binary or memory: https://github.com/dollarshaveclub/postmate
Source: chromecache_226.1.dr	String found in binary or memory: https://github.com/livechat
Source: chromecache_155.1.dr	String found in binary or memory: https://github.com/zendesk/cross-storage
Source: chromecache_264.1.dr	String found in binary or memory: https://google.com
Source: chromecache_264.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_226.1.dr	String found in binary or memory: https://incubator.livechat.com/?utm_source=livechat&utm_medium=referral&utm_content=footer
Source: chromecache_226.1.dr	String found in binary or memory: https://investor.livechat.com/
Source: chromecache_226.1.dr, chromecache_177.1.dr	String found in binary or memory: https://livechat.containers.piwik.pro/
Source: chromecache_226.1.dr, chromecache_177.1.dr	String found in binary or memory: https://livechat.containers.piwik.pro/28a0a095-db17-4f24-8d11-19c9de6721cc/noscript.html
Source: chromecache_226.1.dr	String found in binary or memory: https://my.livechatinc.com
Source: chromecache_226.1.dr	String found in binary or memory: https://my.livechatinc.com/subscription/?source_id=user_menu&source_url=https%3A%2F%2Fwww.livechat.c
Source: chromecache_226.1.dr	String found in binary or memory: https://news.livechat.com/
Source: chromecache_226.1.dr	String found in binary or memory: https://openwidget.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productbarfooter
Source: chromecache_169.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_165.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=$
Source: chromecache_279.1.dr, chromecache_238.1.dr, chromecache_288.1.dr, chromecache_293.1.dr, chromecache_223.1.dr, chromecache_264.1.dr, chromecache_240.1.dr, chromecache_169.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_226.1.dr	String found in binary or memory: https://partners.livechat.com/?utm_source=livechat.com&utm_medium=referral&utm_content=foote
Source: chromecache_226.1.dr	String found in binary or memory: https://partners.livechat.com?utm_source=livechat.com&utm_medium=referral&utm_content=top_navigation
Source: chromecache_165.1.dr	String found in binary or memory: https://publickeyservice.msmt.gcp.privacysandboxservices.com
Source: chromecache_304.1.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_226.1.dr, chromecache_177.1.dr	String found in binary or memory: https://s.go-mpulse.net/boomerang/
Source: chromecache_226.1.dr, chromecache_177.1.dr	String found in binary or memory: https://s2.go-mpulse.net/boomerang/
Source: chromecache_226.1.dr	String found in binary or memory: https://schema.org
Source: chromecache_277.1.dr	String found in binary or memory: https://secure.livechatinc.com/
Source: chromecache_238.1.dr, chromecache_264.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_279.1.dr, chromecache_288.1.dr, chromecache_240.1.dr, chromecache_169.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_305.1.dr, chromecache_222.1.dr	String found in binary or memory: https://status.helpdesk.com
Source: chromecache_226.1.dr	String found in binary or memory: https://status.livechat.com
Source: chromecache_226.1.dr, chromecache_305.1.dr, chromecache_222.1.dr	String found in binary or memory: https://status.livechat.com/
Source: chromecache_226.1.dr, chromecache_177.1.dr	String found in binary or memory: https://tag.clearbitscripts.com/v1/pk_f4416cc27c888d4829d81383402d5730/tags.js
Source: chromecache_279.1.dr, chromecache_238.1.dr, chromecache_288.1.dr, chromecache_293.1.dr, chromecache_223.1.dr, chromecache_264.1.dr, chromecache_240.1.dr, chromecache_165.1.dr, chromecache_169.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_165.1.dr	String found in binary or memory: https://td.doubleclick.net/td/bjs
Source: chromecache_165.1.dr	String found in binary or memory: https://td.doubleclick.net/td/bts
Source: chromecache_165.1.dr	String found in binary or memory: https://td.doubleclick.net/td/buyer.wasm
Source: chromecache_165.1.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=4s602389988.1730234588
Source: chromecache_165.1.dr	String found in binary or memory: https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=132094082057
Source: chromecache_165.1.dr	String found in binary or memory: https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=148772168798
Source: chromecache_226.1.dr	String found in binary or memory: https://text.com/?utm_source=livechat.com&utm_medium=referral&utm_content=footer
Source: chromecache_226.1.dr	String found in binary or memory: https://text.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productbar
Source: chromecache_226.1.dr	String found in binary or memory: https://text.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productbarfooter
Source: chromecache_226.1.dr	String found in binary or memory: https://twitter.com/intent/follow?screen_name=LiveChat
Source: chromecache_226.1.dr	String found in binary or memory: https://www.chatbot.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productbar
Source: chromecache_226.1.dr	String found in binary or memory: https://www.chatbot.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productbarfooter
Source: chromecache_238.1.dr, chromecache_264.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_169.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_207.1.dr, chromecache_282.1.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/804139102/?random
Source: chromecache_264.1.dr, chromecache_240.1.dr, chromecache_169.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_169.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_238.1.dr, chromecache_293.1.dr, chromecache_223.1.dr, chromecache_264.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_226.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_226.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-M6FDC2X
Source: chromecache_218.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-T6S3KZ
Source: chromecache_238.1.dr, chromecache_293.1.dr, chromecache_223.1.dr, chromecache_264.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.helpdesk.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productba
Source: chromecache_226.1.dr	String found in binary or memory: https://www.helpdesk.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productbarfooter
Source: chromecache_226.1.dr	String found in binary or memory: https://www.instagram.com/livechat/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.knowledgebase.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=prod
Source: chromecache_226.1.dr	String found in binary or memory: https://www.knowledgebase.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productbarfo
Source: chromecache_226.1.dr	String found in binary or memory: https://www.linkedin.com/company/livechat/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/bigcommerce-chat/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/chatbot/
Source: chromecache_265.1.dr, chromecache_236.1.dr	String found in binary or memory: https://www.livechat.com/chatbot?utm_source=widget
