Edit tour

Windows Analysis Report
https://sewing-ladyltd.myshopify.com/sol?syclid=365862d9-5d6e-4a94-b401-31f50f547182

Overview

General Information

Sample URL:	https://sewing-ladyltd.myshopify.com/sol?syclid=365862d9-5d6e-4a94-b401-31f50f547182
Analysis ID:	1556540
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Form action URLs do not match main URL

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2296,i,16115480468025064893,12803118784280791972,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4184 --field-trial-handle=2296,i,16115480468025064893,12803118784280791972,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4152 --field-trial-handle=2296,i,16115480468025064893,12803118784280791972,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sewing-ladyltd.myshopify.com/sol?syclid=365862d9-5d6e-4a94-b401-31f50f547182" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6860 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://walletconnect.org/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1932 --field-trial-handle=1936,i,12427989946863230761,9753629442234770087,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-15T15:49:36.825209+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50072	104.244.42.67	443	TCP
2024-11-15T15:49:36.856697+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50070	172.66.0.227	443	TCP

HTTP traffic detected: POST /report/v4?s=lgleMaBxtetJM6AYuQ5p3h%2BxThSbiCuQbcsqVGmzUgMMBWLS0TOJ24h2L6fxl8z%2F4NZugpFVUWnpZ6xYFGclykU9DsSkxkt%2F%2BvKBnZeKNnkXBBI7IbxKvjK7jKf8zzFXslTm HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 450Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/40212532/99c0d47b-0029-472c-9a4a-6e100b6a34b2 reown hsforms
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/40212532/99c0d47b-0029-472c-9a4a-6e100b6a34b2 reown hsforms

Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: Iframe src: https://www.youtube.com/embed/VL10C-WBqD0?si=8IG52cSdvCF1krT2
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: Iframe src: https://www.youtube.com/embed/tUwbfUxMXos?si=DdidH7YG145ZbYJ3
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: Iframe src: https://www.youtube.com/embed/870mB1heKKQ?si=kCRgZhhmtYiK3ETi
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: Iframe src: https://www.youtube.com/embed/o5uoZN2Vp3E?si=p7793pbdcNwQqwkW
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: Iframe src: https://www.youtube.com/embed/QPdZ6E0GDWs?si=7NEgSa6JeaVhPUQb
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: Iframe src: https://www.youtube.com/embed/VL10C-WBqD0?si=8IG52cSdvCF1krT2
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: Iframe src: https://www.youtube.com/embed/tUwbfUxMXos?si=DdidH7YG145ZbYJ3
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: Iframe src: https://www.youtube.com/embed/870mB1heKKQ?si=kCRgZhhmtYiK3ETi
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: Iframe src: https://www.youtube.com/embed/o5uoZN2Vp3E?si=p7793pbdcNwQqwkW
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: Iframe src: https://www.youtube.com/embed/QPdZ6E0GDWs?si=7NEgSa6JeaVhPUQb

Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No favicon
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No favicon
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No favicon
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No favicon
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No favicon
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No favicon
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No favicon
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No favicon
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No favicon
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No favicon

Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No <meta name="author".. found
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No <meta name="author".. found

Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No <meta name="copyright".. found
Source: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:50039 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.43:443 -> 192.168.2.4:50055 version: TLS 1.2

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50072 -> 104.244.42.67:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50070 -> 172.66.0.227:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.43
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.43
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.43
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: (g.zk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.zk(c,"www.youtube.com"),d=c.toString()):(c=Cwa(d),wE(c)&&(d=c));c=new g.EM(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: 0?"http":"https";this.Ea=vE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|vE(this.rf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.U?d=vs(d,h,rKa):h&&(d="embedded");this.Ma=d;dra();h=null;d=b?b.playerStyle:a.ps;f=g.Zb(sKa,d);!d\|\|f&&!this.U\|\|(h=d);this.playerStyle=h;this.L=g.Zb(sKa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.ra=this.L&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_309.2.dr	String found in binary or memory: 1e:["$","div",null,{"className":"navigation_navigation--text__1sgOf","children":[["$","p",null,{"className":"navigation_navigation__title__a6F92","children":"Connect"}],["$","div",null,{"className":"navigation_navigation__list__E9Jw7","children":["$","$L20",null,{"items":[{"_key":"2185b64b5c24","color":null,"icon":null,"link":{"_key":null,"externalUrl":"https://x.com/reown_","linkText":"X (Twitter)","newTab":true,"internalLinkSlug":null,"internalLinkTitle":null},"childNavigation":null},{"_key":"98b7801600c4","color":null,"icon":null,"link":{"internalLinkTitle":null,"_key":null,"externalUrl":"https://www.linkedin.com/company/re-own","linkText":"LinkedIn","newTab":true,"internalLinkSlug":null},"childNavigation":null},{"icon":null,"link":{"newTab":true,"internalLinkSlug":null,"internalLinkTitle":null,"_key":null,"externalUrl":"https://www.youtube.com/@re_own","linkText":"YouTube"},"childNavigation":null,"_key":"123c34356f1a","color":null},{"childNavigation":null,"_key":"ce8507deecbb","color":null,"icon":null,"link":{"_key":null,"externalUrl":"https://discord.com/invite/kdTQHQ6AFQ","linkText":"Discord","newTab":true,"internalLinkSlug":null,"internalLinkTitle":null}},{"link":{"_key":null,"externalUrl":"https://warpcast.com/~/channel/reown","linkText":"Farcaster","newTab":true,"internalLinkSlug":null,"internalLinkTitle":null},"childNavigation":null,"_key":"3911fd603a6b","color":null,"icon":null}]}]}]]}] equals www.linkedin.com (Linkedin)
Source: chromecache_309.2.dr	String found in binary or memory: 1e:["$","div",null,{"className":"navigation_navigation--text__1sgOf","children":[["$","p",null,{"className":"navigation_navigation__title__a6F92","children":"Connect"}],["$","div",null,{"className":"navigation_navigation__list__E9Jw7","children":["$","$L20",null,{"items":[{"_key":"2185b64b5c24","color":null,"icon":null,"link":{"_key":null,"externalUrl":"https://x.com/reown_","linkText":"X (Twitter)","newTab":true,"internalLinkSlug":null,"internalLinkTitle":null},"childNavigation":null},{"_key":"98b7801600c4","color":null,"icon":null,"link":{"internalLinkTitle":null,"_key":null,"externalUrl":"https://www.linkedin.com/company/re-own","linkText":"LinkedIn","newTab":true,"internalLinkSlug":null},"childNavigation":null},{"icon":null,"link":{"newTab":true,"internalLinkSlug":null,"internalLinkTitle":null,"_key":null,"externalUrl":"https://www.youtube.com/@re_own","linkText":"YouTube"},"childNavigation":null,"_key":"123c34356f1a","color":null},{"childNavigation":null,"_key":"ce8507deecbb","color":null,"icon":null,"link":{"_key":null,"externalUrl":"https://discord.com/invite/kdTQHQ6AFQ","linkText":"Discord","newTab":true,"internalLinkSlug":null,"internalLinkTitle":null}},{"link":{"_key":null,"externalUrl":"https://warpcast.com/~/channel/reown","linkText":"Farcaster","newTab":true,"internalLinkSlug":null,"internalLinkTitle":null},"childNavigation":null,"_key":"3911fd603a6b","color":null,"icon":null}]}]}]]}] equals www.youtube.com (Youtube)
Source: chromecache_481.2.dr	String found in binary or memory: Ko.prototype.qU=function(){return this.Rg.l()};var yna=(new Date).getTime();var Gla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Hla=/\bocr\b/;var Jla=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Wla=0,Vla=0,Xla=0;var ap;g.Uo=null;g.Wo=!1;g.bp=1;ap=Symbol("SIGNAL");g.cp={version:0,A_:0,Um:!1,pg:void 0,Yy:void 0,Gn:void 0,TL:0,pj:void 0,Su:void 0,UE:!1,xP:!1,R1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},yk:function(){e=qb()},zd:function(){d()}}};var Zb=wa(["data-gtm-yt-inspected-"]),AD=["www.youtube.com","www.youtube-nocookie.com"],BD,CD=!1; equals www.youtube.com (Youtube)
Source: chromecache_481.2.dr	String found in binary or memory: a))):this.api.V().N("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.L?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.bj(a,{hl:d})),this.Dd(AY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Dd(g.yY(a.errorMessage)):this.Dd(AY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.bj(c, equals www.youtube.com (Youtube)
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ma.vg(a.errorCode,a.severity,e,TF(a.details),f)}else this.ma.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Gd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Ut)(),nT(a,"manifest",function(h){b.L=!0;b.oa("pathprobe",h)},function(h){b.Gd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_481.2.dr	String found in binary or memory: a.ismb);this.Bq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=RP(this.Ea)\|\|"www.youtube.com")):r="video.google.com";this.ao=r;SP(this,a,!0);this.La=new lP;g.P(this,this.La);q=b?b.innertubeApiKey:xs("",a.innertube_api_key);p=b?b.innertubeApiVersion:xs("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:xs("",a.innertube_context_client_version);q=g.lr("INNERTUBE_API_KEY")\|\|q;p=g.lr("INNERTUBE_API_VERSION")\|\|p;l=g.lr("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=dP(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: b=this.api.V();a=this.api.getVideoData();var c="";b.C\|\|(b=g.WP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.QR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.NE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=gB(a,c,e);V(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return V(122),!0;if(d&&f){for(var m=Bb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},jB=function(){var a=[],b=function(c){return eb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: g.WP=function(a){a=RP(a.Ea);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: g.iQ=function(a){var b=g.WP(a);CKa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_481.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.WP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.NP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),mu&&(a=ona())&&(b.ebc=a));return g.bj(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Ah:e,yh:f,zh:g,ii:k,ji:m,Qe:n,Ib:b},q=B.YT;if(q)return q.ready&&q.ready(d),b;var r=B.onYouTubeIframeAPIReady;B.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(LD(w,"iframe_api")\|\|LD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!CD&&JD(x[A],p.Qe))return qc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_217.2.dr	String found in binary or memory: return b}yD.F="internal.enableAutoEventOnTimer";var Zb=wa(["data-gtm-yt-inspected-"]),AD=["www.youtube.com","www.youtube-nocookie.com"],BD,CD=!1; equals www.youtube.com (Youtube)
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: this.ea.Ba&&(a.authuser=this.ea.Ba);this.ea.pageId&&(a.pageid=this.ea.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Fb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.qa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(fP(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.qa=!1);b="";g.TO(this.B)?SO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	String found in binary or memory: var NC=function(a,b,c,d,e){var f=EA("fsl",c?"nv.mwt":"mwt",0),g;g=c?EA("fsl","nv.ids",[]):EA("fsl","ids",[]);if(!g.length)return!0;var k=JA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);V(121);if(m==="https://www.facebook.com/tr/")return V(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!qz(k,sz(b, equals www.facebook.com (Facebook)
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: var V2={};var sfb={Hs:[{Gs:/Unable to load player module/,weight:20},{Gs:/Failed to fetch/,weight:500},{Gs:/XHR API fetch failed/,weight:10},{Gs:/JSON parsing failed after XHR fetch/,weight:10},{Gs:/Retrying OnePlatform request/,weight:10},{Gs:/CSN Missing or undefined during playback association/,weight:100},{Gs:/Non-recoverable error. Do not retry./,weight:0},{Gs:/Internal Error. Retry with an exponential backoff./,weight:0},{Gs:/API disabled by application./,weight:0}],Mr:[{callback:d9a,weight:500}]};var q9a=/[&\?]action_proxy=1/,p9a=/[&\?]token=([\w-])/,r9a=/[&\?]video_id=([\w-])/,s9a=/[&\?]index=([\d-])/,t9a=/[&\?]m_pos_ms=([\d-])/,v9a=/[&\?]vvt=([\w-]*)/,h9a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),u9a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),k9a={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_481.2.dr	String found in binary or memory: wJa=function(a,b){if(!a.j["0"]){var c=new kG("0","fakesb",{video:new gG(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new XN(new g.EM("http://www.youtube.com/videoplayback"),c,"fake"):new nO(new g.EM("http://www.youtube.com/videoplayback"),c,new IN(0,0),new IN(0,0))}}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: sewing-ladyltd.myshopify.com
Source: global traffic	DNS traffic detected: DNS query: ehr.f3d.mytemp.website
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.anima.art.br
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: walletconnect.org
Source: global traffic	DNS traffic detected: DNS query: walletconnect.com
Source: global traffic	DNS traffic detected: DNS query: reown.com
Source: global traffic	DNS traffic detected: DNS query: js.hsforms.net
Source: global traffic	DNS traffic detected: DNS query: cdn.sanity.io
Source: global traffic	DNS traffic detected: DNS query: docs.reown.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: forms.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: forms-na1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: forms-na1.hubspot.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2296,i,16115480468025064893,12803118784280791972,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sewing-ladyltd.myshopify.com/sol?syclid=365862d9-5d6e-4a94-b401-31f50f547182"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://walletconnect.org/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1932 --field-trial-handle=1936,i,12427989946863230761,9753629442234770087,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4184 --field-trial-handle=2296,i,16115480468025064893,12803118784280791972,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4152 --field-trial-handle=2296,i,16115480468025064893,12803118784280791972,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2296,i,16115480468025064893,12803118784280791972,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4184 --field-trial-handle=2296,i,16115480468025064893,12803118784280791972,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4152 --field-trial-handle=2296,i,16115480468025064893,12803118784280791972,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1932 --field-trial-handle=1936,i,12427989946863230761,9753629442234770087,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://sewing-ladyltd.myshopify.com/sol?syclid=365862d9-5d6e-4a94-b401-31f50f547182	0%	Avira URL Cloud	safe
https://sewing-ladyltd.myshopify.com/sol?syclid=365862d9-5d6e-4a94-b401-31f50f547182	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://docs.reown.com	0%	Avira URL Cloud	safe
https://docs.walletconnect.org/	0%	Avira URL Cloud	safe
https://www.argent.xyz/	0%	Avira URL Cloud	safe
https://docs.walletconnect.org/quick-start/dapps/web3-provider	0%	Avira URL Cloud	safe
https://gnosis-safe.io/	0%	Avira URL Cloud	safe
https://cloud.reown.com/sign-up	0%	Avira URL Cloud	safe
https://cloud.reown.com/sign-in	0%	Avira URL Cloud	safe
https://ethereum.foundation/	0%	Avira URL Cloud	safe
https://ehr.f3d.mytemp.website/index?syclid=365862d9-5d6e-4a94-b401-31f50f547182	100%	Avira URL Cloud	phishing

