Edit tour

Windows Analysis Report
rfc[1].html

Overview

General Information

Sample name:	rfc[1].html (renamed file extension from none to html)
Original sample name:	rfc[1]
Analysis ID:	1528593
MD5:	c77a58db67187171896fa1958bf5e301
SHA1:	7dff22ff47ec68a5bef870b8c3dc4efbc2e67890
SHA256:	8241a99e4d6781f2e63460b2229e164e6715a343d89ec6de408272b5bd7d343c
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected javascript redirector / loader

Suspicious Javascript code found in HTML file

Connects to many different domains

Detected TCP or UDP traffic on non-standard ports

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Classification

Process Tree

System is w10x64native

chrome.exe (PID: 2316 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\rfc[1].html" MD5: BB7C48CDDDE076E7EB44022520F40F77)

chrome.exe (PID: 2736 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2200,i,15749981351844191186,2979702680956623976,262144 --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2204 /prefetch:3 MD5: BB7C48CDDDE076E7EB44022520F40F77)

chrome.exe (PID: 6196 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-subproc-heap-profiling --field-trial-handle=6564,i,15749981351844191186,2979702680956623976,262144 --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=6600 /prefetch:8 MD5: BB7C48CDDDE076E7EB44022520F40F77)

chrome.exe (PID: 3636 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --no-subproc-heap-profiling --field-trial-handle=6596,i,15749981351844191186,2979702680956623976,262144 --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=6552 /prefetch:8 MD5: BB7C48CDDDE076E7EB44022520F40F77)

cleanup

HTTP traffic detected: POST /rec/page HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveContent-Length: 743sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"Content-Type: text/plainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.afternic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: rfc[1].html	HTTP Parser: location.href
Source: rfc[1].html	HTTP Parser: .location
Source: rfc[1].html	HTTP Parser: .location

Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: Number of links: 0
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: Number of links: 0

Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: Title: ietf.com does not match URL
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: Title: ietf.com does not match URL

Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: Iframe src: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919#locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3&co=aHR0cHM6Ly93d3cuYWZ0ZXJuaWMuY29tOjQ0Mw..&hl=en&type=image&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&badge=bottomright&cb=at1cep5qhxih
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: Iframe src: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919#locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3&co=aHR0cHM6Ly93d3cuYWZ0ZXJuaWMuY29tOjQ0Mw..&hl=en&type=image&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&badge=bottomright&cb=at1cep5qhxih
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: Iframe src: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919#locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3&co=aHR0cHM6Ly93d3cuYWZ0ZXJuaWMuY29tOjQ0Mw..&hl=en&type=image&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&badge=bottomright&cb=at1cep5qhxih
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: Iframe src: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919#locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3&co=aHR0cHM6Ly93d3cuYWZ0ZXJuaWMuY29tOjQ0Mw..&hl=en&type=image&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&badge=bottomright&cb=at1cep5qhxih
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: Iframe src: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919#locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3&co=aHR0cHM6Ly93d3cuYWZ0ZXJuaWMuY29tOjQ0Mw..&hl=en&type=image&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&badge=bottomright&cb=qvecwyc1xkre
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: Iframe src: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919#locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3&co=aHR0cHM6Ly93d3cuYWZ0ZXJuaWMuY29tOjQ0Mw..&hl=en&type=image&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&badge=bottomright&cb=qvecwyc1xkre
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: Iframe src: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919#locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3&co=aHR0cHM6Ly93d3cuYWZ0ZXJuaWMuY29tOjQ0Mw..&hl=en&type=image&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&badge=bottomright&cb=qvecwyc1xkre
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3

Source: rfc[1].html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/rfc[1].html	HTTP Parser: No favicon
Source: http://www6.ietf.com/lander?template=ARROW_3&tdfs=1&s_token=1728351948.0233840000&uuid=1728351948.0233840000&term=DNS%20IP%20Address%20Monitoring%20Tools&term=Automated%20Network%20Management&term=The%20Internet%20of%20Things&searchbox=0&showDomain=0&backfill=0	HTTP Parser: No favicon
Source: http://www6.ietf.com/lander?template=ARROW_3&tdfs=1&s_token=1728351948.0233840000&uuid=1728351948.0233840000&term=DNS%20IP%20Address%20Monitoring%20Tools&term=Automated%20Network%20Management&term=The%20Internet%20of%20Things&searchbox=0&showDomain=0&backfill=0	HTTP Parser: No favicon
Source: http://www6.ietf.com/lander?template=ARROW_3&tdfs=1&s_token=1728351948.0233840000&uuid=1728351948.0233840000&term=DNS%20IP%20Address%20Monitoring%20Tools&term=Automated%20Network%20Management&term=The%20Internet%20of%20Things&searchbox=0&showDomain=0&backfill=0	HTTP Parser: No favicon
Source: http://www6.ietf.com/lander?template=ARROW_3&tdfs=1&s_token=1728351948.0233840000&uuid=1728351948.0233840000&term=DNS%20IP%20Address%20Monitoring%20Tools&term=Automated%20Network%20Management&term=The%20Internet%20of%20Things&searchbox=0&showDomain=0&backfill=0	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No favicon
Source: https://www.trustpilot.com/review/www.godaddy.com?utm_medium=trustbox&utm_source=MicroTrustScore	HTTP Parser: No favicon
Source: https://www.trustpilot.com/review/www.godaddy.com?utm_medium=trustbox&utm_source=MicroTrustScore	HTTP Parser: No favicon
Source: https://www.trustpilot.com/review/www.godaddy.com?utm_medium=trustbox&utm_source=MicroTrustScore	HTTP Parser: No favicon
Source: https://www.trustpilot.com/evaluate/www.godaddy.com	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/true	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: No favicon
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: No favicon

Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No <meta name="author".. found
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No <meta name="author".. found
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No <meta name="author".. found
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No <meta name="author".. found
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: No <meta name="author".. found
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: No <meta name="author".. found
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: No <meta name="author".. found

Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No <meta name="copyright".. found
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No <meta name="copyright".. found
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No <meta name="copyright".. found
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind	HTTP Parser: No <meta name="copyright".. found
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: No <meta name="copyright".. found
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: No <meta name="copyright".. found
Source: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\scoped_dir2316_1425497933			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_2316_348066220			Jump to behavior

Source: Joe Sandbox View	IP Address: 35.160.35.184 35.160.35.184
Source: Joe Sandbox View	IP Address: 104.17.249.203 104.17.249.203
Source: Joe Sandbox View	IP Address: 18.164.96.77 18.164.96.77

Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.201.43
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.121.50
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.121.50
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_591.1.dr, chromecache_488.1.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_312.1.dr, chromecache_646.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=rA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},uA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_591.1.dr, chromecache_488.1.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_545.1.dr, chromecache_312.1.dr, chromecache_629.1.dr, chromecache_646.1.dr, chromecache_333.1.dr, chromecache_280.1.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_312.1.dr, chromecache_646.1.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)

Source: global traffic	TCP traffic: 192.168.11.20:65357 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:65357 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:65357 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:65357 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:60049 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:60049 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:60049 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:60049 -> 239.255.255.250:1900

Source: chromecache_351.1.dr, chromecache_516.1.dr	String found in binary or memory: http://code.google.com/p/episodes/
Source: chromecache_513.1.dr, chromecache_479.1.dr	String found in binary or memory: http://www.afternic.com/forsale/ietf.com?utm_source=TDFS
Source: chromecache_351.1.dr, chromecache_516.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: rfc[1].html	String found in binary or memory: http://www.ietf.com/rfc?gp=1&js=1&uuid=1728337946.0004699643&other_args=eyJ1cmkiOiAiL3JmYyIsICJhcmdz
Source: rfc[1].html	String found in binary or memory: http://www70.ietf.com/
Source: chromecache_333.1.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_545.1.dr, chromecache_333.1.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_488.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_478.1.dr, chromecache_546.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_463.1.dr	String found in binary or memory: https://btloader.com/tag?o=5097926782615552&upapi=true
Source: chromecache_545.1.dr, chromecache_591.1.dr, chromecache_312.1.dr, chromecache_629.1.dr, chromecache_646.1.dr, chromecache_333.1.dr, chromecache_280.1.dr, chromecache_488.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_553.1.dr	String found in binary or memory: https://cdn.trustpilot.net/brand-assets/4.3.0/favicons/android-chrome-192x192.png
Source: chromecache_553.1.dr	String found in binary or memory: https://cdn.trustpilot.net/brand-assets/4.3.0/favicons/android-chrome-512x512.png
Source: chromecache_337.1.dr, chromecache_509.1.dr, chromecache_563.1.dr, chromecache_582.1.dr, chromecache_444.1.dr, chromecache_647.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_337.1.dr, chromecache_509.1.dr, chromecache_563.1.dr, chromecache_582.1.dr, chromecache_444.1.dr, chromecache_647.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_337.1.dr, chromecache_509.1.dr, chromecache_563.1.dr, chromecache_582.1.dr, chromecache_444.1.dr, chromecache_647.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_337.1.dr, chromecache_509.1.dr, chromecache_563.1.dr, chromecache_582.1.dr, chromecache_444.1.dr, chromecache_647.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_337.1.dr, chromecache_509.1.dr, chromecache_563.1.dr, chromecache_582.1.dr, chromecache_444.1.dr, chromecache_647.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_542.1.dr, chromecache_538.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_333.1.dr	String found in binary or memory: https://google.com
Source: chromecache_333.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_463.1.dr	String found in binary or memory: https://img1.wsimg.com/parking-lander/static/css/main.ef90a627.css
Source: chromecache_463.1.dr	String found in binary or memory: https://img1.wsimg.com/parking-lander/static/js/main.36e19f48.js
Source: chromecache_464.1.dr, chromecache_643.1.dr	String found in binary or memory: https://legal.trustpilot.com/for-everyone/cookie-policy
Source: chromecache_464.1.dr, chromecache_643.1.dr	String found in binary or memory: https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms
Source: chromecache_488.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_366.1.dr, chromecache_431.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=$
Source: chromecache_542.1.dr, chromecache_545.1.dr, chromecache_591.1.dr, chromecache_312.1.dr, chromecache_538.1.dr, chromecache_629.1.dr, chromecache_646.1.dr, chromecache_333.1.dr, chromecache_280.1.dr, chromecache_488.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_542.1.dr, chromecache_538.1.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_647.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_513.1.dr, chromecache_479.1.dr	String found in binary or memory: https://postback.trafficmotor.com/sn/
Source: chromecache_333.1.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_647.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_633.1.dr, chromecache_405.1.dr	String found in binary or memory: https://recaptcha.net/recaptcha/api2/
Source: chromecache_545.1.dr, chromecache_333.1.dr	String found in binary or memory: https://s.adroll.com/j/roundtrip.js
Source: chromecache_545.1.dr, chromecache_333.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_545.1.dr, chromecache_333.1.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_591.1.dr, chromecache_488.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_546.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_647.1.dr	String found in binary or memory: https://support.google.com/recaptcha