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/cn/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/customers/customer-stories/greenstate-credit-union/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/customers/customer-stories/logical-position/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/customers/customer-stories/pioneer-millworks/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/customers/customer-stories/sensorem/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/de/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/es/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/features/ai/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/features/reports-and-analytics/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/fr/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/help/search/?query=
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/jp/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/marketplace/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/og-image.86dcccb2ff10f53cf9384b4fecc850315eff9cef423de16013f4fa486934c9b6.p
Source: chromecache_265.1.dr, chromecache_236.1.dr	String found in binary or memory: https://www.livechat.com/pricing/?utm_source=widget
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/pt/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/ru/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/shopify-chat/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/solutions/customer-support/
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/solutions/sales-and-marketing/
Source: chromecache_265.1.dr, chromecache_236.1.dr	String found in binary or memory: https://www.livechat.com/tour/?utm_source=widget
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/Icon-24
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/Icon-57
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/Icon-57.png
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/Icon-60
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/Icon-60.png
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/Icon-76
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/Icon-76.png
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/apple-touch-icon-
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechatinc.com/?welcome
Source: chromecache_226.1.dr	String found in binary or memory: https://www.livechatinc.com/chat-with/1520/
Source: chromecache_265.1.dr, chromecache_236.1.dr	String found in binary or memory: https://www.livechatinc.com/privacy-policy/
Source: chromecache_279.1.dr, chromecache_288.1.dr, chromecache_240.1.dr, chromecache_169.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_226.1.dr	String found in binary or memory: https://www.openwidget.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=product
Source: chromecache_226.1.dr	String found in binary or memory: https://www.producthunt.com/posts/livechat-2
Source: chromecache_226.1.dr	String found in binary or memory: https://www.text.com/press/
Source: chromecache_238.1.dr, chromecache_264.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_226.1.dr	String found in binary or memory: https://www.youtube.com/livechat?sub_confirmation=1
Source: chromecache_283.1.dr	String found in binary or memory: https://x.clearbitjs.com/v2/pk_f4416cc27c888d4829d81383402d5730/destinations.min.js
Source: chromecache_283.1.dr	String found in binary or memory: https://x.clearbitjs.com/v2/pk_f4416cc27c888d4829d81383402d5730/tracking.min.js

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1988,i,6654846373635944256,5091475662245315899,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://DIRECT.LC.CHAT"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1988,i,6654846373635944256,5091475662245315899,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://connect.facebook.net/en_US/fbevents.js	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://cdn.segment.com/analytics.js/v1/	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://reactjs.org/link/react-polyfills	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.251.35	true	false	unknown
tag.clearbitscripts.com	18.245.46.23	true	false	unknown
scontent.xx.fbcdn.net	157.240.251.9	true	false	unknown
googleads.g.doubleclick.net	142.250.74.194	true	false	unknown
global-v4.clearbit.com	18.153.4.44	true	false	unknown
www.google.com	142.250.185.228	true	false	unknown
td.doubleclick.net	142.250.185.162	true	false	unknown
analytics.google.com	142.250.185.110	true	false	unknown
app.clearbit.com	18.158.205.16	true	false	unknown
uninstalled.piwik.pro	20.79.74.229	true	false	unknown
stats.g.doubleclick.net	64.233.167.154	true	false	unknown
www.facebook.com	unknown	unknown	false	unknown
s.go-mpulse.net	unknown	unknown	false	unknown
api.staging.livechatinc.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
x.clearbitjs.com	unknown	unknown	false	unknown
secure-lc.livechatinc.com	unknown	unknown	false	unknown
www.livechat.com	unknown	unknown	false	unknown
api.livechatinc.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
cdn.livechatinc.com	unknown	unknown	false	unknown
accounts.livechat.com	unknown	unknown	false	unknown
livechat.containers.piwik.pro	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
direct.lc.chat	unknown	unknown	false	unknown
accounts.staging.livechatinc.com	unknown	unknown	false	unknown
c.go-mpulse.net	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://x.clearbitjs.com/v2/pk_f4416cc27c888d4829d81383402d5730/tracking.min.js	false		unknown
https://connect.facebook.net/en_US/fbevents.js	false	URL Reputation: safe	unknown
https://www.livechat.com/?utm_campaign=chat_link&utm_source=chat_link_nolicense&utm_medium=referral	false		unknown
https://app.clearbit.com/v1/p	false		unknown
https://tag.clearbitscripts.com/v1/pk_f4416cc27c888d4829d81383402d5730/tags.js	false		unknown
https://www.facebook.com/tr/?id=283171402442785&ev=PageView&dl=https%3A%2F%2Fwww.livechat.com%2F%3Futm_campaign%3Dchat_link%26utm_source%3Dchat_link_nolicense%26utm_medium%3Dreferral&rl=https%3A%2F%2Fdirect.lc.chat%2F&if=false&ts=1730234596495&sw=1280&sh=1024&v=2.9.174&r=stable&ec=0&o=4126&fbp=fb.1.1730234596494.453077716899813109&ler=other&cdl=API_unavailable&it=1730234594686&coo=false&rqm=GET	false		unknown
https://connect.facebook.net/signals/config/283171402442785?v=2.9.174&r=stable&domain=www.livechat.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113	false		unknown
https://livechat.containers.piwik.pro/28a0a095-db17-4f24-8d11-19c9de6721cc.js	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=283171402442785&ev=PageView&dl=https%3A%2F%2Fwww.livechat.com%2F%3Futm_campaign%3Dchat_link%26utm_source%3Dchat_link_nolicense%26utm_medium%3Dreferral&rl=https%3A%2F%2Fdirect.lc.chat%2F&if=false&ts=1730234596495&sw=1280&sh=1024&v=2.9.174&r=stable&ec=0&o=4126&fbp=fb.1.1730234596494.453077716899813109&ler=other&cdl=API_unavailable&it=1730234594686&coo=false&rqm=FGET	false		unknown
https://x.clearbitjs.com/v2/pk_f4416cc27c888d4829d81383402d5730/destinations.min.js	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://partners.livechat.com?utm_source=livechat.com&utm_medium=referral&utm_content=top_navigation	chromecache_226.1.dr	false		unknown
https://accounts.livechat.com/signup	chromecache_226.1.dr	false		unknown
https://td.doubleclick.net/td/buyer.wasm	chromecache_165.1.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_279.1.dr, chromecache_288.1.dr, chromecache_240.1.dr, chromecache_169.1.dr	false	URL Reputation: safe	unknown
https://status.helpdesk.com	chromecache_305.1.dr, chromecache_222.1.dr	false		unknown
https://www.openwidget.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=product	chromecache_226.1.dr	false		unknown