Source: chromecache_309.2.dr	String found in binary or memory: http://github.com/reown-com
Source: chromecache_401.2.dr, chromecache_335.2.dr, chromecache_349.2.dr, chromecache_481.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_225.2.dr, chromecache_203.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_481.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_416.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_472.2.dr, chromecache_244.2.dr	String found in binary or memory: https://avatar.vercel.sh/andrew.svg?size=50&text=$
Source: chromecache_217.2.dr, chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_384.2.dr, chromecache_448.2.dr	String found in binary or memory: https://cdn.sanity.io/files/uvy10p5b/production/20c66e066f2aa62054942176a3e088dac3fadd8e.webm
Source: chromecache_448.2.dr	String found in binary or memory: https://cdn.sanity.io/images/uvy10p5b/production/43464b57e3f53fc6c83094bcab26e77d56b60160-2400x1260.
Source: chromecache_384.2.dr, chromecache_448.2.dr	String found in binary or memory: https://cdn.sanity.io/images/uvy10p5b/production/62c74ef853f5c51d7b127a377bafa15378baf734-2904x1640.
Source: chromecache_264.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.19.2/jquery.validate.min.js
Source: chromecache_309.2.dr	String found in binary or memory: https://cloud.reown.com/sign-in
Source: chromecache_384.2.dr, chromecache_448.2.dr	String found in binary or memory: https://cloud.reown.com/sign-up
Source: chromecache_264.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.6.0.min.js
Source: chromecache_309.2.dr	String found in binary or memory: https://discord.com/invite/kdTQHQ6AFQ
Source: chromecache_264.2.dr	String found in binary or memory: https://discord.gg/jhxMvxP
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_384.2.dr, chromecache_448.2.dr	String found in binary or memory: https://docs.reown.com
Source: chromecache_309.2.dr, chromecache_384.2.dr, chromecache_448.2.dr	String found in binary or memory: https://docs.reown.com/
Source: chromecache_264.2.dr	String found in binary or memory: https://docs.walletconnect.org/
Source: chromecache_264.2.dr	String found in binary or memory: https://docs.walletconnect.org/quick-start/dapps/web3-provider
Source: chromecache_264.2.dr	String found in binary or memory: https://ethereum.foundation/
Source: chromecache_472.2.dr, chromecache_244.2.dr	String found in binary or memory: https://ethereum.org/en/developers/docs/networks/
Source: chromecache_472.2.dr, chromecache_244.2.dr	String found in binary or memory: https://explorer.walletconnect.com
Source: chromecache_472.2.dr, chromecache_244.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Inter:wght
Source: chromecache_330.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto:ital
Source: chromecache_264.2.dr	String found in binary or memory: https://gitcoin.co/grants/275/walletconnect
Source: chromecache_401.2.dr, chromecache_335.2.dr, chromecache_349.2.dr, chromecache_481.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_330.2.dr	String found in binary or memory: https://github.com/sindresorhus/modern-normalize
Source: chromecache_264.2.dr	String found in binary or memory: https://github.com/walletconnect
Source: chromecache_264.2.dr	String found in binary or memory: https://gnosis-safe.io/
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_287.2.dr	String found in binary or memory: https://jqueryvalidation.org/
Source: chromecache_264.2.dr	String found in binary or memory: https://labs.consensys.net/
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_416.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_217.2.dr, chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_481.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_386.2.dr	String found in binary or memory: https://public.rive.app/cdn/uuid
Source: chromecache_386.2.dr	String found in binary or memory: https://public.rive.app/cdn/uuidcdnUuidvoidspeedWedevenOddloadDecFebenableWorkAreamaxYminYscaleYmapX
Source: chromecache_264.2.dr	String found in binary or memory: https://rainbow.me/
Source: chromecache_481.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_384.2.dr, chromecache_448.2.dr	String found in binary or memory: https://reown.com/blog/new-appkit-for-bitcoin-and-telegram
Source: chromecache_472.2.dr, chromecache_244.2.dr	String found in binary or memory: https://secure.walletconnect.org
Source: chromecache_217.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_309.2.dr	String found in binary or memory: https://status.reown.com/
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_481.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_330.2.dr	String found in binary or memory: https://tailwindcss.com
Source: chromecache_217.2.dr, chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_264.2.dr	String found in binary or memory: https://trustwallet.com/
Source: chromecache_264.2.dr	String found in binary or memory: https://twitter.com/walletconnect
Source: chromecache_223.2.dr, chromecache_483.2.dr	String found in binary or memory: https://vercel.live/_next-live/feedback/feedback.js
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_472.2.dr, chromecache_244.2.dr	String found in binary or memory: https://walletconnect.com/explorer
Source: chromecache_472.2.dr, chromecache_244.2.dr	String found in binary or memory: https://walletconnect.com/explorer?type=wallet
Source: chromecache_264.2.dr	String found in binary or memory: https://walleth.org/
Source: chromecache_309.2.dr	String found in binary or memory: https://warpcast.com/~/channel/reown
Source: chromecache_264.2.dr	String found in binary or memory: https://www.argent.xyz/
Source: chromecache_416.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_217.2.dr, chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_416.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_384.2.dr, chromecache_448.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-TBKR9BSG
Source: chromecache_352.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_309.2.dr	String found in binary or memory: https://www.linkedin.com/company/re-own
Source: chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_264.2.dr	String found in binary or memory: https://www.npmjs.com/package/web3modal
Source: chromecache_309.2.dr	String found in binary or memory: https://www.youtube.com/
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_309.2.dr	String found in binary or memory: https://x.com/reown_
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_481.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_401.2.dr, chromecache_481.2.dr	String found in binary or memory: https://yurt.corp.google.com

