Windows Analysis Report
2450856955_.svg

Overview

General Information

Sample name: 2450856955_.svg
Analysis ID: 1640805
MD5: 2b477830945f5e4b4f90f18f2573da0e
SHA1: 00ea95a42750c08beb60b8680e6e1fa59ebce3ea
SHA256: 940bf0763253f6cce3af8b86975de803c139d0c6adc85908518c4c9a56f6ca01
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA
Score: 96
Range: 0 - 100
Confidence: 100%

Signatures

Yara detected AntiDebug via timestamp check
Yara detected HtmlPhish44
Yara detected HtmlPhish80
Yara detected Invisible JS
Yara detected Obfuscation Via HangulCharacter
Yara detected Tycoon 2FA PaaS
AI detected suspicious Javascript
Yara detected JavaScript embedded in SVG
Creates files inside the system directory
Deletes files inside the Windows folder
Detected non-DNS traffic on DNS port
HTML page contains hidden javascript code
IP address seen in connection with other malware

Classification

Phishing
barindex
Yara detected HtmlPhish44
Source: Yara match File source: dropped/chromecache_112, type: DROPPED
Yara detected HtmlPhish80
Source: Yara match File source: 2450856955_.svg, type: SAMPLE
Yara detected Invisible JS
Source: Yara match File source: 2.4.d.script.csv, type: HTML
Source: Yara match File source: 2.0.pages.csv, type: HTML
Source: Yara match File source: 2.1.pages.csv, type: HTML
Yara detected Obfuscation Via HangulCharacter
Source: Yara match File source: 2.4.d.script.csv, type: HTML
Source: Yara match File source: 2.0.pages.csv, type: HTML
Source: Yara match File source: 2.1.pages.csv, type: HTML
Yara detected Tycoon 2FA PaaS
Source: Yara match File source: 2.9..script.csv, type: HTML
Source: Yara match File source: 2.5.d.script.csv, type: HTML
Source: Yara match File source: 2.0.pages.csv, type: HTML
Source: Yara match File source: 2.1.pages.csv, type: HTML
AI detected suspicious Javascript
Source: 2.5.d.script.csv Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting browser automation tools, blocking keyboard shortcuts and right-click functionality, and redirecting the user to an external website. The combination of these behaviors suggests a highly suspicious and potentially malicious script.
Source: 0.1..script.csv Joe Sandbox AI: Detected suspicious JavaScript with source url: data:application/ecmascript;base64,dHJ5IHsKICAgIGZ... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The `duruwo` function appears to be decoding a heavily encoded string, which could be used to execute malicious code or redirect the user to a suspicious domain. Additionally, the script attempts to modify the DOM and change the window location, which could be part of a phishing or malware attack. Overall, the combination of these behaviors suggests a high-risk script that should be further investigated.
Source: 2.3..script.csv Joe Sandbox AI: Detected suspicious JavaScript with source url: https://my_ontinet_zoneid_matias_003386_2630_envir... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` and `decodeURIComponent()` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script appears to be sending data to an untrusted domain, which further increases the risk. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 2.4.d.script.csv Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk behaviors, including dynamic code execution through the use of `eval()` and potential data exfiltration. The obfuscated code and encoded strings further increase the risk. Overall, this script exhibits a high level of malicious intent and should be treated with caution.
Yara detected JavaScript embedded in SVG
Source: Yara match File source: 2450856955_.svg, type: SAMPLE
HTML page contains hidden javascript code
Source: https://my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ru/s23Rup/#3matias%40ontinet.com HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Graphic Card Web Template</title> <style> body { font-family: 'Montserrat', sa...
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1907635799\LICENSE.txt Jump to behavior
Source: unknown HTTPS traffic detected: 142.250.184.196:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.16.4.189:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.16.4.189:443 -> 192.168.2.4:49754 version: TLS 1.2
Detected non-DNS traffic on DNS port
Source: global traffic TCP traffic: 192.168.2.4:59878 -> 1.1.1.1:53
Source: global traffic TCP traffic: 192.168.2.4:61096 -> 1.1.1.1:53
IP address seen in connection with other malware
Source: Joe Sandbox View IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View IP Address: 104.21.80.1 104.21.80.1
Source: Joe Sandbox View IP Address: 104.21.80.1 104.21.80.1
Source: Joe Sandbox View IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View IP Address: 151.101.130.137 151.101.130.137
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown TCP traffic detected without corresponding DNS query: 216.58.206.35
Source: unknown TCP traffic detected without corresponding DNS query: 216.58.206.35
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.96.59
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic HTTP traffic detected: GET /1j62lrLoAbFxkaOYAHFkVclgVmjGAxtUjqTZn7UiXMsoPyS3SXJOlMBsSD7X1stjQpnwbxlhMWGpEDaWPMhHnrmybr4vBLYM7YQzbOurHmTOED6xgkvaGZrBFkM08MtxV2zHyJWPfKLrXtI8SQz6837ifCv9x5XeBTGXI4Jlu1ENngh3FXmI6LFMMWKNZsGAfRXNr9WY/PwUzLXL9eNHEzHfc6kDqvZ42JspRZWGJ6Rn6zyPqfYZ3JZUCi9vRUN0mjpCFN0kWqUiTdQ8J3W2FICDZv3SKTf3aaenUJzMwXNC6YQiEVz94Fl3gVXrTJZ1cDUSuPIyBStL90NOD5Oeds2sUdx5n7DENBHM0bxtjaU7MbH4E0KdL0QRI6vD5kSXtLLPkhLeVbCNvaaKo/matias@ontinet.com HTTP/1.1Host: jgsbfomp3t.moydovv.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /s23Rup/ HTTP/1.1Host: my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://jgsbfomp3t.moydovv.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /s23Rup/ HTTP/1.1Host: my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://jgsbfomp3t.moydovv.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxONWVTM2ZCeThlOUVCM3FKeEMzUmc9PSIsInZhbHVlIjoiVXE4RGZGTm8rUXFSam5mK0JFeVFsUStUYU1lM1hGa002RnhzcnZNYm5XZnpDS0ZoVkZJVmRhMVBHQm9GeGVhdHd2SkVqSC84S0gzT3RLWEtIOGdpRm5hekYxY3E4VlVtczFHVkc0QXFxU2FkM21nYXhnS1VCZ2wrNHhsSmJHanciLCJtYWMiOiIwZWE4NjQ1NmJhNjFlMjk1NWU2ZTk0YTZiZWFkY2RhMjZjMzgxZWM3OWIyMzIyZjZjNTRkYTA2ZmNhOTkwZTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZtVHd3K0xEaFErQWR6cnRld1hKYXc9PSIsInZhbHVlIjoiSStLYWs3QVFtdk1BU0JNR0NJbVpORXFFZmV5NUhxamF0NjM4N1NUVVhyUnZvelZtNC9sN0FWZmROTkgzUVlTWTg1T216czVEeWFraE00RU15RzIvZ2FlNyttWjVSaVhEUHBBRStKWmJmcnFoelVqVEJMSnZORUFWeXhQMEZLNGwiLCJtYWMiOiJmMGNjODZkZjhlMGVjNTAxZWU3YmM5OWMzM2RkYjgyOWNhNGIxN2Q5ZmY1ZDllZTVkNWJjYTEwMGVlNTEwZDU5IiwidGFnIjoiIn0%3D
Source: global traffic HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=SYdWBAOfp8vwyfff8HrC0bWQ_tzFPju8bVvZ54OG4dg-1742233820-1.0.1.1-RjowuA7Zy3kGqKlYjVD248pdgslc.UQF6KwZ0XUrFdLH5pmNCj0zUiSkSBtmQ85_yDh1pDYPiJreLwj5G_pN7ZuZsku0r7BY5Tq5WNmwjeA
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic DNS traffic detected: DNS query: jgsbfomp3t.moydovv.com
Source: global traffic DNS traffic detected: DNS query: my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ru
Source: global traffic DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic DNS traffic detected: DNS query: code.jquery.com
Source: global traffic DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic DNS traffic detected: DNS query: developers.cloudflare.com
