Click to jump to signature section
Source: http://yqmxfz.com/pw/waWQiOjEwNTEyMDUsInNpZCI6MTE0OTQ4Nywid2lkIjozNTY3MDMsInNyYyI6Mn0=eyJ.js | Avira URL Cloud: Label: malware |
Source: http://contehos.com/apu.php?zoneid=3172840 | Avira URL Cloud: Label: malware |
Source: C:\Program Files\Google\Chrome\Application\chrome.exe | DNS query: desifoodcorner.wb4.xyz |
Source: C:\Program Files\Google\Chrome\Application\chrome.exe | DNS query: cdn1.wb4.xyz |
Source: | DNS query: desifoodcorner.wb4.xyz |
Source: C:\Program Files\Google\Chrome\Application\chrome.exe | DNS query: desifoodcorner.wb4.xyz |
Source: C:\Program Files\Google\Chrome\Application\chrome.exe | DNS query: cdn1.wb4.xyz |
Source: unknown | DNS traffic detected: queries for: accounts.google.com |
Source: global traffic | HTTP traffic detected: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}Content-Length: 7776X-Content-Type-Options: nosniffServer: sffeX-XSS-Protection: 0Date: Thu, 18 Aug 2022 17:59:59 GMTExpires: Fri, 18 Aug 2023 17:59:59 GMTCache-Control: public, max-age=31536000Last-Modified: Thu, 18 Aug 2022 10:58:04 GMTContent-Type: text/cssAge: 320604Data Raw: 1f 8b 08 00 00 00 00 00 02 ff d4 7d 79 73 db 38 f2 e8 ff ef 53 f0 29 2f 95 78 86 a4 a9 d3 b2 54 d9 7a b2 e3 39 33 67 36 b3 57 cd 73 41 24 24 61 4c 12 7c 24 64 cb 51 e9 bb ff 0a 17 89 8b 94 ec 64 67 6b a3 1d af 44 74 37 1a 40 a3 d1 68 34 9a 4b 9c 3c ee 33 50 ae 51 3e 8b e6 05 48 12 94 af 67 91 17 79 fd 62 77 08 63 9c 13 98 93 00 6f 09 2c fd 70 03 41 02 4b f9 8b 80 65 25 bf 67 00 e5 da 77 94 e7 f4 fb 0a 63 d2 60 14 b8 22 7e 18 e3 2c 83 39 a9 fc f0 01 25 6b 48 fc 30 01 04 06 9c b8 1f a2 3c 45 39 0c 40 b2 2f 70 85 08 c2 f9 ac 84 29 20 e8 1e ce 33 94 07 1b 88 d6 1b 32 8b e6 b7 75 79 45 00 41 f1 fc 56 14 f5 5f 1e b4 8a 45 03 83 25 26 04 67 b3 40 6b 1a 63 74 2f 5b de 8f 68 19 6b 99 5e 10 79 fd 31 2d 6a 1a 57 17 0d a3 62 e7 45 6a 91 17 c6 38 dd 66 79 10 c3 9c 72 21 3a c3 01 90 c2 15 e9 28 2e 69 7b 5a 38 11 2d 74 f0 c2 cb 2b 18 d3 ce a9 47 57 3c e6 7d 2e 9f 72 de e7 b7 35 50 e4 f1 2e 10 d8 b3 15 2a 2b 12 c4 1b 94 26 9e c0 55 9f c9 ae 25 b8 98 45 6e ac 17 db a4 0a 2a 08 ca 78 73 8d 73 52 e2 f4 4b 9d 09 13 39 05 56 8d cd 23 63 2c 23 3e 58 2e 36 2d 48 2a eb 5e 98 83 fb 25 28 f7 42 54 68 fb 1b b1 9f cb 6e d0 60 bd f0 47 8e 53 cb 1b 58 56 38 dd 12 38 ff 18 a0 3c 81 bb 59 3f 9a d3 91 9c 45 f3 07 94 90 cd ac 1f 45 2f e7 f6 b4 9a 2f 41 7c b7 2e f1 36 4f 66 39 ce e1 7c 89 cb 04 96 ec fb 41 ce 2e 21 01 e6 f0 99 e5 7a 23 59 ed ac 31 e2 41 59 37 cf 44 fc 86 fd 6a a5 cb 8b bd 17 ea d3 3d be 87 e5 2a c5 0f b3 0d 4a 12 98 b7 e0 84 04 91 14 3e 94 a0 28 14 91 1c 0c 8a 9d 27 e7 88 1b 2f 81 55 5c a2 82 b6 d7 c4 8e 3c b5 55 62 2c 07 4c 92 05 f6 a6 6f 8c 34 17 60 07 6d d9 e6 70 0c 33 21 e8 8a ca 1b 14 bb 03 f0 50 b6 de 2b a3 32 b7 74 d0 61 d3 f7 37 03 7f 33 f4 37 23 45 73 3a c0 3c 30 db d0 8e db 13 b8 23 41 02 63 5c 02 06 c3 86 7b 33 ec 2e 67 72 2d 87 d9 db 0c f6 09 aa 8a 14 3c ba 4a b7 a9 6f 3e 70 28 f5 b9 31 8a f3 14 55 24 a8 c8 63 0a 5d 44 53 e4 9b 0f 5c 4 |