Name	IP	Active	Malicious	Reputation
forms.hsforms.com	104.18.80.204	true	false	high
i.ytimg.com	142.250.185.118	true	false	high
shops.myshopify.com	23.227.38.74	true	false	high
platform.twitter.map.fastly.net	146.75.120.157	true	false	high
forms-na1.hubspot.com	104.16.118.116	true	false	high
ehr.f3d.mytemp.website	92.205.168.252	true	false	unknown
t.co	172.66.0.227	true	false	high
code.jquery.com	151.101.2.137	true	false	high
js.hsforms.net	104.18.142.119	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
photos-ugc.l.googleusercontent.com	142.250.185.225	true	false	high
www.google.com	142.250.186.132	true	false	high
walletconnect.com	104.18.27.46	true	false	high
reown.com	76.76.21.21	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
cname.vercel-dns.com	76.76.21.93	true	false	high
s.twitter.com	104.244.42.67	true	false	high
static.doubleclick.net	216.58.206.38	true	false	high
youtube-ui.l.google.com	172.217.18.110	true	false	high
googleads.g.doubleclick.net	142.250.186.98	true	false	high
forms-na1.hsforms.com	104.18.80.204	true	false	high
play.google.com	142.250.185.238	true	false	high
walletconnect.org	104.18.20.250	true	false	high
cdn.i.sanity.io	34.149.250.58	true	false	high
unpkg.com	104.17.248.203	true	false	high
static.ads-twitter.com	unknown	unknown	false	high
yt3.ggpht.com	unknown	unknown	false	high
www.anima.art.br	unknown	unknown	false	unknown
cdn.sanity.io	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
sewing-ladyltd.myshopify.com	unknown	unknown	false	unknown
analytics.twitter.com	unknown	unknown	false	high
docs.reown.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://www.youtube.com/embed/o5uoZN2Vp3E?si=p7793pbdcNwQqwkW	false		high
https://i.ytimg.com/vi/QPdZ6E0GDWs/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AHkBYAC0AWKAgwIABABGBMgSyh_MA8=&rs=AOn4CLAsCENxxxCG4l3eeseeDCpRFcH_4g	false		high
https://walletconnect.org/	false		high
https://reown.com/_next/static/css/d314c8f75d6a7f1d.css	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://www.youtube.com/generate_204?mF-jgQ	false		high
https://reown.com/_next/static/chunks/202-ec55ec1446fedfb1.js	false		high
https://walletconnect.com/	false		high
https://reown.com/_next/static/chunks/fd9d1056-003c403864e903e6.js	false		high
https://reown.com/rive_icons/docs.riv	false		high
https://t.co/1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=f8b08561-d16b-4ae9-929d-5f05605a4007&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=d8f89e60-5f48-4442-b718-c3c188f26e39&tw_document_href=https%3A%2F%2Freown.com%2Fblog%2Fnew-appkit-for-bitcoin-and-telegram&tw_iframe_status=0&txn_id=oo02q&type=javascript&version=2.3.31	false		high
https://a.nel.cloudflare.com/report/v4?s=4r3NHsFEZ6%2FwI1tEdpSgecEO4ft7yTlmDtTihlA7ZuElVFjQ9O4dgLv3J2HVgg7TA0ASR70z4pN%2F87m0IKwcaxWu9ropZN1rvVJ3EwA1hQM07IhDgF6B4%2FGLnOe23sgjfxfKdYCiQg%3D%3D	false		high
https://reown.com/_next/static/chunks/app/page-ca472f7e01d244e5.js	false		high
https://reown.com/_next/static/chunks/450-7c61bf10ed6fc530.js	false		high
https://reown.com/favicon.ico	false		high
https://i.ytimg.com/vi/870mB1heKKQ/sd2.jpg?sqp=-oaymwEoCIAFEOAD8quKqQMcGADwAQH4Ac4FgAKoCIoCDAgAEAEYEyBKKH8wDw==&rs=AOn4CLDJiQVxIH7gf0MImXFJTrVwy8aZ1g	false		high
https://www.youtube.com/embed/QPdZ6E0GDWs?si=7NEgSa6JeaVhPUQb	false		high
https://reown.com/rive_icons/cloud.riv	false		high
https://reown.com/fonts/KHTekaMono-Regular.woff2	false		high
https://reown.com/_next/static/chunks/885-c566b2eb5f5ae6d1.js	false		high
https://analytics.twitter.com/1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=f8b08561-d16b-4ae9-929d-5f05605a4007&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=d8f89e60-5f48-4442-b718-c3c188f26e39&tw_document_href=https%3A%2F%2Freown.com%2Fblog%2Fnew-appkit-for-bitcoin-and-telegram&tw_iframe_status=0&txn_id=oo02q&type=javascript&version=2.3.31	false		high
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false		high
https://reown.com/_next/static/chunks/513-12325e90ff580956.js	false		high
https://cdn.sanity.io/files/uvy10p5b/production/20c66e066f2aa62054942176a3e088dac3fadd8e.webm	false		high
https://forms.hsforms.com/embed/v3/form/40212532/99c0d47b-0029-472c-9a4a-6e100b6a34b2/json?hs_static_app=forms-embed&hs_static_app_version=1.6227&X-HubSpot-Static-App-Info=forms-embed-1.6227	false		high
https://cdn.sanity.io/images/uvy10p5b/production/62c74ef853f5c51d7b127a377bafa15378baf734-2904x1640.jpg	false		high
https://js.hsforms.net/forms/embed/v2.js	false		high
https://reown.com/blog/new-appkit-for-bitcoin-and-telegram	false		high
https://i.ytimg.com/vi/VL10C-WBqD0/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AG-B4AC0AWKAgwIABABGH8gLygtMA8=&rs=AOn4CLAz7SBLS-NQjFlXTEpKXiX34mPyyA	false		high
https://static.doubleclick.net/instream/ad_status.js	false		high
https://googleads.g.doubleclick.net/pagead/id	false		high
https://reown.com/_next/static/chunks/webpack-eceafe3e1e33e848.js	false		high
https://reown.com/webm_icons/appkit.webm	false		high
https://www.anima.art.br/ana/wallet/crypto/wallets.php	false		unknown
https://forms.hsforms.com/emailcheck/v1/json-ext?hs_static_app=forms-embed&hs_static_app_version=1.6227&X-HubSpot-Static-App-Info=forms-embed-1.6227&portalId=40212532&formId=99c0d47b-0029-472c-9a4a-6e100b6a34b2&includeFreemailSuggestions=true	false		high
https://reown.com/_next/image?url=https%3A%2F%2Fcdn.sanity.io%2Fimages%2Fuvy10p5b%2Fproduction%2F01495a4964c8df30a7e8859c4f469e67dc9545a2-1024x1024.png&w=256&q=100	false		high
https://reown.com/fonts/KHTeka-Regular.woff2	false		high
https://static.ads-twitter.com/uwt.js	false		high
https://ehr.f3d.mytemp.website/index?syclid=365862d9-5d6e-4a94-b401-31f50f547182	false	Avira URL Cloud: phishing	unknown
https://reown.com/_next/static/chunks/973-cb21359d11f298dc.js	false		high
https://cdn.sanity.io/images/uvy10p5b/production/e46769c8bcb1602667ffd4eafd0a2d4b3937ee6a-72x32.svg	false		high
https://forms-na1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v2-RENDER_SUCCESS&count=1	false		high
https://cdn.sanity.io/images/uvy10p5b/production/585fa7aca2053cfce9d7bdacd47ab6ef4c003174-84x32.svg	false		high
https://forms-na1.hubspot.com/submissions-validation/v1/validate/40212532/99c0d47b-0029-472c-9a4a-6e100b6a34b2	false		high
https://reown.com/_next/static/chunks/dc112a36-9245e58b51327391.js	false		high
https://www.youtube.com/generate_204?OX6Ruw	false		high
https://reown.com/blog?_rsc=mlx06	false		high
https://reown.com/_next/image?url=https%3A%2F%2Fcdn.sanity.io%2Fimages%2Fuvy10p5b%2Fproduction%2Ffefbf8d503bde22c42720a70772b747afa5bbf53-3840x2160.png&w=1920&q=100	false		high
https://reown.com/	false		high
https://reown.com/_next/static/chunks/d347991b-0e564fdabc4a4c0a.js	false		high
https://reown.com/webm_icons/walletkit.webm	false		high
https://cdn.sanity.io/images/uvy10p5b/production/5f66bf1a8034159c1f4e6c1c8d5ff5cbeab42454-93x32.svg	false		high
https://www.youtube.com/s/player/0ccfa671/player_ias.vflset/en_US/remote.js	false		high
https://cdn.sanity.io/images/uvy10p5b/production/67181ec8d60344e33bb4f1eedf50ba3881487d2c-131x32.svg	false		high
https://reown.com/_next/static/chunks/app/blog/%5Bslug%5D/page-3ef6fd58a14435ce.js	false		high
https://www.youtube.com/generate_204?Q2dH9A	false		high
https://www.youtube.com/s/player/0ccfa671/www-embed-player.vflset/www-embed-player.js	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://avatar.vercel.sh/andrew.svg?size=50&text=$	chromecache_472.2.dr, chromecache_244.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	false		high
https://tailwindcss.com	chromecache_330.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_401.2.dr, chromecache_481.2.dr	false		high
https://docs.walletconnect.org/	chromecache_264.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/sindresorhus/modern-normalize	chromecache_330.2.dr	false		high
http://youtube.com/streaming/otf/durations/112015	chromecache_401.2.dr, chromecache_481.2.dr	false		high
https://cdn.sanity.io/images/uvy10p5b/production/43464b57e3f53fc6c83094bcab26e77d56b60160-2400x1260.	chromecache_448.2.dr	false		high
https://gnosis-safe.io/	chromecache_264.2.dr	false	Avira URL Cloud: safe	unknown
https://www.argent.xyz/	chromecache_264.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com	chromecache_416.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	false		high
https://admin.youtube.com	chromecache_401.2.dr, chromecache_481.2.dr	false		high
https://gitcoin.co/grants/275/walletconnect	chromecache_264.2.dr	false		high
https://docs.reown.com	chromecache_384.2.dr, chromecache_448.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/api/drm/fps?ek=	chromecache_401.2.dr, chromecache_481.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_401.2.dr, chromecache_481.2.dr	false		high
https://cloud.reown.com/sign-up	chromecache_384.2.dr, chromecache_448.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/madler/zlib/blob/master/zlib.h	chromecache_401.2.dr, chromecache_335.2.dr, chromecache_349.2.dr, chromecache_481.2.dr	false		high
https://yurt.corp.google.com	chromecache_401.2.dr, chromecache_481.2.dr	false		high
http://github.com/reown-com	chromecache_309.2.dr	false		high
https://viacon.corp.google.com	chromecache_401.2.dr, chromecache_481.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_401.2.dr, chromecache_481.2.dr	false		high
https://cloud.reown.com/sign-in	chromecache_309.2.dr	false	Avira URL Cloud: safe	unknown
https://docs.walletconnect.org/quick-start/dapps/web3-provider	chromecache_264.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/youtube/answer/6276924	chromecache_401.2.dr, chromecache_481.2.dr	false		high
https://www.npmjs.com/package/web3modal	chromecache_264.2.dr	false		high
https://www.youtube.com/	chromecache_309.2.dr	false		high
http://youtube.com/yt/2012/10/10	chromecache_401.2.dr, chromecache_481.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_217.2.dr, chromecache_239.2.dr, chromecache_228.2.dr, chromecache_416.2.dr	false		high
https://x.com/reown_	chromecache_309.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_481.2.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_401.2.dr, chromecache_335.2.dr, chromecache_349.2.dr, chromecache_481.2.dr	false		high
http://www.youtube.com/videoplayback	chromecache_481.2.dr	false		high
https://cdn.sanity.io/images/uvy10p5b/production/62c74ef853f5c51d7b127a377bafa15378baf734-2904x1640.	chromecache_384.2.dr, chromecache_448.2.dr	false		high
https://www.linkedin.com/company/re-own	chromecache_309.2.dr	false		high
https://ethereum.org/en/developers/docs/networks/	chromecache_472.2.dr, chromecache_244.2.dr	false		high
https://rainbow.me/	chromecache_264.2.dr	false		high
https://support.google.com/youtube/?p=missing_quality	chromecache_401.2.dr, chromecache_481.2.dr	false		high
https://ethereum.foundation/	chromecache_264.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/youtube/?p=report_playback	chromecache_401.2.dr, chromecache_481.2.dr	false		high
https://angular.dev/license	chromecache_401.2.dr, chromecache_481.2.dr	false		high
https://warpcast.com/~/channel/reown	chromecache_309.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.74.206	unknown	United States	15169	GOOGLEUS	false
104.17.248.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.226	unknown	United States	15169	GOOGLEUS	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
142.250.185.225	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.16.118.116	forms-na1.hubspot.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.70	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
34.149.250.58	cdn.i.sanity.io	United States	2686	ATGS-MMD-ASUS	false
76.76.21.21	reown.com	United States	16509	AMAZON-02US	false
142.250.185.118	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
104.18.80.204	forms.hsforms.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.238	play.google.com	United States	15169	GOOGLEUS	false
142.250.185.193	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
146.75.120.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.142.119	js.hsforms.net	United States	13335	CLOUDFLARENETUS	false
104.18.20.250	walletconnect.org	United States	13335	CLOUDFLARENETUS	false
23.227.38.74	shops.myshopify.com	Canada	13335	CLOUDFLARENETUS	false
216.58.206.38	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
172.217.18.110	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
92.205.168.252	ehr.f3d.mytemp.website	Germany	8972	GD-EMEA-DC-SXB1DE	false
142.250.186.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.244.42.67	s.twitter.com	United States	13414	TWITTERUS	false
104.244.42.195	unknown	United States	13414	TWITTERUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.27.46	walletconnect.com	United States	13335	CLOUDFLARENETUS	false
172.217.18.22	unknown	United States	15169	GOOGLEUS	false
172.66.0.227	t.co	United States	13335	CLOUDFLARENETUS	false
104.16.117.116	unknown	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1556540
Start date and time:	2024-11-15 15:47:46 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sewing-ladyltd.myshopify.com/sol?syclid=365862d9-5d6e-4a94-b401-31f50f547182
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@29/463@98/36
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	2.1910028095934044
Encrypted:	false
SSDEEP:	48:jX+vAJTvPd04tP3wADDIFjIcN9SWfIQ+39tOw9l9VULds9eDpF:jX+vEtPgaDjcNg79Aw9lsLO9eDpF
