Edit tour

Windows Analysis Report
https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20=

Overview

General Information

Sample URL:	https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20=
Analysis ID:	1523493
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

HTML body with high number of embedded SVGs detected

HTML body with high number of embedded images detected

Sample execution stops while process was sleeping (likely an evasion)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=2004,i,8204040617005016038,14489719247330549850,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3300 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5904 --field-trial-handle=2004,i,8204040617005016038,14489719247330549850,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6496 --field-trial-handle=2004,i,8204040617005016038,14489719247330549850,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20=" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

conhost.exe (PID: 6372 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

HTTP traffic detected: POST /cdn-cgi/rum? HTTP/1.1Host: www.hostgator.com.brConnection: keep-aliveContent-Length: 1529sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: */*Origin: https://www.hostgator.com.brSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.hostgator.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=ghU02Wt9l9bO35BuANEi1nGiJ6WOCxD6cM2oFUR5pnw-1727796167-1.0.1.1-qyNatgCBWWO8RVEq30WVFuNBF8_Y8M_DArXUUXm3NOaWqkVpQ1iaFxN6B6xKjEwpKcnWMCF2JCgNy7rY35bW4w

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 15:22:37 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, closeLast-Modified: Thu, 29 Sep 2022 21:53:04 GMTAccept-Ranges: bytesContent-Length: 2361Vary: Accept-EncodingContent-Type: text/html

Source: https://www.hostgator.com.br/	HTTP Parser: Total embedded image size: 109246
Source: https://www.hostgator.com.br/revenda-de-hospedagem	HTTP Parser: Total embedded image size: 97692

Source: https://www.hostgator.com.br/	HTTP Parser: No favicon
Source: https://www.hostgator.com.br/	HTTP Parser: No favicon
Source: https://www.hostgator.com.br/revenda-de-hospedagem	HTTP Parser: No favicon
Source: https://www.youtube.com/@HostGatorBrasil	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.hostgator.com.br
Source: global traffic	DNS traffic detected: DNS query: ajax.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: cdn.growthbook.io
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: api.reclameaqui.com.br
Source: global traffic	DNS traffic detected: DNS query: conversions.hostgator.io
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: hostgatorbr.postaffiliatepro.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: yt3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: rr3---sn-ab5l6nkd.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: rr3---sn-vgqsknlr.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=2004,i,8204040617005016038,14489719247330549850,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5904 --field-trial-handle=2004,i,8204040617005016038,14489719247330549850,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6496 --field-trial-handle=2004,i,8204040617005016038,14489719247330549850,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=2004,i,8204040617005016038,14489719247330549850,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5904 --field-trial-handle=2004,i,8204040617005016038,14489719247330549850,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6496 --field-trial-handle=2004,i,8204040617005016038,14489719247330549850,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://support.google.com	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://youtu.be/	0%	URL Reputation	safe
https://cdn.cookielaw.org/vendorlist/googleData.json	0%	URL Reputation	safe
https://cdn.cookielaw.org/vendorlist/iab2Data.json	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe
http://hammerjs.github.io/	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://static.hotjar.com/c/hotjar-	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
static.cloudflareinsights.com	104.16.80.73	true	false	unknown
i.ytimg.com	142.250.185.182	true	false	unknown
d-kiay6qd4bk.execute-api.us-east-1.amazonaws.com	34.198.168.20	true	false	unknown
na.iso.postaffiliatepro.com	45.33.2.97	true	false	unknown
ajax.cloudflare.com	104.17.72.14	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
s3.amazonaws.com	16.15.177.147	true	false	unknown
rr3.sn-ab5l6nkd.googlevideo.com	74.125.0.168	true	false	unknown
photos-ugc.l.googleusercontent.com	172.217.16.193	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
api.reclameaqui.com.br	172.64.147.18	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
www.hostgator.com.br	172.66.40.38	true	false	unknown
static.doubleclick.net	172.217.16.198	true	false	unknown
youtube.com	142.250.185.174	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
youtube-ui.l.google.com	142.250.186.78	true	false	unknown
googleads.g.doubleclick.net	172.217.18.2	true	false	unknown
play.google.com	172.217.18.14	true	false	unknown
rr3.sn-vgqsknlr.googlevideo.com	74.125.9.104	true	false	unknown
yt3.googleusercontent.com	216.58.206.33	true	false	unknown
yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br	108.167.132.233	true	false	unknown
td.doubleclick.net	142.250.185.66	true	false	unknown
cdn.cookielaw.org	104.18.87.42	true	false	unknown
geolocation.onetrust.com	172.64.155.119	true	false	unknown
hostgatorbr.postaffiliatepro.com	unknown	unknown	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
rr3---sn-ab5l6nkd.googlevideo.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
rr3---sn-vgqsknlr.googlevideo.com	unknown	unknown	false	unknown
cdn.growthbook.io	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
conversions.hostgator.io	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://www.hostgator.com.br/assets/images/shapes/icon-arrow-right.svg	false		unknown
https://www.youtube.com/s/desktop/6e5f8289/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js	false		unknown
https://www.hostgator.com.br/assets/icons/logos/short-blue.svg	false		unknown
https://www.hostgator.com.br/assets/images/footer-v2/sitelock.png	false		unknown
https://www.youtube.com/api/stats/watchtime?ns=yt&el=profilepage&cpn=0muN5ZHszlTd6N44&ver=2&cmt=25.772&fmt=243&fs=0&rt=29.016&euri=https%3A%2F%2Fwww.youtube.com%2F%40HostGatorBrasil&lact=17635&cl=678939114&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240930.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&delay=9&hl=en_US&cr=US&len=5596.021&rtn=41&afmt=251&idpj=-4&ldpj=-32&rti=29&st=15.772&et=25.772&muted=0&docid=SLzx1A5zxao&ei=-RP8ZuDyBoSE6dsP9-nQ4AI&plid=AAYja-fE5Jm3u7V-&referrer=https%3A%2F%2Fwww.youtube.com%2F%40HostGatorBrasil&of=8vRzN4eB-To9cCeVAXHiOA&vm=CAEQARgEOjJBSHFpSlRLakJmc0RKT1FvN1IzOWNBak1wRk9XY0Q0c2I5d2VtRjJFME1QaUotQ29iUWJfQU9BckJGdHV3aUdET2FtZGpSRUduckxjSU1nUG9hSENZXzhVMk8xTV9haHB6ZU5lQUJod3g4cDNSNktIdTAwQWU3SjJpQkFuWnFFODB6SF9pTUFnY0JkYjZsNW9MTFU	false		unknown
https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/cgi-sys/fonts/GalanoGrotesqueAlt-Light.woff2	false		unknown
https://i.ytimg.com/an/XnGzQ0AOc4BprV7AkKic8w/featured_channel.jpg?v=5cc1d5b7	false		unknown
https://www.hostgator.com.br/assets/images/main-menu-v2/snappy-dloja.png	false		unknown
https://www.hostgator.com.br/_next/static/chunks/8401.4af25744f7ee9174.js	false		unknown
https://www.hostgator.com.br/_next/data/B6-oy4uzYW53RWAlyLHES/webmail.json	false		unknown
https://www.hostgator.com.br/_next/static/chunks/2997.8b3f9b3cb0eabdb3.js	false		unknown
https://www.hostgator.com.br/_next/static/chunks/main-02d79fe8c2a509ed.js	false		unknown
https://www.youtube.com/s/player/26636eff/player_ias.vflset/en_US/captions.js	false		unknown
https://www.hostgator.com.br/_next/static/chunks/1383.c71ab998764c3c93.js	false		unknown
https://www.hostgator.com.br/_next/static/chunks/framework-79bce4a3a540b080.js	false		unknown
https://www.youtube.com/app_shell	false		unknown
https://www.youtube.com/s/search/audio/success.mp3	false		unknown
https://s3.amazonaws.com/raichu-beta/selos/bundle.js	false		unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://www.hostgator.com.br/_next/static/chunks/9200.631b3d60c43d13bc.js	false		unknown
https://www.youtube.com/api/stats/watchtime?ns=yt&el=profilepage&cpn=0muN5ZHszlTd6N44&ver=2&cmt=15.772&fmt=243&fs=0&rt=19.017&euri=https%3A%2F%2Fwww.youtube.com%2F%40HostGatorBrasil&lact=7636&cl=678939114&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240930.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&autoplay=1&delay=9&hl=en_US&cr=US&len=5596.021&rtn=29&afmt=251&idpj=-4&ldpj=-32&dtm=1&rti=19&st=5.771&et=15.772&muted=0&docid=SLzx1A5zxao&ei=-RP8ZuDyBoSE6dsP9-nQ4AI&plid=AAYja-fE5Jm3u7V-&referrer=https%3A%2F%2Fwww.youtube.com%2F%40HostGatorBrasil&of=8vRzN4eB-To9cCeVAXHiOA&vm=CAEQARgEOjJBSHFpSlRLakJmc0RKT1FvN1IzOWNBak1wRk9XY0Q0c2I5d2VtRjJFME1QaUotQ29iUWJfQU9BckJGdHV3aUdET2FtZGpSRUduckxjSU1nUG9hSENZXzhVMk8xTV9haHB6ZU5lQUJod3g4cDNSNktIdTAwQWU3SjJpQkFuWnFFODB6SF9pTUFnY0JkYjZsNW9MTFU	false		unknown
https://i.ytimg.com/vi/SLzx1A5zxao/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLDGd4R7hJFVT0S8lf1T7y5SH6LLaA	false		unknown
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240930_01_00&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240930_01_00%3Bptype%3Dcview%3Btype%3Dcview%3Butuid%3DXnGzQ0AOc4BprV7AkKic8w&foc_id=XnGzQ0AOc4BprV7AkKic8w&label=followon_cvisit&ptype=cview&utuid=XnGzQ0AOc4BprV7AkKic8w&cv_attributed=0	false		unknown
https://www.hostgator.com.br/_next/static/chunks/pages/_app-226f86447d83e1e0.js	false		unknown
https://www.hostgator.com.br/_next/static/chunks/7573-90729dabd8ac11cc.js	false		unknown
https://www.hostgator.com.br/assets/images/footer-v2/elo.png	false		unknown
https://hostgatorbr.postaffiliatepro.com/scripts/trackjs.js	false		unknown
https://www.hostgator.com.br/assets/images/main-menu-v2/snappy-portal.png	false		unknown
https://www.youtube.com/@HostGatorBrasil	false		unknown
https://www.hostgator.com.br/_next/static/chunks/6900.1dc35f4cd92642a4.js	false		unknown
https://www.hostgator.com.br/assets/fonts/slick.woff	false		unknown
https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/cgi-sys/images/illustration-404.svg	false		unknown
https://www.hostgator.com.br/assets/images/logos/shop-snappy-logo.svg	false		unknown
https://www.youtube.com/s/desktop/6e5f8289/img/favicon.ico	false		unknown
https://www.hostgator.com.br/revenda-de-hospedagem	false		unknown
https://yt3.googleusercontent.com/YPPs4brZtR2UdnMR0r2xmXIYAJa6o7wsYxhV3Vz_cPYn0cw48YY_S34oNK9Yn5Z7z4X95bYCIA=w1707-fcrop64=1,00005a57ffffa5a8-k-c0xffffffff-no-nd-rj	false		unknown
https://www.hostgator.com.br/assets/images/footer-v2/visa.png	false		unknown
https://www.hostgator.com.br/_next/static/chunks/8488-ab92bc3c2dde7dcd.js	false		unknown
https://www.youtube.com/s/player/26636eff/www-player.css	false		unknown
https://www.hostgator.com.br/assets/images/shapes/triangle.svg	false		unknown
https://www.google.com/pagead/lvz?evtid=ACd6Ktz_6SBLcSkNpGM9RBc_JrTROxtNXOhQ2xXQQtQnQ2NzV9cxOQBDhJAVJ0YPHzOgnPKRgyfbHQlPr-7yL7_lQbObiOBP5g&req_ts=1727796204&pg=MainAppBootstrap%3AUnclassified&az=1&sigh=AB9vU41RMQxzHd7E0rWgKI3oYvMzh_p1Bg	false		unknown
https://www.hostgator.com.br/_next/static/chunks/3314.6cdde7929a1fd94e.js	false		unknown