Source: unknown HTTP traffic detected: POST /report/v4?s=OQ450PiB7IOUNZUtJA8bYCXu2%2B06W8g6r3hwRNvDeiKjrUpJaHm31Uxm1RCOq2UZ8Zjry4uVz8h8AbUROJkobMCLd9fftNfrFgNd73pfG808RVc%2F6%2F3R8zSJDMJo HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 519Content-Type: application/reports+jsonOrigin: https://my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ruUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://2k.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://33across.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://360yield.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://3lift.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://a-mo.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://acxiom.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://ad-score.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://ad-stir.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://ad.gt
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://adentifi.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://adform.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://adingo.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://admatrix.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://admission.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://admixer.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://adnami.io
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://adnxs.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://adroll.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://adsafeprotected.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://adscale.de
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://adsmeasurement.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://adsrvr.org
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://adswizz.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://adthrive.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://adtrafficquality.google
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://advividnetwork.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://aggregation-service-site-dot-clz200258-datateam-italy.ew.r.appspot.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://akpytela.cz
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://alketech.eu
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://amazon-adsystem.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://aniview.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://anonymised.io
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://apex-football.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://aphub.ai
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://appconsent.io
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://appier.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://appsflyer.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://appsflyersdk.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://aqfer.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://atirun.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://atomex.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://audience360.com.au
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://audienceproject.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://authorizedvault.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://avads.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://ayads.io
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://azubiyo.de
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://beaconmax.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://bidswitch.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://bidtheatre.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://blendee.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://bluems.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://boost-web.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://bounceexchange.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://bypass.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://casalemedia.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://cazamba.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://cdn-net.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://clickonometrics.pl
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://connatix.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://connected-stories.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://convertunits.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://coupang.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://cpx.to
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://crcldu.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://creative-serving.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://creativecdn.com
Source: LICENSE.txt.0.dr String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.0.dr String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://criteo.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://ctnsnet.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://d-edgeconnect.media
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://dabbs.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://dailymail.co.uk
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://dailymotion.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://daum.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://deepintent.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://demand.supply
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://display.io
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://disqus.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://docomo.ne.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://dotdashmeredith.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://dotomi.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://doubleclick.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://doubleverify.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://dreammail.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://dynalyst.jp
Source: LICENSE.txt.0.dr String found in binary or memory: https://easylist.to/)
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://ebayadservices.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://ebis.ne.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://edkt.io
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://elle.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://elnacional.cat
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://eloan.co.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://euleriancdn.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://explorefledge.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://ezoic.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://fanbyte.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://fandom.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://finn.no
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://flashtalking.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://fout.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://fwmrm.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://gama.globo
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://get3rdspace.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://getcapi.co
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://getyourguide.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://ghtinc.com
Source: LICENSE.txt.0.dr String found in binary or memory: https://github.com/easylist)
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://globo.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://gmossp-sp.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://gokwik.co