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree

Source: global traffic	DNS traffic detected: DNS query: www.ietf.com
Source: global traffic	DNS traffic detected: DNS query: www6.ietf.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: btloader.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: ad-delivery.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: api.aws.parking.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: www.afternic.com
Source: global traffic	DNS traffic detected: DNS query: img6.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: service.force.com
Source: global traffic	DNS traffic detected: DNS query: ds-aksb-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: gui.afternic.com
Source: global traffic	DNS traffic detected: DNS query: widget.trustpilot.com
Source: global traffic	DNS traffic detected: DNS query: recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: events.api.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: edge.fullstory.com
Source: global traffic	DNS traffic detected: DNS query: rs.fullstory.com
Source: global traffic	DNS traffic detected: DNS query: www.trustpilot.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: businessunitprofile-cdn.trustpilot.net
Source: global traffic	DNS traffic detected: DNS query: cdn.trustpilot.net
Source: global traffic	DNS traffic detected: DNS query: consumersiteimages.trustpilot.net
Source: global traffic	DNS traffic detected: DNS query: api.amplitude.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: user-images.trustpilot.com
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: o211375.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: vc.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: ws.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: content.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: api.segment.io
Source: global traffic	DNS traffic detected: DNS query: cdn.amplitude.com
Source: global traffic	DNS traffic detected: DNS query: metrics.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: lptag.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: privacyportal-de.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: consumersite-assets.trustpilot.net
Source: global traffic	DNS traffic detected: DNS query: simplicity.trustpilot.com
Source: global traffic	DNS traffic detected: DNS query: stun.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: fp-prx.trustpilot.com
Source: global traffic	DNS traffic detected: DNS query: euc1-turn.fpjs.io

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\rfc[1].html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2200,i,15749981351844191186,2979702680956623976,262144 --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2204 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-subproc-heap-profiling --field-trial-handle=6564,i,15749981351844191186,2979702680956623976,262144 --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=6600 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --no-subproc-heap-profiling --field-trial-handle=6596,i,15749981351844191186,2979702680956623976,262144 --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=6552 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2200,i,15749981351844191186,2979702680956623976,262144 --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2204 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-subproc-heap-profiling --field-trial-handle=6564,i,15749981351844191186,2979702680956623976,262144 --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=6600 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --no-subproc-heap-profiling --field-trial-handle=6596,i,15749981351844191186,2979702680956623976,262144 --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=6552 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	1 Network Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Source	Detection	Scanner	Link
https://syndicatedsearch.goog	0%	Virustotal	Browse
https://cdn.segment.com/v1/projects/8tb69qtawc/settings	0%	Virustotal	Browse
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	Virustotal	Browse
https://ampcid.google.com/v1/publisher:getClientId	0%	Virustotal	Browse
https://stats.g.doubleclick.net/g/collect	0%	Virustotal	Browse
https://px.ads.linkedin.com/collect?	0%	Virustotal	Browse
https://stats.g.doubleclick.net/j/collect	0%	Virustotal	Browse
https://support.google.com/recaptcha/#6175971	0%	Virustotal	Browse
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	0%	Virustotal	Browse
https://support.google.com/recaptcha	0%	Virustotal	Browse
https://img1.wsimg.com/parking-lander/static/js/main.36e19f48.js	0%	Virustotal	Browse
https://cdn.trustpilot.net/brand-assets/4.3.0/favicons/android-chrome-512x512.png	0%	Virustotal	Browse
https://edge.fullstory.com/datalayer/v4/latest.js	0%	Virustotal	Browse
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	Virustotal	Browse
https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js	0%	Virustotal	Browse
https://cdn.segment.com/analytics.js/v1/8tb69qtawc/analytics.min.js	0%	Virustotal	Browse
https://rs.fullstory.com/rec/page	0%	Virustotal	Browse
https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250	0%	Virustotal	Browse