Source: chromecache_495.2.dr	String found in binary or memory: "&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: "&sig="+Oc+"&ad_cpn=[AD_CPN]&id="+Ai+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+ea},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Ai+"&avm="+ea+"&dc_pubid="+ea+"&dc_exteid="+bc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Jd+"&cid="+ca+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: "&uga="+xb+"&vm="+vf},videostatsDelayplayUrl:{baseUrl:"https://s.youtube.com/api/stats/delayplay?cl="+Ab+"&docid="+y+"&ei="+U+"&feature="+m+"&fexp="+mf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Yd+"&el="+lh+"&len="+vc+"&of="+ec+"&uga="+xb+"&vm="+vf},videostatsWatchtimeUrl:{baseUrl:"https://s.youtube.com/api/stats/watchtime?cl="+Ab+"&docid="+y+"&ei="+U+"&feature="+m+"&fexp="+mf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+ equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: "=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Xc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(RI.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+Gh,RI),trackingParams:Xa+"="}},popupType:"DIALOG"}},trackingParams:Xa+"="}}, equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: "="},trackingParams:Xa+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:qe},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],layoutId:"1ID7Gdwk2vV7OZ1A"}}, equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: "="}},hoverText:{runs:[{text:Jn}]},trackingParams:Xa+"="}},adVideoId:Jd,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=video_companion_reshow_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:cb},isContentVideoCompanion:!0,associatedCompositePlayerBytesLayoutId:qe}},adSlotLoggingData:{serializedSlotAdServingDataEntry:qe}}}],adBreakHeartbeatParams:"Q0FBJTNE",frameworkUpdates:{entityBatchUpdate:{mutations:[{entityKey:Gc, equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+Gh,dga),trackingParams:Xa+"="}},popupType:"DIALOG"}},trackingParams:Xa+"="}},hoverText:{runs:[{text:Ux}]},trackingParams:Xa+"="}},adVideoId:Jd,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Xq},associatedCompositePlayerBytesLayoutId:qe}}, equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+Gh,r0),trackingParams:Xa+"="}},popupType:"DIALOG"}},icon:{iconType:"INFO_OUTLINE"},trackingParams:Xa+"="}},hoverText:{runs:[{text:Rp}]},trackingParams:Xa+"="}},flyoutCtaRenderer:{flyoutCtaRenderer:{image:{thumbnail:{thumbnails:[{url:"https://yt3.ggpht.com/ytc/"+Wi+"=s176-c-k-c0x00ffffff-no-rj"}]},trackingParams:Xa+"="},headline:{text:Vx,isTemplated:!1,trackingParams:Xa+"="},description:{text:Sp, equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: $M.prototype.publish=function(a,b){return this.isDisposed()?!1:this.pubSub_.publish.apply(this.pubSub_,arguments)};var QZb=ka(["https://www.youtube.com/iframe_api"]),aN=function(){this.playerResolver_=yi();this.playerPromise_=this.playerResolver_.promise;this.playerVars_=null;this.playbackEndedCallback_=Ig;this.playbackDurationSeconds_=0},RZb=function(a){var b=function(){return window.YT&&typeof window.YT.ready==="function"}; equals www.youtube.com (Youtube)
Source: chromecache_600.2.dr, chromecache_746.2.dr	String found in binary or memory: (g.rk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.rk(c,"www.youtube.com"),d=c.toString()):(c=iwa(d),jE(c)&&(d=c));c=new g.XL(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_600.2.dr, chromecache_746.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=iE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|iE(this.mf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=is(d,h,GJa):h&&(d="embedded");this.Ja=d;Qqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(HJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Vb(HJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_759.2.dr	String found in binary or memory: ;var Q=A.window,R,S,T=(Q==null?void 0:(R=Q.yt)==null?void 0:R.config_)\|\|(Q==null?void 0:(S=Q.ytcfg)==null?void 0:S.data_)\|\|{};B("yt.config_",T);var U=Object.freeze("document.appendChild document.body.appendChild document.querySelector document.querySelectorAll history.back history.go".split(" ")),V=Object.freeze("fonts.googleapis.com s0.2mdn.net securepubads.g.doubleclick.net ssl.google-analytics.com static.doubleclick.net www.google-analytics.com www.googletagservices.com www.youtube.com youtube.com".split(" ")),W=Object.freeze(["pkedcjkdefgpdelpbcmbmeomcjbeemfm","fjhoaacokmgbjemoflkofnenfaiekifl","enhhojjnijigcajfphajepfemndkmdlo"]),X= equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: Ab+";dc_dbm_token="+w+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ea+";ord="+Ab+";dc_rui="+ea+";dc_exteid="+bc+";dc_av="+ea+";dc_sk="+ea+";dc_ctype="+xb+";dc_pubid="+ea+";dc_btype=3?gclid="+Na+"&ase=2"},{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=video_card_endcap_action_headline_click"}],commandMetadata:{webCommandMetadata:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+ equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: Ai+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Ai+"&dc_pubid="+ea+"&dc_exteid="+bc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Jd+"&cid="+ca+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+ equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Jd+"&cid="+ca+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+ea+"&ns="+ea+"&event="+ea+"&device="+ea+"&content_v="+y+"&el="+lh+"&ei="+U+"&devicever="+c+"&bti="+Gb+"&format="+Td+"&break_type="+ea+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+ea+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+Lb+"&slot_pos="+ea+"&slot_len="+ea+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+wc+"&ad_len="+Wc+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+ equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Jd+"&cid="+ca+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Jd+"&cid="+ca+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: Cr(nsb);Cr(osb);function qsb(a){var b=a.animatedIconType;var c=a.active;var d=a.themeOverride;var e=a.animationRef===void 0?{}:a.animationRef;var g=a.staticIconFn;var k=function(){a:{var N=b();var O=d==null?void 0:d(),U;O=(O==null?void 0:O.useDarkTheme)\|\|((U=Rl().resolve(Ql(nB)))==null?void 0:U());U=z("enable_cairo_refresh_signature_moments_web");switch(N){case"LIKE":N="animated_like_icon_";N=U?N+(O?"dark_v4":"light_v4"):N+(O?"v2_dark":"v2_light");N={lottiePlayerProps:{animationConfig:{name:N,path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+ equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: HE.prototype.getUrl=function(a,b){return"https://www.gstatic.com/youtube/img/icons/web/"+b.style+"/"+a+"/v"+b.version+"/"+b.size+"px.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_746.2.dr	String found in binary or memory: Io.prototype.Ia=function(){return this.C};var kna=(new Date).getTime();var xla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),yla=/\bocr\b/;var Ala=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Qab=0,Rab=0,Sab=0;var Ro;g.Ko=null;g.Mo=!1;g.So=1;Ro=Symbol("SIGNAL");g.To={version:0,s_:0,Pm:!1,eg:void 0,Ry:void 0,Bn:void 0,NL:0,ij:void 0,Ou:void 0,aF:!1,pP:!1,P1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: Jd+"&aqi="+U+"&ad_rmp="+ea+"&sli="+ea}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ equals www.youtube.com (Youtube)
Source: chromecache_746.2.dr	String found in binary or memory: LIa=function(a,b){if(!a.j["0"]){var c=new VF("0","fakesb",{video:new RF(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new oN(new g.XL("http://www.youtube.com/videoplayback"),c,"fake"):new FN(new g.XL("http://www.youtube.com/videoplayback"),c,new $M(0,0),new $M(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: N+".json",loop:!1,autoplay:!1,rendererSettings:{viewBoxOnly:!0,className:"animated-like-icon"}}},totalFrames:U?60:119,lazyLoad:!0};break a;case"NOTIFICATION_BELL":N={lottiePlayerProps:{animationConfig:{name:O?"notification_bell_dark":"notification_bell_light",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_"+(O?"dark":"light")+".json",loop:!1,autoplay:!1,rendererSettings:{className:"animated-subscribe-icon"}}},totalFrames:79,lazyLoad:!1};break a;}N=void 0}return N}, equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: Object.assign({},{name:"INCORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_LightTheme_01a.json",renderer:"svg"},$4b,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"26 26 80 80"}});a.correctnessAnimationProps=[];a.correctnessAnimationRefs=[];return a}; equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: Yd+"&el="+lh+"&len="+vc+"&of="+ec+"&uga="+xb+"&vm="+vf},ptrackingUrl:{baseUrl:"https://www.youtube.com/ptracking?ei="+U+"&m="+gb+"&oid="+ec+"&plid="+N+"&pltype="+Ux+"&ptchn="+ec+"&ptk="+H+"&video_id="+y},qoeUrl:{baseUrl:"https://s.youtube.com/api/stats/qoe?cl="+Ab+"&docid="+y+"&ei="+U+"&event="+Jn+"&feature="+m+"&fexp="+mf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Yd},atrUrl:{baseUrl:"https://s.youtube.com/api/stats/atr?docid="+y+"&ei="+U+"&feature="+ equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: Yx&&Yx.JSC$7552_snapshotAndFlush()}},b),(c.flush_logs={callback:function(){bm()}},c))}},jHb);var lHb={},mHb=(lHb.rendered={priority:0,callback:function(){var a=new gza;a.increment("STARTED");if(Bj("LOGGED_IN")&&Bj("SERVER_VERSION")!=="test"&&Bj("SERVER_VERSION")!=="dev"&&!Oia()&&!Nia()){a.increment("EXECUTING");var b=document.createElement("iframe");b.style.display="none";sba(b,2,Nb("https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid="+Bj("INNERTUBE_CONTEXT_CLIENT_NAME")));document.body&&document.body.appendChild(b);a.increment("DONE")}}},lHb);var nHb={},oHb=(nHb.rendered={callback:function(){eCb().resume()}},nHb);var pHb={acknowledgeChannelTouStrikeCommand:Gz(JG),addToPlaylistServiceEndpoint:Gz(FH),addToPlaylistEndpoint:Gz(FH),addUpcomingEventReminderEndpoint:Gz(YG),browseEndpoint:Gz(IBb),channelCreationFormEndpoint:Gz(CG),channelCreationServiceEndpoint:Gz(DG),claimLegacyYoutubeChannelEndpoint:Gz(pG),clearSearchHistoryEndpoint:Gz(QG),clearWatchHistoryEndpoint:Gz(RG),commerceActionCommand:Hz(bI),createBackstagePostEndpoint:Gz(jG),createCommentEndpoint:Gz(yG),createCommentReplyEndpoint:Gz(xG),createLiveChatPollEndpoint:Gz(ZG), equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: Zx.prototype.remove=function(a){this.JSC$9679_expiringStorage.remove(a)};var Aab=ka(["https://www.youtube.com/",""]),Bab=ka(["https://studio.youtube.com/",""]);function Cab(){if(Dab())dm(Error("persist identity iframe is inserted more than once"));else{var a=document.createElement("iframe");a.style.display="none";var b=b===void 0?window.location.href:b;var c=uj(Bj("PERSIST_IDENTITY_IFRAME_URL"));b=c?c:new URL(b).host.indexOf("studio")===0?Ug(Aab,"persist_identity"):Ug(Bab,"persist_identity");sba(a,1,b);a.id="persist_identity";var d;(d=document.body)==null\|\|d.appendChild(a)}} equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: ["NOTIFICATION_BELL",{name:"notification_bell_light",nameDarkTheme:"notification_bell_dark",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_light.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_dark.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"NOTIFICATION_BELL",totalFrames:79,lazyLoad:!1}]]);var nlb=ka(["https://www.gstatic.com/external_hosted/lottie/lottie_light.js"]),olb=Ug(nlb),FA;function plb(){return FA?FA:window.lottie?FA=Promise.resolve(window.lottie):FA=new Promise(function(a,b){var c=document.createElement("script");c.addEventListener("load",function(){a(lottie)}); equals www.youtube.com (Youtube)
Source: chromecache_387.2.dr	String found in binary or memory: a online."/><link rel="canonical" href="https://www.hostgator.com.br"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#FFFFFF"/><meta name="msapplication-TileColor" content="#7F7F7F"/><meta name="format-detection" content="telephone=no"/><meta name="HandheldFriendly" content="True"/><meta name="MobileOptimized" content="320"/><link rel="profile" href="https://gmpg.org/xfn/11"/><link rel="shortcut icon" href="/assets/images/favicons/favicon.ico"/><link rel="icon" href="/assets/images/favicons/favicon-32.png" sizes="32x32"/><link rel="icon" href="/assets/images/favicons/favicon-57.png" sizes="57x57"/><link rel="icon" href="/assets/images/favicons/favicon-76.png" sizes="76x76"/><link rel="icon" href="/assets/images/favicons/favicon-96.png" sizes="96x96"/><link rel="icon" href="/assets/images/favicons/favicon-128.png" sizes="128x128"/><link rel="shortcut icon" href="/assets/images/favicons/favicon-192.png" sizes="192x192"/><link rel="apple-touch-icon" href="/assets/images/favicons/favicon-120.png" sizes="120x120"/><link rel="apple-touch-icon" href="/assets/images/favicons/favicon-152.png" sizes="152x152"/><link rel="apple-touch-icon" href="/assets/images/favicons/favicon-180.png" sizes="180x180"/><meta property="og:locale" content="pt-BR"/><meta property="og:type" content="website"/><meta property="og:title" content="HostGator: A melhor hospedagem de sites do mercado"/><meta property="og:description" content="Descubra como nossos servidores de hospedagem podem ajudar seu site a crescer e se destacar! Clique para saber mais."/><meta property="og:url" content="https://www.hostgator.com.br"/><meta property="og:site_name" content="HostGator Brasil"/><meta property="og:updated_time" content="2024-08-01T00:00:00.000Z"/><meta property="article:publisher" content="https://facebook.com/HostgatorBrasil"/><meta property="article:published_time" content="2021-05-01T15:00:00.000Z"/><meta property="article:modified_time" content="2024-08-01T00:00:00.000Z"/><meta property="og:image" content="https://www.hostgator.com.br/assets/images/share/hostgator-default.png"/><meta property="og:image:secure_url" content="https://www.hostgator.com.br/assets/images/share/hostgator-default.png"/><meta property="og:image:width" content="1200"/><meta property="og:image:height" content="600"/><meta property="og:image:alt" content="A melhor hospedagem de sites do mercado \| HostGator"/><meta name="twitter:site" content="@hostgatorbrasil"/><meta name="twitter:creator" content="@hostgatorbrasil"/><meta name="twitter:title" content="A melhor hospedagem de sites do mercado \| HostGator"/><meta name="twitter:description" content="Garanta seu dom equals www.facebook.com (Facebook)
Source: chromecache_746.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Ui(a,{hl:d})),this.Cd(rY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Cd(g.pY(a.errorMessage)):this.Cd(rY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Ui(c, equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: a.content.firstChild);return Eic=a},{mode:1});var Hic;var Iic=function(){var a=J.apply(this,arguments)\|\|this;a.rightSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_dark_v1.svg";a.rightSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_light_v1.svg";a.leftSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_dark_v1.svg";a.leftSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_light_v1.svg";a.leftSquiggly=a.leftSquigglyLight;a.rightSquiggly=a.rightSquigglyLight; equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: a.content.firstChild);return Hic=a},{mode:1});var Jic;var Kic=function(){var a=J.apply(this,arguments)\|\|this;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.image0DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_dark.svg";a.image0LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_light.svg";a.image1DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_dark.svg";a.image1LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_light.svg"; equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: a.content.firstChild);return Opc=a},{mode:xz("kevlar_poly_si_batch_j044")?1:2});var Qpc;var Rpc=Hw(wv("DELETE_FROM_DOWNLOADS",{},"Delete from downloads"));var Spc={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: a.content.firstChild);return hCc=a},{mode:1});var jCc;var Y_=function(){var a=J.apply(this,arguments)\|\|this;a.dark=!1;a.headerBackgroundLight="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.headerBackgroundDark="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: a.content.insertBefore(W().content.cloneNode(!0),a.content.firstChild);return Lic=a},{mode:1});var Mic;var JV=function(){var a=J.apply(this,arguments)\|\|this;a.JSC$15317_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_dark_v1.svg";a.JSC$15317_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_light_v1.svg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.squigglyBackground=a.JSC$15317_squigglyBackgroundLight;return a}; equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: a.content.insertBefore(W().content.cloneNode(!0),a.content.firstChild);return Mic=a},{mode:xz("kevlar_poly_si_batch_j056")?1:2});var Nic;var Oic=function(){var a=J.apply(this,arguments)\|\|this;a.JSC$15320_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_dark.svg";a.JSC$15320_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_light.svg";a.squigglyBackground=a.JSC$15320_squigglyBackgroundLight;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: a.content.insertBefore(W().content.cloneNode(!0),a.content.firstChild);return V4b=a},{mode:2});var Z4b;var $4b={autoplay:!1,loop:!1},a5b={simpleText:""},b5b=function(){var a=J.apply(this,arguments)\|\|this;a.isLoading=!1;a.usesPanelLockup=!1;a.enableRefreshWeb=z("enable_cairo_refresh_web");a.selectedItemIndex=-1;a.baseCorrectLottiePlayerAnimationConfig=Object.assign({},{name:"CORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_LightTheme_01a.json",renderer:"svg"},$4b,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"12 20 80 80"}});a.baseIncorrectLottiePlayerAnimationConfig= equals www.youtube.com (Youtube)
Source: chromecache_600.2.dr, chromecache_746.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,DF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Fd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.It)(),iT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Fd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr	String found in binary or memory: a.image3DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_dark.svg";a.image3LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_light_v2.svg";a.image0SquigglyBackground=a.image0LightSquigglyBackground;a.image1SquigglyBackground=a.image1LightSquigglyBackground;a.image3SquigglyBackground=a.image3LightSquigglyBackground;return a}; equals www.youtube.com (Youtube)
Source: chromecache_746.2.dr	String found in binary or memory: a.ismb);this.eq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=sP(this.Ca)\|\|"www.youtube.com")):r="video.google.com";this.Rn=r;tP(this,a,!0);this.La=new OO;g.P(this,this.La);q=b?b.innertubeApiKey:ks("",a.innertube_api_key);p=b?b.innertubeApiVersion:ks("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:ks("",a.innertube_context_client_version);q=g.$q("INNERTUBE_API_KEY")\|\|q;p=g.$q("INNERTUBE_API_VERSION")\|\|p;l=g.$q("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=HO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)