MD5:	91F880DA25E9EB3F1AE59BD5C4542D9A
SHA1:	168EF1A2209A579D283C7453A43DBB2343BB9E60
SHA-256:	18969D58E0F8AFEBE2EB47190598052986A854EBD63607151E40E933F3D52713
SHA-512:	C0D8F02CD593DE1E68C00E28636E2AD37A0E9D27801A90D212B1A7F2F423D0AD05CC667720469C49526F5C08D2AD15325253A874B461591F12F56283DBADC97E
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 15, 2024 15:48:43.734549999 CET	192.168.2.4	1.1.1.1	0x66a8	Standard query (0)	sewing-ladyltd.myshopify.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:43.734828949 CET	192.168.2.4	1.1.1.1	0x8db6	Standard query (0)	sewing-ladyltd.myshopify.com	65	IN (0x0001)	false
Nov 15, 2024 15:48:44.688112974 CET	192.168.2.4	1.1.1.1	0xa69c	Standard query (0)	ehr.f3d.mytemp.website	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:44.688314915 CET	192.168.2.4	1.1.1.1	0xbcf9	Standard query (0)	ehr.f3d.mytemp.website	65	IN (0x0001)	false
Nov 15, 2024 15:48:46.302501917 CET	192.168.2.4	1.1.1.1	0xca7f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:46.302633047 CET	192.168.2.4	1.1.1.1	0x85e9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 15, 2024 15:48:47.129108906 CET	192.168.2.4	1.1.1.1	0x9644	Standard query (0)	www.anima.art.br	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:47.129359961 CET	192.168.2.4	1.1.1.1	0xf3d6	Standard query (0)	www.anima.art.br	65	IN (0x0001)	false
Nov 15, 2024 15:48:48.588855028 CET	192.168.2.4	1.1.1.1	0xd425	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:48.589234114 CET	192.168.2.4	1.1.1.1	0xbf76	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Nov 15, 2024 15:48:48.589591026 CET	192.168.2.4	1.1.1.1	0x3180	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:48.589766026 CET	192.168.2.4	1.1.1.1	0x766e	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Nov 15, 2024 15:48:49.544595957 CET	192.168.2.4	1.1.1.1	0xfb3b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:49.544596910 CET	192.168.2.4	1.1.1.1	0xf1ea	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Nov 15, 2024 15:48:49.634387016 CET	192.168.2.4	1.1.1.1	0x4db2	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:49.634602070 CET	192.168.2.4	1.1.1.1	0x2ac7	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Nov 15, 2024 15:48:50.177647114 CET	192.168.2.4	1.1.1.1	0x8255	Standard query (0)	www.anima.art.br	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:50.177803040 CET	192.168.2.4	1.1.1.1	0xf7aa	Standard query (0)	www.anima.art.br	65	IN (0x0001)	false
Nov 15, 2024 15:48:52.360239983 CET	192.168.2.4	1.1.1.1	0x6223	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:52.360466003 CET	192.168.2.4	1.1.1.1	0x91d0	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Nov 15, 2024 15:48:54.134753942 CET	192.168.2.4	1.1.1.1	0x7d30	Standard query (0)	walletconnect.org	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:54.134908915 CET	192.168.2.4	1.1.1.1	0xef9a	Standard query (0)	walletconnect.org	65	IN (0x0001)	false
Nov 15, 2024 15:48:55.093957901 CET	192.168.2.4	1.1.1.1	0x2b67	Standard query (0)	walletconnect.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:55.093959093 CET	192.168.2.4	1.1.1.1	0xf2	Standard query (0)	walletconnect.com	65	IN (0x0001)	false
Nov 15, 2024 15:48:55.874098063 CET	192.168.2.4	1.1.1.1	0x24b6	Standard query (0)	reown.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:55.874329090 CET	192.168.2.4	1.1.1.1	0x6932	Standard query (0)	reown.com	65	IN (0x0001)	false
Nov 15, 2024 15:48:56.790270090 CET	192.168.2.4	1.1.1.1	0x2f19	Standard query (0)	js.hsforms.net	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:56.790451050 CET	192.168.2.4	1.1.1.1	0x75c	Standard query (0)	js.hsforms.net	65	IN (0x0001)	false
Nov 15, 2024 15:48:56.854501963 CET	192.168.2.4	1.1.1.1	0xe63	Standard query (0)	cdn.sanity.io	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:56.854825974 CET	192.168.2.4	1.1.1.1	0xa769	Standard query (0)	cdn.sanity.io	65	IN (0x0001)	false
Nov 15, 2024 15:48:57.886451960 CET	192.168.2.4	1.1.1.1	0x4f3d	Standard query (0)	reown.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:57.887689114 CET	192.168.2.4	1.1.1.1	0xb407	Standard query (0)	reown.com	65	IN (0x0001)	false
Nov 15, 2024 15:48:58.260876894 CET	192.168.2.4	1.1.1.1	0xf089	Standard query (0)	js.hsforms.net	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:58.261207104 CET	192.168.2.4	1.1.1.1	0x39ea	Standard query (0)	js.hsforms.net	65	IN (0x0001)	false
Nov 15, 2024 15:48:58.272036076 CET	192.168.2.4	1.1.1.1	0x541f	Standard query (0)	cdn.sanity.io	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:48:58.272169113 CET	192.168.2.4	1.1.1.1	0xdc6e	Standard query (0)	cdn.sanity.io	65	IN (0x0001)	false
Nov 15, 2024 15:49:28.074664116 CET	192.168.2.4	1.1.1.1	0x90b9	Standard query (0)	docs.reown.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:28.074949026 CET	192.168.2.4	1.1.1.1	0xf6a5	Standard query (0)	docs.reown.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:29.723161936 CET	192.168.2.4	1.1.1.1	0x3232	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:29.723412037 CET	192.168.2.4	1.1.1.1	0x5435	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:31.283760071 CET	192.168.2.4	1.1.1.1	0x702b	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:31.284153938 CET	192.168.2.4	1.1.1.1	0xd85e	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:32.687513113 CET	192.168.2.4	1.1.1.1	0x2bbd	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:32.687735081 CET	192.168.2.4	1.1.1.1	0x58bb	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:34.303553104 CET	192.168.2.4	1.1.1.1	0x3a1	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:34.303833008 CET	192.168.2.4	1.1.1.1	0x465c	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:34.381251097 CET	192.168.2.4	1.1.1.1	0x3ab1	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:34.381464005 CET	192.168.2.4	1.1.1.1	0x2de0	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:34.384289980 CET	192.168.2.4	1.1.1.1	0xc5d9	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:34.384674072 CET	192.168.2.4	1.1.1.1	0xef1c	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:34.407629967 CET	192.168.2.4	1.1.1.1	0x1265	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:34.407744884 CET	192.168.2.4	1.1.1.1	0x942c	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 15, 2024 15:49:34.409548044 CET	192.168.2.4	1.1.1.1	0xf5c8	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:34.409722090 CET	192.168.2.4	1.1.1.1	0xcf12	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Nov 15, 2024 15:49:34.548348904 CET	192.168.2.4	1.1.1.1	0x84a0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:34.548516989 CET	192.168.2.4	1.1.1.1	0x7684	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:34.593796015 CET	192.168.2.4	1.1.1.1	0x6ef0	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:34.594088078 CET	192.168.2.4	1.1.1.1	0x8c34	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:35.295974970 CET	192.168.2.4	1.1.1.1	0xdcab	Standard query (0)	forms-na1.hsforms.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:35.296082973 CET	192.168.2.4	1.1.1.1	0x29ce	Standard query (0)	forms-na1.hsforms.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:35.388586044 CET	192.168.2.4	1.1.1.1	0xad35	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:35.388834953 CET	192.168.2.4	1.1.1.1	0xbe2a	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:35.391288996 CET	192.168.2.4	1.1.1.1	0x6b1c	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:35.391447067 CET	192.168.2.4	1.1.1.1	0xf8b8	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:35.643951893 CET	192.168.2.4	1.1.1.1	0x86ef	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:35.644198895 CET	192.168.2.4	1.1.1.1	0x8466	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Nov 15, 2024 15:49:35.688451052 CET	192.168.2.4	1.1.1.1	0x5f43	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:35.688621044 CET	192.168.2.4	1.1.1.1	0x2334	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:35.799345970 CET	192.168.2.4	1.1.1.1	0xb27c	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:35.799468994 CET	192.168.2.4	1.1.1.1	0x8de0	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:35.892431974 CET	192.168.2.4	1.1.1.1	0x399c	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:35.892565012 CET	192.168.2.4	1.1.1.1	0x5aa3	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:35.892956972 CET	192.168.2.4	1.1.1.1	0xf68a	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:35.893210888 CET	192.168.2.4	1.1.1.1	0x5f29	Standard query (0)	t.co	65	IN (0x0001)	false
Nov 15, 2024 15:49:35.893574953 CET	192.168.2.4	1.1.1.1	0x49b0	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:35.893702984 CET	192.168.2.4	1.1.1.1	0x73e7	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:36.094669104 CET	192.168.2.4	1.1.1.1	0x58c3	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:36.095957994 CET	192.168.2.4	1.1.1.1	0xaeee	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:37.870563030 CET	192.168.2.4	1.1.1.1	0x3446	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:37.871292114 CET	192.168.2.4	1.1.1.1	0x31b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:37.887173891 CET	192.168.2.4	1.1.1.1	0xcad4	Standard query (0)	forms-na1.hsforms.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:37.887290955 CET	192.168.2.4	1.1.1.1	0x1cff	Standard query (0)	forms-na1.hsforms.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:37.894380093 CET	192.168.2.4	1.1.1.1	0x4bca	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:37.894505978 CET	192.168.2.4	1.1.1.1	0xbcae	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:37.897670031 CET	192.168.2.4	1.1.1.1	0x7119	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:37.897871971 CET	192.168.2.4	1.1.1.1	0x951c	Standard query (0)	t.co	65	IN (0x0001)	false
Nov 15, 2024 15:49:37.900369883 CET	192.168.2.4	1.1.1.1	0x4e8	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:37.900543928 CET	192.168.2.4	1.1.1.1	0x5760	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 15, 2024 15:49:40.033260107 CET	192.168.2.4	1.1.1.1	0xb684	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:40.034147978 CET	192.168.2.4	1.1.1.1	0x7f5c	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:41.647121906 CET	192.168.2.4	1.1.1.1	0xd568	Standard query (0)	forms-na1.hubspot.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:41.653062105 CET	192.168.2.4	1.1.1.1	0x4734	Standard query (0)	forms-na1.hubspot.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:43.482386112 CET	192.168.2.4	1.1.1.1	0xebf8	Standard query (0)	forms-na1.hubspot.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:43.482696056 CET	192.168.2.4	1.1.1.1	0xc56e	Standard query (0)	forms-na1.hubspot.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:52.367141962 CET	192.168.2.4	1.1.1.1	0x4c2d	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:52.367592096 CET	192.168.2.4	1.1.1.1	0xfcf9	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Nov 15, 2024 15:49:52.367762089 CET	192.168.2.4	1.1.1.1	0xcfc6	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 15, 2024 15:49:52.368113995 CET	192.168.2.4	1.1.1.1	0xa585	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-11-15 14:48:44 UTC	718	OUT	GET /sol?syclid=365862d9-5d6e-4a94-b401-31f50f547182 HTTP/1.1 Host: sewing-ladyltd.myshopify.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 14:48:44 UTC	1139	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 15 Nov 2024 14:48:44 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close x-sorting-hat-podid: 345 x-sorting-hat-shopid: 90885685594 x-storefront-renderer-rendered: 1 set-cookie: keep_alive=4da3af62-410f-4392-a61c-91b727431dd6; path=/; expires=Fri, 15 Nov 2024 15:18:44 GMT; HttpOnly; SameSite=Lax location: https://ehr.f3d.mytemp.website/index?syclid=365862d9-5d6e-4a94-b401-31f50f547182 x-frame-options: DENY content-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests; strict-transport-security: max-age=7889238 x-shopid: 90885685594 x-shardid: 345 vary: Accept powered-by: Shopify server-timing: processing;dur=15, db;dur=4, db_async;dur=1.723, asn;desc="8100", edge;desc="DFW", country;desc="US", theme;desc="174052213082", pageType;desc="404", servedBy;desc="xglj", requestID;desc="6a19bf08-4363-4f55-a9d5-0048a121e9f6-1731682124" x-dc: gcp-us-central1,gcp-europe-west4,gcp-europe-west4 x-request-id: 6a19bf08-4363-4f55-a9d5-0048a121e9f6-1731682124 Alt-Svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC
2024-11-15 14:48:44 UTC	578	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 79 63 4d 37 37 66 6e 4a 4d 53 44 42 31 32 36 71 4d 56 63 67 73 48 50 66 51 74 6b 73 75 45 72 68 49 35 6b 5a 50 77 76 6a 4b 6f 6c 44 76 52 59 78 4e 6d 4b 53 59 6b 76 68 37 42 41 32 54 76 53 7a 6d 70 49 6b 56 32 4b 58 45 42 76 47 31 75 6b 54 46 35 36 30 37 64 52 4c 72 46 76 34 49 78 4e 25 32 46 6b 30 30 4f 48 42 42 48 76 49 35 6c 53 6c 37 5a 58 4c 4f 25 32 46 34 63 43 72 30 52 64 46 61 73 58 50 48 49 31 45 35 52 34 54 4a 79 7a 4e 4a 32 6d 39 4a 7a 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ycM77fnJMSDB126qMVcgsHPfQtksuErhI5kZPwvjKolDvRYxNmKSYkvh7BA2TvSzmpIkV2KXEBvG1ukTF5607dRLrFv4IxN%2Fk00OHBBHvI5lSl7ZXLO%2F4cCr0RdFasXPHI1E5R4TJyzNJ2m9JzU%3D"}],"group":"cf-nel","m