https://s2.go-mpulse.net/boomerang/	chromecache_226.1.dr, chromecache_177.1.dr	false		unknown
https://td.doubleclick.net/td/update?ig_name=4s602389988.1730234588	chromecache_165.1.dr	false		unknown
https://www.helpdesk.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productba	chromecache_226.1.dr	false		unknown
https://www.livechat.com/fr/	chromecache_226.1.dr	false		unknown
https://www.helpdesk.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productbarfooter	chromecache_226.1.dr	false		unknown
https://www.livechat.com/tour/?utm_source=widget	chromecache_265.1.dr, chromecache_236.1.dr	false		unknown
https://www.livechat.com/bigcommerce-chat/	chromecache_226.1.dr	false		unknown
https://www.livechat.com	chromecache_226.1.dr	false		unknown
https://www.livechat.com/pricing/?utm_source=widget	chromecache_265.1.dr, chromecache_236.1.dr	false		unknown
https://www.chatbot.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productbar	chromecache_226.1.dr	false		unknown
https://www.livechatinc.com/privacy-policy/	chromecache_265.1.dr, chromecache_236.1.dr	false		unknown
https://cdn-staging.livechat-files.com/api/file/lc/main/1520/121/logo/70ad81baf5b1df0f41482aafd1a5d9	chromecache_265.1.dr, chromecache_236.1.dr	false		unknown
https://www.google.com	chromecache_169.1.dr	false		unknown
https://www.youtube.com/iframe_api	chromecache_238.1.dr, chromecache_264.1.dr	false		unknown
https://api.livechatinc.com	chromecache_277.1.dr	false		unknown
https://www.livechat.com/de/	chromecache_226.1.dr	false		unknown
https://openwidget.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productbarfooter	chromecache_226.1.dr	false		unknown
https://www.livechat.com/chatbot?utm_source=widget	chromecache_265.1.dr, chromecache_236.1.dr	false		unknown
https://github.com/zendesk/cross-storage	chromecache_155.1.dr	false		unknown
http://www.videolan.org/x264.html	chromecache_225.1.dr, chromecache_243.1.dr, chromecache_162.1.dr, chromecache_289.1.dr, chromecache_204.1.dr, chromecache_232.1.dr	false		unknown
https://www.instagram.com/livechat/	chromecache_226.1.dr	false		unknown
https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=132094082057	chromecache_165.1.dr	false		unknown
https://www.text.com/press/	chromecache_226.1.dr	false		unknown
https://www.google.com/pagead/1p-user-list/804139102/?random	chromecache_207.1.dr, chromecache_282.1.dr	false		unknown
https://status.livechat.com	chromecache_226.1.dr	false		unknown
https://www.livechatinc.com/?welcome	chromecache_226.1.dr	false		unknown
https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/Icon-76	chromecache_226.1.dr	false		unknown
https://secure.livechatinc.com/	chromecache_277.1.dr	false		unknown
https://www.livechat.com/customers/customer-stories/logical-position/	chromecache_226.1.dr	false		unknown
https://www.producthunt.com/posts/livechat-2	chromecache_226.1.dr	false		unknown
https://www.livechat.com/pt/	chromecache_226.1.dr	false		unknown
https://www.livechat.com/jp/	chromecache_226.1.dr	false		unknown
https://www.livechatinc.com/chat-with/1520/	chromecache_226.1.dr	false		unknown
https://developers.google.com/web/updates/2017/02/navigation-preload	chromecache_251.1.dr	false		unknown
https://schema.org	chromecache_226.1.dr	false	URL Reputation: safe	unknown
https://partners.livechat.com/?utm_source=livechat.com&utm_medium=referral&utm_content=foote	chromecache_226.1.dr	false		unknown
https://accounts.livechat.com/signup?source_id=header_cta&source_url=https://www.livechat.com/&sourc	chromecache_226.1.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_279.1.dr, chromecache_238.1.dr, chromecache_288.1.dr, chromecache_293.1.dr, chromecache_223.1.dr, chromecache_264.1.dr, chromecache_240.1.dr, chromecache_169.1.dr	false	URL Reputation: safe	unknown
https://www.livechat.com/shopify-chat/	chromecache_226.1.dr	false		unknown
https://www.livechat.com/customers/customer-stories/sensorem/	chromecache_226.1.dr	false		unknown
https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/Icon-24	chromecache_226.1.dr	false		unknown
https://cdn.segment.com/analytics.js/v1/	chromecache_189.1.dr	false	URL Reputation: safe	unknown
https://connect.facebook.net/	chromecache_244.1.dr, chromecache_296.1.dr	false	URL Reputation: safe	unknown
https://www.livechat.com/customers/customer-stories/greenstate-credit-union/	chromecache_226.1.dr	false		unknown
https://investor.livechat.com/	chromecache_226.1.dr	false		unknown
https://www.knowledgebase.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productbarfo	chromecache_226.1.dr	false		unknown
https://dribbble.com/textcom	chromecache_226.1.dr	false		unknown
https://www.livechat.com/marketplace/	chromecache_226.1.dr	false		unknown
https://www.livechat.com/features/ai/	chromecache_226.1.dr	false		unknown
https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/Icon-60.png	chromecache_226.1.dr	false		unknown
https://www.livechat.com/customers/customer-stories/pioneer-millworks/	chromecache_226.1.dr	false		unknown
https://www.livechat.com/chatbot/	chromecache_226.1.dr	false		unknown
https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/Icon-76.png	chromecache_226.1.dr	false		unknown
https://cdn.livechatinc.com/partners/tracking/track.js	chromecache_226.1.dr	false		unknown
https://www.livechat.com/	chromecache_226.1.dr	false		unknown
https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/apple-touch-icon-	chromecache_226.1.dr	false		unknown
https://my.livechatinc.com/subscription/?source_id=user_menu&source_url=https%3A%2F%2Fwww.livechat.c	chromecache_226.1.dr	false		unknown
https://text.com/?utm_source=livechat.com&utm_medium=referral&utm_content=footer	chromecache_226.1.dr	false		unknown
https://td.doubleclick.net/td/bts	chromecache_165.1.dr	false		unknown
https://incubator.livechat.com/?utm_source=livechat&utm_medium=referral&utm_content=footer	chromecache_226.1.dr	false		unknown
https://s.go-mpulse.net/boomerang/	chromecache_226.1.dr, chromecache_177.1.dr	false		unknown
https://reactjs.org/link/react-polyfills	chromecache_304.1.dr	false	URL Reputation: safe	unknown
https://my.livechatinc.com	chromecache_226.1.dr	false		unknown
https://www.livechat.com/ru/	chromecache_226.1.dr	false		unknown
https://td.doubleclick.net/td/bjs	chromecache_165.1.dr	false		unknown
https://accounts.livechat.com/signup?source_id=footer_cta_button&source_type=website&source_url=http	chromecache_226.1.dr	false		unknown
https://www.knowledgebase.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=prod	chromecache_226.1.dr	false		unknown
https://text.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productbarfooter	chromecache_226.1.dr	false		unknown
https://www.livechat.com/es/	chromecache_226.1.dr	false		unknown
https://www.chatbot.com/?utm_source=livechat.com&utm_medium=referral&utm_campaign=productbarfooter	chromecache_226.1.dr	false		unknown
https://www.livechat.com/solutions/sales-and-marketing/	chromecache_226.1.dr	false		unknown
https://www.livechat.com/solutions/customer-support/	chromecache_226.1.dr	false		unknown
https://www.youtube.com/livechat?sub_confirmation=1	chromecache_226.1.dr	false		unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_251.1.dr	false		unknown
https://www.livechat.com/features/reports-and-analytics/	chromecache_226.1.dr	false		unknown
https://www.livechat.com/cn/	chromecache_226.1.dr	false		unknown