Source: chromecache_495.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_495.2.dr	String found in binary or memory: http://i1.ytimg.com/vi/
Source: chromecache_495.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_495.2.dr	String found in binary or memory: http://mths.be/fromcodepoint
Source: chromecache_495.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_495.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_495.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_495.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_387.2.dr	String found in binary or memory: http://schema.org/Answer
Source: chromecache_354.2.dr, chromecache_387.2.dr	String found in binary or memory: http://schema.org/FAQPage
Source: chromecache_387.2.dr	String found in binary or memory: http://schema.org/Question
Source: chromecache_487.2.dr, chromecache_600.2.dr, chromecache_746.2.dr, chromecache_495.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_495.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_644.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_487.2.dr, chromecache_495.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_354.2.dr, chromecache_495.2.dr, chromecache_387.2.dr	String found in binary or memory: http://www.youtube.com/
Source: chromecache_495.2.dr	String found in binary or memory: http://www.youtube.com/video/
Source: chromecache_746.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_600.2.dr, chromecache_746.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_600.2.dr, chromecache_746.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_600.2.dr, chromecache_746.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_600.2.dr, chromecache_746.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_495.2.dr	String found in binary or memory: https://accounts.google.com/AddSession
Source: chromecache_495.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_495.2.dr	String found in binary or memory: https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid=
Source: chromecache_665.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_495.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackclk/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_495.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid
Source: chromecache_495.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_665.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_495.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid=
Source: chromecache_600.2.dr, chromecache_746.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_443.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_354.2.dr, chromecache_387.2.dr	String found in binary or memory: https://ajax.cloudflare.com/cdn-cgi/scripts/04b3eb47/cloudflare-static/mirage2.min.js
Source: chromecache_710.2.dr, chromecache_771.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/spf/2.4.0/LICENSE
Source: chromecache_600.2.dr, chromecache_746.2.dr, chromecache_495.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_495.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_494.2.dr	String found in binary or memory: https://api.reclameaqui.com.br/embed-reputation/hash/
Source: chromecache_495.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_495.2.dr	String found in binary or memory: https://apis.google.com/js/api.js

IP	Domain	Country	ASN	ASN Name	Malicious
172.66.40.38	www.hostgator.com.br	United States	13335	CLOUDFLARENETUS	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.182	i.ytimg.com	United States	15169	GOOGLEUS	false
216.58.212.150	unknown	United States	15169	GOOGLEUS	false
142.250.185.66	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.78	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
104.18.87.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
74.125.0.168	rr3.sn-ab5l6nkd.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.186.38	unknown	United States	15169	GOOGLEUS	false
142.250.184.194	unknown	United States	15169	GOOGLEUS	false
16.15.177.147	s3.amazonaws.com	United States	unknown	unknown	false
45.33.2.97	na.iso.postaffiliatepro.com	United States	63949	LINODE-APLinodeLLCUS	false
172.217.18.2	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.64.155.119	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.217.16.193	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
172.217.16.198	static.doubleclick.net	United States	15169	GOOGLEUS	false
34.198.168.20	d-kiay6qd4bk.execute-api.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.17.73.14	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.206	unknown	United States	15169	GOOGLEUS	false
108.167.132.233	yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br	United States	46606	UNIFIEDLAYER-AS-1US	false
172.217.18.14	play.google.com	United States	15169	GOOGLEUS	false
216.58.206.34	unknown	United States	15169	GOOGLEUS	false
216.58.206.33	yt3.googleusercontent.com	United States	15169	GOOGLEUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
172.64.147.18	api.reclameaqui.com.br	United States	13335	CLOUDFLARENETUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
52.217.118.8	unknown	United States	16509	AMAZON-02US	false
104.17.72.14	ajax.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
157.240.251.9	unknown	United States	32934	FACEBOOKUS	false
142.250.186.129	unknown	United States	15169	GOOGLEUS	false
74.125.9.104	rr3.sn-vgqsknlr.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.185.174	youtube.com	United States	15169	GOOGLEUS	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false
172.217.16.132	unknown	United States	15169	GOOGLEUS	false
142.250.185.97	unknown	United States	15169	GOOGLEUS	false

IP
192.168.2.4
192.168.2.5

Name	Source	Malicious	Antivirus Detection	Reputation
https://support.google.com	chromecache_495.2.dr	false	URL Reputation: safe	unknown
https://www.jivochat.com.br/blog/ferramentas/melhor-hospedagem-de-site.html	chromecache_387.2.dr	false		unknown
https://secure.sitelock.com/public/verify/hostgator.com.br	chromecache_387.2.dr	false		unknown
https://www.hostgator.com.br/blog/crie-seu-site	chromecache_387.2.dr	false		unknown
http://polymer.github.io/AUTHORS.txt	chromecache_495.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_522.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com	chromecache_495.2.dr	false		unknown
https://i.ytimg.com/an/	chromecache_495.2.dr	false		unknown
https://www.hostgator.com.br/perguntas-frequentes	chromecache_387.2.dr	false		unknown
https://www.hostgator.com.br/blog/autor/vanessa-fetter/	chromecache_387.2.dr	false		unknown
https://www.hostgator.com.br/blog/marketing-digital	chromecache_387.2.dr	false		unknown
https://cliente.hostgator.com.br/cursos	chromecache_354.2.dr, chromecache_387.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_522.2.dr	false	URL Reputation: safe	unknown
https://www.hostgator.com.br/ferramentas/	chromecache_387.2.dr	false		unknown
https://www.youtube.com/generate_204?cpn=	chromecache_600.2.dr, chromecache_746.2.dr	false		unknown
https://www.hostgator.com.br/blog/glossario	chromecache_387.2.dr	false		unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_495.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_495.2.dr	false	URL Reputation: safe	unknown
https://www.hostgator.com.br/blog/transferencia-dominio/	chromecache_387.2.dr	false		unknown
http://polymer.github.io/PATENTS.txt	chromecache_495.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/qoe?cl=	chromecache_495.2.dr	false		unknown
https://www.hostgator.com.br/blog/seguranca-web	chromecache_387.2.dr	false		unknown
http://mathiasbynens.be/	chromecache_495.2.dr	false	URL Reputation: safe	unknown
https://youtube.com/watch?v=	chromecache_495.2.dr	false		unknown
https://www.melhoreshospedagem.com/	chromecache_387.2.dr	false		unknown
https://www.hostgator.com.br/aventurahostgator	chromecache_354.2.dr, chromecache_387.2.dr	false		unknown
https://www.youtube.com/pcs/activeview?xai=	chromecache_495.2.dr	false		unknown
https://s.youtube.com/api/stats/watchtime?cl=	chromecache_495.2.dr	false		unknown
https://play.google.com	chromecache_495.2.dr	false		unknown
https://www.hostgator.com.br/webmail	chromecache_387.2.dr	false		unknown
https://angular.dev/license	chromecache_600.2.dr, chromecache_746.2.dr, chromecache_495.2.dr	false		unknown
https://www.hostgator.com.br/blog/	chromecache_387.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_522.2.dr	false	URL Reputation: safe	unknown
https://youtu.be/	chromecache_600.2.dr, chromecache_746.2.dr	false	URL Reputation: safe	unknown
https://cdn.cookielaw.org/vendorlist/googleData.json	chromecache_705.2.dr	false	URL Reputation: safe	unknown
https://g.co/kgs/kMYQ9Qs	chromecache_387.2.dr	false		unknown
https://suporte.hostgator.com.br/hc/pt-br/articles/360004095593	chromecache_354.2.dr, chromecache_387.2.dr	false		unknown
http://mths.be/fromcodepoint	chromecache_495.2.dr	false		unknown
https://cdn.cookielaw.org/vendorlist/iab2Data.json	chromecache_705.2.dr	false	URL Reputation: safe	unknown
https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista	chromecache_495.2.dr	false		unknown
https://www.youtube.com/c/HostGatorAcademy	chromecache_354.2.dr, chromecache_387.2.dr	false		unknown
https://apis.google.com	chromecache_495.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_495.2.dr	false	URL Reputation: safe	unknown
https://oauth-redirect-test.googleusercontent.com	chromecache_495.2.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_522.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/get_midroll_info?ei=	chromecache_495.2.dr	false		unknown
https://www.hostgator.com.br/blog/materiais-educativos/	chromecache_354.2.dr, chromecache_387.2.dr	false		unknown
https://www.youtube.com/user/HostGatorBRTV	chromecache_387.2.dr	false		unknown
https://www.youtube.com/pagead/adview?ai=C	chromecache_495.2.dr	false		unknown
https://www.hostgator.com.br/blog/glossario/	chromecache_387.2.dr	false		unknown
http://hammerjs.github.io/	chromecache_495.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_522.2.dr	false	URL Reputation: safe	unknown
https://static.hotjar.com/c/hotjar-	chromecache_665.2.dr	false	URL Reputation: safe	unknown
https://i.ytimg.com/vi/AERLXaPKn_U/mqdefault.jpg	chromecache_495.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_522.2.dr	false	URL Reputation: safe	unknown
https://www.hostgator.com.br/academy/	chromecache_387.2.dr	false		unknown
https://www.reclameaqui.com.br/empresa/	chromecache_494.2.dr	false		unknown
http://youtube.com/drm/2012/10/10	chromecache_600.2.dr, chromecache_746.2.dr	false		unknown