Timestamp	Bytes transferred	Direction	Data
2024-11-15 14:48:45 UTC	714	OUT	GET /index?syclid=365862d9-5d6e-4a94-b401-31f50f547182 HTTP/1.1 Host: ehr.f3d.mytemp.website Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 14:48:46 UTC	265	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 15 Nov 2024 14:48:45 GMT Server: Apache Location: https://ehr.f3d.mytemp.website/index/?syclid=365862d9-5d6e-4a94-b401-31f50f547182 Content-Length: 289 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-11-15 14:48:46 UTC	289	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 68 72 2e 66 33 64 2e 6d 79 74 65 6d 70 2e 77 65 62 73 69 74 65 2f 69 6e 64 65 78 2f 3f 73 79 63 6c 69 64 3d 33 36 35 38 36 32 64 39 2d 35 64 36 65 2d 34 61 39 34 2d 62 34 30 31 2d 33 31 66 35 30 66 35 34 37 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://ehr.f3d.mytemp.website/index/?syclid=365862d9-5d6e-4a94-b401-31f50f547

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sewing-ladyltd.myshopify.com/sol?syclid=365862d9-5d6e-4a94-b401-31f50f547182

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Windows Analysis Report
https://sewing-ladyltd.myshopify.com/sol?syclid=365862d9-5d6e-4a94-b401-31f50f547182

Timestamp	Bytes transferred	Direction	Data
2024-11-15 14:48:46 UTC	715	OUT	GET /index/?syclid=365862d9-5d6e-4a94-b401-31f50f547182 HTTP/1.1 Host: ehr.f3d.mytemp.website Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 14:48:47 UTC	306	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 15 Nov 2024 14:48:46 GMT Server: Apache X-Powered-By: PHP/8.2.24 Upgrade: h2,h2c Connection: Upgrade, close Location: https://www.anima.art.br/ana/wallet/crypto/wallets.php Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html; charset=UTF-8