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://google-analytics.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://googleadservices.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://googlesyndication.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://grxchange.gr
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://gsspat.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://gumgum.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://gunosy.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://halcy.de
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://html-load.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://i-mobile.co.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://im-apps.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://impact-ad.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://indexww.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://ingereck.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://inmobi.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://innovid.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://iobeya.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://jivox.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://jkforum.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://kargo.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://kidoz.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://kompaspublishing.nl
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://ladsp.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://linkedin.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://logly.co.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://lucead.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://lwadm.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://mail.ru
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://media.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://media6degrees.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://mediaintelligence.de
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://mediamath.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://mediavine.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://metro.co.uk
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://microad.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://momento.dev
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://moshimo.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://naver.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://nexxen.tech
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://nhnace.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://nodals.io
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://onet.pl
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://onetag-sys.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://open-bid.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://openx.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://optable.co
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://outbrain.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://paa-reporting-advertising.amazon
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://payment.goog
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://permutive.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://pinterest.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://postrelease.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://presage.io
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://primecaster.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandbox-demos-ad-server.dev
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandbox-demos-dsp-a.dev
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandbox-demos-dsp-b.dev
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandbox-demos-dsp-x.dev
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandbox-demos-dsp-y.dev
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandbox-demos-dsp.dev
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandbox-demos-ssp-a.dev
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandbox-demos-ssp-b.dev
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandbox-demos-ssp-x.dev
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandbox-demos-ssp-y.dev
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandbox-demos-ssp.dev
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandbox-test.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandcastle-dev-ad-server.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandcastle-dev-dsp-a1.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandcastle-dev-dsp-b1.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandcastle-dev-dsp-x.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandcastle-dev-dsp-y.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandcastle-dev-dsp.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandcastle-dev-ssp-a.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandcastle-dev-ssp-b.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandcastle-dev-ssp-x.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandcastle-dev-ssp-y.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://privacy-sandcastle-dev-ssp.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://ptb-msmt-static-5jyy5ulagq-uc.a.run.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://pub.network
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://pubmatic.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://pubtm.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://quantserve.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://quora.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://r2b2.io
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://relevant-digital.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://retargetly.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://rubiconproject.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://samplicio.us
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://sascdn.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://seedtag.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://semafor.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://sephora.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://shared-storage-demo-content-producer.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://shared-storage-demo-publisher-a.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://shared-storage-demo-publisher-b.web.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://shinobi.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://shinystat.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://simeola.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://singular.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://sitescout.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://smadexprivacysandbox.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://snapchat.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://socdm.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://sportradarserving.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://stackadapt.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://storygize.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://superfine.org
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://t13.io
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://taboola.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://tailtarget.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://tamedia.com.tw
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://tangooserver.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://teads.tv