https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=148772168798	chromecache_165.1.dr	false		unknown
https://cdn.livechatinc.com/staging/tracking.js	chromecache_226.1.dr	false		unknown
https://googleads.g.doubleclick.net	chromecache_264.1.dr	false		unknown
https://livechat.containers.piwik.pro/	chromecache_226.1.dr, chromecache_177.1.dr	false		unknown
https://www.livechat.com/wp-content/themes/livechat2.0/media/img/apple-touch-icons/Icon-60	chromecache_226.1.dr	false		unknown
https://developers.livechat.com	chromecache_226.1.dr	false		unknown
https://cdn.livechatinc.com/direct-link/livechat-chat-with-us.png	chromecache_277.1.dr	false		unknown
https://github.com/dollarshaveclub/postmate	chromecache_220.1.dr, chromecache_307.1.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
20.79.74.229	uninstalled.piwik.pro	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.158.205.16	app.clearbit.com	United States	16509	AMAZON-02US	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
142.250.185.110	analytics.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
64.233.167.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false
142.250.185.162	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.74.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.245.46.23	tag.clearbitscripts.com	United States	16509	AMAZON-02US	false
18.153.4.44	global-v4.clearbit.com	United States	16509	AMAZON-02US	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
157.240.251.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
18.245.46.12	unknown	United States	16509	AMAZON-02US	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544940
Start date and time:	2024-10-29 21:42:27 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://DIRECT.LC.CHAT
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@23/263@96/20

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 29 19:42:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9843840518688483
Encrypted:	false
SSDEEP:	48:8YdkTIkJH1idAKZdA1FehwiZUklqehiy+3:8//Zhy
MD5:	37A20221A9FA3F05C1DFA6407DFDBB83
SHA1:	4487C2BA9CEA1037FAD84D5F9B3CFC00AFF0C67B
SHA-256:	57D29E36EB1745641ACD2065038AEF9C326AFCC17C038C91E89648B66A209D59
SHA-512:	E39E087C2AC0EB43B9C106DD7F0F676E24042D4D6F130A1619FF986969E578284590078ECFEB1511BF2C500306E1662C001C67136D4D76F6D5AFB42C56C8EEC6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....u..#C..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I]YU.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V]Y\.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V]Y\.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V]Y\............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V]Y]............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 21:42:56.023804903 CET	53	54551	1.1.1.1	192.168.2.16
Oct 29, 2024 21:42:56.028726101 CET	53	50327	1.1.1.1	192.168.2.16
Oct 29, 2024 21:42:56.735599995 CET	59104	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:42:56.735865116 CET	60060	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:42:57.262065887 CET	53	51134	1.1.1.1	192.168.2.16
Oct 29, 2024 21:42:58.061009884 CET	56265	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:42:58.061144114 CET	58678	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:42:59.319416046 CET	53	55480	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:00.829751015 CET	54223	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:00.829902887 CET	53558	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:00.837343931 CET	53	54223	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:00.837923050 CET	53	53558	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:02.339745045 CET	51788	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:02.339904070 CET	55990	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:02.361723900 CET	53698	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:02.361912012 CET	50721	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:02.370707989 CET	56742	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:02.370863914 CET	60892	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:02.374334097 CET	51329	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:02.374504089 CET	58978	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:02.378153086 CET	53	64915	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:03.615092039 CET	64733	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:03.615377903 CET	62031	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:04.839652061 CET	60754	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:04.839869976 CET	58716	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:04.885809898 CET	62324	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:04.885948896 CET	63640	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:05.694705009 CET	55749	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:05.694895029 CET	61896	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:05.703644037 CET	53	61896	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:05.709148884 CET	60095	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:05.709564924 CET	49901	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:05.717952013 CET	53	58612	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:05.863244057 CET	53	65155	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:05.901988029 CET	53	55749	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:07.177038908 CET	61411	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:07.177304983 CET	60429	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:07.186949968 CET	53	60429	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:07.388894081 CET	53	61411	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:07.725642920 CET	61844	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:07.725810051 CET	54061	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:07.732300997 CET	51161	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:07.732518911 CET	54925	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:08.296713114 CET	53	51171	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:08.346858025 CET	53	64489	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:08.865619898 CET	55495	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:08.865755081 CET	52561	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:08.867007971 CET	57976	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:08.867137909 CET	52472	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:08.878376007 CET	53	55495	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:08.919357061 CET	53	52561	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:09.623929024 CET	64886	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:09.624156952 CET	51294	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:10.020395041 CET	53	51294	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:10.021401882 CET	53	64886	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:10.143158913 CET	62233	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:10.143302917 CET	56908	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:11.296040058 CET	55122	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:11.296176910 CET	58051	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:11.304632902 CET	53	55122	