Name	IP	Active	Malicious	Reputation
gddomainparking.com	52.20.16.32	true	false	unknown
vc-live-cf.hotjar.io	3.168.122.109	true	false	unknown
pacman-content-live.live.eks.hotjar.com	18.203.150.108	true	false	unknown
privacyportal-de.onetrust.com	172.64.155.119	true	false	unknown
www10.smartname.com	15.197.204.56	true	false	unknown
cdn.trustpilot.net	108.138.106.115	true	false	unknown
recaptcha.net	142.250.81.227	true	false	unknown
stats.g.doubleclick.net	142.251.167.156	true	false	unknown
businessunitprofile-cdn.trustpilot.net	3.168.122.31	true	false	unknown
user-images.trustpilot.com	18.238.55.20	true	false	unknown
d296je7bbdd650.cloudfront.net	13.226.38.199	true	false	unknown
script.hotjar.com	18.164.96.77	true	false	unknown
www.google.com	142.251.41.4	true	false	unknown
api.segment.io	35.155.246.37	true	false	unknown
fp-prx.trustpilot.com	18.238.49.94	true	false	unknown
location.l.force.com	13.109.184.247	true	false	unknown
static-cdn.hotjar.com	108.138.106.124	true	false	unknown
o211375.ingest.sentry.io	34.120.195.249	true	false	unknown
syndicatedsearch.goog	142.251.40.174	true	false	unknown
ad.doubleclick.net	142.250.80.102	true	false	unknown
cdn.amplitude.com	108.139.29.12	true	false	unknown
consumersite-assets.trustpilot.net	13.226.34.22	true	false	unknown
edge.fullstory.com	35.201.112.186	true	false	unknown
consumersiteimages.trustpilot.net	3.168.102.50	true	false	unknown
simplicity.trustpilot.com	18.173.132.66	true	false	unknown
pacman-metrics-live.live.eks.hotjar.com	54.77.159.67	true	false	unknown
ad-delivery.net	172.67.69.19	true	false	unknown
www.ietf.com	45.56.79.23	true	false	unknown
rs.fullstory.com	35.186.194.58	true	false	unknown
analytics-alv.google.com	216.239.32.181	true	false	unknown
googleads.g.doubleclick.net	142.250.72.98	true	false	unknown
api.amplitude.com	54.184.235.113	true	false	unknown
www.trustpilot.com	3.168.122.42	true	false	unknown
turn-a6ae810703d31e51.elb.eu-central-1.amazonaws.com	18.199.60.108	true	false	unknown
btloader.com	104.22.75.216	true	false	unknown
td.doubleclick.net	142.251.40.194	true	false	unknown
widget.trustpilot.com	18.173.219.114	true	false	unknown
unpkg.com	104.17.245.203	true	false	unknown
cdn.cookielaw.org	104.18.86.42	true	false	unknown
geolocation.onetrust.com	172.64.155.119	true	false	unknown
wsky-live.live.eks.hotjar.com	54.194.83.240	true	false	unknown
img1.wsimg.com	unknown	unknown	false	unknown
gui.afternic.com	unknown	unknown	false	unknown
stun.services.mozilla.com	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	unknown
ws.hotjar.com	unknown	unknown	false	unknown
www.afternic.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
service.force.com	unknown	unknown	false	unknown
api.aws.parking.godaddy.com	unknown	unknown	false	unknown
ds-aksb-a.akamaihd.net	unknown	unknown	false	unknown
img6.wsimg.com	unknown	unknown	false	unknown
vc.hotjar.io	unknown	unknown	false	unknown
cdn.segment.com	unknown	unknown	false	unknown
www6.ietf.com	unknown	unknown	false	unknown
events.api.secureserver.net	unknown	unknown	false	unknown
metrics.hotjar.io	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
csp.secureserver.net	unknown	unknown	false	unknown
content.hotjar.io	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
lptag.liveperson.net	unknown	unknown	false	unknown
euc1-turn.fpjs.io	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://cdn.segment.com/v1/projects/8tb69qtawc/settings	false	0%, Virustotal, Browse	unknown
https://recaptcha.net/recaptcha/api2/reload?k=6LficU4kAAAAABtvZBo-PLVHBMQWcP8SKL6m6hT3	false		unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=11&ClientTime=1728352050799&PageStart=1728352011536&PrevBundleTime=1728352047245&LastActivity=2781&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=7641226556647908186&Seq=3&ClientTime=1728351982523&PageStart=1728351977506&PrevBundleTime=1728351983251&IsNewSession=true&SkipResponseBody=true	false		unknown
https://o211375.ingest.sentry.io/api/5826609/envelope/?sentry_key=7ac98d0742b24421b3d38448c4bf1184&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.80.1	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=3230095082482575556&Seq=3&ClientTime=1728352012439&PageStart=1728352008801&PrevBundleTime=1728352012520&SkipResponseBody=true	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=7641226556647908186&Seq=4&ClientTime=1728351987320&PageStart=1728351977506&PrevBundleTime=1728351983970&IsNewSession=true&DeltaT=3882&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=3230095082482575556&Seq=4&ClientTime=1728352013428&PageStart=1728352008801&PrevBundleTime=1728352013889&LastActivity=933&ContentEncoding=gzip	false		unknown
http://www6.ietf.com/lander?template=ARROW_3&tdfs=1&s_token=1728351948.0233840000&uuid=1728351948.0233840000&term=DNS%20IP%20Address%20Monitoring%20Tools&term=Automated%20Network%20Management&term=The%20Internet%20of%20Things&searchbox=0&showDomain=0&backfill=0	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=15&ClientTime=1728352070803&PageStart=1728352011536&PrevBundleTime=1728352067239&LastActivity=1492&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=3230095082482575556&Seq=4&ClientTime=1728352015077&PageStart=1728352008801&PrevBundleTime=1728352015875&DeltaT=2004&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=4&ClientTime=1728352020803&PageStart=1728352011536&PrevBundleTime=1728352017245&LastActivity=1760&ContentEncoding=gzip	false		unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&s=CQAM5hZDnYTpXYEgKu_IIHQ5kPEFYpwOXFIMhsMTkY13Wg0U3WylON2f3zcw50qaMluxCM9YmNb03zUaHyMZlUQ9wrvuAZGda_96FNGK2FjeBM7NWJS0XaPFRGQ_0mXUtoLcElTPqgckyhB8YXiPSr5egModOzjFptKFuJGk8ZVFY-DoM8zia9tqg2_MRdHY52k5CH4CmXOQ8XsRjnhB5U4tK_cgQojUYUg_pUUQmNoKR6__WHRlh5QGD2-jzKFwydLWBk8hHXHkbWjH-cnhM5vIzoEcgHo&cb=wwmu36c2yj66	false		unknown
https://content.hotjar.io/?site_id=391767&gzip=1	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=3230095082482575556&Seq=3&ClientTime=1728352017135&PageStart=1728352008801&PrevBundleTime=1728352012520&DeltaT=4695&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=8&ClientTime=1728352040800&PageStart=1728352011536&PrevBundleTime=1728352037236&LastActivity=0&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=3230095082482575556&Seq=3&ClientTime=1728352012494&PageStart=1728352008801&PrevBundleTime=1728352012520&SkipResponseBody=true	false		unknown
https://edge.fullstory.com/datalayer/v4/latest.js	false	0%, Virustotal, Browse	unknown
https://cdn.segment.com/analytics.js/v1/8tb69qtawc/analytics.min.js	false	0%, Virustotal, Browse	unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=7641226556647908186&Seq=5&ClientTime=1728351985414&PageStart=1728351977506&PrevBundleTime=1728351984876&IsNewSession=true&ContentEncoding=gzip	false		unknown
https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js	false	0%, Virustotal, Browse	unknown
https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250	false	0%, Virustotal, Browse	unknown
https://rs.fullstory.com/rec/page	false	0%, Virustotal, Browse	unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=3230095082482575556&Seq=1&ClientTime=1728352011090&PageStart=1728352008801&PrevBundleTime=0&DeltaT=2565&ContentEncoding=gzip	false		unknown
https://api.aws.parking.godaddy.com/v1/domains/domain?domain=www6.ietf.com&portfolioId=&abp=1&gdabp=true	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=2&ClientTime=1728352013319&PageStart=1728352011536&PrevBundleTime=1728352013895&LastActivity=769&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=7641226556647908186&Seq=6&ClientTime=1728351987414&PageStart=1728351977506&PrevBundleTime=1728351985880&LastActivity=2973&IsNewSession=true&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=12&ClientTime=1728352051008&PageStart=1728352011536&PrevBundleTime=1728352051807&DeltaT=3937&ContentEncoding=gzip	false		unknown
https://cdn.segment.com/next-integrations/integrations/amplitude/3.3.3/amplitude.dynamic.js.gz	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=10&ClientTime=1728352046375&PageStart=1728352011536&PrevBundleTime=1728352047167&DeltaT=3278&ContentEncoding=gzip	false		unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=7641226556647908186&Seq=6&ClientTime=1728351984461&PageStart=1728351977506&PrevBundleTime=1728351984876&IsNewSession=true&SkipResponseBody=true	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=14&ClientTime=1728352065806&PageStart=1728352011536&PrevBundleTime=1728352062239&LastActivity=2035&ContentEncoding=gzip	false		unknown
https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY	false		unknown
https://edge.fullstory.com/s/fs.js	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=7641226556647908186&Seq=4&ClientTime=1728351983438&PageStart=1728351977506&PrevBundleTime=1728351983970&LastActivity=0&IsNewSession=true&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=12&ClientTime=1728352046437&PageStart=1728352011536&PrevBundleTime=1728352043896&SkipResponseBody=true	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=5&ClientTime=1728352025800&PageStart=1728352011536&PrevBundleTime=1728352022238&LastActivity=1&ContentEncoding=gzip	false		unknown
https://cdn.cookielaw.org/scripttemplates/6.28.0/assets/otFlat.json	false		unknown
https://unpkg.com/web-vitals/dist/web-vitals.iife.js	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=11&ClientTime=1728352050374&PageStart=1728352011536&PrevBundleTime=1728352051176&ContentEncoding=gzip	false		unknown
file:///C:/Users/user/Desktop/rfc[1].html	true		unknown
http://www6.ietf.com/?template=ARROW_3&tdfs=1&s_token=1728351948.0233840000&uuid=1728351948.0233840000&term=DNS%20IP%20Address%20Monitoring%20Tools&term=Automated%20Network%20Management&term=The%20Internet%20of%20Things&searchbox=0&showDomain=0&backfill=0	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=7&ClientTime=1728352035803&PageStart=1728352011536&PrevBundleTime=1728352032262&LastActivity=2852&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=7641226556647908186&Seq=3&ClientTime=1728351982526&PageStart=1728351977506&PrevBundleTime=1728351983251&LastActivity=1962&IsNewSession=true&ContentEncoding=gzip	false		unknown
https://www.google.com/recaptcha/api.js	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=7641226556647908186&Seq=8&ClientTime=1728352046446&PageStart=1728351977506&PrevBundleTime=1728352043865&IsNewSession=true&SkipResponseBody=true	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=7641226556647908186&Seq=6&ClientTime=1728351986048&PageStart=1728351977506&PrevBundleTime=1728351986845&IsNewSession=true&DeltaT=973&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=13&ClientTime=1728352060803&PageStart=1728352011536&PrevBundleTime=1728352057238&LastActivity=2572&ContentEncoding=gzip	false		unknown
https://www.trustpilot.com/evaluate/www.godaddy.com	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=7641226556647908186&Seq=1&ClientTime=1728351979330&PageStart=1728351977506&PrevBundleTime=0&LastActivity=807&IsNewSession=true&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=7641226556647908186&Seq=9&ClientTime=1728352047422&PageStart=1728351977506&PrevBundleTime=1728352047892&LastActivity=976&IsNewSession=true&ContentEncoding=gzip	false		unknown
https://cdn.cookielaw.org/scripttemplates/6.28.0/assets/otCommonStyles.css	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=7641226556647908186&Seq=3&ClientTime=1728351987950&PageStart=1728351977506&PrevBundleTime=1728351983251&IsNewSession=true&DeltaT=5427&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=3230095082482575556&Seq=1&ClientTime=1728352008527&PageStart=1728352008801&PrevBundleTime=0&LastActivity=205&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=3230095082482575556&Seq=3&ClientTime=1728352012441&PageStart=1728352008801&PrevBundleTime=1728352012520&LastActivity=0&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=3230095082482575556&Seq=2&ClientTime=1728352011423&PageStart=1728352008801&PrevBundleTime=1728352009968&LastActivity=3105&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=28&ClientTime=1728352135800&PageStart=1728352011536&PrevBundleTime=1728352132244&LastActivity=5493&ContentEncoding=gzip	false		unknown
https://cdn.cookielaw.org/consent/84cb5c09-05e4-488b-b71c-2fe171dca5e5/b0f44fc5-6d0f-4947-ae0c-aa417c8b6f1c/en-us.json	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=10&ClientTime=1728352049743&PageStart=1728352011536&PrevBundleTime=1728352043896&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=16&ClientTime=1728352075804&PageStart=1728352011536&PrevBundleTime=1728352072229&LastActivity=1002&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=3230095082482575556&Seq=3&ClientTime=1728352014443&PageStart=1728352008801&PrevBundleTime=1728352012520&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=9&ClientTime=1728352045722&PageStart=1728352011536&PrevBundleTime=1728352042236&ContentEncoding=gzip	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=7641226556647908186&Seq=8&ClientTime=1728352042457&PageStart=1728351977506&PrevBundleTime=1728351988850&IsNewSession=true&SkipResponseBody=true	false		unknown
https://rs.fullstory.com/rec/bundle?OrgId=YKBRC&UserId=5000261022199808&SessionId=2042403780246786166&PageId=4224443885480875970&Seq=9&ClientTime=1728352042443&PageStart=1728352011536&PrevBundleTime=1728352042236&SkipResponseBody=true	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_591.1.dr, chromecache_488.1.dr	false	0%, Virustotal, Browse	unknown
http://www.afternic.com/forsale/ietf.com?utm_source=TDFS	chromecache_513.1.dr, chromecache_479.1.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_337.1.dr, chromecache_509.1.dr, chromecache_563.1.dr, chromecache_582.1.dr, chromecache_444.1.dr, chromecache_647.1.dr	false	0%, Virustotal, Browse	unknown
https://syndicatedsearch.goog	chromecache_542.1.dr, chromecache_538.1.dr	false	0%, Virustotal, Browse	unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCxCvjtGyNL4U.woff2)	chromecache_693.1.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_478.1.dr, chromecache_546.1.dr	false	0%, Virustotal, Browse	unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jsGyN.woff2)	chromecache_693.1.dr	false		unknown
https://px.ads.linkedin.com/collect?	chromecache_333.1.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/recaptcha/#6175971	chromecache_337.1.dr, chromecache_509.1.dr, chromecache_563.1.dr, chromecache_582.1.dr, chromecache_444.1.dr, chromecache_647.1.dr	false	0%, Virustotal, Browse	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_546.1.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/recaptcha	chromecache_647.1.dr	false	0%, Virustotal, Browse	unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_542.1.dr, chromecache_538.1.dr	false	0%, Virustotal, Browse	unknown
http://www.ietf.com/rfc?gp=1&js=1&uuid=1728337946.0004699643&other_args=eyJ1cmkiOiAiL3JmYyIsICJhcmdz	rfc[1].html	false		unknown
https://img1.wsimg.com/parking-lander/static/js/main.36e19f48.js	chromecache_463.1.dr	false	0%, Virustotal, Browse	unknown
https://cdn.trustpilot.net/brand-assets/4.3.0/favicons/android-chrome-512x512.png	chromecache_553.1.dr	false	0%, Virustotal, Browse	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_337.1.dr, chromecache_509.1.dr, chromecache_563.1.dr, chromecache_582.1.dr, chromecache_444.1.dr, chromecache_647.1.dr	false	0%, Virustotal, Browse	unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jvGyNL4U.woff2)	chromecache_693.1.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jtGyNL4U.woff2)	chromecache_693.1.dr	false		unknown
http://code.google.com/p/episodes/	chromecache_351.1.dr, chromecache_516.1.dr	false		unknown
https://cloud.google.com/contact	chromecache_337.1.dr, chromecache_509.1.dr, chromecache_563.1.dr, chromecache_582.1.dr, chromecache_444.1.dr, chromecache_647.1.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKcQ72j00.woff2)	chromecache_693.1.dr	false		unknown
https://www.google.com/recaptcha/api2/	chromecache_337.1.dr, chromecache_509.1.dr, chromecache_648.1.dr, chromecache_563.1.dr, chromecache_582.1.dr, chromecache_444.1.dr, chromecache_647.1.dr, chromecache_517.1.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_337.1.dr, chromecache_509.1.dr, chromecache_563.1.dr, chromecache_582.1.dr, chromecache_444.1.dr, chromecache_647.1.dr	false		unknown
https://btloader.com/tag?o=5097926782615552&upapi=true	chromecache_463.1.dr	false		unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_337.1.dr, chromecache_509.1.dr, chromecache_563.1.dr, chromecache_582.1.dr, chromecache_444.1.dr, chromecache_647.1.dr	false		unknown
https://googleads.g.doubleclick.net	chromecache_333.1.dr	false		unknown
https://static.hotjar.com/c/hotjar-	chromecache_545.1.dr, chromecache_333.1.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_337.1.dr, chromecache_509.1.dr, chromecache_563.1.dr, chromecache_582.1.dr, chromecache_444.1.dr, chromecache_647.1.dr	false		unknown
https://td.doubleclick.net	chromecache_545.1.dr, chromecache_591.1.dr, chromecache_366.1.dr, chromecache_312.1.dr, chromecache_431.1.dr, chromecache_629.1.dr, chromecache_646.1.dr, chromecache_333.1.dr, chromecache_280.1.dr, chromecache_488.1.dr	false		unknown
https://google.com	chromecache_333.1.dr	false		unknown
https://adservice.google.com/pagead/regclk?	chromecache_488.1.dr	false		unknown
https://www.google.com/recaptcha/enterprise/	chromecache_377.1.dr, chromecache_609.1.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKfA72j00.woff2)	chromecache_693.1.dr	false		unknown
https://recaptcha.net/recaptcha/api2/	chromecache_633.1.dr, chromecache_405.1.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
35.160.35.184	unknown	United States	16509	AMAZON-02US	false
35.186.194.58	rs.fullstory.com	United States	15169	GOOGLEUS	false
108.138.106.53	unknown	United States	16509	AMAZON-02US	false
18.173.219.101	unknown	United States	3	MIT-GATEWAYSUS	false
18.173.219.102	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.81.238	unknown	United States	15169	GOOGLEUS	false
18.173.132.66	simplicity.trustpilot.com	United States	3	MIT-GATEWAYSUS	false
104.17.249.203	unknown	United States	13335	CLOUDFLARENETUS	false
18.164.96.77	script.hotjar.com	United States	3	MIT-GATEWAYSUS	false
13.226.38.199	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
35.155.246.37	api.segment.io	United States	16509	AMAZON-02US	false
104.18.87.42	unknown	United States	13335	CLOUDFLARENETUS	false
52.20.16.32	gddomainparking.com	United States	14618	AMAZON-AESUS	false
18.173.132.77	unknown	United States	3	MIT-GATEWAYSUS	false
108.139.29.12	cdn.amplitude.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.226.34.22	consumersite-assets.trustpilot.net	United States	16509	AMAZON-02US	false
104.26.3.70	unknown	United States	13335	CLOUDFLARENETUS	false
3.67.54.233	unknown	United States	16509	AMAZON-02US	false
142.251.40.228	unknown	United States	15169	GOOGLEUS	false
35.166.167.226	unknown	United States	16509	AMAZON-02US	false
104.17.245.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
142.251.40.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
108.139.29.40	unknown	United States	16509	AMAZON-02US	false
3.168.102.50	consumersiteimages.trustpilot.net	United States	16509	AMAZON-02US	false
3.168.122.31	businessunitprofile-cdn.trustpilot.net	United States	16509	AMAZON-02US	false
172.67.41.60	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.81.230	unknown	United States	15169	GOOGLEUS	false
54.77.159.67	pacman-metrics-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
34.120.195.249	o211375.ingest.sentry.io	United States	15169	GOOGLEUS	false
3.168.122.42	www.trustpilot.com	United States	16509	AMAZON-02US	false
18.238.49.33	unknown	United States	16509	AMAZON-02US	false
34.251.154.115	unknown	United States	16509	AMAZON-02US	false
142.251.40.174	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
108.138.106.115	cdn.trustpilot.net	United States	16509	AMAZON-02US	false
54.73.171.69	unknown	United States	16509	AMAZON-02US	false
142.250.80.35	unknown	United States	15169	GOOGLEUS	false
142.250.80.102	ad.doubleclick.net	United States	15169	GOOGLEUS	false
54.194.83.240	wsky-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
142.250.80.100	unknown	United States	15169	GOOGLEUS	false
108.138.106.124	static-cdn.hotjar.com	United States	16509	AMAZON-02US	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
15.197.204.56	www10.smartname.com	United States	7430	TANDEMUS	false
172.64.155.119	privacyportal-de.onetrust.com	United States	13335	CLOUDFLARENETUS	false
142.250.80.34	unknown	United States	15169	GOOGLEUS	false
142.251.40.100	unknown	United States	15169	GOOGLEUS	false
3.168.122.109	vc-live-cf.hotjar.io	United States	16509	AMAZON-02US	false
108.138.106.126	unknown	United States	16509	AMAZON-02US	false
142.250.72.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.65.164	unknown	United States	15169	GOOGLEUS	false
142.251.41.4	www.google.com	United States	15169	GOOGLEUS	false
13.109.184.247	location.l.force.com	United States	14340	SALESFORCEUS	false
3.168.122.3	unknown	United States	16509	AMAZON-02US	false
18.238.49.94	fp-prx.trustpilot.com	United States	16509	AMAZON-02US	false
45.56.79.23	www.ietf.com	United States	63949	LINODE-APLinodeLLCUS	false
52.201.76.65	unknown	United States	14618	AMAZON-AESUS	false
54.184.235.113	api.amplitude.com	United States	16509	AMAZON-02US	false
18.164.96.90	unknown	United States	3	MIT-GATEWAYSUS	false
136.146.47.251	unknown	United States	14340	SALESFORCEUS	false
18.203.150.108	pacman-content-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
104.22.75.216	btloader.com	United States	13335	CLOUDFLARENETUS	false
18.173.219.114	widget.trustpilot.com	United States	3	MIT-GATEWAYSUS	false
142.250.65.195	unknown	United States	15169	GOOGLEUS	false
142.251.167.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.67.69.19	ad-delivery.net	United States	13335	CLOUDFLARENETUS	false
18.238.55.4	unknown	United States	16509	AMAZON-02US	false
142.251.40.164	unknown	United States	15169	GOOGLEUS	false
35.201.112.186	edge.fullstory.com	United States	15169	GOOGLEUS	false
104.18.86.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
18.238.55.20	user-images.trustpilot.com	United States	16509	AMAZON-02US	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528593
Start date and time:	2024-10-08 03:43:39 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, Chrome 128, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	rfc[1].html (renamed file extension from none to html)
Original Sample Name:	rfc[1]
Detection:	MAL
Classification:	mal48.phis.winHTML@50/628@224/71
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind Browse: https://www.trustpilot.com/review/www.godaddy.com?utm_medium=trustbox&utm_source=MicroTrustScore Browse: https://www.afternic.com/forsale/true Browse: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main

