IOC Report
https://friwin2.z13.web.core.windows.net/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 120
PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 121
ASCII text, with very long lines (34235), with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 122
PNG image data, 66 x 68, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 123
PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 124
ASCII text, with very long lines (52717), with no line terminators
downloaded
Chrome Cache Entry: 125
ASCII text, with very long lines (59765)
downloaded
Chrome Cache Entry: 126
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 127
PNG image data, 63 x 70, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 128
ASCII text, with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 129
PNG image data, 77 x 63, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 130
Unicode text, UTF-8 text, with very long lines (65464)
downloaded
Chrome Cache Entry: 131
ASCII text, with very long lines (2306), with no line terminators
downloaded
Chrome Cache Entry: 132
ASCII text, with very long lines (513), with no line terminators
downloaded
Chrome Cache Entry: 133
ASCII text, with very long lines (65398)
downloaded
Chrome Cache Entry: 134
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 135
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 136
Unicode text, UTF-8 text, with very long lines (56143)
downloaded
Chrome Cache Entry: 137
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 138
ASCII text, with very long lines (65464)
downloaded
Chrome Cache Entry: 139
HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
downloaded
Chrome Cache Entry: 140
ASCII text, with very long lines (2674)
downloaded
Chrome Cache Entry: 141
HTML document, ASCII text, with very long lines (955), with CRLF line terminators
downloaded
Chrome Cache Entry: 142
ASCII text, with very long lines (65451)
downloaded
Chrome Cache Entry: 143
ASCII text, with very long lines (1877), with no line terminators
downloaded
Chrome Cache Entry: 144
ASCII text, with very long lines (32014)
downloaded
Chrome Cache Entry: 145
ASCII text, with very long lines (65394)
downloaded
Chrome Cache Entry: 146
ASCII text
downloaded
Chrome Cache Entry: 147
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=39, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=180], baseline, precision 8, 180x39, components 3
downloaded
Chrome Cache Entry: 148
ASCII text, with very long lines (4370), with no line terminators
downloaded
Chrome Cache Entry: 149
GIF image data, version 89a, 193 x 71
downloaded
Chrome Cache Entry: 150
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 151
ASCII text
downloaded
Chrome Cache Entry: 152
Web Open Font Format (Version 2), TrueType, length 29588, version 0.0
downloaded
Chrome Cache Entry: 153
PNG image data, 77 x 72, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 154
PNG image data, 27 x 28, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 155
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x450, components 3
dropped
Chrome Cache Entry: 156
assembler source, ASCII text, with very long lines (1266)
downloaded
Chrome Cache Entry: 157
Unicode text, UTF-8 text, with very long lines (65458)
downloaded
Chrome Cache Entry: 158
ASCII text, with very long lines (535), with no line terminators
downloaded
Chrome Cache Entry: 159
PNG image data, 800 x 450, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 160
ASCII text, with very long lines (3771)
downloaded
Chrome Cache Entry: 161
HTML document, ASCII text, with very long lines (321), with no line terminators
downloaded
Chrome Cache Entry: 162
PNG image data, 77 x 72, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 163
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 164
Unicode text, UTF-8 text, with very long lines (64241)
downloaded
Chrome Cache Entry: 165
ASCII text, with very long lines (5945)
downloaded
Chrome Cache Entry: 166
ASCII text, with very long lines (18229), with no line terminators
downloaded
Chrome Cache Entry: 167
ASCII text, with very long lines (9929), with no line terminators
downloaded
Chrome Cache Entry: 168
JSON data
dropped