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:11.598524094 CET	53	64569	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:11.700969934 CET	53	58051	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:11.879359961 CET	61362	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:11.879491091 CET	54951	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:12.066387892 CET	55353	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:12.066540956 CET	59202	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:12.074352980 CET	53	55353	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:12.076666117 CET	53	59202	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:13.094744921 CET	58031	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:13.095062017 CET	55063	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:13.229407072 CET	55476	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:13.229617119 CET	59976	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:13.235747099 CET	52552	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:13.235747099 CET	64042	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:13.236018896 CET	54459	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:13.236182928 CET	62452	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:13.236483097 CET	53606	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:13.236578941 CET	56289	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:13.237477064 CET	53	59976	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:13.238210917 CET	53	55476	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:13.244793892 CET	53	56289	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:13.424501896 CET	49774	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:13.424501896 CET	64024	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:13.444448948 CET	53	64024	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:13.630888939 CET	53	49774	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:14.166106939 CET	53	53751	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:14.176913977 CET	50970	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:14.176913977 CET	50032	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:14.179755926 CET	53	52338	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:14.185365915 CET	53	50032	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:14.236448050 CET	55337	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:14.236608982 CET	58235	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:14.244124889 CET	53	58235	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:14.244541883 CET	53	55337	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:14.297707081 CET	62980	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:14.297918081 CET	57790	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:14.305691004 CET	53	62980	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:14.306241989 CET	53	57790	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:14.942013025 CET	52269	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:14.942169905 CET	58180	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:15.333146095 CET	65216	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:15.333285093 CET	64552	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:15.341821909 CET	53	65216	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:15.342175961 CET	53	64552	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:15.395097017 CET	63637	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:15.395229101 CET	56609	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:15.402570009 CET	53	56609	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:15.403642893 CET	53	63637	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:16.686986923 CET	55593	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:16.687182903 CET	59705	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:16.694669962 CET	53	55593	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:16.694932938 CET	53	59705	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:16.728351116 CET	53443	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:16.728472948 CET	49437	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:16.736057997 CET	53	49437	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:16.736093998 CET	53	53443	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:16.783334970 CET	61687	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:16.783464909 CET	65423	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:17.324035883 CET	63260	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:17.324193001 CET	53635	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:17.383363962 CET	53	63260	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:17.383384943 CET	53	53635	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:17.716859102 CET	58768	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:17.717031002 CET	49495	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:17.724251986 CET	53	49495	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:17.895792007 CET	58547	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:17.895960093 CET	64795	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:17.897660017 CET	64482	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:17.897821903 CET	55602	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:17.903031111 CET	53	58547	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:17.903943062 CET	53	64795	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:17.904937983 CET	53	64482	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:17.905062914 CET	53	55602	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:18.479798079 CET	49422	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:18.479928017 CET	54178	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:18.487688065 CET	53	49422	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:18.488183975 CET	53	54178	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:18.712480068 CET	63059	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:18.712618113 CET	59174	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:18.712790966 CET	59133	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:18.712898016 CET	61593	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:24.003083944 CET	54422	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:24.003228903 CET	49897	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:24.009913921 CET	61037	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:24.010258913 CET	51797	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:25.457938910 CET	57464	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:25.458074093 CET	55535	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:43:33.227546930 CET	53	54789	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:53.903014898 CET	53	49642	1.1.1.1	192.168.2.16
Oct 29, 2024 21:43:56.188585997 CET	53	63034	1.1.1.1	192.168.2.16
Oct 29, 2024 21:44:01.140407085 CET	138	138	192.168.2.16	192.168.2.255
Oct 29, 2024 21:44:22.943188906 CET	53	53890	1.1.1.1	192.168.2.16
Oct 29, 2024 21:44:28.004659891 CET	56035	53	192.168.2.16	1.1.1.1
Oct 29, 2024 21:44:28.004800081 CET	63894	53	192.168.2.16	1.1.1.1