Input	Output
URL: http://www6.ietf.com/lander?template=ARROW_3&tdfs=1&s_token=1728351948.0233840000&uuid=1728351948.0233840000&term=DNS%20IP%20Address%20Monitoring%20Tools&term=Automated%20Network%20Management&term=The%20Internet%20of%20Things&searchbox=0&showDomain=0&back Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"The domain ietf.com is for sale. To purchase, call Afternic.com at +1 781-373-6847 or 855-201-2286. Click here for more details.", "has_visible_qrcode":false}

URL: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get Price", "text_input_field_labels":["First Name", "Last Name", "Email", "Phone"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Get a price in less than 24 hours Fill out the form below. One of our domain experts will have a price to you within 24 business hours. First Name * Last Name * Email * Phone * United States By submitting and clicking Get Price, you agree to our Privacy Policy. Get Price", "has_visible_qrcode":false}

URL: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind Model: jbxai	{ "phishing_score":2, "brands":"GoDaddy", "legit_domain":"godaddy.com", "classification":"wellknown", "reasons":["The brand 'GoDaddy' is a well-known domain registrar and web hosting company.", "The URL 'afternic.com' is associated with domain aftermarket services, which is a legitimate service related to GoDaddy.", "Afternic is a domain marketplace owned by GoDaddy, making the association between the brand and the URL legitimate.", "The URL does not contain any suspicious elements such as misspellings or unusual domain extensions.", "The presence of a single input field for 'First Name' is not inherently suspicious."], "brand_matches":[false], "url_match":true, "brand_input":"GoDaddy", "input_fields":"First Name"}

URL: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get Price", "text_input_field_labels":["First Name", "Last Name", "Email", "Phone", "United States"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Get a price in less than 24 hours Fill out the form below. One of our domain experts will have a price to you within 24 business hours. First Name * Last Name * Email * Phone * Phone * United States I'm not a robot By submitting and clicking Get Price, you agree to our Privacy Policy.", "has_visible_qrcode":false}

URL: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get Price", "text_input_field_labels":["First Name", "Last Name", "Email", "Phone", "United States"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Get a price in less than 24 hours Fill out the form below. One of our domain experts will have a price to you within 24 business hours. First Name * Last Name * Email * Phone * Phone * United States I'm not a robot By submitting and clicking Get Price, you agree to our Privacy Policy.", "has_visible_qrcode":false}

URL: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind Model: jbxai	{ "phishing_score":2, "brands":"GoDaddy", "legit_domain":"godaddy.com", "classification":"wellknown", "reasons":["The brand 'GoDaddy' is well-known and primarily associated with the domain 'godaddy.com'.", "The URL 'afternic.com' is a legitimate domain owned by GoDaddy, used for domain aftermarket services.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions.", "The presence of a single input field for 'First Name' is not inherently suspicious.", "Afternic is a recognized service under the GoDaddy brand, indicating a legitimate association."], "brand_matches":[false], "url_match":true, "brand_input":"GoDaddy", "input_fields":"First Name"}

URL: https://www.trustpilot.com/review/www.godaddy.com?utm_medium=trustbox&utm_source=MicroTrustScore Model: jbxai	{ "brand":["Trustpilot", "GoDaddy"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get it", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"We use cookies We use cookies to personalize content and ads, to provide social media features, and to analyze our traffic. We also share information about your use of our site with our partners in social media, advertising, and analytics. By continuing to use our website, you accept the use of all cookies. You can always access and change your cookie preferences in the footer of this website.", "has_visible_qrcode":false}

URL: https://www.trustpilot.com/evaluate/www.godaddy.com Model: jbxai	{ "brand":["Trustpilot", "GoDaddy"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Rate your recent experience", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"www.godaddy.com", "has_visible_qrcode":false}

URL: https://www.afternic.com/forsale/true Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get this domain", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"This domain is registered, but may still be available.", "has_visible_qrcode":false}

URL: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get Price", "text_input_field_labels":["First Name", "Last Name", "Email", "Phone"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Get a price in less than 24 hours Fill out the form below. One of our domain experts will have a price to you within 24 business hours. First Name * Last Name * Email * Phone * United States By submitting and clicking Get Price, you agree to our Privacy Policy. Get Price", "has_visible_qrcode":false}

URL: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":true, "trigger_text":"Select all images with cars", "prominent_button_name":"VERIFY", "text_input_field_labels":["Email", "Phone", "United States", "By submitting this form, you agree to the terms of service.", "Privacy Policy"], "pdf_icon_visible":false, "has_visible_captcha":true, "has_urgent_text":false, "text":"Get a price in less than 24 hours Fill out the form below. One of our domain experts will have a price to you within 24 business hours. Need a price instantly? Contact us now. 1-855-859-4662 (Toll Free in the U.S. and Canada) +1 781-373-6866 (International number)", "has_visible_qrcode":false}