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://theryn.io
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://tiktok.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://tncid.app
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://toponad.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://torneos.gg
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://tpmark.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://tribalfusion.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://trip.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://triptease.io
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://trkkn.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://tya-dev.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://uinterbox.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://undertone.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://unrulymedia.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://uol.com.br
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://usemax.de
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://validate.audio
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://verve.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://vg.no
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://vidazoo.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://vpadn.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://washingtonpost.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://weborama-tech.ru
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://weborama.fr
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://wepowerconnections.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://worldhistory.org
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://wp.pl
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://yahoo.co.jp
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://yahoo.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://yelp.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://yieldlab.net
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://yieldmo.com
Source: privacy-sandbox-attestations.dat.0.dr String found in binary or memory: https://youronlinechoices.eu
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 59887
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 59887 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 61099 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 61099
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown HTTPS traffic detected: 142.250.184.196:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.16.4.189:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.16.4.189:443 -> 192.168.2.4:49754 version: TLS 1.2
Creates files inside the system directory
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\scoped_dir7908_1332870359 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1240182271 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1240182271\privacy-sandbox-attestations.dat Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1240182271\manifest.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1240182271\_metadata\ Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1240182271\_metadata\verified_contents.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1240182271\manifest.fingerprint Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\scoped_dir7908_1584524789 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1907635799 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1907635799\LICENSE.txt Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1907635799\Filtering Rules Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1907635799\manifest.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1907635799\_metadata\ Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1907635799\_metadata\verified_contents.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1907635799\manifest.fingerprint Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\scoped_dir7908_1549853901 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_871971482 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_871971482\history_search_strings_farmhashed.binarypb Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_871971482\manifest.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_871971482\_metadata\ Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_871971482\_metadata\verified_contents.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_871971482\manifest.fingerprint Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\scoped_dir7908_1026112281 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_954579125 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_954579125\keys.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_954579125\manifest.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_954579125\LICENSE Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_954579125\_metadata\ Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_954579125\_metadata\verified_contents.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_954579125\manifest.fingerprint Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\scoped_dir7908_154108385 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1343124906 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1343124906\ssl_error_assistant.pb Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1343124906\manifest.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1343124906\_metadata\ Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1343124906\_metadata\verified_contents.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1343124906\manifest.fingerprint Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\scoped_dir7908_193147266 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_988393040 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_988393040\crl-set Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_988393040\manifest.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_988393040\LICENSE Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_988393040\_metadata\ Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_988393040\_metadata\verified_contents.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_988393040\manifest.fingerprint Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\scoped_dir7908_393353710 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1746420661 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1746420661\download_file_types.pb Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1746420661\manifest.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1746420661\_metadata\ Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1746420661\_metadata\verified_contents.json Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1746420661\manifest.fingerprint Jump to behavior
Deletes files inside the Windows folder
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File deleted: C:\Windows\SystemTemp\scoped_dir7908_1332870359 Jump to behavior
Source: classification engine Classification label: mal96.phis.evad.winSVG@33/45@20/13
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,12485301464721545060,17313609642391752455,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2136 /prefetch:3
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\2450856955_.svg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,12485301464721545060,17313609642391752455,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2136 /prefetch:3 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping7908_1907635799\LICENSE.txt Jump to behavior