Timestamp	Bytes transferred	Direction	Data
2024-11-15 14:48:47 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-15 14:48:48 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=179802 Date: Fri, 15 Nov 2024 14:48:47 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-11-15 14:48:48 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-15 14:48:49 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=179813 Date: Fri, 15 Nov 2024 14:48:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-15 14:48:49 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-11-15 14:48:49 UTC	606	OUT	GET /ajax/libs/jquery-validate/1.19.2/jquery.validate.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.anima.art.br sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.anima.art.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 14:48:49 UTC	963	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 14:48:49 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5ed13e63-5f7b" Last-Modified: Fri, 29 May 2020 16:54:59 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 73594 Expires: Wed, 05 Nov 2025 14:48:49 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sN%2F7NysJbNMzIEGKa7G4pZj9gR3AxZnexZaA7fBqI26ccDNO%2FCSLC%2B86kpVwJJ6i90qA%2FPzNvCcNTsfAvJJIBfLIpWJ0c7zZ3XawsAyTt1HfSUQwwM5rbJUt537uzKtmdla%2FSHL%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8e300b5c089a0c1f-DFW alt-svc: h3=":443"; ma=86400
2024-11-15 14:48:49 UTC	406	IN	Data Raw: 35 66 37 62 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 56 61 6c 69 64 61 74 69 6f 6e 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 31 39 2e 32 20 2d 20 35 2f 32 33 2f 32 30 32 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 76 61 6c 69 64 61 74 69 6f 6e 2e 6f 72 67 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 20 4a c3 b6 72 6e 20 5a 61 65 66 66 65 72 65 72 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 Data Ascii: 5f7b/! jQuery Validation Plugin - v1.19.2 - 5/23/2020 https://jqueryvalidation.org/ * Copyright (c) 2020 Jrn Zaefferer; Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.export
2024-11-15 14:48:49 UTC	1369	IN	Data Raw: 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 4e 6f 74 68 69 6e 67 20 73 65 6c 65 63 74 65 64 2c 20 63 61 6e 27 74 20 76 61 6c 69 64 61 74 65 2c 20 72 65 74 75 72 6e 69 6e 67 20 6e 6f 74 68 69 6e 67 2e 22 29 29 3b 76 61 72 20 63 3d 61 2e 64 61 74 61 28 74 68 69 73 5b 30 5d 2c 22 76 61 6c 69 64 61 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 63 3f 63 3a 28 74 68 69 73 2e 61 74 74 72 28 22 6e 6f 76 61 6c 69 64 61 74 65 22 2c 22 6e 6f 76 61 6c 69 64 61 74 65 22 29 2c 63 3d 6e 65 77 20 61 2e 76 61 6c 69 64 61 74 6f 72 28 62 2c 74 68 69 73 5b 30 5d 29 2c 61 2e 64 61 74 61 28 74 68 69 73 5b 30 5d 2c 22 76 61 6c 69 64 61 74 6f 72 22 2c 63 29 2c 63 2e 73 65 74 74 69 6e 67 73 2e 6f 6e 73 75 62 6d 69 74 26 26 28 74 68 69 73 2e 6f 6e 28 22 63 6c 69 63 6b 2e 76 61 6c 69 Data Ascii: &&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.vali
2024-11-15 14:48:49 UTC	1369	IN	Data Raw: 5d 2c 6a 2e 6e 61 6d 65 3d 74 68 69 73 2e 61 74 74 72 28 22 6e 61 6d 65 22 29 29 2c 6e 75 6c 6c 21 3d 6a 2e 66 6f 72 6d 29 29 7b 69 66 28 62 29 73 77 69 74 63 68 28 64 3d 61 2e 64 61 74 61 28 6a 2e 66 6f 72 6d 2c 22 76 61 6c 69 64 61 74 6f 72 22 29 2e 73 65 74 74 69 6e 67 73 2c 65 3d 64 2e 72 75 6c 65 73 2c 66 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 73 74 61 74 69 63 52 75 6c 65 73 28 6a 29 2c 62 29 7b 63 61 73 65 22 61 64 64 22 3a 61 2e 65 78 74 65 6e 64 28 66 2c 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6e 6f 72 6d 61 6c 69 7a 65 52 75 6c 65 28 63 29 29 2c 64 65 6c 65 74 65 20 66 2e 6d 65 73 73 61 67 65 73 2c 65 5b 6a 2e 6e 61 6d 65 5d 3d 66 2c 63 2e 6d 65 73 73 61 67 65 73 26 26 28 64 2e 6d 65 73 73 61 67 65 73 5b 6a 2e 6e 61 6d 65 5d 3d 61 2e 65 78 74 65 6e Data Ascii: ],j.name=this.attr("name")),null!=j.form)){if(b)switch(d=a.data(j.form,"validator").settings,e=d.rules,f=a.validator.staticRules(j),b){case"add":a.extend(f,a.validator.normalizeRule(c)),delete f.messages,e[j.name]=f,c.messages&&(d.messages[j.name]=a.exten
2024-11-15 14:48:49 UTC	1369	IN	Data Raw: 63 5d 29 2c 61 2e 65 61 63 68 28 63 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 3d 62 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 7b 22 2b 61 2b 22 5c 5c 7d 22 2c 22 67 22 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 29 2c 62 29 7d 2c 61 2e 65 78 74 65 6e 64 28 61 2e 76 61 6c 69 64 61 74 6f 72 2c 7b 64 65 66 61 75 6c 74 73 3a 7b 6d 65 73 73 61 67 65 73 3a 7b 7d 2c 67 72 6f 75 70 73 3a 7b 7d 2c 72 75 6c 65 73 3a 7b 7d 2c 65 72 72 6f 72 43 6c 61 73 73 3a 22 65 72 72 6f 72 22 2c 70 65 6e 64 69 6e 67 43 6c 61 73 73 3a 22 70 65 6e 64 69 6e 67 22 2c 76 61 6c 69 64 43 6c 61 73 73 3a 22 76 61 6c 69 64 22 2c 65 72 72 6f 72 45 6c 65 6d 65 6e 74 3a 22 6c 61 62 65 6c 22 2c 66 6f 63 75 73 43 6c 65 61 6e 75 70 3a Data Ascii: c]),a.each(c,function(a,c){b=b.replace(new RegExp("\\{"+a+"\\}","g"),function(){return c})}),b)},a.extend(a.validator,{defaults:{messages:{},groups:{},rules:{},errorClass:"error",pendingClass:"pending",validClass:"valid",errorElement:"label",focusCleanup:
2024-11-15 14:48:49 UTC	1369	IN	Data Raw: 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 72 65 6d 6f 74 65 3a 22 50 6c 65 61 73 65 20 66 69 78 20 74 68 69 73 20 66 69 65 6c 64 2e 22 2c 65 6d 61 69 6c 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 22 2c 75 72 6c 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 55 52 4c 2e 22 2c 64 61 74 65 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 64 61 74 65 2e 22 2c 64 61 74 65 49 53 4f 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 64 61 74 65 20 28 49 53 4f 29 2e 22 2c 6e 75 6d 62 65 72 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 6e 75 6d 62 65 72 2e 22 2c 64 69 67 69 74 73 3a 22 50 6c 65 61 73 65 Data Ascii: eld is required.",remote:"Please fix this field.",email:"Please enter a valid email address.",url:"Please enter a valid URL.",date:"Please enter a valid date.",dateISO:"Please enter a valid date (ISO).",number:"Please enter a valid number.",digits:"Please
2024-11-15 14:48:49 UTC	1369	IN	Data Raw: 73 2e 63 75 72 72 65 6e 74 46 6f 72 6d 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 3d 61 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 29 2e 61 64 64 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 29 2c 74 68 69 73 2e 73 75 62 6d 69 74 74 65 64 3d 7b 7d 2c 74 68 69 73 2e 76 61 6c 75 65 43 61 63 68 65 3d 7b 7d 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 7b 7d 2c 74 68 69 73 2e 69 6e 76 61 6c 69 64 3d 7b 7d 2c 74 68 69 73 2e 72 65 73 65 74 28 29 3b 76 61 72 20 63 2c 64 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 46 6f 72 6d 2c 65 3d 74 68 69 73 2e 67 72 6f 75 70 73 3d 7b 7d 3b 61 2e 65 61 63 68 28 Data Ascii: s.currentForm),this.containers=a(this.settings.errorContainer).add(this.settings.errorLabelContainer),this.submitted={},this.valueCache={},this.pendingRequest=0,this.pending={},this.invalid={},this.reset();var c,d=this.currentForm,e=this.groups={};a.each(
2024-11-15 14:48:49 UTC	1369	IN	Data Raw: 61 2b 2b 29 74 68 69 73 2e 63 68 65 63 6b 28 62 5b 61 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 69 64 28 29 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 74 68 69 73 2e 63 6c 65 61 6e 28 62 29 2c 66 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 54 61 72 67 65 74 46 6f 72 28 65 29 2c 67 3d 74 68 69 73 2c 68 3d 21 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 66 3f 64 65 6c 65 74 65 20 74 68 69 73 2e 69 6e 76 61 6c 69 64 5b 65 2e 6e 61 6d 65 5d 3a 28 74 68 69 73 2e 70 72 65 70 61 72 65 45 6c 65 6d 65 6e 74 28 66 29 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 73 3d 61 28 66 29 2c 64 3d 74 68 69 73 2e 67 72 6f 75 70 73 5b 66 2e 6e 61 6d 65 5d 2c 64 26 26 61 2e 65 61 63 68 Data Ascii: a++)this.check(b[a]);return this.valid()},element:function(b){var c,d,e=this.clean(b),f=this.validationTargetFor(e),g=this,h=!0;return void 0===f?delete this.invalid[e.name]:(this.prepareElement(f),this.currentElements=a(f),d=this.groups[f.name],d&&a.each
2024-11-15 14:48:49 UTC	1369	IN	Data Raw: 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 61 5b 62 5d 2e 6e 61 6d 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 76 61 6c 69 64 43 6c 61 73 73 29 3b 65 6c 73 65 20 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 76 61 6c 69 64 43 6c 61 73 73 29 7d 2c 6e 75 6d 62 65 72 4f 66 49 6e 76 61 6c 69 64 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 62 6a 65 63 74 4c 65 6e 67 74 68 28 74 68 69 73 2e 69 6e 76 61 6c 69 64 29 7d 2c 6f 62 6a 65 63 74 4c 65 6e 67 74 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3d 30 3b 66 6f 72 28 62 20 Data Ascii: s.findByName(a[b].name).removeClass(this.settings.validClass);else a.removeClass(this.settings.errorClass).removeClass(this.settings.validClass)},numberOfInvalids:function(){return this.objectLength(this.invalid)},objectLength:function(a){var b,c=0;for(b
2024-11-15 14:48:49 UTC	1369	IN	Data Raw: 63 75 72 72 65 6e 74 46 6f 72 6d 26 26 28 21 28 64 20 69 6e 20 63 7c 7c 21 62 2e 6f 62 6a 65 63 74 4c 65 6e 67 74 68 28 61 28 74 68 69 73 29 2e 72 75 6c 65 73 28 29 29 29 26 26 28 63 5b 64 5d 3d 21 30 2c 21 30 29 29 7d 29 7d 2c 63 6c 65 61 6e 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 28 62 29 5b 30 5d 7d 2c 65 72 72 6f 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 2e 73 70 6c 69 74 28 22 20 22 29 2e 6a 6f 69 6e 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 61 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 45 6c 65 6d 65 6e 74 2b 22 2e 22 2b 62 2c 74 68 69 73 2e 65 72 72 6f 72 43 6f 6e 74 65 78 74 29 7d 2c 72 65 73 65 74 49 6e 74 65 72 6e 61 6c Data Ascii: currentForm&&(!(d in c\|\|!b.objectLength(a(this).rules()))&&(c[d]=!0,!0))})},clean:function(b){return a(b)[0]},errors:function(){var b=this.settings.errorClass.split(" ").join(".");return a(this.settings.errorElement+"."+b,this.errorContext)},resetInternal
2024-11-15 14:48:49 UTC	1369	IN	Data Raw: 28 6a 3d 66 2e 63 61 6c 6c 28 62 2c 6a 29 2c 64 65 6c 65 74 65 20 67 2e 6e 6f 72 6d 61 6c 69 7a 65 72 29 3b 66 6f 72 28 64 20 69 6e 20 67 29 7b 65 3d 7b 6d 65 74 68 6f 64 3a 64 2c 70 61 72 61 6d 65 74 65 72 73 3a 67 5b 64 5d 7d 3b 74 72 79 7b 69 66 28 63 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6d 65 74 68 6f 64 73 5b 64 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 6a 2c 62 2c 65 2e 70 61 72 61 6d 65 74 65 72 73 29 2c 22 64 65 70 65 6e 64 65 6e 63 79 2d 6d 69 73 6d 61 74 63 68 22 3d 3d 3d 63 26 26 31 3d 3d 3d 68 29 7b 69 3d 21 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 69 3d 21 31 2c 22 70 65 6e 64 69 6e 67 22 3d 3d 3d 63 29 72 65 74 75 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 74 6f 48 69 64 65 3d 74 68 69 73 2e 74 6f 48 69 64 65 2e 6e 6f 74 28 74 68 69 73 2e 65 72 72 Data Ascii: (j=f.call(b,j),delete g.normalizer);for(d in g){e={method:d,parameters:g[d]};try{if(c=a.validator.methods[d].call(this,j,b,e.parameters),"dependency-mismatch"===c&&1===h){i=!0;continue}if(i=!1,"pending"===c)return void(this.toHide=this.toHide.not(this.err