URL: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":true, "trigger_text":"Select all images with cars", "prominent_button_name":"VERIFY", "text_input_field_labels":["First", "Email", "Phone", "United States", "By submitting this form, you agree to the terms of service.", "Globi"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Get a price in less than 24 hours Fill out the form below. One of our domain experts will have a price to you within 24 business hours. Need a price instantly? Contact us now. 1-855-859-4662 (Toll Free in the U.S. and Canada) +1 781-373-6866 (International number)", "has_visible_qrcode":false}

URL: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main Model: jbxai	{ "phishing_score":2, "brands":"GoDaddy", "legit_domain":"godaddy.com", "classification":"wellknown", "reasons":["The brand 'GoDaddy' is well-known and primarily associated with the domain 'godaddy.com'.", "The URL 'afternic.com' is a legitimate domain owned by GoDaddy, used for domain auctions and sales.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions.", "The presence of a single input field for 'First Name' is not inherently suspicious and is common on legitimate sites."], "brand_matches":[false], "url_match":true, "brand_input":"GoDaddy", "input_fields":"First Name"}

URL: https://www.trustpilot.com/review/www.godaddy.com?utm_medium=trustbox&utm_source=MicroTrustScore Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"www.godaddy.com", "text_input_field_labels":["STEPHANIE HEER"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"GoDaddy is the world's largest services platform, dedicated to small business owners around the world who we empower and champion at every turn. GoDaddy is the place small business owners come to name their idea.", "has_visible_qrcode":false}

URL: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main Model: jbxai	{ "phishing_score":2, "brands":"GoDaddy", "legit_domain":"godaddy.com", "classification":"wellknown", "reasons":["GoDaddy is a well-known brand associated with domain registration and web hosting.", "The URL provided is 'afternic.com', which is a legitimate domain marketplace owned by GoDaddy.", "The domain 'afternic.com' is not a typical phishing domain as it is directly associated with GoDaddy's services.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions.", "The presence of input fields alone is not indicative of phishing without further suspicious context."], "brand_matches":[false], "url_match":true, "brand_input":"GoDaddy", "input_fields":"First"}

URL: https://www.afternic.com/forsale/ietf.com?utm_source=TDFS&utm_medium=sn_affiliate_click&utm_campaign=TDFS_Affiliate_namefind_namefind&traffic_type=TDFS&traffic_id=Namefind#main Model: jbxai	{ "phishing_score":2, "brands":"GoDaddy", "legit_domain":"godaddy.com", "classification":"wellknown", "reasons":["The brand 'GoDaddy' is a well-known domain registrar and web hosting company.", "The URL 'afternic.com' is associated with domain aftermarket services, which is a legitimate service often linked with GoDaddy.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions.", "The domain 'afternic.com' is a legitimate domain marketplace and is known to be associated with GoDaddy.", "The presence of an email input field is typical for a domain marketplace for user login or inquiries."], "brand_matches":[false], "url_match":true, "brand_input":"GoDaddy", "input_fields":"Email"}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report rfc[1].html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Windows Analysis Report
rfc[1].html

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
35.160.35.184	https://www.bdoiraq.com/	Get hash	malicious	Unknown	Browse
	https://usa-usps-rz.top/us/	Get hash	malicious	Unknown	Browse
	https://us-usps-bkisboju.xyz/update/	Get hash	malicious	Unknown	Browse
	https://metamask-support.web.app/	Get hash	malicious	Unknown	Browse
	https://us-usps-kfoh.top/update/	Get hash	malicious	Unknown	Browse
	https://8c84ddfb-4e45-458b-be78-79e5622be3f3-00-346b1l4svjznr.pike.replit.dev/	Get hash	malicious	Unknown	Browse
	https://ads-account-support-da191-861215a1.netlify.app/form.html	Get hash	malicious	Unknown	Browse
	http://guileless-lively-id4964-10k2.netlify.app/form.html	Get hash	malicious	Unknown	Browse
	https://home-wlletconnect.gitbook.io/us	Get hash	malicious	Unknown	Browse
	https://anp.ab9.mywebsitetransfer.com/edd	Get hash	malicious	Unknown	Browse
108.138.106.53	https://trk.klclick3.com/ls/click?upn=bBwYdIep1AJAhlueKA-2FYAwi6UDRXdy4QuaaDLpMKAY-2FuS7DJhm8sBiUV4ydTxDDfWXTk8MW3qX9LTCBGQWfEhnmkpUp1FbquubV2POTU0TfYdPXhhxh7hDtDzfbbXzOd1ckC5P7iLDnZFSFMGmu65sjG-2BA3TUBABnq-2FzYlUs0boCXfL2UxuiclTsBtheBWkPQRTvEHTv77Kj8g1MTyMP1pvopCtQAJ5eC29OoyBeB8Ky-2BFZD4gWekdHmK8wxczzUpm5r1Ri1ZD4o8oI9S4e641G5deUloWImtzjWRg3sCcHr3tK5OSy7j6pRbb9UY1LfeCLRUV-2BSpk4-2Fe2H8BCH55fQFQbliGeMM77lkvelOMaQ-3DWnBG_PoPSv5Gw7kvm-2FaTPf5isV0F8OzVemx3-2BMda5lKttFwV5hYNASaBIOvhduvo23ZgNxryqZbnFqmZgF2SN317Jd2zhbpKDd5qcAB8Ca2-2BEweiOZ51oi-2FsRxdK2fwu5dZK0TiJe4rYhTbhwXzM3-2FV4Kl6B2bNNt38cLE473cXw1qfRMJ-2FyFp9r6aaL1nRESCxsd2ZMlxe-2F60GB8pU449-2BvP1QbNAh5rgsg6ijs8GEdzoo3rVzT3Aql-2F24VqW0iuLMHYYjUxNCYPP17FxekR2fuKMRUrzJdVXaSuuWwDyYgWn8jhRMNWQkcJBtafYZikYu-2BUI55CMehwprVSKFMW4WPGr-2F2WS0fFBfVOOiIeukcG60IZddFW1yVZKhWoNcnN7HBa5yPzq-2BPf190lX11hUKMtUA7jyxwizAhkl6BxmnkKdKlD5U7A3DjRUgreC8poRHeqJDHN6cPnul8S7egIFefVkw-3D-3D	Get hash	malicious	Unknown	Browse
108.138.106.53	https://trk.klclick3.com/ls/click?upn=bBwYdIep1AJAhlueKA-2FYA-2BtdTB5WVyV9lK9pqVSSTU-2FhD5d6CLiqT-2FLQBoUx2tDsOgeR2id2pJLc6CSQBFrtLnJUJ7nUas-2BvwOt6wy-2Fv43XV8IZFPdfnc5aCCkkvCPNaPbB6CDEfpJ45Q8zqlgM1ZMIuImZCByIVQAcRO2ypoaiuTE13zw9MB5OPqKIEKoNQSmB2Gn6A-2BYlbY8gw6qaQNKzDOS4itHv0WTk18DyeiL-2BLdST4n-2FWzi-2FjbcFNl0VDHRzbw-2FK3YS-2FAP-2FMtuAslmr1j-2Bl245uyATswONGxh2xHyJiZ7Zs7tL-2F0-2BhALsezGG-2FIsqP_PoPSv5Gw7kvm-2FaTPf5isV0F8OzVemx3-2BMda5lKttFwV5hYNASaBIOvhduvo23ZgNxryqZbnFqmZgF2SN317Jd5JsAvLWLiTx01vINjL-2F5lN-2FM2J-2FOIrsEnGwGr-2F8Zcc3By2myRCL-2BHgNyi1mDzvy4dbNTDZ9FvrIV1O9ICdSqzUhE83y6huBAt5BL3nHnx55tM8O-2Bb-2BKtDXWBomfCYsL0StxEX3LTd3TT9a7hwhIGp-2BoumitNsrqT0QfjZgANjidIHAx9JI6rx3YJ-2BkwUCo-2BZCZPcbOM25WDVTKEJyZEBL2kOMDvq1N96TLpAGngfTJr	Get hash	malicious	Unknown	Browse
104.17.249.203	https://pink664912.studio.site/	Get hash	malicious	Unknown	Browse
	https://web3resolution.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://ak437453-76542337354.com/	Get hash	malicious	Unknown	Browse
	http://santander-coders-2024.vercel.app/	Get hash	malicious	Unknown	Browse
	https://cp-wc32.syd02.ds.network/~melbou28/cgi.bin/fr/500b0/	Get hash	malicious	Unknown	Browse
	https://app.collabow.io/d/GNgkdZO5gKluqEP3mMdbEwzWbgEyOeRe8sIh64SLMvsN	Get hash	malicious	Unknown	Browse
	https://www.bdoiraq.com/	Get hash	malicious	Unknown	Browse
	http://www.toyotanation.com//help//terms	Get hash	malicious	Unknown	Browse
	http://purple352168.studio.site/	Get hash	malicious	Unknown	Browse
	http://bridge-a3vigrfjd-pancakeswap.vercel.app/	Get hash	malicious	Unknown	Browse
18.164.96.77	https://cpanel.benory.digitall-communication.com/	Get hash	malicious	Unknown	Browse
	https://url.us.m.mimecastprotect.com/s/Pyp8CZ6DjlFqVNlXhzfr25?domain=urldefense.proofpoint.com	Get hash	malicious	Unknown	Browse
	https://url.us.m.mimecastprotect.com/s/FY0hCPNp42s1rx35tzam0J?domain=urldefense.proofpoint.com	Get hash	malicious	Unknown	Browse
	https://help.nextiva.com/0D5UV00000CENsy?fromEmail=1&s1oid=00D4x0000024KeV&s1nid=0DB8Y0000001q0j&s1uid=005UV000000Gbt2&s1ext=0&emkind=chatterPostNotification&emtm=1715035203355&emvtk=xliOiy4JGvwIBQw.4ViBLNixLC3jvtIl_ydu19EzVXQ%3D&OpenCommentForEdit=1	Get hash	malicious	Unknown	Browse
	https://myqrcode.mobi/30dceb3b	Get hash	malicious	HTMLPhisher	Browse
	http://t.yesware.com/tt/add42e7d8279f02a29eaa3e328edb20e7946a023/3a0233dd20413cb897ef43d51a85115f/da81ae24a830d693a9c93e581afa8c1a/www.taulia.com/	Get hash	malicious	HTMLPhisher	Browse
	https://staffinghub.com/	Get hash	malicious	Unknown	Browse
	https://qr.de/login	Get hash	malicious	Unknown	Browse
	https://qr.de/login	Get hash	malicious	Unknown	Browse
	https://presenter.ahaslides.com/share/mpb-realty-1710428132687-2bmpglpgwv	Get hash	malicious	Unknown	Browse
18.173.219.101	http://chartwellfavdr.securevdr.com	Get hash	malicious	Unknown	Browse
18.173.219.101	http://metamind.bio/4XDRUR125073onhq451aspwxmjoip620JACAZSUJYIFIHHE1033174/52485P9	Get hash	malicious	Phisher	Browse
18.173.219.102	https://trk.klclick3.com/ls/click?upn=bBwYdIep1AJAhlueKA-2FYA3kLj-2BuhNXtTi0MSoxa-2Bue1y5LtHy0zIHlsX-2BQ7-2F-2F14oJl1Vn0JSmyeTgU62yPmEucUomiKe0c9GHzNa0umE7xcdwLiv-2B4R6u9ny-2BYVKQsM7Ec6ZEQAsIFg6XGl5284bd4WEtQlLdev2zr-2BR-2FpUeq21ZHE5R91glZSvN15S5vL-2FqUtUDmUI-2B-2Fq7VG-2B51fv7pWEuudCs1CwNpg3ylZAqX9ywC4Oa5JMTGp4bvtvB9XqxxzDjCcKAwfEHKPSjunO7RDYpOrt6OQokU5WudglsEMu3oYVPIqcq0JpO6cUxgqvl1-jo0_SwQzVbHIfFE9uWxeRIZUf7sxBlUMVV5-2BDExu8iBnKFTH6HQpYy7M65-2B4MHCQXlgAr7haZTYsoShZI26WimMw1zhvVGGBEyQdfRSqL8FJFmZC1NtnYdjPnCg-2BtCKQdXW7NGLEwWLUvZDP5ZzfuxEQedDpFsZq3wtmynNSs0Ip8gE41C0tn-2Bb42LB7tNi2Kv4plBoy0NYJ6E3jYUDCMbSdj-2BHnDlY42ZRJRIifxxab68FImrS3UYPqVu-2FTJMr2upZzrVm18vCq7lJWByDdeE3wCOeQ8W-2BH5cYey3GlDxRcp4186nUcenDDwVqkKdT43mWI	Get hash	malicious	Unknown	Browse