Malware Analysis System Evasion
barindex
Yara detected AntiDebug via timestamp check
Source: Yara match File source: 2.5.d.script.csv, type: HTML
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1640805 Sample: 2450856955_.svg Startdate: 17/03/2025 Architecture: WINDOWS Score: 96 26 Yara detected AntiDebug via timestamp check 2->26 28 Yara detected HtmlPhish80 2->28 30 Yara detected Tycoon 2FA PaaS 2->30 32 5 other signatures 2->32 6 chrome.exe 60 2->6         started        9 chrome.exe 2->9         started        process3 dnsIp4 14 192.168.2.16 unknown unknown 6->14 16 192.168.2.4, 138, 443, 49186 unknown unknown 6->16 18 2 other IPs or domains 6->18 11 chrome.exe 6->11         started        process5 dnsIp6 20 www.google.com 142.250.184.196, 443, 49730, 59887 GOOGLEUS United States 11->20 22 a.nel.cloudflare.com 35.190.80.1, 443, 49744, 49746 GOOGLEUS United States 11->22 24 7 other IPs or domains 11->24
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
142.250.184.196
 www.google.com United States
15169 GOOGLEUS false
104.18.94.41
 challenges.cloudflare.com United States
13335 CLOUDFLARENETUS false
104.21.80.1
 jgsbfomp3t.moydovv.com United States
13335 CLOUDFLARENETUS false
151.101.130.137
 code.jquery.com United States
54113 FASTLYUS false
188.114.97.3
 my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ru European Union
13335 CLOUDFLARENETUS false
104.21.96.1
 unknown United States
13335 CLOUDFLARENETUS false
35.190.80.1
 a.nel.cloudflare.com United States
15169 GOOGLEUS false
104.16.4.189
 developers.cloudflare.com United States
13335 CLOUDFLARENETUS false
104.17.25.14
 cdnjs.cloudflare.com United States
13335 CLOUDFLARENETUS false

Private

IP
192.168.2.16
192.168.2.7
192.168.2.4
192.168.2.5

Contacted Domains

Name IP Active
my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ru 188.114.97.3 true
a.nel.cloudflare.com 35.190.80.1 true
code.jquery.com 151.101.130.137 true
developers.cloudflare.com 104.16.4.189 true
cdnjs.cloudflare.com 104.17.25.14 true
challenges.cloudflare.com 104.18.94.41 true
www.google.com 142.250.184.196 true
jgsbfomp3t.moydovv.com 104.21.80.1 true

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ru/s23Rup/ false
  • Avira URL Cloud: safe
 unknown
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js false
    		high
    https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js false
      		high
      https://my_ontinet_zoneid_matias_003386_2630_environmental_tech-stack_.kvtwzs.ru/s23Rup/#3matias%40ontinet.com false
        		unknown