Timestamp	Bytes transferred	Direction	Data
2024-11-15 14:48:49 UTC	565	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.anima.art.br sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.anima.art.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 14:48:49 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 15 Nov 2024 14:48:49 GMT Age: 2698991 X-Served-By: cache-lga21931-LGA, cache-dfw-kdfw8210139-DFW X-Cache: HIT, HIT X-Cache-Hits: 2, 995 X-Timer: S1731682129.309010,VS0,VE0 Vary: Accept-Encoding
2024-11-15 14:48:49 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-11-15 14:48:49 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-11-15 14:48:49 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-11-15 14:48:49 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-11-15 14:48:49 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-11-15 14:48:49 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2024-11-15 14:48:50 UTC	399	OUT	GET /ajax/libs/jquery-validate/1.19.2/jquery.validate.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 14:48:50 UTC	965	IN	HTTP/1.1 200 OK Date: Fri, 15 Nov 2024 14:48:50 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5ed13e63-5f7b" Last-Modified: Fri, 29 May 2020 16:54:59 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 73595 Expires: Wed, 05 Nov 2025 14:48:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bzAwLZBR1S%2BNVlhWwquzkzW07RUe9Uv2Tnvfxpkj%2FKKm3PvH3KM24%2BIs18SSLpm0uSaKMoBVlWaLwTUHf8nzC%2BDB%2FvdhONylQVY2i623nXQXG%2Bx2j4n4lHT39Q%2BtWKTciMis5xTN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8e300b61fffb6b47-DFW alt-svc: h3=":443"; ma=86400
2024-11-15 14:48:50 UTC	404	IN	Data Raw: 35 66 37 62 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 56 61 6c 69 64 61 74 69 6f 6e 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 31 39 2e 32 20 2d 20 35 2f 32 33 2f 32 30 32 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 76 61 6c 69 64 61 74 69 6f 6e 2e 6f 72 67 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 20 4a c3 b6 72 6e 20 5a 61 65 66 66 65 72 65 72 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 Data Ascii: 5f7b/! jQuery Validation Plugin - v1.19.2 - 5/23/2020 https://jqueryvalidation.org/ * Copyright (c) 2020 Jrn Zaefferer; Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.export
2024-11-15 14:48:50 UTC	1369	IN	Data Raw: 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 4e 6f 74 68 69 6e 67 20 73 65 6c 65 63 74 65 64 2c 20 63 61 6e 27 74 20 76 61 6c 69 64 61 74 65 2c 20 72 65 74 75 72 6e 69 6e 67 20 6e 6f 74 68 69 6e 67 2e 22 29 29 3b 76 61 72 20 63 3d 61 2e 64 61 74 61 28 74 68 69 73 5b 30 5d 2c 22 76 61 6c 69 64 61 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 63 3f 63 3a 28 74 68 69 73 2e 61 74 74 72 28 22 6e 6f 76 61 6c 69 64 61 74 65 22 2c 22 6e 6f 76 61 6c 69 64 61 74 65 22 29 2c 63 3d 6e 65 77 20 61 2e 76 61 6c 69 64 61 74 6f 72 28 62 2c 74 68 69 73 5b 30 5d 29 2c 61 2e 64 61 74 61 28 74 68 69 73 5b 30 5d 2c 22 76 61 6c 69 64 61 74 6f 72 22 2c 63 29 2c 63 2e 73 65 74 74 69 6e 67 73 2e 6f 6e 73 75 62 6d 69 74 26 26 28 74 68 69 73 2e 6f 6e 28 22 63 6c 69 63 6b 2e 76 61 Data Ascii: le&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.va
2024-11-15 14:48:50 UTC	1369	IN	Data Raw: 5b 30 5d 2c 6a 2e 6e 61 6d 65 3d 74 68 69 73 2e 61 74 74 72 28 22 6e 61 6d 65 22 29 29 2c 6e 75 6c 6c 21 3d 6a 2e 66 6f 72 6d 29 29 7b 69 66 28 62 29 73 77 69 74 63 68 28 64 3d 61 2e 64 61 74 61 28 6a 2e 66 6f 72 6d 2c 22 76 61 6c 69 64 61 74 6f 72 22 29 2e 73 65 74 74 69 6e 67 73 2c 65 3d 64 2e 72 75 6c 65 73 2c 66 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 73 74 61 74 69 63 52 75 6c 65 73 28 6a 29 2c 62 29 7b 63 61 73 65 22 61 64 64 22 3a 61 2e 65 78 74 65 6e 64 28 66 2c 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6e 6f 72 6d 61 6c 69 7a 65 52 75 6c 65 28 63 29 29 2c 64 65 6c 65 74 65 20 66 2e 6d 65 73 73 61 67 65 73 2c 65 5b 6a 2e 6e 61 6d 65 5d 3d 66 2c 63 2e 6d 65 73 73 61 67 65 73 26 26 28 64 2e 6d 65 73 73 61 67 65 73 5b 6a 2e 6e 61 6d 65 5d 3d 61 2e 65 78 74 Data Ascii: [0],j.name=this.attr("name")),null!=j.form)){if(b)switch(d=a.data(j.form,"validator").settings,e=d.rules,f=a.validator.staticRules(j),b){case"add":a.extend(f,a.validator.normalizeRule(c)),delete f.messages,e[j.name]=f,c.messages&&(d.messages[j.name]=a.ext
2024-11-15 14:48:50 UTC	1369	IN	Data Raw: 3d 5b 63 5d 29 2c 61 2e 65 61 63 68 28 63 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 3d 62 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 7b 22 2b 61 2b 22 5c 5c 7d 22 2c 22 67 22 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 29 2c 62 29 7d 2c 61 2e 65 78 74 65 6e 64 28 61 2e 76 61 6c 69 64 61 74 6f 72 2c 7b 64 65 66 61 75 6c 74 73 3a 7b 6d 65 73 73 61 67 65 73 3a 7b 7d 2c 67 72 6f 75 70 73 3a 7b 7d 2c 72 75 6c 65 73 3a 7b 7d 2c 65 72 72 6f 72 43 6c 61 73 73 3a 22 65 72 72 6f 72 22 2c 70 65 6e 64 69 6e 67 43 6c 61 73 73 3a 22 70 65 6e 64 69 6e 67 22 2c 76 61 6c 69 64 43 6c 61 73 73 3a 22 76 61 6c 69 64 22 2c 65 72 72 6f 72 45 6c 65 6d 65 6e 74 3a 22 6c 61 62 65 6c 22 2c 66 6f 63 75 73 43 6c 65 61 6e 75 Data Ascii: =[c]),a.each(c,function(a,c){b=b.replace(new RegExp("\\{"+a+"\\}","g"),function(){return c})}),b)},a.extend(a.validator,{defaults:{messages:{},groups:{},rules:{},errorClass:"error",pendingClass:"pending",validClass:"valid",errorElement:"label",focusCleanu
2024-11-15 14:48:50 UTC	1369	IN	Data Raw: 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 72 65 6d 6f 74 65 3a 22 50 6c 65 61 73 65 20 66 69 78 20 74 68 69 73 20 66 69 65 6c 64 2e 22 2c 65 6d 61 69 6c 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 22 2c 75 72 6c 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 55 52 4c 2e 22 2c 64 61 74 65 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 64 61 74 65 2e 22 2c 64 61 74 65 49 53 4f 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 64 61 74 65 20 28 49 53 4f 29 2e 22 2c 6e 75 6d 62 65 72 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 6e 75 6d 62 65 72 2e 22 2c 64 69 67 69 74 73 3a 22 50 6c 65 61 Data Ascii: field is required.",remote:"Please fix this field.",email:"Please enter a valid email address.",url:"Please enter a valid URL.",date:"Please enter a valid date.",dateISO:"Please enter a valid date (ISO).",number:"Please enter a valid number.",digits:"Plea
2024-11-15 14:48:50 UTC	1369	IN	Data Raw: 68 69 73 2e 63 75 72 72 65 6e 74 46 6f 72 6d 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 3d 61 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 29 2e 61 64 64 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 29 2c 74 68 69 73 2e 73 75 62 6d 69 74 74 65 64 3d 7b 7d 2c 74 68 69 73 2e 76 61 6c 75 65 43 61 63 68 65 3d 7b 7d 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 7b 7d 2c 74 68 69 73 2e 69 6e 76 61 6c 69 64 3d 7b 7d 2c 74 68 69 73 2e 72 65 73 65 74 28 29 3b 76 61 72 20 63 2c 64 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 46 6f 72 6d 2c 65 3d 74 68 69 73 2e 67 72 6f 75 70 73 3d 7b 7d 3b 61 2e 65 61 63 Data Ascii: his.currentForm),this.containers=a(this.settings.errorContainer).add(this.settings.errorLabelContainer),this.submitted={},this.valueCache={},this.pendingRequest=0,this.pending={},this.invalid={},this.reset();var c,d=this.currentForm,e=this.groups={};a.eac
2024-11-15 14:48:50 UTC	1369	IN	Data Raw: 5d 3b 61 2b 2b 29 74 68 69 73 2e 63 68 65 63 6b 28 62 5b 61 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 69 64 28 29 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 74 68 69 73 2e 63 6c 65 61 6e 28 62 29 2c 66 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 54 61 72 67 65 74 46 6f 72 28 65 29 2c 67 3d 74 68 69 73 2c 68 3d 21 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 66 3f 64 65 6c 65 74 65 20 74 68 69 73 2e 69 6e 76 61 6c 69 64 5b 65 2e 6e 61 6d 65 5d 3a 28 74 68 69 73 2e 70 72 65 70 61 72 65 45 6c 65 6d 65 6e 74 28 66 29 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 73 3d 61 28 66 29 2c 64 3d 74 68 69 73 2e 67 72 6f 75 70 73 5b 66 2e 6e 61 6d 65 5d 2c 64 26 26 61 2e 65 61 Data Ascii: ];a++)this.check(b[a]);return this.valid()},element:function(b){var c,d,e=this.clean(b),f=this.validationTargetFor(e),g=this,h=!0;return void 0===f?delete this.invalid[e.name]:(this.prepareElement(f),this.currentElements=a(f),d=this.groups[f.name],d&&a.ea
2024-11-15 14:48:50 UTC	1369	IN	Data Raw: 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 61 5b 62 5d 2e 6e 61 6d 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 76 61 6c 69 64 43 6c 61 73 73 29 3b 65 6c 73 65 20 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 76 61 6c 69 64 43 6c 61 73 73 29 7d 2c 6e 75 6d 62 65 72 4f 66 49 6e 76 61 6c 69 64 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 62 6a 65 63 74 4c 65 6e 67 74 68 28 74 68 69 73 2e 69 6e 76 61 6c 69 64 29 7d 2c 6f 62 6a 65 63 74 4c 65 6e 67 74 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3d 30 3b 66 6f 72 28 Data Ascii: his.findByName(a[b].name).removeClass(this.settings.validClass);else a.removeClass(this.settings.errorClass).removeClass(this.settings.validClass)},numberOfInvalids:function(){return this.objectLength(this.invalid)},objectLength:function(a){var b,c=0;for(
2024-11-15 14:48:50 UTC	1369	IN	Data Raw: 62 2e 63 75 72 72 65 6e 74 46 6f 72 6d 26 26 28 21 28 64 20 69 6e 20 63 7c 7c 21 62 2e 6f 62 6a 65 63 74 4c 65 6e 67 74 68 28 61 28 74 68 69 73 29 2e 72 75 6c 65 73 28 29 29 29 26 26 28 63 5b 64 5d 3d 21 30 2c 21 30 29 29 7d 29 7d 2c 63 6c 65 61 6e 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 28 62 29 5b 30 5d 7d 2c 65 72 72 6f 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 2e 73 70 6c 69 74 28 22 20 22 29 2e 6a 6f 69 6e 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 61 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 45 6c 65 6d 65 6e 74 2b 22 2e 22 2b 62 2c 74 68 69 73 2e 65 72 72 6f 72 43 6f 6e 74 65 78 74 29 7d 2c 72 65 73 65 74 49 6e 74 65 72 6e Data Ascii: b.currentForm&&(!(d in c\|\|!b.objectLength(a(this).rules()))&&(c[d]=!0,!0))})},clean:function(b){return a(b)[0]},errors:function(){var b=this.settings.errorClass.split(" ").join(".");return a(this.settings.errorElement+"."+b,this.errorContext)},resetIntern
2024-11-15 14:48:50 UTC	1369	IN	Data Raw: 26 26 28 6a 3d 66 2e 63 61 6c 6c 28 62 2c 6a 29 2c 64 65 6c 65 74 65 20 67 2e 6e 6f 72 6d 61 6c 69 7a 65 72 29 3b 66 6f 72 28 64 20 69 6e 20 67 29 7b 65 3d 7b 6d 65 74 68 6f 64 3a 64 2c 70 61 72 61 6d 65 74 65 72 73 3a 67 5b 64 5d 7d 3b 74 72 79 7b 69 66 28 63 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6d 65 74 68 6f 64 73 5b 64 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 6a 2c 62 2c 65 2e 70 61 72 61 6d 65 74 65 72 73 29 2c 22 64 65 70 65 6e 64 65 6e 63 79 2d 6d 69 73 6d 61 74 63 68 22 3d 3d 3d 63 26 26 31 3d 3d 3d 68 29 7b 69 3d 21 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 69 3d 21 31 2c 22 70 65 6e 64 69 6e 67 22 3d 3d 3d 63 29 72 65 74 75 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 74 6f 48 69 64 65 3d 74 68 69 73 2e 74 6f 48 69 64 65 2e 6e 6f 74 28 74 68 69 73 2e 65 Data Ascii: &&(j=f.call(b,j),delete g.normalizer);for(d in g){e={method:d,parameters:g[d]};try{if(c=a.validator.methods[d].call(this,j,b,e.parameters),"dependency-mismatch"===c&&1===h){i=!0;continue}if(i=!1,"pending"===c)return void(this.toHide=this.toHide.not(this.e