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	file.exe	Get hash	malicious	Credential Flusher	Browse	52.222.236.23
	file.exe	Get hash	malicious	Credential Flusher	Browse	52.222.236.23
	file.exe	Get hash	malicious	Credential Flusher	Browse	52.222.236.48
	file.exe	Get hash	malicious	Credential Flusher	Browse	18.245.162.100
	file.exe	Get hash	malicious	Credential Flusher	Browse	52.222.236.48
	http://pay.christinagstewart.com/	Get hash	malicious	Unknown	Browse	18.245.86.11
	file.exe	Get hash	malicious	Credential Flusher	Browse	52.222.236.23
	https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.ht.zpdzwq?v=frudxdBjlfmjfqymhfwj.ht.pjd.kwjsy___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpiNGZlZGFhNjcxOTBhYjU4MTE5MjBlZTRiYTAxZmUwMTo3OmIxYWM6MDg1ODNlNjljZDkwNThkM2ZiM2RjYTI4MzFjZGY4NGFmMTYyZTlhYmVjYWYxY2Q4MmNkZDhiNmFmOWVkOWUxOTpoOlQ6VA#Sm9hbi5LbmlwcGVuQEVsa2F5LkNvbQ==	Get hash	malicious	Unknown	Browse	108.138.7.53
	https://www.dropbox.com/scl/fi/qo6796ed7hlrt0v8k9nr6/Patagonia-Health-Barcode-Scanner-Setup-2024.exe?rlkey=5bmndvx8124ztopqewiogbnlt&st=yvxpokhf&dl=0	Get hash	malicious	Unknown	Browse	35.157.212.223
	https://login.stmarytx.edu/cas/logout?service=http%3A%2F%2Fgoogle.com%2Famp%2Fmatrikaengineeringworks.com/hebc/?#?m=bWVsaXNzYWdAd2Utd29ybGR3aWRlLmNvbQ==	Get hash	malicious	Unknown	Browse	54.70.225.16
MIT-GATEWAYSUS	http://pay.christinagstewart.com/	Get hash	malicious	Unknown	Browse	18.172.111.126
	https://s.craft.me/yB5midhwwaHUPW	Get hash	malicious	HTMLPhisher	Browse	18.66.196.119
	cenSXPimaG.elf	Get hash	malicious	Mirai, Okiru	Browse	19.62.209.44
	0wG3Y7nLHa.elf	Get hash	malicious	Mirai, Okiru	Browse	19.6.61.249
	XvAqhy3FO6.elf	Get hash	malicious	Mirai, Okiru	Browse	18.105.167.248
	970Qh1XiFt.elf	Get hash	malicious	Mirai, Okiru	Browse	19.140.221.82
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	18.66.122.119
	Contract_Agreement_Monday October 2024.pdf	Get hash	malicious	Unknown	Browse	18.172.112.66
	x86.elf	Get hash	malicious	Mirai	Browse	18.20.161.55
	na.elf	Get hash	malicious	Unknown	Browse	19.0.95.112
MIT-GATEWAYSUS	http://pay.christinagstewart.com/	Get hash	malicious	Unknown	Browse	18.172.111.126
	https://s.craft.me/yB5midhwwaHUPW	Get hash	malicious	HTMLPhisher	Browse	18.66.196.119
	cenSXPimaG.elf	Get hash	malicious	Mirai, Okiru	Browse	19.62.209.44
	0wG3Y7nLHa.elf	Get hash	malicious	Mirai, Okiru	Browse	19.6.61.249
	XvAqhy3FO6.elf	Get hash	malicious	Mirai, Okiru	Browse	18.105.167.248
	970Qh1XiFt.elf	Get hash	malicious	Mirai, Okiru	Browse	19.140.221.82
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	18.66.122.119
	Contract_Agreement_Monday October 2024.pdf	Get hash	malicious	Unknown	Browse	18.172.112.66
	x86.elf	Get hash	malicious	Mirai	Browse	18.20.161.55
	na.elf	Get hash	malicious	Unknown	Browse	19.0.95.112
AMAZON-02US	file.exe	Get hash	malicious	Credential Flusher	Browse	52.222.236.23
	file.exe	Get hash	malicious	Credential Flusher	Browse	52.222.236.23
	file.exe	Get hash	malicious	Credential Flusher	Browse	52.222.236.48
	file.exe	Get hash	malicious	Credential Flusher	Browse	18.245.162.100
	file.exe	Get hash	malicious	Credential Flusher	Browse	52.222.236.48
	http://pay.christinagstewart.com/	Get hash	malicious	Unknown	Browse	18.245.86.11
	file.exe	Get hash	malicious	Credential Flusher	Browse	52.222.236.23
	https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.ht.zpdzwq?v=frudxdBjlfmjfqymhfwj.ht.pjd.kwjsy___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpiNGZlZGFhNjcxOTBhYjU4MTE5MjBlZTRiYTAxZmUwMTo3OmIxYWM6MDg1ODNlNjljZDkwNThkM2ZiM2RjYTI4MzFjZGY4NGFmMTYyZTlhYmVjYWYxY2Q4MmNkZDhiNmFmOWVkOWUxOTpoOlQ6VA#Sm9hbi5LbmlwcGVuQEVsa2F5LkNvbQ==	Get hash	malicious	Unknown	Browse	108.138.7.53
	https://www.dropbox.com/scl/fi/qo6796ed7hlrt0v8k9nr6/Patagonia-Health-Barcode-Scanner-Setup-2024.exe?rlkey=5bmndvx8124ztopqewiogbnlt&st=yvxpokhf&dl=0	Get hash	malicious	Unknown	Browse	35.157.212.223
	https://login.stmarytx.edu/cas/logout?service=http%3A%2F%2Fgoogle.com%2Famp%2Fmatrikaengineeringworks.com/hebc/?#?m=bWVsaXNzYWdAd2Utd29ybGR3aWRlLmNvbQ==	Get hash	malicious	Unknown	Browse	54.70.225.16

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	2557
Entropy (8bit):	7.766294822914305
Encrypted:	false
SSDEEP:	48:rGAc/jBrhAqRCwtV0NDwFD4qP1S9euutKrjH3E8DNDP06gdIXY/LrJInLTED2zUW:rGPHTFD4qtSqKPH3E8DNDM9SXGym2Y7K
MD5:	61F28FA3096D86E1D503B61595573268
SHA1:	7E70A550938B6A4001A0BE754A20882B6F18FA15
SHA-256:	499D15039C0421CA59A057D10A4F30BA294F1F77AA2C8A11B2A38FC242F87FED
SHA-512:	F007EBD2873A039A4541E0E1A291AD33F2030EFB7E9BC4D1D4D88080160BCAFD99442E4BFD4EC8BE64F359816F2B7DEB3103948D37B02EEFF0C335D9550B2B30
Malicious:	false
Reputation:	low
URL:	https://consumersiteimages.trustpilot.net/business-units/4bdc2c5f00006400050595c3-198x149-1x.avif
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C. ......ispe................pixi............ipma...................mdat....8..eX@...2.....I,q@....5n.NH............C.O.w.u.q.y.e....8..4..(k...?R.:.o:...6....l.6...A..)..:..t.r.1..0..p.0..gZ......F>Fq.}.....S....e....c...#HC..S..oq.....oH....G.].;....>...9+...........#..k.XI8.YN..K.28Y.K.e......'..._.j.1...[.Bn/V.+....L.v=.U.......&....l-.S/....3.4>9.y&.............6-TO...T...<..... .Zwn.....l....T..Kz.....:H.....k......]K..`.....R.T...D]...4.s....t.....^.qI..m9..}%.Rht..j...;\|.n.d.@.xQ...j......T..]4em.....4*k...0.H.p.n1.N.Uzs$]\|.0%....u......G...DO....,..t@.....%.....8N.5..d......Q.G.t..9.........%$'......!..^s.'(.\..o.c....>.....Iw.X..TJ...u..Im..g.X.d.......{S..`;.Nz..%!q.b.L~ Y.y..7=.[.5.i..VT.....n/...MV...u...........r.J..vUBP....<....s'..\

File type:	HTML document, ASCII text
Entropy (8bit):	5.053898395029987
TrID:	HyperText Markup Language (15015/1) 20.56% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (11501/1) 15.75% HyperText Markup Language (11501/1) 15.75%
File name:	rfc[1].html
File size:	806 bytes
MD5:	c77a58db67187171896fa1958bf5e301
SHA1:	7dff22ff47ec68a5bef870b8c3dc4efbc2e67890
SHA256:	8241a99e4d6781f2e63460b2229e164e6715a343d89ec6de408272b5bd7d343c
SHA512:	a9b608dd1dd3adea180cd98c2e436d3d8f58e1d04b6b6add1226dbb515fcc7bb27ef3082da67189cdc25061d5e2288574a57108986069e7d7ac5d6f6e2a4be0b
SSDEEP:	12:hYIJRmy7+BkMxb8N70MK7EdmUWqJmr8/KQGKxHntQxMzndt6oQb:hYIJAC8kMxb8p0MKAtHQOzzndt2
TLSH:	C701CBC80CF0940226B39730BCF2F1055E8259D799448980F8CC59896FA5F8B8AE3A6C
File Content Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8">. <meta http-equiv="x-ua-compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title></title>. <noscri