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 29, 2024 21:43:08.919425011 CET	192.168.2.16	1.1.1.1	c26e	(Port unreachable)	Destination Unreachable
Oct 29, 2024 21:43:11.701040983 CET	192.168.2.16	1.1.1.1	c265	(Port unreachable)	Destination Unreachable
Oct 29, 2024 21:43:14.961915970 CET	192.168.2.16	1.1.1.1	c28b	(Port unreachable)	Destination Unreachable

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://DIRECT.LC.CHAT

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Windows Analysis Report
http://DIRECT.LC.CHAT

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 29, 2024 21:42:56.746953964 CET	1.1.1.1	192.168.2.16	0xf868	No error (0)	direct.lc.chat	direct.lc.chat.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:42:56.747529984 CET	1.1.1.1	192.168.2.16	0xf21f	No error (0)	direct.lc.chat	direct.lc.chat.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:42:58.069550991 CET	1.1.1.1	192.168.2.16	0x1c7a	No error (0)	direct.lc.chat	direct.lc.chat.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:42:58.078701019 CET	1.1.1.1	192.168.2.16	0xb563	No error (0)	direct.lc.chat	direct.lc.chat.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:00.837343931 CET	1.1.1.1	192.168.2.16	0x9194	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:00.837923050 CET	1.1.1.1	192.168.2.16	0xfec3	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 29, 2024 21:43:02.361052036 CET	1.1.1.1	192.168.2.16	0xb92c	No error (0)	direct.lc.chat	direct.lc.chat.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:02.363532066 CET	1.1.1.1	192.168.2.16	0x10ba	No error (0)	direct.lc.chat	direct.lc.chat.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:02.378967047 CET	1.1.1.1	192.168.2.16	0xa5ef	No error (0)	cdn.livechatinc.com	cdn.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:02.379403114 CET	1.1.1.1	192.168.2.16	0x1d33	No error (0)	cdn.livechatinc.com	cdn.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:02.382972002 CET	1.1.1.1	192.168.2.16	0xe8aa	No error (0)	api.livechatinc.com	api.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:02.383074999 CET	1.1.1.1	192.168.2.16	0x1d49	No error (0)	api.livechatinc.com	api.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:02.384629011 CET	1.1.1.1	192.168.2.16	0x381b	No error (0)	www.livechat.com	livechat.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:02.390229940 CET	1.1.1.1	192.168.2.16	0xa2b8	No error (0)	www.livechat.com	livechat.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:03.622633934 CET	1.1.1.1	192.168.2.16	0x51b2	No error (0)	cdn.livechatinc.com	cdn.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:03.623270988 CET	1.1.1.1	192.168.2.16	0x4299	No error (0)	cdn.livechatinc.com	cdn.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:04.847738981 CET	1.1.1.1	192.168.2.16	0xf8d1	No error (0)	cdn.livechatinc.com	cdn.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:04.848300934 CET	1.1.1.1	192.168.2.16	0xa104	No error (0)	cdn.livechatinc.com	cdn.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:04.904678106 CET	1.1.1.1	192.168.2.16	0x7ece	No error (0)	www.livechat.com	livechat.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:04.905232906 CET	1.1.1.1	192.168.2.16	0xb7b3	No error (0)	www.livechat.com	livechat.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:05.717164040 CET	1.1.1.1	192.168.2.16	0xd8a5	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:05.717180014 CET	1.1.1.1	192.168.2.16	0xf564	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:05.901988029 CET	1.1.1.1	192.168.2.16	0xc07f	No error (0)	tag.clearbitscripts.com		18.245.46.23	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:05.901988029 CET	1.1.1.1	192.168.2.16	0xc07f	No error (0)	tag.clearbitscripts.com		18.245.46.12	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:05.901988029 CET	1.1.1.1	192.168.2.16	0xc07f	No error (0)	tag.clearbitscripts.com		18.245.46.108	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:05.901988029 CET	1.1.1.1	192.168.2.16	0xc07f	No error (0)	tag.clearbitscripts.com		18.245.46.79	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:07.388894081 CET	1.1.1.1	192.168.2.16	0xe9d9	No error (0)	tag.clearbitscripts.com		18.245.46.12	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:07.388894081 CET	1.1.1.1	192.168.2.16	0xe9d9	No error (0)	tag.clearbitscripts.com		18.245.46.23	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:07.388894081 CET	1.1.1.1	192.168.2.16	0xe9d9	No error (0)	tag.clearbitscripts.com		18.245.46.108	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:07.388894081 CET	1.1.1.1	192.168.2.16	0xe9d9	No error (0)	tag.clearbitscripts.com		18.245.46.79	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:07.733587980 CET	1.1.1.1	192.168.2.16	0x842	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:07.733818054 CET	1.1.1.1	192.168.2.16	0x7db3	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:07.740799904 CET	1.1.1.1	192.168.2.16	0x9504	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:07.742232084 CET	1.1.1.1	192.168.2.16	0x2549	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:08.875062943 CET	1.1.1.1	192.168.2.16	0x5ca	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:08.875411034 CET	1.1.1.1	192.168.2.16	0xc42d	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:08.878376007 CET	1.1.1.1	192.168.2.16	0xc5b	No error (0)	livechat.containers.piwik.pro	uninstalled.piwik.pro		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:08.878376007 CET	1.1.1.1	192.168.2.16	0xc5b	No error (0)	uninstalled.piwik.pro		20.79.74.229	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:08.919357061 CET	1.1.1.1	192.168.2.16	0x7ca5	No error (0)	livechat.containers.piwik.pro	uninstalled.piwik.pro		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:10.020395041 CET	1.1.1.1	192.168.2.16	0xd0a5	No error (0)	x.clearbitjs.com	global-v4.clearbit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:10.021401882 CET	1.1.1.1	192.168.2.16	0x75ff	No error (0)	x.clearbitjs.com	global-v4.clearbit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:10.021401882 CET	1.1.1.1	192.168.2.16	0x75ff	No error (0)	global-v4.clearbit.com		18.153.4.44	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:10.021401882 CET	1.1.1.1	192.168.2.16	0x75ff	No error (0)	global-v4.clearbit.com		18.158.205.16	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:10.158202887 CET	1.1.1.1	192.168.2.16	0xcfff	No error (0)	accounts.livechat.com	accounts.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:10.158216953 CET	1.1.1.1	192.168.2.16	0xdff8	No error (0)	accounts.livechat.com	accounts.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:11.304632902 CET	1.1.1.1	192.168.2.16	0xb99c	No error (0)	x.clearbitjs.com	global-v4.clearbit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:11.304632902 CET	1.1.1.1	192.168.2.16	0xb99c	No error (0)	global-v4.clearbit.com		18.158.205.16	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:11.304632902 CET	1.1.1.1	192.168.2.16	0xb99c	No error (0)	global-v4.clearbit.com		18.153.4.44	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:11.700969934 CET	1.1.1.1	192.168.2.16	0x478a	No error (0)	x.clearbitjs.com	global-v4.clearbit.