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523493
Start date and time:	2024-10-01 17:21:31 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@27/741@102/41
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.hostgator.com.br/ Browse: https://www.hostgator.com.br/revenda-de-hospedagem Browse: https://www.youtube.com/@HostGatorBrasil

Input	Output
URL: https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20= Model: jbxai	{ "brand":["HostGator"], "contains_trigger_text":true, "trigger_text":"Ops, No encontramos essa pgina!", "prominent_button_name":"Conhea-nos!", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.hostgator.com.br/ Model: jbxai	{ "brand":["HostGator"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.hostgator.com.br/revenda-de-hospedagem Model: jbxai	{ "brand":["HostGator"], "contains_trigger_text":true, "trigger_text":"Escolha o plano ideal para sua revenda de hospedagem", "prominent_button_name":"Ver planos", "text_input_field_labels":["IAt 30 dias para reembolso"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.hostgator.com.br/revenda-de-hospedagem Model: jbxai	{ "brand":["HostGator"], "contains_trigger_text":true, "trigger_text":"Sua prpria empresa de hospedagem, mais perto do que imagina", "prominent_button_name":"Ver planos", "text_input_field_labels":["At 30 dias para reembolso"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.hostgator.com.br/revenda-de-hospedagem Model: jbxai	{ "brand":["HostGator"], "contains_trigger_text":true, "trigger_text":"Sua prpria empresa de hospedagem, mais perto do que imagina", "prominent_button_name":"Ver planos", "text_input_field_labels":["At 30 dias para reembolso"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.youtube.com/@HostGatorBrasil Model: jbxai	""
	""

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.966965284633015
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHtRUhVNBz2SVMzLSQQQEK/:tI9mc4slhohC/vmI4LUhVNBz1VOGQQQz
MD5:	36830448E3F7A1A3A2D487003A091E9C
SHA1:	5E890C51BC88F472775B79639B6C1FC51F08DC05
SHA-256:	31264354C77C510E3AE936076B8C10048515F7F6F5B6EE3EC34FD184144DF96E
SHA-512:	D3AA088237953AC48F2E66B6C3DFBB3A18A11F508E2F2DC650596EE5CE5908D2BEDF2AA01107F0A89DC7B113BBF63C2CB71DA113AD6625047707D3C3E4690F5B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/download/v9/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M17 18v1H6v-1h11zm-.5-6.6-.7-.7-3.8 3.7V4h-1v10.4l-3.8-3.8-.7.7 5 5 5-4.9z"/></svg>

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 1, 2024 17:22:28.000875950 CEST	192.168.2.4	1.1.1.1	0xbaa5	Standard query (0)	yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:22:28.001019955 CEST	192.168.2.4	1.1.1.1	0x1476	Standard query (0)	yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br	65	IN (0x0001)	false
Oct 1, 2024 17:22:30.786164999 CEST	192.168.2.4	1.1.1.1	0x7a5e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:22:30.786164999 CEST	192.168.2.4	1.1.1.1	0x42e5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 17:22:40.060622931 CEST	192.168.2.4	1.1.1.1	0x647e	Standard query (0)	yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:22:40.061515093 CEST	192.168.2.4	1.1.1.1	0xed21	Standard query (0)	yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br	65	IN (0x0001)	false
Oct 1, 2024 17:22:47.072803020 CEST	192.168.2.4	1.1.1.1	0x41ba	Standard query (0)	www.hostgator.com.br	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:22:47.073707104 CEST	192.168.2.4	1.1.1.1	0xecd2	Standard query (0)	www.hostgator.com.br	65	IN (0x0001)	false
Oct 1, 2024 17:22:48.066304922 CEST	192.168.2.4	1.1.1.1	0x94e3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:22:48.066770077 CEST	192.168.2.4	1.1.1.1	0x4aad	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 17:22:48.118161917 CEST	192.168.2.4	1.1.1.1	0x28ca	Standard query (0)	ajax.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:22:48.118485928 CEST	192.168.2.4	1.1.1.1	0xbbfa	Standard query (0)	ajax.cloudflare.com	65	IN (0x0001)	false
Oct 1, 2024 17:22:48.537982941 CEST	192.168.2.4	1.1.1.1	0xaee5	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:22:48.538249016 CEST	192.168.2.4	1.1.1.1	0x714b	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 1, 2024 17:22:51.886120081 CEST	192.168.2.4	1.1.1.1	0xdea2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:22:51.886626959 CEST	192.168.2.4	1.1.1.1	0xf27e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 17:22:52.459525108 CEST	192.168.2.4	1.1.1.1	0x5ff2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:22:52.460274935 CEST	192.168.2.4	1.1.1.1	0x4eb6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 17:22:52.461442947 CEST	192.168.2.4	1.1.1.1	0xbe8e	Standard query (0)	www.hostgator.com.br	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:22:52.462210894 CEST	192.168.2.4	1.1.1.1	0x3c70	Standard query (0)	www.hostgator.com.br	65	IN (0x0001)	false
Oct 1, 2024 17:22:52.464536905 CEST	192.168.2.4	1.1.1.1	0x716f	Standard query (0)	ajax.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:22:52.465107918 CEST	192.168.2.4	1.1.1.1	0xa452	Standard query (0)	ajax.cloudflare.com	65	IN (0x0001)	false
Oct 1, 2024 17:22:52.471127033 CEST	192.168.2.4	1.1.1.1	0x5343	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:22:52.571546078 CEST	192.168.2.4	1.1.1.1	0x5d14	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:12.371978998 CEST	192.168.2.4	1.1.1.1	0xf0ef	Standard query (0)	cdn.growthbook.io	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:12.372492075 CEST	192.168.2.4	1.1.1.1	0x9d6d	Standard query (0)	cdn.growthbook.io	65	IN (0x0001)	false
Oct 1, 2024 17:23:13.221512079 CEST	192.168.2.4	1.1.1.1	0x6296	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:13.221766949 CEST	192.168.2.4	1.1.1.1	0x8539	Standard query (0)	s3.amazonaws.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:13.428344965 CEST	192.168.2.4	1.1.1.1	0xfc32	Standard query (0)	cdn.growthbook.io	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:13.428498030 CEST	192.168.2.4	1.1.1.1	0x81b8	Standard query (0)	cdn.growthbook.io	65	IN (0x0001)	false
Oct 1, 2024 17:23:13.980317116 CEST	192.168.2.4	1.1.1.1	0x70a2	Standard query (0)	api.reclameaqui.com.br	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:13.980317116 CEST	192.168.2.4	1.1.1.1	0xc37f	Standard query (0)	api.reclameaqui.com.br	65	IN (0x0001)	false
Oct 1, 2024 17:23:14.035500050 CEST	192.168.2.4	1.1.1.1	0xb60b	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:14.035500050 CEST	192.168.2.4	1.1.1.1	0x4eaa	Standard query (0)	s3.amazonaws.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:15.079256058 CEST	192.168.2.4	1.1.1.1	0x6dc8	Standard query (0)	conversions.hostgator.io	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:15.079832077 CEST	192.168.2.4	1.1.1.1	0xed18	Standard query (0)	conversions.hostgator.io	65	IN (0x0001)	false
Oct 1, 2024 17:23:15.088036060 CEST	192.168.2.4	1.1.1.1	0x8f21	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:15.088217974 CEST	192.168.2.4	1.1.1.1	0xc0d3	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 1, 2024 17:23:15.161906958 CEST	192.168.2.4	1.1.1.1	0x43f4	Standard query (0)	api.reclameaqui.com.br	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:15.162055016 CEST	192.168.2.4	1.1.1.1	0x743a	Standard query (0)	api.reclameaqui.com.br	65	IN (0x0001)	false
Oct 1, 2024 17:23:15.415038109 CEST	192.168.2.4	1.1.1.1	0x2831	Standard query (0)	hostgatorbr.postaffiliatepro.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:15.415375948 CEST	192.168.2.4	1.1.1.1	0x53d6	Standard query (0)	hostgatorbr.postaffiliatepro.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:16.423229933 CEST	192.168.2.4	1.1.1.1	0x30c7	Standard query (0)	hostgatorbr.postaffiliatepro.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:16.423661947 CEST	192.168.2.4	1.1.1.1	0xc868	Standard query (0)	hostgatorbr.postaffiliatepro.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:16.582000971 CEST	192.168.2.4	1.1.1.1	0x1e67	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 17:23:16.582000971 CEST	192.168.2.4	1.1.1.1	0x8b43	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:16.582331896 CEST	192.168.2.4	1.1.1.1	0x2949	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:16.584933043 CEST	192.168.2.4	1.1.1.1	0x254d	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 17:23:16.641184092 CEST	192.168.2.4	1.1.1.1	0xf4cb	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:16.641417027 CEST	192.168.2.4	1.1.1.1	0xcdd1	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Oct 1, 2024 17:23:18.247350931 CEST	192.168.2.4	1.1.1.1	0x3d4d	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:18.248250961 CEST	192.168.2.4	1.1.1.1	0x1bf3	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 1, 2024 17:23:18.619688034 CEST	192.168.2.4	1.1.1.1	0xf22e	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:18.620364904 CEST	192.168.2.4	1.1.1.1	0x8ef	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Oct 1, 2024 17:23:18.671200991 CEST	192.168.2.4	1.1.1.1	0xb159	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:18.671746016 CEST	192.168.2.4	1.1.1.1	0xd071	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 17:23:19.026493073 CEST	192.168.2.4	1.1.1.1	0x5054	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:19.026751995 CEST	192.168.2.4	1.1.1.1	0x1b97	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:19.186705112 CEST	192.168.2.4	1.1.1.1	0x85e6	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:19.187109947 CEST	192.168.2.4	1.1.1.1	0xfddf	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:19.809503078 CEST	192.168.2.4	1.1.1.1	0x2d82	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:19.809629917 CEST	192.168.2.4	1.1.1.1	0xefed	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:20.876142025 CEST	192.168.2.4	1.1.1.1	0x9777	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:20.876380920 CEST	192.168.2.4	1.1.1.1	0x8960	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:23.204346895 CEST	192.168.2.4	1.1.1.1	0x9bb	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:23.204557896 CEST	192.168.2.4	1.1.1.1	0x67a8	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:24.283025026 CEST	192.168.2.4	1.1.1.1	0xe0b7	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:24.283798933 CEST	192.168.2.4	1.1.1.1	0xa346	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:26.424648046 CEST	192.168.2.4	1.1.1.1	0xd584	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:26.425204039 CEST	192.168.2.4	1.1.1.1	0x6266	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:31.274642944 CEST	192.168.2.4	1.1.1.1	0x80c9	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:31.274805069 CEST	192.168.2.4	1.1.1.1	0xf8e2	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 17:23:32.045562029 CEST	192.168.2.4	1.1.1.1	0xc88d	Standard query (0)	yt3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:32.045726061 CEST	192.168.2.4	1.1.1.1	0x733a	Standard query (0)	yt3.googleusercontent.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:32.318737984 CEST	192.168.2.4	1.1.1.1	0x4215	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:32.318905115 CEST	192.168.2.4	1.1.1.1	0x8bee	Standard query (0)	youtube.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:33.038542032 CEST	192.168.2.4	1.1.1.1	0xea0b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:33.039943933 CEST	192.168.2.4	1.1.1.1	0x9cf4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:33.859369040 CEST	192.168.2.4	1.1.1.1	0x762c	Standard query (0)	yt3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:33.859513998 CEST	192.168.2.4	1.1.1.1	0xdd15	Standard query (0)	yt3.googleusercontent.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:34.608854055 CEST	192.168.2.4	1.1.1.1	0xe348	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:34.609625101 CEST	192.168.2.4	1.1.1.1	0x7c9c	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:37.694988012 CEST	192.168.2.4	1.1.1.1	0xa761	Standard query (0)	rr3---sn-ab5l6nkd.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:37.695476055 CEST	192.168.2.4	1.1.1.1	0x9743	Standard query (0)	rr3---sn-ab5l6nkd.googlevideo.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:38.543577909 CEST	192.168.2.4	1.1.1.1	0x2845	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:38.543812990 CEST	192.168.2.4	1.1.1.1	0x36d7	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:43.574707985 CEST	192.168.2.4	1.1.1.1	0xf14d	Standard query (0)	rr3---sn-vgqsknlr.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:43.574846983 CEST	192.168.2.4	1.1.1.1	0x2d3f	Standard query (0)	rr3---sn-vgqsknlr.googlevideo.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:46.243252039 CEST	192.168.2.4	1.1.1.1	0x6741	Standard query (0)	rr3---sn-ab5l6nkd.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:46.243412971 CEST	192.168.2.4	1.1.1.1	0xfe93	Standard query (0)	rr3---sn-ab5l6nkd.googlevideo.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:46.292697906 CEST	192.168.2.4	1.1.1.1	0x1c58	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:46.292864084 CEST	192.168.2.4	1.1.1.1	0xfee9	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:46.362617970 CEST	192.168.2.4	1.1.1.1	0x6550	Standard query (0)	rr3---sn-vgqsknlr.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:46.362770081 CEST	192.168.2.4	1.1.1.1	0x2a6c	Standard query (0)	rr3---sn-vgqsknlr.googlevideo.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:52.201056957 CEST	192.168.2.4	1.1.1.1	0xe913	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:52.201224089 CEST	192.168.2.4	1.1.1.1	0x1f04	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 17:23:53.353991032 CEST	192.168.2.4	1.1.1.1	0x5804	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:53.354257107 CEST	192.168.2.4	1.1.1.1	0x20d9	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 17:23:53.479146004 CEST	192.168.2.4	1.1.1.1	0x9365	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:53.479290009 CEST	192.168.2.4	1.1.1.1	0x96b2	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Oct 1, 2024 17:23:55.098256111 CEST	192.168.2.4	1.1.1.1	0xd2d8	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 17:23:55.098412037 CEST	192.168.2.4	1.1.1.1	0x10eb	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:32 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 15:22:32 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=177798 Date: Tue, 01 Oct 2024 15:22:32 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:33 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 15:22:33 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=177741 Date: Tue, 01 Oct 2024 15:22:33 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-01 15:22:33 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:37 UTC	781	OUT	GET /ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20= HTTP/1.1 Host: yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 15:22:38 UTC	262	IN	HTTP/1.1 404 Not Found Date: Tue, 01 Oct 2024 15:22:37 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 29 Sep 2022 21:53:04 GMT Accept-Ranges: bytes Content-Length: 2361 Vary: Accept-Encoding Content-Type: text/html
2024-10-01 15:22:38 UTC	2361	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c Data Ascii: <!DOCTYPE html><html lang="pt-BR"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="format-detection" content="tel