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 03:45:51.490291119 CEST	688	OUT	GET /?template=ARROW_3&tdfs=1&s_token=1728351948.0233840000&uuid=1728351948.0233840000&term=DNS%20IP%20Address%20Monitoring%20Tools&term=Automated%20Network%20Management&term=The%20Internet%20of%20Things&searchbox=0&showDomain=0&backfill=0 HTTP/1.1 Host: www6.ietf.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 8, 2024 03:45:51.594712019 CEST	493	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 08 Oct 2024 01:45:51 GMT Content-Type: text/html Content-Length: 348 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 2f 6c 61 6e 64 65 72 3f 74 65 6d 70 6c 61 74 65 3d 41 52 52 4f 57 5f 33 26 74 64 66 73 3d 31 26 73 5f 74 6f 6b 65 6e 3d 31 37 32 38 33 35 31 39 34 38 2e 30 32 33 33 38 34 30 30 30 30 26 75 75 69 64 3d 31 37 32 38 33 35 31 39 34 38 2e 30 32 33 33 38 34 30 30 30 30 26 74 65 72 6d 3d 44 4e 53 25 32 30 49 50 25 32 30 41 64 64 72 65 73 73 25 32 30 4d 6f 6e 69 74 6f 72 69 6e 67 25 32 30 54 6f 6f 6c 73 26 74 65 72 6d 3d 41 75 74 6f 6d 61 74 65 64 25 32 30 4e 65 74 77 6f 72 6b 25 32 30 4d 61 6e 61 67 65 6d 65 6e 74 26 74 65 72 6d 3d 54 68 65 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 6f 66 25 32 30 54 68 69 6e 67 73 26 73 65 61 72 63 68 62 6f 78 3d 30 26 73 68 6f 77 44 6f 6d 61 69 6e 3d 30 26 62 61 63 6b 66 69 6c 6c 3d 30 22 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 [TRUNCATED] Data Ascii: <!DOCTYPE html><html><head><script>window.onload=function(){window.location.href="/lander?template=ARROW_3&tdfs=1&s_token=1728351948.0233840000&uuid=1728351948.0233840000&term=DNS%20IP%20Address%20Monitoring%20Tools&term=Automated%20Network%20Management&term=The%20Internet%20of%20Things&searchbox=0&showDomain=0&backfill=0"}</script></head></html>
Oct 8, 2024 03:45:51.622490883 CEST	934	OUT	GET /lander?template=ARROW_3&tdfs=1&s_token=1728351948.0233840000&uuid=1728351948.0233840000&term=DNS%20IP%20Address%20Monitoring%20Tools&term=Automated%20Network%20Management&term=The%20Internet%20of%20Things&searchbox=0&showDomain=0&backfill=0 HTTP/1.1 Host: www6.ietf.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://www6.ietf.com/?template=ARROW_3&tdfs=1&s_token=1728351948.0233840000&uuid=1728351948.0233840000&term=DNS%20IP%20Address%20Monitoring%20Tools&term=Automated%20Network%20Management&term=The%20Internet%20of%20Things&searchbox=0&showDomain=0&backfill=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 8, 2024 03:45:51.736629009 CEST	1289	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 08 Oct 2024 01:45:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Cache-Control: private, max-age=86400 Set-Cookie: expiry_partner=; Path=/; Max-Age=86400 Set-Cookie: caf_ipaddr=191.96.150.187; Path=/; Max-Age=86400 Set-Cookie: country=US; Path=/; Max-Age=86400 Set-Cookie: city=New%20York; Path=/; Max-Age=86400 Set-Cookie: lander_type=parking; Path=/; Max-Age=86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_gyjyrAF4sqRAoy6NXgv/K2Ugz6R1/hKDSsXOqmJI8Jgoq9bWxUrpLreULZy32OtAzedCm15Hp4my2qbuot87QA X-Content-Type-Options: nosniff Data Raw: 32 36 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 2c 22 2f 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 26 67 64 61 62 70 3d 74 72 75 65 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 74 6c 6f 61 64 65 72 2e 63 6f 6d 2f 74 61 67 3f 6f 3d 35 30 39 37 39 32 36 37 38 32 36 31 35 35 35 32 26 75 70 61 70 69 3d 74 72 75 65 22 20 61 73 79 6e 63 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 [TRUNCATED] Data Ascii: 26c<!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="data:,"/><script src="https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true"></script><script src="https://btloader.com/tag?o=5097926782615552&upapi=true" async></script><script>window.LANDER_SYSTEM="CP"</script><script defer="defer" src="https://img1.wsimg.com/parking-lander/static/js/main.36e19f48.js"></script><link href="https://img1.wsimg.com/parking-lander/static/css/main.ef90a627.css" rel="st
Oct 8, 2024 03:45:51.736640930 CEST	61	IN	Data Raw: 79 6c 65 73 68 65 65 74 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: ylesheet"></head><body><div id="root"></div></body></html>
Oct 8, 2024 03:45:51.736650944 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 8, 2024 03:45:51.775876999 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 8, 2024 03:46:36.745104074 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-10-08 01:45:47 UTC	780	OUT	GET /rfc?gp=1&js=1&uuid=1728337946.0004699643&other_args=eyJ1cmkiOiAiL3JmYyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAiKi8qIn0= HTTP/1.1 Host: www.ietf.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-08 01:45:48 UTC	1096	IN	HTTP/1.1 302 Found server: openresty/1.13.6.1 date: Tue, 08 Oct 2024 01:45:48 GMT content-type: text/html; charset=utf-8 content-length: 0 location: http://www6.ietf.com/?template=ARROW_3&tdfs=1&s_token=1728351948.0233840000&uuid=1728351948.0233840000&term=DNS%20IP%20Address%20Monitoring%20Tools&term=Automated%20Network%20Management&term=The%20Internet%20of%20Things&searchbox=0&showDomain=0&backfill=0 referrer-policy: no-referrer x-mtm-path: 0 vary: Accept-Language content-language: en set-cookie: mtm_delivered=WyJ3d3cuaWV0Zi5jb20iLCJodHRwOi8vd3d3Ni5pZXRmLmNvbS8_dGVtcGxhdGU9QVJST1dfMyZ0ZGZzPTEmc190b2tlbj0xNzI4MzUxOTQ4LjAyMzM4NDAwMDAmdXVpZD0xNzI4MzUxOTQ4LjAyMzM4NDAwMDAmdGVybT1ETlMlMjBJUCUyMEFkZHJlc3MlMjBNb25pdG9yaW5nJTIwVG9vbHMmdGVybT1BdXRvbWF0ZWQlMjBOZXR3b3JrJTIwTWFuYWdlbWVudCZ0ZXJtPVRoZSUyMEludGVybmV0JTIwb2YlMjBUaGluZ3Mmc2VhcmNoYm94PTAmc2hvd0RvbWFpbj0wJmJhY2tmaWxsPTAiLDEsIjIwMjQtMTAtMDggMDE6NDU6NDgiLDEsIjE3MjgzNTE5NDguMDIzMzg0MDAwMCIsNzQsbnVsbCxudWxsXQ:1sxzIK:450TcT3PETn1fR_04m4QuSIJi8Y; expires=Tue, 08-Oct-2024 02:45:48 GMT; Max-Age=3600; Path=/ connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-08 01:45:52 UTC	827	OUT	GET /adsense/domains/caf.js?abp=1&gdabp=true HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIlqHLAQic/swBCIWgzQEI1r3OARjBy8wB Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www6.ietf.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-10-08 01:45:52 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153147 Date: Tue, 08 Oct 2024 01:45:52 GMT Expires: Tue, 08 Oct 2024 01:45:52 GMT Cache-Control: private, max-age=3600 ETag: "8819710690078692276" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-08 01:45:52 UTC	411	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 34 36 35 30 35 35 37 35 37 31 34 36 35 32 30 33 39 34 39 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 31 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301431,173
2024-10-08 01:45:52 UTC	1255	IN	Data Raw: 67 79 22 3a 74 72 75 65 2c 22 5f 65 6e 61 62 6c 65 4e 65 77 43 6f 6e 73 65 6e 74 53 74 72 61 74 65 67 79 22 3a 74 72 75 65 2c 22 5f 66 69 78 43 74 63 4c 69 6e 6b 73 4f 6e 49 6f 73 22 3a 74 72 75 65 2c 22 5f 67 6f 6f 67 45 6e 61 62 6c 65 51 75 70 22 3a 74 72 75 65 2c 22 5f 73 77 69 74 63 68 47 77 73 52 65 71 75 65 73 74 54 6f 55 73 65 41 64 73 65 6e 73 65 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 Data Ascii: gy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonbloc
2024-10-08 01:45:52 UTC	1255	IN	Data Raw: 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 63 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 71 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 6e 65 3d 66 3b 63 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 Data Ascii: b(d);b!=d&&b!=null&&ca(c,a,{configurable:!0,writable:!0,value:b})}}q("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.ne=f;ca(this,"descripti
2024-10-08 01:45:52 UTC	1255	IN	Data Raw: 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 75 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 76 61 72 20 6b 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 7d 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6c 61 3b 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 6c 61 3d 4f Data Ascii: (!(a instanceof Array)){a=u(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}var ka=typeof Object.create=="function"?Object.create:function(a){function b(){}b.prototype=a;return new b},la;if(typeof Object.setPrototypeOf=="function")la=O
2024-10-08 01:45:52 UTC	1255	IN	Data Raw: 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 59 26 26 74 68 69 73 2e 59 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 67 3d 74 68 69 73 2e 59 3b 74 68 69 73 2e 59 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 0a 30 3b 68 3c 67 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 7b 76 61 72 20 6b 3d 67 5b 68 5d 3b 67 5b 68 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6b 28 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 76 65 28 6c 29 7d 7d 7d 74 68 69 73 2e 59 3d 6e 75 6c 6c 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 76 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 79 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 63 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: };c.prototype.hf=function(){for(;this.Y&&this.Y.length;){var g=this.Y;this.Y=[];for(var h=0;h<g.length;++h){var k=g[h];g[h]=null;try{k()}catch(l){this.ve(l)}}}this.Y=null};c.prototype.ve=function(g){this.yd(function(){throw g;})};b.prototype.oc=function(
2024-10-08 01:45:52 UTC	1255	IN	Data Raw: 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 67 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 67 3d 6e 65 77 20 67 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 67 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 67 3d 65 61 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 67 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 67 29 29 3b 67 2e 70 72 Data Ascii: ==="undefined")return!0;typeof g==="function"?g=new g("unhandledrejection",{cancelable:!0}):typeof h==="function"?g=new h("unhandledrejection",{cancelable:!0}):(g=ea.document.createEvent("CustomEvent"),g.initCustomEvent("unhandledrejection",!1,!0,g));g.pr
2024-10-08 01:45:52 UTC	1255	IN	Data Raw: 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6b 2e 64 6f 6e 65 3f 64 28 5b 5d 29 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 70 28 76 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 77 29 7b 72 5b 76 5d 3d 77 3b 74 2d 2d 3b 74 3d 3d 30 26 26 6c 28 72 29 7d 7d 76 61 72 20 72 3d 0a 5b 5d 2c 74 3d 30 3b 64 6f 20 72 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 74 2b 2b 2c 64 28 6b 2e 76 61 6c 75 65 29 2e 69 62 28 70 28 72 2e 6c 65 6e 67 74 68 2d 31 29 2c 6d 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6b 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 Data Ascii: .next();return k.done?d([]):new b(function(l,m){function p(v){return function(w){r[v]=w;t--;t==0&&l(r)}}var r=[],t=0;do r.push(void 0),t++,d(k.value).ib(p(r.length-1),m),k=h.next();while(!k.done)})};return b});function sa(a,b){return Object.prototype.has
2024-10-08 01:45:52 UTC	1255	IN	Data Raw: 72 65 74 75 72 6e 20 61 3b 76 61 72 20 67 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b 69 66 28 21 73 61 28 6b 2c 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 6b 29 3b 6b 5b 67 5d 5b 74 68 69 73 2e 4d 61 5d 3d 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 7d Data Ascii: return a;var g="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var h=0;b.prototype.set=function(k,l){if(!d(k))throw Error("Invalid WeakMap key");e(k);if(!sa(k,g))throw Error("WeakMap key fail: "+k);k[g][this.Ma]=l;return this}
2024-10-08 01:45:52 UTC	1255	IN	Data Raw: 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 75 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3d 6c 2e 6e 65 78 74 28 29 3b 69 66 28 6d 2e 64 6f 6e 65 7c 7c 6d 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 6d 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 73 22 29 72 65 74 75 72 6e 21 31 3b 6d 3d 6c 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6d 2e 64 6f 6e 65 7c 7c 6d 2e 76 61 6c 75 65 5b 30 5d Data Ascii: rn!1;try{var h=Object.seal({x:4}),k=new a(u([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var l=k.entries(),m=l.next();if(m.done\|\|m.value[0]!=h\|\|m.value[1]!="s")return!1;m=l.next();return m.done\|\|m.value[0]
2024-10-08 01:45:52 UTC	1255	IN	Data Raw: 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 Data Ascii: (),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;return e});function ua(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a