Chrome Cache Entry: 169
PNG image data, 63 x 70, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 170
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
downloaded
Chrome Cache Entry: 171
PNG image data, 27 x 28, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 172
PNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 173
ASCII text, with very long lines (30651)
downloaded
Chrome Cache Entry: 174
PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 175
ASCII text, with very long lines (699), with no line terminators
downloaded
Chrome Cache Entry: 176
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x450, components 3
downloaded
Chrome Cache Entry: 177
ASCII text, with very long lines (906), with no line terminators
downloaded
Chrome Cache Entry: 178
JSON data
dropped
Chrome Cache Entry: 179
Unicode text, UTF-8 (with BOM) text, with very long lines (64795), with no line terminators
downloaded
Chrome Cache Entry: 180
PNG image data, 33 x 31, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 181
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 182
Unicode text, UTF-8 (with BOM) text, with very long lines (10253), with no line terminators
downloaded
Chrome Cache Entry: 183
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 184
PNG image data, 77 x 63, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 185
ASCII text, with very long lines (40772), with no line terminators
downloaded
Chrome Cache Entry: 186
ASCII text, with very long lines (1685), with no line terminators
downloaded
Chrome Cache Entry: 187
JSON data
downloaded
Chrome Cache Entry: 188
ASCII text, with very long lines (17287), with no line terminators
downloaded
Chrome Cache Entry: 189
PNG image data, 42 x 702, 8-bit grayscale, non-interlaced
downloaded
Chrome Cache Entry: 190
PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 191
ASCII text, with very long lines (24751), with no line terminators
downloaded
Chrome Cache Entry: 192
HTML document, ASCII text, with very long lines (321), with no line terminators
downloaded
Chrome Cache Entry: 193
Web Open Font Format, TrueType, length 26288, version 0.0
downloaded
Chrome Cache Entry: 194
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
dropped
Chrome Cache Entry: 195
Unicode text, UTF-8 text, with very long lines (64025)
downloaded
Chrome Cache Entry: 196
ASCII text, with very long lines (13521), with no line terminators
downloaded
Chrome Cache Entry: 197
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 198
ASCII text, with very long lines (11139), with no line terminators
downloaded
Chrome Cache Entry: 199
HTML document, Unicode text, UTF-8 text, with very long lines (1266)
downloaded
Chrome Cache Entry: 200
JSON data
dropped
Chrome Cache Entry: 201
ASCII text, with very long lines (1194), with no line terminators
downloaded
Chrome Cache Entry: 202
ASCII text, with very long lines (41651)
downloaded
Chrome Cache Entry: 203
PNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 204
Unicode text, UTF-8 text, with very long lines (45900)
downloaded
Chrome Cache Entry: 205
Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2, 64 kbps, 22.05 kHz, Monaural
downloaded
Chrome Cache Entry: 206
ASCII text, with very long lines (42133)
downloaded
Chrome Cache Entry: 207
ASCII text, with very long lines (1789), with no line terminators
downloaded
Chrome Cache Entry: 208
ASCII text, with very long lines (65472)
downloaded
Chrome Cache Entry: 209
PNG image data, 33 x 31, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 210
ASCII text, with very long lines (4873), with no line terminators
downloaded
Chrome Cache Entry: 211
ASCII text, with very long lines (15362)
downloaded
Chrome Cache Entry: 212
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 148772
downloaded
Chrome Cache Entry: 213
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 214
ASCII text, with very long lines (32089)
downloaded
Chrome Cache Entry: 215
Unicode text, UTF-8 (with BOM) text, with very long lines (65511), with no line terminators
downloaded
Chrome Cache Entry: 216
ASCII text, with very long lines (18963), with no line terminators
downloaded
Chrome Cache Entry: 217
Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
downloaded
Chrome Cache Entry: 218
Web Open Font Format, TrueType, length 26288, version 0.0
downloaded
Chrome Cache Entry: 219
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 220
GIF image data, version 89a, 193 x 71
dropped
Chrome Cache Entry: 221
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=39, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=180], baseline, precision 8, 180x39, components 3
dropped
Chrome Cache Entry: 222
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 223
ASCII text, with very long lines (2230), with no line terminators
downloaded
Chrome Cache Entry: 224
ASCII text, with very long lines (32478)
downloaded
Chrome Cache Entry: 225
PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 226
PNG image data, 800 x 450, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 227
ASCII text, with very long lines (27265)
downloaded
Chrome Cache Entry: 228
ASCII text, with very long lines (3080), with no line terminators
downloaded
Chrome Cache Entry: 229
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 230
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141339
downloaded
Chrome Cache Entry: 231
Unicode text, UTF-8 text, with very long lines (64241)
downloaded
Chrome Cache Entry: 232
ASCII text, with very long lines (65460)
downloaded
Chrome Cache Entry: 233
PNG image data, 42 x 702, 8-bit grayscale, non-interlaced
dropped
Chrome Cache Entry: 234
ASCII text, with very long lines (503)
downloaded
Chrome Cache Entry: 235
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 236
JSON data
dropped
Chrome Cache Entry: 237
PNG image data, 66 x 68, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 238
HTML document, ASCII text, with very long lines (321), with no line terminators
downloaded
There are 110 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2020,i,10895461938143384577,13357170919498850915,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://friwin2.z13.web.core.windows.net/"

URLs

Name
IP
Malicious
https://friwin2.z13.web.core.windows.net/
malicious
https://outlook.live.com/owa/
unknown
http://fontawesome.io
unknown
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-object-values-polyfill.js
unknown
https://stats.g.doubleclick.net/g/collect
unknown
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-arr-find-polyfill.js
unknown
https://embed.tawk.to/57319e009c52c0bc56e39866/default
104.22.25.131
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js
13.107.246.40
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-runtime.js
104.22.25.131
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-f1565420.js
104.22.25.131
https://products.office.com/en-us/home
unknown
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-2d0b9454.js
104.22.25.131
https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.c
unknown
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-9294da6c.js
104.22.25.131
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-iterator-polyfill.js
unknown
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
unknown
https://login.windows-ppe.net
unknown
https://embed.tawk.to/_s/v4/app/6625f366c87/css/max-widget.css
104.22.25.131
about:blank
https://m03lm.rdtk.io/postback?format=img&sum={replace}
207.244.126.81
https://edgecdn.dev/code?code=a7400ed6d3f8ef9dff8b932728043756
172.67.193.253
https://www.google.com
unknown
https://products.office.com/en-us/microsoft-teams/free?icid=SSM_AS_Promo_Apps_MicrosoftTeams
unknown
https://github.com/twbs/bootstrap/graphs/contributors)
unknown
https://login.microsoftonline.com
unknown
https://vsa102.tawk.to/s/?k=662c3f58a3c8d40bf964eed5&cver=0&pop=false&asver=925&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI1NzMxOWUwMDljNTJjMGJjNTZlMzk4NjYiLCJ2aWQiOiI1NzMxOWUwMDljNTJjMGJjNTZlMzk4NjYtcWVJc1gwVm1rRmtzMTNBNDZmQkV0Iiwic2lkIjoiNjYyYzNmNThhM2M4ZDQwYmY5NjRlZWQ1IiwiaWF0IjoxNzE0MTc1ODMyLCJleHAiOjE3MTQxNzc2MzIsImp0aSI6IjFPVHVwQUF4RnJQU0pxaEJEbnZlOCJ9.M_JAZYn5sBJ_Z92LnLAh5iKObnfjwrLWstON6Wwks_0hUqHUYo2qNXiuDFeEiOOhaxR-EXTbDeZdp_c1frwq0w&EIO=3&transport=websocket&__t=OySru9f
104.22.24.131
http://www.hitsteps.com/
unknown
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-24d8db78.js