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:38 UTC	739	OUT	GET /cgi-sys/css/bootstrap.min.css HTTP/1.1 Host: yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 15:22:38 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 15:22:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 02 Oct 2022 13:59:02 GMT Accept-Ranges: bytes Content-Length: 12984 Vary: Accept-Encoding Content-Type: text/css
2024-10-01 15:22:38 UTC	7937	IN	Data Raw: 2f 2a 21 0a 20 2a 20 47 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 42 6f 6f 74 73 74 72 61 70 20 43 75 73 74 6f 6d 69 7a 65 72 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 64 6f 63 73 2f 33 2e 34 2f 63 75 73 74 6f 6d 69 7a 65 2f 29 0a 20 2a 2f 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 Data Ascii: /! Generated using the Bootstrap Customizer (https://getbootstrap.com/docs/3.4/customize/) //! * Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master
2024-10-01 15:22:38 UTC	5047	IN	Data Raw: 2d 6f 66 66 73 65 74 2d 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d Data Ascii: -offset-12{margin-left:100%}.col-sm-offset-11{margin-left:91.66666667%}.col-sm-offset-10{margin-left:83.33333333%}.col-sm-offset-9{margin-left:75%}.col-sm-offset-8{margin-left:66.66666667%}.col-sm-offset-7{margin-left:58.33333333%}.col-sm-offset-6{margin-

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:38 UTC	731	OUT	GET /cgi-sys/css/fonts.css HTTP/1.1 Host: yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 15:22:38 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 15:22:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 29 Sep 2022 21:53:01 GMT Accept-Ranges: bytes Content-Length: 2674 Vary: Accept-Encoding Content-Type: text/css
2024-10-01 15:22:38 UTC	2674	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 47 61 6c 61 6e 6f 20 47 72 6f 74 65 73 71 75 65 20 41 6c 74 27 3b 0d 0a 09 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 47 61 6c 61 6e 6f 47 72 6f 74 65 73 71 75 65 41 6c 74 2d 42 6f 6c 64 2e 65 6f 74 27 29 3b 0d 0a 09 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 47 61 6c 61 6e 6f 47 72 6f 74 65 73 71 75 65 41 6c 74 2d 42 6f 6c 64 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0d 0a 09 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 47 61 6c 61 6e 6f 47 72 6f 74 65 73 71 75 65 41 6c 74 2d 42 6f 6c 64 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c Data Ascii: @font-face {font-family: 'Galano Grotesque Alt';src: url('../fonts/GalanoGrotesqueAlt-Bold.eot');src: url('../fonts/GalanoGrotesqueAlt-Bold.eot?#iefix') format('embedded-opentype'),url('../fonts/GalanoGrotesqueAlt-Bold.woff2') format('woff2'),

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20=

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 342

Chrome Cache Entry: 343

Chrome Cache Entry: 344

Chrome Cache Entry: 345

Chrome Cache Entry: 346

Chrome Cache Entry: 347

Chrome Cache Entry: 348

Chrome Cache Entry: 349

Chrome Cache Entry: 350

Chrome Cache Entry: 351

Chrome Cache Entry: 352

Chrome Cache Entry: 353

Chrome Cache Entry: 354

Chrome Cache Entry: 355

Chrome Cache Entry: 356

Chrome Cache Entry: 357

Chrome Cache Entry: 358

Chrome Cache Entry: 359

Chrome Cache Entry: 360

Chrome Cache Entry: 361

Chrome Cache Entry: 362

Chrome Cache Entry: 363

Chrome Cache Entry: 364

Chrome Cache Entry: 365

Chrome Cache Entry: 366

Chrome Cache Entry: 367

Chrome Cache Entry: 368

Windows Analysis Report
https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20=

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:38 UTC	736	OUT	GET /cgi-sys/css/custom_404.css HTTP/1.1 Host: yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 15:22:39 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 15:22:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 29 Sep 2022 21:53:01 GMT Accept-Ranges: bytes Content-Length: 807 Vary: Accept-Encoding Content-Type: text/css
2024-10-01 15:22:39 UTC	807	IN	Data Raw: 2e 73 70 61 63 65 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 38 30 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 68 31 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 45 35 37 38 42 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 33 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 68 31 20 73 74 72 6f 6e 67 20 7b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0d 0a 7d 0d 0a 0d 0a 68 33 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 Data Ascii: .space { padding-top: 80px; padding-bottom: 20px;}h1 { color: #2E578B; font-size: 53px; font-weight: 600; line-height: normal; margin-top: 0; margin-bottom: 10px;}h1 strong { font-weight: 700;}h3 { color: #4

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:38 UTC	789	OUT	GET /cgi-sys/images/logo-hostgator.svg HTTP/1.1 Host: yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 15:22:39 UTC	237	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 15:22:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 29 Sep 2022 21:52:59 GMT Accept-Ranges: bytes Content-Length: 14640 Content-Type: image/svg+xml
2024-10-01 15:22:39 UTC	7955	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 31 35 22 20 68 65 69 67 68 74 3d 22 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 35 20 33 38 22 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 44 65 66 61 75 6c 74 2d 44 65 66 61 75 6c 74 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 37 2e 39 32 31 20 2d 34 2e 31 36 37 29 22 3e 0d 0a 20 20 20 20 3c 67 20 69 64 3d 22 4c 69 67 68 74 42 6c 75 65 5f 53 6e 61 70 70 79 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 67 68 74 42 6c 75 65 20 53 6e 61 70 70 79 22 3e 0d 0a 20 20 20 20 20 20 3c 67 20 69 64 3d 22 42 61 63 6b 5f 4c 65 67 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 42 61 63 6b 20 4c 65 67 22 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="215" height="38" viewBox="0 0 215 38"> <g id="Default-Default" transform="translate(-7.921 -4.167)"> <g id="LightBlue_Snappy" data-name="LightBlue Snappy"> <g id="Back_Leg" data-name="Back Leg"
2024-10-01 15:22:39 UTC	6685	IN	Data Raw: 37 73 2e 34 32 2d 2e 37 36 34 2c 31 2e 31 33 39 2d 2e 35 31 38 2c 31 2e 34 39 31 2c 31 2e 38 35 34 2c 31 2e 32 30 36 2c 34 2e 35 61 32 2e 32 38 32 2c 32 2e 32 38 32 2c 30 2c 30 2c 31 2c 31 2e 36 34 2c 31 2e 31 33 32 2c 31 2e 32 31 33 2c 31 2e 32 31 33 2c 30 2c 30 2c 31 2d 2e 37 38 36 2e 35 63 2d 2e 34 37 34 2e 30 34 31 2d 32 2e 35 32 31 2d 2e 37 30 39 2d 33 2e 30 37 37 2d 2e 32 31 38 61 31 2e 37 38 34 2c 31 2e 37 38 34 2c 30 2c 30 2c 30 2d 2e 37 33 32 2c 31 2e 37 35 39 2c 35 2e 34 30 35 2c 35 2e 34 30 35 2c 30 2c 30 2c 31 2d 33 2e 32 36 37 2d 31 2e 35 31 33 43 32 33 2e 34 35 35 2c 31 31 2e 31 36 34 2c 32 32 2e 36 2c 38 2e 36 35 35 2c 32 30 2e 32 35 36 2c 39 2e 38 31 34 5a 22 20 66 69 6c 6c 3d 22 23 34 35 38 30 63 32 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 Data Ascii: 7s.42-.764,1.139-.518,1.491,1.854,1.206,4.5a2.282,2.282,0,0,1,1.64,1.132,1.213,1.213,0,0,1-.786.5c-.474.041-2.521-.709-3.077-.218a1.784,1.784,0,0,0-.732,1.759,5.405,5.405,0,0,1-3.267-1.513C23.455,11.164,22.6,8.655,20.256,9.814Z" fill="#4580c2" fill-rule="

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:38 UTC	791	OUT	GET /cgi-sys/images/illustration-404.svg HTTP/1.1 Host: yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 15:22:39 UTC	236	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 15:22:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 02 Oct 2022 13:59:02 GMT Accept-Ranges: bytes Content-Length: 5824 Content-Type: image/svg+xml
2024-10-01 15:22:39 UTC	5824	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 34 39 2e 39 38 31 22 20 68 65 69 67 68 74 3d 22 35 39 35 2e 30 30 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 34 39 2e 39 38 31 20 35 39 35 2e 30 30 34 22 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 69 6c 75 73 74 72 61 c3 a7 c3 a3 6f 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 38 39 2e 30 30 37 20 2d 32 30 32 2e 39 38 36 29 22 3e 0d 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 46 6f 72 6d 61 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 46 6f 72 6d 61 20 32 22 20 64 3d 22 4d 31 34 37 34 2e 38 32 33 2c 34 32 32 2e 35 35 33 63 2d 32 2e 30 32 38 2d 35 2e 30 34 36 2d 33 2e 37 34 38 2d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="449.981" height="595.004" viewBox="0 0 449.981 595.004"> <g id="ilustrao" transform="translate(-1089.007 -202.986)"> <path id="Forma_2" data-name="Forma 2" d="M1474.823,422.553c-2.028-5.046-3.748-