Timestamp	Bytes transferred	Direction	Data
2024-10-08 01:45:53 UTC	654	OUT	GET /adsense/domains/caf.js?abp=1&gdabp=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIlqHLAQic/swBCIWgzQEI1r3OARjBy8wB Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-10-08 01:45:53 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153138 Date: Tue, 08 Oct 2024 01:45:53 GMT Expires: Tue, 08 Oct 2024 01:45:53 GMT Cache-Control: private, max-age=3600 ETag: "14401580305292868773" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-08 01:45:53 UTC	410	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 34 36 35 30 35 35 37 35 37 31 34 36 35 32 30 33 39 34 39 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 34 33 39 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14650557571465203949",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,173
2024-10-08 01:45:53 UTC	1255	IN	Data Raw: 2c 22 5f 65 6e 61 62 6c 65 4e 65 77 43 6f 6e 73 65 6e 74 53 74 72 61 74 65 67 79 22 3a 74 72 75 65 2c 22 5f 66 69 78 43 74 63 4c 69 6e 6b 73 4f 6e 49 6f 73 22 3a 74 72 75 65 2c 22 5f 67 6f 6f 67 45 6e 61 62 6c 65 51 75 70 22 3a 74 72 75 65 2c 22 5f 73 77 69 74 63 68 47 77 73 52 65 71 75 65 73 74 54 6f 55 73 65 41 64 73 65 6e 73 65 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 Data Ascii: ,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasC
2024-10-08 01:45:53 UTC	1255	IN	Data Raw: 64 26 26 62 21 3d 6e 75 6c 6c 26 26 63 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 71 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 6e 65 3d 66 3b 63 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e Data Ascii: d&&b!=null&&ca(c,a,{configurable:!0,writable:!0,value:b})}}q("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.ne=f;ca(this,"description",{con
2024-10-08 01:45:53 UTC	1255	IN	Data Raw: 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 75 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 76 61 72 20 6b 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 7d 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6c 61 3b 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 6c 61 3d 4f 62 6a 65 63 74 2e 73 65 Data Ascii: tanceof Array)){a=u(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}var ka=typeof Object.create=="function"?Object.create:function(a){function b(){}b.prototype=a;return new b},la;if(typeof Object.setPrototypeOf=="function")la=Object.se
2024-10-08 01:45:53 UTC	1255	IN	Data Raw: 6f 74 79 70 65 2e 68 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 59 26 26 74 68 69 73 2e 59 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 67 3d 74 68 69 73 2e 59 3b 74 68 69 73 2e 59 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 0a 30 3b 68 3c 67 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 7b 76 61 72 20 6b 3d 67 5b 68 5d 3b 67 5b 68 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6b 28 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 76 65 28 6c 29 7d 7d 7d 74 68 69 73 2e 59 3d 6e 75 6c 6c 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 76 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 79 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 Data Ascii: otype.hf=function(){for(;this.Y&&this.Y.length;){var g=this.Y;this.Y=[];for(var h=0;h<g.length;++h){var k=g[h];g[h]=null;try{k()}catch(l){this.ve(l)}}}this.Y=null};c.prototype.ve=function(g){this.yd(function(){throw g;})};b.prototype.oc=function(){functi
2024-10-08 01:45:53 UTC	1255	IN	Data Raw: 66 69 6e 65 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 67 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 67 3d 6e 65 77 20 67 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 67 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 67 3d 65 61 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 67 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 67 29 29 3b 67 2e 70 72 6f 6d 69 73 65 3d 74 68 Data Ascii: fined")return!0;typeof g==="function"?g=new g("unhandledrejection",{cancelable:!0}):typeof h==="function"?g=new h("unhandledrejection",{cancelable:!0}):(g=ea.document.createEvent("CustomEvent"),g.initCustomEvent("unhandledrejection",!1,!0,g));g.promise=th
2024-10-08 01:45:53 UTC	1255	IN	Data Raw: 72 65 74 75 72 6e 20 6b 2e 64 6f 6e 65 3f 64 28 5b 5d 29 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 70 28 76 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 77 29 7b 72 5b 76 5d 3d 77 3b 74 2d 2d 3b 74 3d 3d 30 26 26 6c 28 72 29 7d 7d 76 61 72 20 72 3d 0a 5b 5d 2c 74 3d 30 3b 64 6f 20 72 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 74 2b 2b 2c 64 28 6b 2e 76 61 6c 75 65 29 2e 69 62 28 70 28 72 2e 6c 65 6e 67 74 68 2d 31 29 2c 6d 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6b 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: return k.done?d([]):new b(function(l,m){function p(v){return function(w){r[v]=w;t--;t==0&&l(r)}}var r=[],t=0;do r.push(void 0),t++,d(k.value).ib(p(r.length-1),m),k=h.next();while(!k.done)})};return b});function sa(a,b){return Object.prototype.hasOwnPrope
2024-10-08 01:45:53 UTC	1255	IN	Data Raw: 3b 76 61 72 20 67 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b 69 66 28 21 73 61 28 6b 2c 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 6b 29 3b 6b 5b 67 5d 5b 74 68 69 73 2e 4d 61 5d 3d 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 62 2e 70 72 6f 74 6f Data Ascii: ;var g="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var h=0;b.prototype.set=function(k,l){if(!d(k))throw Error("Invalid WeakMap key");e(k);if(!sa(k,g))throw Error("WeakMap key fail: "+k);k[g][this.Ma]=l;return this};b.proto
2024-10-08 01:45:53 UTC	1255	IN	Data Raw: 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 75 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3d 6c 2e 6e 65 78 74 28 29 3b 69 66 28 6d 2e 64 6f 6e 65 7c 7c 6d 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 6d 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 73 22 29 72 65 74 75 72 6e 21 31 3b 6d 3d 6c 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6d 2e 64 6f 6e 65 7c 7c 6d 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 0a 34 7c 7c Data Ascii: {var h=Object.seal({x:4}),k=new a(u([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var l=k.entries(),m=l.next();if(m.done\|\|m.value[0]!=h\|\|m.value[1]!="s")return!1;m=l.next();return m.done\|\|m.value[0].x!=4\|\|
2024-10-08 01:45:53 UTC	1255	IN	Data Raw: 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e Data Ascii: =l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;return e});function ua(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),don

Timestamp	Bytes transferred	Direction	Data
2024-10-08 01:45:53 UTC	720	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIlqHLAQic/swBCIWgzQEI1r3OARjBy8wB Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www6.ietf.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-08 01:45:53 UTC	746	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 07 Oct 2024 13:39:45 GMT Expires: Tue, 08 Oct 2024 13:39:45 GMT Cache-Control: public, max-age=86400 Age: 43568 Last-Modified: Tue, 08 May 2012 13:08:06 GMT Content-Type: image/x-icon Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-08 01:45:53 UTC	509	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2024-10-08 01:45:53 UTC	569	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-10-08 01:45:54 UTC	579	OUT	OPTIONS /v1/domains/domain?domain=www6.ietf.com&portfolioId=&abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-request-id Origin: http://www6.ietf.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: http://www6.ietf.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2024-10-08 01:45:54 UTC	743	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 01:45:54 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=6CdeWStMF2lIY0+Sj1axZNY4LXD2yD0SQfTDb5y23diz8nP5xiczEsf029b2bi7i6XTOn+xQf0HjgP1SiIAScjYeVW1G/7koqpfz2gnHjmSw5BBCm93CFQJarUbV; Expires=Tue, 15 Oct 2024 01:45:54 GMT; Path=/ Set-Cookie: AWSALBCORS=6CdeWStMF2lIY0+Sj1axZNY4LXD2yD0SQfTDb5y23diz8nP5xiczEsf029b2bi7i6XTOn+xQf0HjgP1SiIAScjYeVW1G/7koqpfz2gnHjmSw5BBCm93CFQJarUbV; Expires=Tue, 15 Oct 2024 01:45:54 GMT; Path=/; SameSite=None; Secure access-control-allow-credentials: true access-control-allow-headers: X-Request-Id access-control-allow-methods: GET, HEAD, OPTIONS access-control-allow-origin: http://www6.ietf.com access-control-max-age: 600 x-request-id: MxWThbE2