104.22.25.131
https://va.tawk.to/v1/session/start
172.67.38.66
https://vsa33.tawk.to/s/?k=662c3f58a3c8d40bf964eed5&cver=0&pop=false&asver=925&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI1NzMxOWUwMDljNTJjMGJjNTZlMzk4NjYiLCJ2aWQiOiI1NzMxOWUwMDljNTJjMGJjNTZlMzk4NjYtcWVJc1gwVm1rRmtzMTNBNDZmQkV0Iiwic2lkIjoiNjYyYzNmNThhM2M4ZDQwYmY5NjRlZWQ1IiwiaWF0IjoxNzE0MTc1ODMyLCJleHAiOjE3MTQxNzc2MzIsImp0aSI6IjFPVHVwQUF4RnJQU0pxaEJEbnZlOCJ9.M_JAZYn5sBJ_Z92LnLAh5iKObnfjwrLWstON6Wwks_0hUqHUYo2qNXiuDFeEiOOhaxR-EXTbDeZdp_c1frwq0w&EIO=3&transport=websocket&__t=OySrwTs
104.22.24.131
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-4fe9d5dd.js
104.22.25.131
http://github.com/requirejs/almond/LICENSE
unknown
https://ezgif.com/optimize
unknown
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-promise-polyfill.js
unknown
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js
13.107.213.40
https://va.tawk.to/v1/widget-settings?propertyId=57319e009c52c0bc56e39866&widgetId=default&sv=null
172.67.38.66
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-main.js
104.22.25.131
https://embed.tawk.to/_s/v4/app/6625f366c87/css/bubble-widget.css
104.22.25.131
https://embed.tawk.to/_s/v4/app/6625f366c87/css/min-widget.css
104.22.25.131
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-app.js
104.22.25.131
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meCore.min.js
13.107.246.40
https://www.skype.com/en/
unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)
unknown
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-entries-polyfill.js
unknown
https://mem.gfx.ms/meversion?partner=SMCConvergence&market=en-us&uhf=1
13.107.246.40
https://embed.tawk.to/_s/v4/app/6625f366c87/
unknown
https://embed.tawk.to/_s/v4/app/6625f366c87/languages/en.js
104.22.25.131
https://adservice.google.com/pagead/regclk
unknown
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-event-polyfill.js
unknown
https://getbootstrap.com/)
unknown
https://vsa33.tawk.to/s/?k=662c3f58a3c8d40bf964eed5&cver=0&pop=false&asver=925&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI1NzMxOWUwMDljNTJjMGJjNTZlMzk4NjYiLCJ2aWQiOiI1NzMxOWUwMDljNTJjMGJjNTZlMzk4NjYtcWVJc1gwVm1rRmtzMTNBNDZmQkV0Iiwic2lkIjoiNjYyYzNmNThhM2M4ZDQwYmY5NjRlZWQ1IiwiaWF0IjoxNzE0MTc1ODMyLCJleHAiOjE3MTQxNzc2MzIsImp0aSI6IjFPVHVwQUF4RnJQU0pxaEJEbnZlOCJ9.M_JAZYn5sBJ_Z92LnLAh5iKObnfjwrLWstON6Wwks_0hUqHUYo2qNXiuDFeEiOOhaxR-EXTbDeZdp_c1frwq0w&EIO=3&transport=websocket&__t=OySrvU6
104.22.24.131
https://cct.google/taggy/agent.js
unknown
http://fontawesome.io/license
unknown
https://vsa68.tawk.to/s/?k=662c3f58a3c8d40bf964eed5&cver=0&pop=false&asver=925&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI1NzMxOWUwMDljNTJjMGJjNTZlMzk4NjYiLCJ2aWQiOiI1NzMxOWUwMDljNTJjMGJjNTZlMzk4NjYtcWVJc1gwVm1rRmtzMTNBNDZmQkV0Iiwic2lkIjoiNjYyYzNmNThhM2M4ZDQwYmY5NjRlZWQ1IiwiaWF0IjoxNzE0MTc1ODMyLCJleHAiOjE3MTQxNzc2MzIsImp0aSI6IjFPVHVwQUF4RnJQU0pxaEJEbnZlOCJ9.M_JAZYn5sBJ_Z92LnLAh5iKObnfjwrLWstON6Wwks_0hUqHUYo2qNXiuDFeEiOOhaxR-EXTbDeZdp_c1frwq0w&EIO=3&transport=websocket&__t=OySrtna
104.22.24.131
https://onedrive.live.com/about/en-us/
unknown
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-2d0b383d.js
104.22.25.131
https://www.onenote.com/
unknown
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-vendor.js
104.22.25.131
https://cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
151.101.1.229
https://vsa68.tawk.to/s/?k=662c3f58a3c8d40bf964eed5&cver=0&pop=false&asver=925&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI1NzMxOWUwMDljNTJjMGJjNTZlMzk4NjYiLCJ2aWQiOiI1NzMxOWUwMDljNTJjMGJjNTZlMzk4NjYtcWVJc1gwVm1rRmtzMTNBNDZmQkV0Iiwic2lkIjoiNjYyYzNmNThhM2M4ZDQwYmY5NjRlZWQ1IiwiaWF0IjoxNzE0MTc1ODMyLCJleHAiOjE3MTQxNzc2MzIsImp0aSI6IjFPVHVwQUF4RnJQU0pxaEJEbnZlOCJ9.M_JAZYn5sBJ_Z92LnLAh5iKObnfjwrLWstON6Wwks_0hUqHUYo2qNXiuDFeEiOOhaxR-EXTbDeZdp_c1frwq0w&EIO=3&transport=websocket&__t=OySrt5L
104.22.24.131
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-vendors.js
104.22.25.131
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-common.js
104.22.25.131
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-2c776523.js
104.22.25.131
https://td.doubleclick.net
unknown