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:11.887588024 CET	1.1.1.1	192.168.2.16	0x4abf	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:11.887690067 CET	1.1.1.1	192.168.2.16	0xc803	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:12.074352980 CET	1.1.1.1	192.168.2.16	0xdd32	No error (0)	app.clearbit.com		18.158.205.16	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:12.074352980 CET	1.1.1.1	192.168.2.16	0xdd32	No error (0)	app.clearbit.com		18.153.4.44	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:13.104152918 CET	1.1.1.1	192.168.2.16	0xd601	No error (0)	accounts.livechat.com	accounts.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:13.113779068 CET	1.1.1.1	192.168.2.16	0x18df	No error (0)	accounts.livechat.com	accounts.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:13.237477064 CET	1.1.1.1	192.168.2.16	0xae7e	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:13.237477064 CET	1.1.1.1	192.168.2.16	0xae7e	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 29, 2024 21:43:13.237477064 CET	1.1.1.1	192.168.2.16	0xae7e	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 29, 2024 21:43:13.238210917 CET	1.1.1.1	192.168.2.16	0x7f3f	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:13.238210917 CET	1.1.1.1	192.168.2.16	0x7f3f	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:13.244781017 CET	1.1.1.1	192.168.2.16	0x26c3	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:13.244793892 CET	1.1.1.1	192.168.2.16	0x4940	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:13.244793892 CET	1.1.1.1	192.168.2.16	0x4940	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:13.244890928 CET	1.1.1.1	192.168.2.16	0x44d9	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:13.244890928 CET	1.1.1.1	192.168.2.16	0x44d9	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:13.244904041 CET	1.1.1.1	192.168.2.16	0x1948	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:13.245719910 CET	1.1.1.1	192.168.2.16	0xf144	No error (0)	api.staging.livechatinc.com	api.staging.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:13.252563000 CET	1.1.1.1	192.168.2.16	0xbb3d	No error (0)	api.staging.livechatinc.com	api.staging.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:13.630888939 CET	1.1.1.1	192.168.2.16	0xb124	No error (0)	app.clearbit.com		18.158.205.16	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:13.630888939 CET	1.1.1.1	192.168.2.16	0xb124	No error (0)	app.clearbit.com		18.153.4.44	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:14.185365915 CET	1.1.1.1	192.168.2.16	0xa202	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:14.185365915 CET	1.1.1.1	192.168.2.16	0xa202	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:14.185597897 CET	1.1.1.1	192.168.2.16	0xca15	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:14.185597897 CET	1.1.1.1	192.168.2.16	0xca15	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:14.244541883 CET	1.1.1.1	192.168.2.16	0xfcba	No error (0)	td.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:14.305691004 CET	1.1.1.1	192.168.2.16	0xa86a	No error (0)	analytics.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:14.306241989 CET	1.1.1.1	192.168.2.16	0x69e7	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:14.952150106 CET	1.1.1.1	192.168.2.16	0xc467	No error (0)	api.staging.livechatinc.com	api.staging.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:14.961862087 CET	1.1.1.1	192.168.2.16	0xf88d	No error (0)	api.staging.livechatinc.com	api.staging.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:15.341821909 CET	1.1.1.1	192.168.2.16	0x1f51	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:15.341821909 CET	1.1.1.1	192.168.2.16	0x1f51	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:15.342175961 CET	1.1.1.1	192.168.2.16	0xb59f	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:15.342175961 CET	1.1.1.1	192.168.2.16	0xb59f	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 29, 2024 21:43:15.342175961 CET	1.1.1.1	192.168.2.16	0xb59f	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 29, 2024 21:43:15.402570009 CET	1.1.1.1	192.168.2.16	0x8c56	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 29, 2024 21:43:15.403642893 CET	1.1.1.1	192.168.2.16	0x1931	No error (0)	googleads.g.doubleclick.net		142.250.74.194	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:16.694669962 CET	1.1.1.1	192.168.2.16	0x3670	No error (0)	googleads.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:16.694932938 CET	1.1.1.1	192.168.2.16	0x37d5	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 29, 2024 21:43:16.736057997 CET	1.1.1.1	192.168.2.16	0xe71a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 29, 2024 21:43:16.736093998 CET	1.1.1.1	192.168.2.16	0x72b7	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:17.047832012 CET	1.1.1.1	192.168.2.16	0xd1a2	No error (0)	secure-lc.livechatinc.com	secure-lc.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:17.047846079 CET	1.1.1.1	192.168.2.16	0xab6b	No error (0)	secure-lc.livechatinc.com	secure-lc.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:17.383363962 CET	1.1.1.1	192.168.2.16	0x3281	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:17.383363962 CET	1.1.1.1	192.168.2.16	0x3281	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:17.383384943 CET	1.1.1.1	192.168.2.16	0xecd7	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:17.724251986 CET	1.1.1.1	192.168.2.16	0xfc17	No error (0)	www.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:17.724251986 CET	1.1.1.1	192.168.2.16	0xfc17	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:17.724339008 CET	1.1.1.1	192.168.2.16	0x3096	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:17.724339008 CET	1.1.1.1	192.168.2.16	0x3096	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:17.903031111 CET	1.1.1.1	192.168.2.16	0x944	No error (0)	stats.g.doubleclick.net		64.233.167.154	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:17.903031111 CET	1.1.1.1	192.168.2.16	0x944	No error (0)	stats.g.doubleclick.net		64.233.167.157	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:17.903031111 CET	1.1.1.1	192.168.2.16	0x944	No error (0)	stats.g.doubleclick.net		64.233.167.156	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:17.903031111 CET	1.1.1.1	192.168.2.16	0x944	No error (0)	stats.g.doubleclick.net		64.233.167.155	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:17.904937983 CET	1.1.1.1	192.168.2.16	0x2f66	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:17.905062914 CET	1.1.1.1	192.168.2.16	0x4658	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 29, 2024 21:43:18.487688065 CET	1.1.1.1	192.168.2.16	0x2a5b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:18.487688065 CET	1.1.1.1	192.168.2.16	0x2a5b	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 29, 2024 21:43:18.488183975 CET	1.1.1.1	192.168.2.16	0xee55	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:18.720510960 CET	1.1.1.1	192.168.2.16	0x9655	No error (0)	cdn.livechatinc.com	cdn.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:18.720890999 CET	1.1.1.1	192.168.2.16	0x6069	No error (0)	api.livechatinc.com	api.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:18.721106052 CET	1.1.1.1	192.168.2.16	0xe094	No error (0)	api.livechatinc.com	api.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:18.722904921 CET	1.1.1.1	192.168.2.16	0x9eb7	No error (0)	cdn.livechatinc.com	cdn.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:24.024468899 CET	1.1.1.1	192.168.2.16	0xd993	No error (0)	api.staging.livechatinc.com	api.staging.