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:40 UTC	781	OUT	GET /cgi-sys/fonts/GalanoGrotesqueAlt-Bold.woff2 HTTP/1.1 Host: yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/cgi-sys/css/fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 15:22:40 UTC	234	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 15:22:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 29 Sep 2022 21:52:58 GMT Accept-Ranges: bytes Content-Length: 27612 Content-Type: font/woff2
2024-10-01 15:22:40 UTC	7958	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6b dc 00 10 00 00 00 01 3f 6c 00 00 6b 7b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 87 46 08 6a 09 9a 16 11 08 0a 84 9b 50 83 d6 64 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8c 46 07 98 78 0c 81 18 5b 4b 18 71 45 bc 7d 92 24 ee 56 c5 a9 0b 20 49 4f c6 2d 36 e8 0e e8 aa 8f 22 b9 cf 0c 04 1b 07 0c 3c 9f d5 ec ff ff ff 13 93 ca 18 db 7f dc 8f a0 90 42 59 26 e8 82 91 d7 ac 15 af 21 ea 86 40 ec 4d 84 e8 19 4d 30 64 c7 ee 78 15 ed 28 d8 33 0f 7b e8 59 3d 0d b4 0c c3 44 7e 83 92 a7 f3 58 43 dd a9 4e 6a a4 5e 98 a0 13 43 cc cf 75 4d 19 88 ea 68 28 a8 a4 fc e2 70 e5 8b cd 53 6c a6 1c ac bd 61 70 b9 ae 6d e0 9b a2 50 fc b4 f3 d6 ef a2 54 fc ab ba 86 74 e4 d3 95 13 7f fc 3e Data Ascii: wOF2k?lk{?FFTM`FjPd6$0 Fx[KqE}$V IO-6"<BY&!@MM0dx(3{Y=D~XCNj^CuMh(pSlapmPTt>
2024-10-01 15:22:40 UTC	8000	IN	Data Raw: b5 a8 ab ef dd d2 5b ff 7d 71 d1 48 cd f6 a2 81 ee 2a 45 67 95 a5 58 eb c6 aa 12 8d 13 5c ae f6 62 2f ff b9 73 a5 ec 82 92 72 91 43 1d 05 47 3f bb 42 50 3d bd 9f 26 f4 96 6e e4 af 13 13 ba 9c a3 d9 c2 63 62 89 6e 62 cb e3 19 6b 40 1e d6 4c b4 46 2b 1b 99 52 5b b4 c0 0c f6 65 0e 7b 65 5e d5 7f e5 22 d6 99 f6 ab 6c 13 a7 e4 8a b8 78 79 d1 d4 a7 14 f1 71 6e fe 1a 41 51 63 9d 34 af b5 be 74 e2 b2 7e 2a be 9f 90 89 41 17 7b f5 43 a9 db ca b5 df c0 ea f9 24 11 9e 8c 31 bc 9e cf db 9f 09 fe 8e d3 a3 3d fd aa 90 75 e7 2f bc 20 bc d4 4f c4 c8 95 95 99 d1 a9 8a 28 9b 8f 9b c6 b1 a1 70 58 28 76 1c 43 9f 2b 50 89 6d 93 36 43 3a 19 04 4f 94 a3 0b 36 b9 dd f5 20 6a 54 a2 29 2a 2f db 92 67 9e b6 0d e2 94 29 c3 73 dc 80 b3 88 0e 97 bd a8 91 8c be 22 62 ae c5 a2 e5 94 e5 Data Ascii: [}qHEgX\b/srCG?BP=&ncbnbk@LF+R[e{e^"lxyqnAQc4t~A{C$1=u/ O(pX(vC+Pm6C:O6 jT)*/g)s"b
2024-10-01 15:22:40 UTC	8000	IN	Data Raw: 85 40 03 d5 5f 55 e6 28 db f6 5f 46 30 43 d7 12 09 f9 d6 73 14 7b d8 48 17 c9 7d 3f 0d 21 ba 38 d1 33 50 0b a8 a1 4e b5 fa f3 e9 11 cd d4 bf f9 09 ef 81 84 69 d6 f2 9f be 13 09 08 da 97 4b 93 71 c1 ec 45 5d ec 26 b4 51 9e b6 65 56 0f ad 02 38 c7 62 42 ac 9b a0 56 b5 4c ef 32 62 9a 61 45 84 50 14 a6 a0 48 f2 5b a0 c6 da 39 0c 84 b3 fe 4e 3f 1d 2b 52 a9 c4 7f 85 6c ad f6 ea 68 b4 22 e9 76 60 0d 78 eb eb f4 77 fa 08 43 13 a4 a1 6e 7d f9 92 45 bc f7 66 1a da 9c 11 65 63 17 3f 21 55 01 3e 62 4b c2 0a ac 9b 2f 62 98 7c 04 1b 43 53 4b 4e 86 05 17 f7 27 75 1c 02 0a 80 6d ec 43 40 18 34 5f 24 ed cb 32 aa 6c 7b 42 20 84 35 f8 7e c0 3c 00 8e a2 82 a3 8a 83 61 63 bd 88 ab 80 a8 22 7c aa 81 c6 f8 65 52 99 c8 06 6c d2 a8 e1 af b0 3b 89 e7 49 d8 e4 b0 4c 44 99 36 aa 89 Data Ascii: @_U(_F0Cs{H}?!83PNiKqE]&QeV8bBVL2baEPH[9N?+Rlh"v`xwCn}Efec?!U>bK/b\|CSKN'umC@4_$2l{B 5~<ac"\|eRl;ILD6
2024-10-01 15:22:40 UTC	3654	IN	Data Raw: a4 4c 78 1b af 64 d8 79 36 ac 91 d7 13 1a 36 4f 1b 23 77 76 d2 d3 f5 2c e6 2a df 2a f0 09 42 63 57 f7 98 d5 e8 ed ba 1d 67 79 9b e3 ed bf dd d7 f3 cf d5 db 83 14 97 ec 72 26 54 cd f5 56 9c 75 6a a3 5c 09 06 fa 8e 66 e4 35 dd 9a 65 69 e8 83 88 1f 6a fa 14 3f 15 7e c7 3f d4 d4 d4 79 46 07 51 9b 77 bd 68 b5 78 e2 d9 a2 0b 89 66 ac f9 00 d0 81 82 d6 6b 44 3b 93 bf 11 21 c3 b6 26 71 1a c1 b4 26 14 39 8f f9 da 80 af c5 61 66 ee bb 8d 85 80 7f 91 d7 66 d2 08 8b 2f e6 b3 86 e0 74 a8 1f 18 09 50 37 f3 76 6d 4d 5a 12 f1 76 26 65 24 0d 65 d6 a5 2b ba ad 09 03 25 35 48 1d 4c d2 cc 28 84 3a 59 b2 69 35 72 21 99 43 d9 04 c4 62 57 f0 61 09 7b ac 13 20 bb 9d 3d 5c ca 3b 88 c9 d2 3f 56 3c a6 6b a9 d3 68 b2 ac 5e 32 84 61 47 8e a6 b3 c9 ca 5e cf 74 55 d2 40 3e b4 c1 de 0f Data Ascii: Lxdy66O#wv,**BcWgyr&TVuj\f5eij?~?yFQwhxfkD;!&q&9aff/tP7vmMZv&e$e+%5HL(:Yi5r!CbWa{ =\;?V<kh^2aG^tU@>

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:40 UTC	783	OUT	GET /cgi-sys/fonts/GalanoGrotesqueAlt-Medium.woff2 HTTP/1.1 Host: yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/cgi-sys/css/fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 15:22:40 UTC	234	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 15:22:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 29 Sep 2022 21:53:00 GMT Accept-Ranges: bytes Content-Length: 27368 Content-Type: font/woff2
2024-10-01 15:22:40 UTC	7958	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6a e8 00 10 00 00 00 01 33 10 00 00 6a 85 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 87 46 08 6a 09 9a 16 11 08 0a 84 82 58 83 bf 2d 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8c 64 07 98 78 0c 81 18 5b b2 0c 71 04 bd 6d 97 08 bd 59 a5 06 e8 b1 a7 e6 48 84 b0 71 80 4c 60 5b 5d 74 a0 f6 38 08 49 3f dc 4c 55 55 d5 94 04 39 62 6c e3 f5 80 57 b3 32 2d c0 51 2a 2b d5 3e bd cb f0 a9 4d ed 35 d2 a2 3a 4a df 17 49 84 18 84 65 33 47 8f 75 61 af d3 f6 75 97 36 06 72 7d 9b 77 bc c7 a7 13 bc 19 fa 10 35 cd 02 df 81 d3 d8 8c cb f0 0d 3b 7a 38 97 f9 f9 ed 1f 4f 34 89 0b c3 f6 27 ae 08 55 ea da 12 b4 9f 5b 9f 73 7f 2e 21 82 b6 bf ee b3 5b 08 a1 d4 ac 12 8e d0 e5 08 bd cb e0 d6 15 Data Ascii: wOF2j3j?FFTM`FjX-6$0 dx[qmYHqL`[]t8I?LUU9blW2-Q*+>M5:JIe3Guau6r}w5;z8O4'U[s.![
2024-10-01 15:22:40 UTC	8000	IN	Data Raw: 6e d4 a9 ec 87 07 3e c0 6a 79 72 df 0f 67 96 17 32 57 3f f3 83 b3 ac bb a5 bf f7 ce 9b 74 4b 77 2a ab cc fa eb cc 2f d6 03 6f 3a ca 1c 57 31 af d3 6e 1b ad c6 58 d7 cc 0f 56 54 6d 7b 3d 28 74 ec cd a5 cc b5 95 91 e1 95 d5 91 da 73 55 f0 f8 32 18 a3 67 c6 76 78 c0 e1 ec ef 07 4c ed ce 70 43 28 76 c0 37 e3 82 3a a1 ae 19 17 c4 09 41 c6 d2 be 1c b1 0e 5b 47 0e 2f 00 54 98 ef bc fb 48 7f 7d d5 de a6 f0 72 5b cc 51 a9 8c c1 52 1a 78 b2 47 d6 9c c5 fd 5f e5 4e cc ee 4d 78 67 1b b4 1e 6d 7f 92 0c 45 96 59 3f 9b 71 d1 53 f3 3f 98 99 01 16 37 16 70 8f 17 16 81 19 73 e4 3f 51 ff 20 cf f8 66 4c a3 f7 1f b8 66 4c 23 df 7d 9f fe f7 1c 62 75 2d 7d 75 05 b1 b2 32 3c f2 c7 a1 f5 be 7e 87 b3 6f 60 fd f0 80 d3 91 2a f7 e5 d6 f6 34 59 cb 7b 9a 6b df da 70 39 65 6f 15 0a 98 Data Ascii: n>jyrg2W?tKw/o:W1nXVTm{=(tsU2gvxLpC(v7:A[G/TH}r[QRxG_NMxgmEY?qS?7ps?Q fLfL#}bu-}u2<~o`4Y{kp9eo
2024-10-01 15:22:40 UTC	8000	IN	Data Raw: 22 d6 98 66 04 f3 1c c6 59 0f 7f c1 ad c9 b9 cf 15 37 12 8b 44 38 b3 3f 36 6b 10 76 47 a8 bc c3 00 bc bb 0c f7 83 05 76 58 ed 63 c1 77 04 28 46 04 3e 7d 08 67 55 bf b0 b4 57 d5 09 17 33 32 9b 4e c6 25 05 43 cb 36 ea 66 94 4f 59 4b e5 b4 0f 95 bd 46 02 be f3 a8 89 01 85 25 0c 2b 93 a5 ad b3 d9 81 ed 19 8c dd d8 d3 ab 73 6b d7 a1 55 d5 71 42 d5 e1 b5 93 86 a1 a9 6b c4 d8 8f 9a 03 71 12 32 a7 ec 00 79 13 80 cf 7a 35 11 53 0a 1a c4 08 70 85 7f 5b 8b 4c 8a bc a3 c8 14 6a fa e6 67 6f 41 77 49 e5 1c 0e 5a 26 db b9 06 12 63 7f ac 69 0e 92 80 63 17 c0 6e 73 b5 19 cf 19 10 a3 ef 78 37 c1 d4 53 9f 90 37 dd a8 18 8e 24 26 b1 fd e4 1c 67 b3 2b ba b2 01 9d 73 90 af 6b 9d e5 08 03 e3 e5 38 91 05 4a 36 1d e7 b6 b4 fb 86 68 68 31 c9 91 c6 50 81 d3 d7 52 9c a4 b6 11 01 5c Data Ascii: "fY7D8?6kvGvXcw(F>}gUW32N%C6fOYKF%+skUqBkq2yz5Sp[LjgoAwIZ&cicnsx7S7$&g+sk8J6hh1PR\
2024-10-01 15:22:40 UTC	3410	IN	Data Raw: eb 61 8a f6 a8 dc 6e 36 8a 91 a8 1f 08 4d 57 cf 95 c8 ed f7 8e b0 aa 7b c5 8e 23 b4 23 a6 7d 29 bd 77 5d c0 46 5d f5 56 97 bc 67 cb ca 4e 06 01 16 d8 67 e7 72 d9 3e f6 52 a3 ff e5 4d c9 d1 80 1c e1 65 21 82 25 89 c2 24 eb 50 cd d4 bb 2c 23 bd 89 94 0f e2 fc 15 3b b6 fa 53 78 38 ef 23 a2 74 b1 dd fd d8 e1 50 83 97 b5 c8 71 30 ac 31 ed 4a e4 a0 4e d8 0f d2 71 29 7a 05 51 c5 83 ff 5b ca 79 3a 1e c5 08 1e a4 99 a9 54 9b 06 b9 a3 b1 3d f7 41 ec a1 84 0d ca 2d d5 9e e6 b4 2f 57 82 12 b5 fe ab a3 00 e9 42 72 6b 7e ff 2f 58 9a 5c ef 7a cd a2 ff a0 a7 ce bb 91 aa 70 d3 63 2f 9c d7 76 3e 8d c1 93 7d de f3 30 f3 50 16 3a 56 e1 61 4a c4 00 53 09 d8 e8 c5 f4 72 d4 09 b7 3d d6 64 5e d8 f8 69 f0 4e 84 00 1a b0 ae f4 0e 17 bc 51 b8 17 22 78 4e 3f 35 c4 4b b7 e3 cf 94 c6 Data Ascii: an6MW{##})w]F]VgNgr>RMe!%$P,#;Sx8#tPq01JNq)zQ[y:T=A-/WBrk~/X\zpc/v>}0P:VaJSr=d^iNQ"xN?5K