https://logincdn.msftauth.net/16.000/content/js/MeControl_5BiUVwve_jNbxMN6Aaj8bg2.js
192.229.211.199
https://embed.tawk.to/_s/v4/assets/images/attention-grabbers/62-r-br.svg
104.22.25.131
https://www.merchant-center-analytics.goog
unknown
https://stats.g.doubleclick.net/g/collect?v=2&
unknown
https://www.xbox.com/
unknown
https://www.tawk.to/?utm_source=tawk-messenger&utm_medium=link&utm_campaign=referral&utm_term=57319e
unknown
http://schema.org/Organization
unknown
https://embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-48f3b594.js
104.22.25.131
https://embed.tawk.to/_s/v4/app/6625f366c87/css/message-preview.css
104.22.25.131
There are 62 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
jsdelivr.map.fastly.net
151.101.1.229
cs1100.wpc.omegacdn.net
152.199.4.44
edgecdn.dev
172.67.193.253
fp2e7a.wpc.phicdn.net
192.229.211.108
embed.tawk.to
104.22.25.131
va.tawk.to
172.67.38.66
userstatics.com
104.21.53.38
vsa33.tawk.to
104.22.24.131
vsa102.tawk.to
104.22.24.131
wdc.rdtk.io
207.244.126.81
www.google.com
142.251.41.4
cs1227.wpc.alphacdn.net
192.229.211.199
part-0012.t-0009.t-msedge.net
13.107.213.40
vsa68.tawk.to
104.22.24.131
js.monitor.azure.com
unknown
cdn.jsdelivr.net
unknown
aadcdn.msftauth.net
unknown
logincdn.msftauth.net
unknown
assets.onestore.ms
unknown
ajax.aspnetcdn.com
unknown
mem.gfx.ms
unknown
m03lm.rdtk.io
unknown
c.s-microsoft.com
unknown
support.content.office.net
unknown
login.microsoftonline.com
unknown
There are 15 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
13.107.246.40
unknown
United States
104.22.25.131
embed.tawk.to
United States
192.168.2.4
unknown
unknown
207.244.126.81
wdc.rdtk.io
United States
13.107.213.40
part-0012.t-0009.t-msedge.net
United States
104.22.24.131
vsa33.tawk.to
United States
151.101.1.229
jsdelivr.map.fastly.net
United States
172.67.193.253
edgecdn.dev
United States
192.229.211.199
cs1227.wpc.alphacdn.net
United States
239.255.255.250
unknown
Reserved
104.21.53.38
userstatics.com
United States
172.67.38.66
va.tawk.to
United States
142.251.41.4
www.google.com
United States
There are 3 hidden IPs, click here to show them.

DOM / HTML

URL
Malicious
https://friwin2.z13.web.core.windows.net/
malicious
https://friwin2.z13.web.core.windows.net/
malicious
https://friwin2.z13.web.core.windows.net/
malicious
https://friwin2.z13.web.core.windows.net/
malicious
https://support.microsoft.com/en-us/windows
https://support.microsoft.com/en-us/windows
https://support.microsoft.com/en-us/windows
https://support.microsoft.com/en-us/windows
https://login.live.com/Me.htm?v=3
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638497725968325322.ZTNjZTFmNmYtMTYyNC00MmE3LTlhNWUtYjIxNDQ5YWJjOWIxNzg0MzFjMjYtZmZmYy00NGU5LTlhYTctY2EwZGJhZjYxMjkx&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJoFUMMZCX0I7bB9xWOT3ocoYWiAapBhWjYCzYCOyPqEBHTmx1wGruM1D8b0RKJ0BwMW6H5gl3nrL8VEqcodZRXvuMI2Hxbb2s66bGoLoYnVU6G8RhPwh854UeMjdVWqVCY1ZZX1uBngcbnq9b6GXlJEKb-J0zygBl-X7Io6JCltcN_n3XFre6cpSmFoO1Yd7Y-iUaKW6ux5EAmS0-UbvLkRtp7zDTB08X1aCaSU6agb6hWWec2NgO0wR0erY3CnyeWcBdkVHgAHhDD0gsPLV3Kh35rE-usozKyVNu2UNVg_ZmKStHAlIdZPcLl3LR06RHjLob5YwnS0_S2EkbWgMuBl&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0&sso_reload=true
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638497725968325322.ZTNjZTFmNmYtMTYyNC00MmE3LTlhNWUtYjIxNDQ5YWJjOWIxNzg0MzFjMjYtZmZmYy00NGU5LTlhYTctY2EwZGJhZjYxMjkx&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJoFUMMZCX0I7bB9xWOT3ocoYWiAapBhWjYCzYCOyPqEBHTmx1wGruM1D8b0RKJ0BwMW6H5gl3nrL8VEqcodZRXvuMI2Hxbb2s66bGoLoYnVU6G8RhPwh854UeMjdVWqVCY1ZZX1uBngcbnq9b6GXlJEKb-J0zygBl-X7Io6JCltcN_n3XFre6cpSmFoO1Yd7Y-iUaKW6ux5EAmS0-UbvLkRtp7zDTB08X1aCaSU6agb6hWWec2NgO0wR0erY3CnyeWcBdkVHgAHhDD0gsPLV3Kh35rE-usozKyVNu2UNVg_ZmKStHAlIdZPcLl3LR06RHjLob5YwnS0_S2EkbWgMuBl&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0&sso_reload=true
https://login.microsoftonline.com/savedusers?appid=ee272b19-4411-433f-8f28-5c13cb6fd407&wreply=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&uaid=745ba5e7-ce0d-43bd-3b23-40eabc1d3f15&partnerId=smcconvergence&idpflag=proxy
about:blank
about:blank
about:blank
about:blank
about:blank
https://www.microsoft.com/
There are 8 hidden doms, click here to show them.