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:24.026937962 CET	1.1.1.1	192.168.2.16	0x548a	No error (0)	api.staging.livechatinc.com	api.staging.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:24.029344082 CET	1.1.1.1	192.168.2.16	0x2673	No error (0)	accounts.staging.livechatinc.com	accounts.staging.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:24.037586927 CET	1.1.1.1	192.168.2.16	0x6d35	No error (0)	accounts.staging.livechatinc.com	accounts.staging.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:25.475382090 CET	1.1.1.1	192.168.2.16	0x97f1	No error (0)	accounts.staging.livechatinc.com	accounts.staging.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:43:25.482945919 CET	1.1.1.1	192.168.2.16	0x49b6	No error (0)	accounts.staging.livechatinc.com	accounts.staging.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:44:28.015141964 CET	1.1.1.1	192.168.2.16	0xcfdb	No error (0)	api.staging.livechatinc.com	api.staging.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 21:44:28.023894072 CET	1.1.1.1	192.168.2.16	0x6831	No error (0)	api.staging.livechatinc.com	api.staging.livechat.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-29 20:43:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 20:43:04 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=58304 Date: Tue, 29 Oct 2024 20:43:04 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-29 20:43:05 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 20:43:05 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=58357 Date: Tue, 29 Oct 2024 20:43:05 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-29 20:43:05 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-29 20:43:06 UTC	569	OUT	GET /v1/pk_f4416cc27c888d4829d81383402d5730/tags.js HTTP/1.1 Host: tag.clearbitscripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.livechat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 20:43:07 UTC	601	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 2296 Connection: close cache-control: private, max-age=600 etag: W/"40ab0a5767ff4af3227b4c387d79d97c" vary: Accept-Encoding date: Tue, 29 Oct 2024 20:43:06 GMT x-envoy-response-flags: - server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff X-Cache: Miss from cloudfront Via: 1.1 c5b802393a68d17f06973bb92695544a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: IG-WZrAC2KldBWDM4wtQUlqbTKJpVO13f6HBhtKERARtI3pNG_a61A==
2024-10-29 20:43:07 UTC	2296	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 69 66 20 28 77 2e 5f 5f 63 6c 65 61 72 62 69 74 5f 74 61 67 73 6a 73 29 20 7b 0a 20 20 20 20 77 2e 63 6f 6e 73 6f 6c 65 20 26 26 0a 20 20 20 20 20 20 77 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 20 26 26 0a 20 20 20 20 20 20 77 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 43 6c 65 61 72 62 69 74 20 74 61 67 73 2e 6a 73 20 73 6e 69 70 70 65 74 20 69 6e 63 6c 75 64 65 64 20 74 77 69 63 65 2e 22 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 7d 0a 0a 20 20 77 2e 5f 5f 63 6c 65 61 72 62 69 74 5f 74 61 67 73 6a 73 20 3d 20 74 72 75 65 3b 0a 0a 20 20 0a 0a 20 20 76 61 72 20 64 65 73 74 6a 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b Data Ascii: ;(function (w) { if (w.__clearbit_tagsjs) { w.console && w.console.error && w.console.error("Clearbit tags.js snippet included twice."); return; } w.__clearbit_tagsjs = true; var destjs = document.createElement("script");

Timestamp	Bytes transferred	Direction	Data
2024-10-29 20:43:08 UTC	393	OUT	GET /v1/pk_f4416cc27c888d4829d81383402d5730/tags.js HTTP/1.1 Host: tag.clearbitscripts.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 20:43:08 UTC	563	IN	HTTP/1.1 403 Forbidden Content-Type: application/javascript;charset=utf-8 Content-Length: 82 Connection: close cache-control: private, max-age=600 vary: Accept-Encoding date: Tue, 29 Oct 2024 20:43:07 GMT x-envoy-response-flags: - server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff X-Cache: Error from cloudfront Via: 1.1 e47c87f8fd9c4c08ac7559d0bcc2b4c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 6HSDkL-zWNuypJkjRDLpC949ZldOkGd8jwMOrhfYU7olCFEJz8w40g==
2024-10-29 20:43:08 UTC	82	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 74 61 67 73 2e 6a 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 20 34 30 33 22 29 0a 7d 29 28 77 69 6e 64 6f 77 29 3b Data Ascii: ;(function (w) { console.error("Invalid tags.js configuration: 403")})(window);

Timestamp	Bytes transferred	Direction	Data
2024-10-29 20:43:09 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=3auc94W79eceEHt&MD=17EXwO1Y HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-29 20:43:09 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: afda1a15-abc6-4702-b9c5-afd43e5ab8c5 MS-RequestId: 26438551-f507-4941-8566-fd87313c7e11 MS-CV: NSokIlQDVEu4ymkQ.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 29 Oct 2024 20:43:08 GMT Connection: close Content-Length: 24490
2024-10-29 20:43:09 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-29 20:43:09 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-10-29 20:43:09 UTC	568	OUT	GET /28a0a095-db17-4f24-8d11-19c9de6721cc.js HTTP/1.1 Host: livechat.containers.piwik.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.livechat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 20:43:10 UTC	192	IN	HTTP/1.1 404 Not Found Date: Tue, 29 Oct 2024 20:43:09 GMT Content-Type: text/html Content-Length: 548 Connection: close Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-10-29 20:43:10 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Timestamp	Bytes transferred	Direction	Data
2024-10-29 20:43:10 UTC	574	OUT	GET /v2/pk_f4416cc27c888d4829d81383402d5730/destinations.min.js HTTP/1.1 Host: x.clearbitjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.livechat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 20:43:11 UTC	334	IN	HTTP/1.1 200 OK cache-control: private, max-age=600 content-type: application/javascript;charset=utf-8 date: Tue, 29 Oct 2024 20:43:10 GMT content-length: 0 x-envoy-response-flags: - server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-29 20:43:12 UTC	398	OUT	GET /v2/pk_f4416cc27c888d4829d81383402d5730/destinations.min.js HTTP/1.1 Host: x.clearbitjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 20:43:12 UTC	345	IN	HTTP/1.1 403 Forbidden cache-control: private, max-age=600 content-type: application/json vary: Accept-Encoding content-length: 28 date: Tue, 29 Oct 2024 20:43:12 GMT x-envoy-response-flags: - server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff connection: close
2024-10-29 20:43:12 UTC	28	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 49 6e 76 61 6c 69 64 20 72 65 66 65 72 72 65 72 22 7d Data Ascii: {"error":"Invalid referrer"}

Timestamp	Bytes transferred	Direction	Data
2024-10-29 20:43:12 UTC	394	OUT	GET /v2/pk_f4416cc27c888d4829d81383402d5730/tracking.min.js HTTP/1.1 Host: x.clearbitjs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 20:43:13 UTC	345	IN	HTTP/1.1 403 Forbidden cache-control: private, max-age=600 content-type: application/json vary: Accept-Encoding content-length: 28 date: Tue, 29 Oct 2024 20:43:12 GMT x-envoy-response-flags: - server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff connection: close
2024-10-29 20:43:13 UTC	28	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 49 6e 76 61 6c 69 64 20 72 65 66 65 72 72 65 72 22 7d Data Ascii: {"error":"Invalid referrer"}