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:40 UTC	782	OUT	GET /cgi-sys/fonts/GalanoGrotesqueAlt-Light.woff2 HTTP/1.1 Host: yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/cgi-sys/css/fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 15:22:40 UTC	234	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 15:22:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 29 Sep 2022 21:53:00 GMT Accept-Ranges: bytes Content-Length: 30888 Content-Type: font/woff2
2024-10-01 15:22:40 UTC	7958	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 78 a8 00 12 00 00 00 01 65 f8 00 00 78 3e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 42 1b dc 6a 1c 96 0a 06 60 00 87 46 08 6a 09 9a 16 11 08 0a 83 f5 10 83 af 0b 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8c 55 07 98 78 0c 81 18 5b 19 3e 71 83 e9 a6 3b e3 05 e5 b6 01 f0 4c d7 8a 39 f1 99 4c 37 77 ca dd aa 2a 78 10 59 af 02 b9 d9 99 40 77 84 4b 5a 51 f7 82 ec ff ff 3f 31 a9 c8 51 69 4d d2 6e 0c 9c 3b 9e 37 b4 8a 8c 00 99 35 5b 64 65 9b 5a cb b9 49 bd d6 a5 af 1b b2 72 37 79 a4 69 15 44 cc 1f 6c 38 f5 35 fb 81 18 14 23 ec f2 7e fb 81 75 55 43 16 df 7d fa e9 5f ce 8d 2e 47 e0 e2 28 c2 13 88 a3 f6 0d ad e2 0f 1d 33 22 fd db 2c e7 63 94 2e c7 97 9f eb 71 04 2d 4e 62 a7 3b 7b 0d 8a Data Ascii: wOF2xex>?FFTMBj`Fj6$0 Ux[>q;L9L7w*xY@wKZQ?1QiMn;75[deZIr7yiDl85#~uUC}_.G(3",c.q-Nb;{
2024-10-01 15:22:40 UTC	8000	IN	Data Raw: 6b cd e0 3c c8 f4 23 8f ec 99 c0 bf e1 d7 47 57 6f c3 ae 5b d8 75 96 86 e8 bd 05 bb 6e 1f e3 58 ea 3c ba b5 05 34 a9 fa 38 46 b1 9f 40 43 11 47 d3 f7 45 df d7 e8 d5 de d7 63 0f 26 e9 14 fb b6 c6 09 9e c0 23 9f b1 dd 69 93 0c 32 c9 08 39 8d 09 f6 44 95 ce 1e 1f e2 30 d5 11 87 43 1d bc 3a 95 a2 5b 1c 34 eb d7 34 db fb ae aa cd 6d 14 77 2a 46 f0 75 d6 4b 36 b0 db a0 ff be 37 ab 5d f1 da 75 75 ab 80 87 77 bd f3 68 db f7 bc 41 92 cb 6a 2a 7e 3f ed a4 61 fb cb bd a1 c6 9e ae 0e 29 86 bb bb 8e dc e6 c4 92 3b 6c 70 d1 aa 42 5c 47 11 44 2a d1 5a d5 ca 47 56 bb c0 72 22 7d 9e 58 91 b9 b7 5a 79 8b 36 ad be 7d e9 ac ba 2b 7d b3 27 66 68 7e e3 f8 2c ed df 6c b5 4e a0 8a 9d 0c 90 c8 88 11 d0 78 4c 13 f8 3e 73 1a d3 d5 75 27 56 be af 61 ba e9 5e b6 47 a8 72 3d 2c cd 65 Data Ascii: k<#GWo[unX<48F@CGEc&#i29D0C:[44mwFuK67]uuwhAj~?a);lpB\GD*ZGVr"}XZy6}+}'fh~,lNxL>su'Va^Gr=,e
2024-10-01 15:22:40 UTC	8000	IN	Data Raw: 9b 6e cc 77 07 98 ed 15 4a dd 4d 9b d3 ad 1a a3 c9 ed 7e 4e 48 04 52 ff 9b d7 94 3b 87 79 1f 9e 9b ee c5 c2 a1 c7 ee 1c 5d b5 f2 ce e4 b1 f9 e8 9d 66 b3 27 9e 89 f9 fe e8 5a 1f 77 e0 f7 69 e9 7f fb 00 e6 df e3 d5 89 63 99 71 cc 7a b1 b4 78 64 e8 e7 91 c1 62 69 83 24 96 11 c7 6a 10 0b ed 1d cb 70 e1 92 d6 61 2d 1a 52 89 9d 73 cc 91 86 ec 77 df 86 11 e1 ef 9d d7 cf bb 49 f9 4b 3b 93 68 c2 f3 dd 11 fb 4a be 29 10 c7 63 be 45 3a e2 f0 6d 41 cf 3a 41 fe 49 69 d0 57 b1 ba 22 97 66 01 7e e9 98 49 da 11 0d bc 38 5e 69 5a 02 63 9c 05 bf 5f e9 76 e4 fa d1 78 c9 f3 16 ba f2 83 34 ed 4b 39 a6 d5 1f 7b be 83 ae 17 8a 42 d6 eb 66 a3 dc cf 21 1a 18 01 62 e3 37 cf 55 9d bf cc f9 47 81 ec 3f d7 56 11 2e 9c 9b 73 10 6b 24 79 ae 5b 9c 18 f9 2a 36 92 2c 5b 82 53 44 69 77 39 Data Ascii: nwJM~NHR;y]f'Zwicqzxdbi$jpa-RswIK;hJ)cE:mA:AIiW"f~I8^iZc_vx4K9{Bf!b7UG?V.sk$y[*6,[SDiw9
2024-10-01 15:22:40 UTC	6930	IN	Data Raw: c2 0f 4a db bb f0 b1 1f 2c 75 5e 70 86 b1 5a 84 ea 44 f6 8a 4e 91 66 2d 27 9c 4a 99 00 c0 45 5d 77 68 43 32 f1 8a 86 4d c5 5d 62 91 4c 35 21 15 c8 cf 85 7e 3e bd ab 69 48 ca 42 94 1c fb 05 1f 3b 4e 0e a0 bd a8 90 d9 cd 48 98 51 72 70 af a2 28 b4 15 d2 4a a7 31 87 1e ea 0c 9c 6b 12 cf b9 6a 99 da 80 97 bb 3d b3 ae 37 ad 52 00 ae 62 fe 2f ee 66 29 43 7a ac 6c 0a 01 b9 0f 67 a3 ee 0f 9c 62 9f 88 40 c0 d8 39 6a f7 8d 3f 17 a7 97 ac 0f 87 4c a0 15 08 20 f5 d5 8c 39 53 66 38 93 69 37 2d 85 56 42 14 aa e8 a6 b4 2b d0 8e 06 9a 25 38 8c b8 55 99 43 09 3a c8 c4 23 92 17 67 f7 21 e2 3f 68 18 0e f3 23 c6 1f e1 e2 8e f3 33 22 79 96 89 d0 86 4a 7e 78 ac ba b7 d2 8e 86 07 5e 5d c6 ec 81 10 6b c8 ae 6a b5 93 60 1a 52 cb 64 fb d4 39 3b 17 cb 6d a4 9d 58 d7 00 7b 3c ba 13 Data Ascii: J,u^pZDNf-'JE]whC2M]bL5!~>iHB;NHQrp(J1kj=7Rb/f)Czlgb@9j?L 9Sf8i7-VB+%8UC:#g!?h#3"yJ~x^]kj`Rd9;mX{<

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:40 UTC	430	OUT	GET /cgi-sys/images/logo-hostgator.svg HTTP/1.1 Host: yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 15:22:41 UTC	237	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 15:22:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 29 Sep 2022 21:52:59 GMT Accept-Ranges: bytes Content-Length: 14640 Content-Type: image/svg+xml
2024-10-01 15:22:41 UTC	7955	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 31 35 22 20 68 65 69 67 68 74 3d 22 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 35 20 33 38 22 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 44 65 66 61 75 6c 74 2d 44 65 66 61 75 6c 74 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 37 2e 39 32 31 20 2d 34 2e 31 36 37 29 22 3e 0d 0a 20 20 20 20 3c 67 20 69 64 3d 22 4c 69 67 68 74 42 6c 75 65 5f 53 6e 61 70 70 79 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 67 68 74 42 6c 75 65 20 53 6e 61 70 70 79 22 3e 0d 0a 20 20 20 20 20 20 3c 67 20 69 64 3d 22 42 61 63 6b 5f 4c 65 67 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 42 61 63 6b 20 4c 65 67 22 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="215" height="38" viewBox="0 0 215 38"> <g id="Default-Default" transform="translate(-7.921 -4.167)"> <g id="LightBlue_Snappy" data-name="LightBlue Snappy"> <g id="Back_Leg" data-name="Back Leg"
2024-10-01 15:22:41 UTC	6685	IN	Data Raw: 37 73 2e 34 32 2d 2e 37 36 34 2c 31 2e 31 33 39 2d 2e 35 31 38 2c 31 2e 34 39 31 2c 31 2e 38 35 34 2c 31 2e 32 30 36 2c 34 2e 35 61 32 2e 32 38 32 2c 32 2e 32 38 32 2c 30 2c 30 2c 31 2c 31 2e 36 34 2c 31 2e 31 33 32 2c 31 2e 32 31 33 2c 31 2e 32 31 33 2c 30 2c 30 2c 31 2d 2e 37 38 36 2e 35 63 2d 2e 34 37 34 2e 30 34 31 2d 32 2e 35 32 31 2d 2e 37 30 39 2d 33 2e 30 37 37 2d 2e 32 31 38 61 31 2e 37 38 34 2c 31 2e 37 38 34 2c 30 2c 30 2c 30 2d 2e 37 33 32 2c 31 2e 37 35 39 2c 35 2e 34 30 35 2c 35 2e 34 30 35 2c 30 2c 30 2c 31 2d 33 2e 32 36 37 2d 31 2e 35 31 33 43 32 33 2e 34 35 35 2c 31 31 2e 31 36 34 2c 32 32 2e 36 2c 38 2e 36 35 35 2c 32 30 2e 32 35 36 2c 39 2e 38 31 34 5a 22 20 66 69 6c 6c 3d 22 23 34 35 38 30 63 32 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 Data Ascii: 7s.42-.764,1.139-.518,1.491,1.854,1.206,4.5a2.282,2.282,0,0,1,1.64,1.132,1.213,1.213,0,0,1-.786.5c-.474.041-2.521-.709-3.077-.218a1.784,1.784,0,0,0-.732,1.759,5.405,5.405,0,0,1-3.267-1.513C23.455,11.164,22.6,8.655,20.256,9.814Z" fill="#4580c2" fill-rule="

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:41 UTC	791	OUT	GET /cgi-sys/images/favicons/favicon.ico HTTP/1.1 Host: yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br/ziklonblemmin/fdsfgyhjbjhoipok/smokikikl/ZHN5YmVydEBidXJiYS5jb20= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 15:22:41 UTC	306	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 15:22:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 02 Oct 2022 13:59:08 GMT Accept-Ranges: bytes Content-Length: 4286 Cache-Control: max-age=604800 Expires: Tue, 08 Oct 2024 15:22:41 GMT Content-Type: image/x-icon
2024-10-01 15:22:41 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 f7 b7 6e 21 61 b8 6e 22 69 b7 6e 22 fe b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b8 6e 21 ff ae 73 2f ff 43 b0 ce ff 21 c4 ff ff 23 c1 fe ff 25 b5 f8 ff 26 ab f4 ff 26 a8 f2 ff 26 a8 f3 ff 27 a7 f2 ff 27 a4 f1 fe 24 a3 f4 5f bc 6c 1a 7b b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 fa b7 6e 22 70 b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 a4 99 5a 1a 20 af 68 20 c2 b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b9 6d 1f ff 9b 7e 4c ff 2f bc ed ff 22 c3 ff ff 23 Data Ascii: ( @ n"n"n"n"n"n!an"in"n"n"n"n"n!s/C!#%&&&''$_l{n"n"n"n"n"n"n"pn"n"n"n"n"Z h n"n"n"n"n"m~L/"#

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:42 UTC	432	OUT	GET /cgi-sys/images/favicons/favicon.ico HTTP/1.1 Host: yarmohggeervyfnqinpdttn0nxaqvsagcqcqi7i4fnh.materialdeconstrucaobh.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 15:22:42 UTC	306	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 15:22:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 02 Oct 2022 13:59:08 GMT Accept-Ranges: bytes Content-Length: 4286 Cache-Control: max-age=604800 Expires: Tue, 08 Oct 2024 15:22:42 GMT Content-Type: image/x-icon
2024-10-01 15:22:42 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 f7 b7 6e 21 61 b8 6e 22 69 b7 6e 22 fe b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b8 6e 21 ff ae 73 2f ff 43 b0 ce ff 21 c4 ff ff 23 c1 fe ff 25 b5 f8 ff 26 ab f4 ff 26 a8 f2 ff 26 a8 f3 ff 27 a7 f2 ff 27 a4 f1 fe 24 a3 f4 5f bc 6c 1a 7b b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 fa b7 6e 22 70 b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 a4 99 5a 1a 20 af 68 20 c2 b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b7 6e 22 ff b9 6d 1f ff 9b 7e 4c ff 2f bc ed ff 22 c3 ff ff 23 Data Ascii: ( @ n"n"n"n"n"n!an"in"n"n"n"n"n!s/C!#%&&&''$_l{n"n"n"n"n"n"n"pn"n"n"n"n"Z h n"n"n"n"n"m~L/"#