Timestamp	Bytes transferred	Direction	Data
2024-11-15 14:48:53 UTC	537	OUT	OPTIONS /report/v4?s=lgleMaBxtetJM6AYuQ5p3h%2BxThSbiCuQbcsqVGmzUgMMBWLS0TOJ24h2L6fxl8z%2F4NZugpFVUWnpZ6xYFGclykU9DsSkxkt%2F%2BvKBnZeKNnkXBBI7IbxKvjK7jKf8zzFXslTm HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.anima.art.br Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 14:48:53 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 15 Nov 2024 14:48:52 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-11-15 14:48:53 UTC	478	OUT	POST /report/v4?s=lgleMaBxtetJM6AYuQ5p3h%2BxThSbiCuQbcsqVGmzUgMMBWLS0TOJ24h2L6fxl8z%2F4NZugpFVUWnpZ6xYFGclykU9DsSkxkt%2F%2BvKBnZeKNnkXBBI7IbxKvjK7jKf8zzFXslTm HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 450 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 14:48:53 UTC	450	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 33 32 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6e 69 6d 61 2e 61 72 74 2e 62 72 2f 61 6e 61 2f 77 61 6c 6c 65 74 2f 63 72 79 70 74 6f 2f 77 61 6c 6c 65 74 73 2e 70 68 70 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 37 31 2e 31 32 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d Data Ascii: [{"age":0,"body":{"elapsed_time":1320,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.anima.art.br/ana/wallet/crypto/wallets.php","sampling_fraction":1.0,"server_ip":"104.21.71.123","status_code":404,"type":"http.error"}
2024-11-15 14:48:54 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 15 Nov 2024 14:48:53 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-11-15 14:48:54 UTC	660	OUT	GET / HTTP/1.1 Host: walletconnect.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 14:48:55 UTC	323	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 15 Nov 2024 14:48:55 GMT Content-Type: text/html Content-Length: 167 Connection: close Cache-Control: max-age=3600 Expires: Fri, 15 Nov 2024 15:48:55 GMT Location: https://walletconnect.com/ Server: cloudflare CF-RAY: 8e300b7fdcd9878a-DFW alt-svc: h3=":443"; ma=86400
2024-11-15 14:48:55 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-11-15 14:48:55 UTC	660	OUT	GET / HTTP/1.1 Host: walletconnect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-15 14:48:55 UTC	386	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 15 Nov 2024 14:48:55 GMT Content-Type: text/html Content-Length: 169 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Location: https://reown.com/ Server: cloudflare CF-RAY: 8e300b84bf1b47ff-DFW alt-svc: h3=":443"; ma=86400
2024-11-15 14:48:55 UTC	169	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>307 Temporary Redirect</title></head><body><center><h1>307 Temporary Redirect</h1></center><hr><center>cloudflare</center></body></html>