Timestamp	Bytes transferred	Direction	Data
2024-10-01 15:22:47 UTC	643	OUT	GET / HTTP/1.1 Host: www.hostgator.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 15:22:47 UTC	824	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 15:22:47 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 8cbd733ff9bac47f-EWR CF-Cache-Status: HIT Age: 9469 Cache-Control: public, max-age=1209600 Expires: Tue, 15 Oct 2024 15:22:47 GMT Last-Modified: Tue, 01 Oct 2024 11:51:40 GMT Strict-Transport-Security: max-age=15768000; includeSubDomains Vary: Accept-Encoding Referrer-Policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Set-Cookie: __cf_bm=ghU02Wt9l9bO35BuANEi1nGiJ6WOCxD6cM2oFUR5pnw-1727796167-1.0.1.1-qyNatgCBWWO8RVEq30WVFuNBF8_Y8M_DArXUUXm3NOaWqkVpQ1iaFxN6B6xKjEwpKcnWMCF2JCgNy7rY35bW4w; path=/; expires=Tue, 01-Oct-24 15:52:47 GMT; domain=.hostgator.com.br; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-10-01 15:22:47 UTC	1369	IN	Data Raw: 37 66 62 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 22 2f 3e 3c 74 69 74 6c 65 3e 41 20 6d 65 6c 68 6f 72 20 68 6f 73 70 65 64 61 67 65 6d 20 64 65 20 73 69 74 65 73 20 64 6f 20 6d 65 72 63 61 64 6f 20 7c 20 48 6f 73 74 47 61 74 6f 72 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 47 61 72 61 6e 74 61 20 73 65 75 20 64 6f 6d c3 ad 6e 69 6f 20 67 72 c3 a1 74 69 73 20 65 20 65 2d 6d 61 69 6c 20 70 72 6f 66 Data Ascii: 7fb6<!DOCTYPE html><html lang="pt-BR"><head><meta charSet="utf-8"/><meta name="robots" content="index,follow"/><title>A melhor hospedagem de sites do mercado \| HostGator</title><meta name="description" content="Garanta seu domnio grtis e e-mail prof
2024-10-01 15:22:47 UTC	1369	IN	Data Raw: 22 31 39 32 78 31 39 32 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 73 2f 66 61 76 69 63 6f 6e 2d 31 32 30 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 32 30 78 31 32 30 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 73 2f 66 61 76 69 63 6f 6e 2d 31 35 32 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 35 32 78 31 35 32 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 73 Data Ascii: "192x192"/><link rel="apple-touch-icon" href="/assets/images/favicons/favicon-120.png" sizes="120x120"/><link rel="apple-touch-icon" href="/assets/images/favicons/favicon-152.png" sizes="152x152"/><link rel="apple-touch-icon" href="/assets/images/favicons
2024-10-01 15:22:47 UTC	1369	IN	Data Raw: 30 30 22 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 61 6c 74 22 20 63 6f 6e 74 65 6e 74 3d 22 41 20 6d 65 6c 68 6f 72 20 68 6f 73 70 65 64 61 67 65 6d 20 64 65 20 73 69 74 65 73 20 64 6f 20 6d 65 72 63 61 64 6f 20 7c 20 48 6f 73 74 47 61 74 6f 72 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 40 68 6f 73 74 67 61 74 6f 72 62 72 61 73 69 6c 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 72 65 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 40 68 6f 73 74 67 61 74 6f 72 62 72 61 73 69 6c 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 41 20 6d 65 6c 68 6f 72 20 68 Data Ascii: 00"/><meta property="og:image:alt" content="A melhor hospedagem de sites do mercado \| HostGator"/><meta name="twitter:site" content="@hostgatorbrasil"/><meta name="twitter:creator" content="@hostgatorbrasil"/><meta name="twitter:title" content="A melhor h
2024-10-01 15:22:47 UTC	1369	IN	Data Raw: 73 3f 72 65 6e 64 65 72 3d 36 4c 63 76 30 4e 6f 6c 41 41 41 41 41 4e 68 61 73 66 65 6e 66 6e 68 69 57 74 77 45 58 4a 50 75 41 39 59 6a 65 4a 56 79 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 3e 5b 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 74 79 70 65 22 3a 22 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 22 6e 61 6d 65 22 3a 22 48 6f 73 74 47 61 74 6f 72 20 42 72 61 73 69 6c 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 6f 73 74 67 61 74 6f 72 2e 63 6f 6d 2e 62 72 22 2c 22 61 64 64 72 65 73 73 22 3a 7b 22 40 74 79 70 65 22 3a 22 50 6f 73 74 61 6c 41 64 64 72 65 73 73 22 2c 22 61 64 64 72 Data Ascii: s?render=6Lcv0NolAAAAANhasfenfnhiWtwEXJPuA9YjeJVy"></script><script type="application/ld+json">[{"@context":"https://schema.org","@type":"Organization","name":"HostGator Brasil","url":"https://www.hostgator.com.br","address":{"@type":"PostalAddress","addr
2024-10-01 15:22:47 UTC	1369	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 6f 73 74 67 61 74 6f 72 2e 63 6f 6d 2e 62 72 2f 68 6f 73 70 65 64 61 67 65 6d 2d 64 65 2d 73 69 74 65 73 5c 22 3e 48 6f 73 70 65 64 61 67 65 6d 20 64 65 20 73 69 74 65 73 3c 2f 61 3e 20 c3 a9 20 75 6d 20 73 65 72 76 69 c3 a7 6f 20 71 75 65 20 70 65 72 6d 69 74 65 20 71 75 65 20 69 6e 64 69 76 c3 ad 64 75 6f 73 20 65 20 6f 72 67 61 6e 69 7a 61 c3 a7 c3 b5 65 73 20 70 75 62 6c 69 71 75 65 6d 20 75 6d 20 77 65 62 73 69 74 65 20 6f 75 20 70 c3 a1 67 69 6e 61 20 77 65 62 20 6e 61 20 69 6e 74 65 72 6e 65 74 2e 20 55 6d 20 70 72 6f 76 65 64 6f 72 20 64 65 20 68 6f 73 70 65 64 61 67 65 6d 20 64 65 20 73 69 74 65 73 2c 20 63 6f 6d 6f 20 61 20 48 6f 73 74 47 61 74 6f 72 2c 20 66 6f 72 6e 65 63 65 20 61 73 20 74 65 63 6e 6f 6c Data Ascii: https://www.hostgator.com.br/hospedagem-de-sites\">Hospedagem de sites</a> um servio que permite que indivduos e organizaes publiquem um website ou pgina web na internet. Um provedor de hospedagem de sites, como a HostGator, fornece as tecnol
2024-10-01 15:22:47 UTC	1369	IN	Data Raw: 22 2c 22 61 63 63 65 70 74 65 64 41 6e 73 77 65 72 22 3a 7b 22 40 74 79 70 65 22 3a 22 41 6e 73 77 65 72 22 2c 22 74 65 78 74 22 3a 22 3c 70 3e 4e 61 20 48 6f 73 74 47 61 74 6f 72 2c 20 76 6f 63 c3 aa 20 67 61 6e 68 61 20 75 6d 20 64 6f 6d c3 ad 6e 69 6f 20 67 72 c3 a1 74 69 73 20 61 6f 20 61 73 73 69 6e 61 72 20 75 6d 20 64 65 20 6e 6f 73 73 6f 73 20 70 6c 61 6e 6f 73 20 64 65 20 68 6f 73 70 65 64 61 67 65 6d 20 70 6f 72 20 75 6d 20 70 65 72 c3 ad 6f 64 6f 20 64 65 20 31 20 61 6e 6f 2e 20 42 61 73 74 61 20 65 73 63 6f 6c 68 65 72 20 73 65 75 20 70 6c 61 6e 6f 20 70 72 65 66 65 72 69 64 6f 2c 20 76 65 72 69 66 69 63 61 72 20 61 20 64 69 73 70 6f 6e 69 62 69 6c 69 64 61 64 65 20 64 6f 20 64 6f 6d c3 ad 6e 69 6f 20 64 65 73 65 6a 61 64 6f 20 65 20 73 65 67 Data Ascii: ","acceptedAnswer":{"@type":"Answer","text":"<p>Na HostGator, voc ganha um domnio grtis ao assinar um de nossos planos de hospedagem por um perodo de 1 ano. Basta escolher seu plano preferido, verificar a disponibilidade do domnio desejado e seg
2024-10-01 15:22:47 UTC	1369	IN	Data Raw: 6c 20 61 6f 73 20 73 65 75 73 20 63 6c 69 65 6e 74 65 73 20 65 20 70 61 72 63 65 69 72 6f 73 20 63 6f 6d 65 72 63 69 61 69 73 2e 3c 2f 70 3e 22 7d 7d 2c 7b 22 40 74 79 70 65 22 3a 22 51 75 65 73 74 69 6f 6e 22 2c 22 6e 61 6d 65 22 3a 22 43 6f 6d 6f 20 70 6f 73 73 6f 20 61 63 65 73 73 61 72 20 6f 20 73 75 70 6f 72 74 65 20 74 c3 a9 63 6e 69 63 6f 20 73 65 20 70 72 65 63 69 73 61 72 20 64 65 20 61 6a 75 64 61 20 63 6f 6d 20 6d 69 6e 68 61 20 68 6f 73 70 65 64 61 67 65 6d 20 6f 75 20 64 6f 6d c3 ad 6e 69 6f 3f 22 2c 22 61 63 63 65 70 74 65 64 41 6e 73 77 65 72 22 3a 7b 22 40 74 79 70 65 22 3a 22 41 6e 73 77 65 72 22 2c 22 74 65 78 74 22 3a 22 3c 70 3e 41 20 48 6f 73 74 47 61 74 6f 72 20 6f 66 65 72 65 63 65 20 73 75 70 6f 72 74 65 20 74 c3 a9 63 6e 69 63 6f Data Ascii: l aos seus clientes e parceiros comerciais.</p>"}},{"@type":"Question","name":"Como posso acessar o suporte tcnico se precisar de ajuda com minha hospedagem ou domnio?","acceptedAnswer":{"@type":"Answer","text":"<p>A HostGator oferece suporte tcnico
2024-10-01 15:22:47 UTC	1369	IN	Data Raw: 61 74 69 63 2f 63 68 75 6e 6b 73 2f 39 33 39 34 2d 32 30 63 31 39 30 66 65 36 37 38 38 38 39 65 38 2e 6a 73 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 69 6e 64 65 78 2d 35 33 31 37 61 37 66 39 64 32 38 36 63 66 33 64 2e 6a 73 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 42 36 2d 6f 79 34 75 7a 59 57 35 33 52 57 41 6c 79 4c 48 45 53 2f 5f 62 75 69 6c 64 4d 61 6e 69 66 65 73 74 2e 6a 73 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 42 Data Ascii: atic/chunks/9394-20c190fe678889e8.js" defer=""></script><script src="/_next/static/chunks/pages/index-5317a7f9d286cf3d.js" defer=""></script><script src="/_next/static/B6-oy4uzYW53RWAlyLHES/_buildManifest.js" defer=""></script><script src="/_next/static/B
2024-10-01 15:22:47 UTC	1369	IN	Data Raw: 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 31 30 70 78 3b 7d 2f 2a 21 73 63 2a 2f 0a 64 61 74 61 2d 73 74 79 6c 65 64 2e 67 32 5b 69 64 3d 22 73 63 2d 34 62 64 36 37 38 33 34 2d 31 22 5d 7b 63 6f 6e 74 65 6e 74 3a 22 69 7a 47 6b 77 61 2c 22 7d 2f 2a 21 73 63 2a 2f 0a 2e 65 45 4f 4b 53 4e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: box;display:flex;-webkit-flex:1;-ms-flex:1;flex:1;-webkit-box-pack:center;-webkit-justify-content:center;-ms-flex-pack:center;justify-content:center;padding:0px 10px;}/!sc/data-styled.g2[id="sc-4bd67834-1"]{content:"izGkwa,"}/!sc/.eEOKSN{background-
2024-10-01 15:22:47 UTC	1369	IN	Data Raw: 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 34 38 70 78 3b 7d 2f 2a 21 73 63 2a 2f 0a 2e 68 56 56 78 49 6c 20 73 76 67 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 7d 2f 2a 21 73 63 2a 2f 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 31 70 78 29 7b 2e 68 56 56 78 49 6c 7b 68 65 69 67 68 74 3a 33 38 70 78 3b 77 69 64 74 68 3a 33 38 70 78 3b 7d 7d 2f 2a 21 73 63 2a 2f 0a 64 61 74 61 2d 73 74 79 6c 65 64 2e 67 31 32 5b 69 64 3d 22 73 63 2d 34 66 62 31 62 31 38 61 2d 32 22 5d 7b 63 6f 6e 74 65 6e 74 3a 22 68 56 56 78 49 6c 2c 22 7d 2f 2a 21 73 63 2a 2f 0a 2e 62 59 48 45 56 55 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 68 65 69 67 68 74 3a 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 30 3b 74 Data Ascii: ;padding:0;width:48px;}/!sc/.hVVxIl svg{pointer-events:none;}/!sc/@media (max-width:991px){.hVVxIl{height:38px;width:38px;}}/!sc/data-styled.g12[id="sc-4fb1b18a-2"]{content:"hVVxIl,"}/!sc/.bYHEVU{float:right;height:0px;position:fixed;right:0;t