Windows Analysis Report
http://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?

General Information

Sample URL: http://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?
Analysis ID: 1711282
Infos:

Detection

Score: 0
Range: 0 - 100
Confidence: 80%

Signatures

No high impact signatures.

Classification

There are no high impact signatures.

Source: unknown HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.7:49737 version: TLS 1.2
Source: chrome.exe Memory has grown: Private usage: 6MB later: 48MB
Source: unknown TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.72.99
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.72.99
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.72.99
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.72.99
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: global traffic HTTP traffic detected: GET /workspace/bk3hvlunuo62wlgcjole?origin=share? HTTP/1.1host: app.eraser.ioupgrade-insecure-requests: 1user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-fetch-site: nonesec-fetch-mode: navigatesec-fetch-user: ?1sec-fetch-dest: documentaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0, i
Source: global traffic HTTP traffic detected: GET /_next/static/fonts/nimbus-sans.css HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,*/*;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0
Source: global traffic HTTP traffic detected: GET /_next/static/fonts/virgil-v2.css HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,*/*;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0
Source: global traffic HTTP traffic detected: GET /_next/static/fonts/national-2-font.css HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,*/*;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0
Source: global traffic HTTP traffic detected: GET /_next/static/fonts/jetbrains-font.css HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,*/*;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0
Source: global traffic HTTP traffic detected: GET /_next/static/fonts/inter.css HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,*/*;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0
Source: global traffic HTTP traffic detected: GET /_next/static/fonts/NimbusSanL-Reg.woff2 HTTP/1.1host: app.eraser.ioorigin: https://app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: fontreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic HTTP traffic detected: GET /_next/static/fonts/JetBrainsMono-Regular.woff2 HTTP/1.1host: app.eraser.ioorigin: https://app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: fontreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic HTTP traffic detected: GET /_next/static/fonts/virgil-v2.woff2 HTTP/1.1host: app.eraser.ioorigin: https://app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: fontreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic HTTP traffic detected: GET /_next/static/fonts/NimbusSanLFerrule-Reg.woff2 HTTP/1.1host: app.eraser.ioorigin: https://app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: fontreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic HTTP traffic detected: GET /_next/static/css/9d336443a8f0e5b4.css HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,*/*;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0
Source: global traffic HTTP traffic detected: GET /_next/static/fonts/national-2-condensed-bold.woff2 HTTP/1.1host: app.eraser.ioorigin: https://app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: fontreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic HTTP traffic detected: GET /_next/static/css/e64b0ae1a46a6efc.css HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,*/*;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0
Source: global traffic HTTP traffic detected: GET /_next/static/uPUuCcIJgnJYhM5TRgVUn/_buildManifest.js HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/pages/workspace/%5BworkspaceId%5D-99971a3a5871f064.js HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/uPUuCcIJgnJYhM5TRgVUn/_ssgManifest.js HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/fonts/Inter.var.woff2 HTTP/1.1host: app.eraser.ioorigin: https://app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: fontreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/main-7f3eda944b2e127f.js HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/pages/_app-71be2f4c53eb056b.js HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/7804.0fc9efccf78263f4.js HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/4581.4d1c955a4442ec19.js HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/4526.6929ef61fbb84f35.js HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /api/optimizely/datafile HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: emptyreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/8546.2721f13e58fa16a0.js HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjoleaccept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/2498.7f0caaf74a931889.js HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjoleaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: __session={%22eraserTheme%22:%22system%22}
Source: global traffic HTTP traffic detected: GET /.ws?v=5 HTTP/1.1Host: second-petal-295822-default-rtdb.firebaseio.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://app.eraser.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: +8F4w2KLceTCl4QMbkz6qw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic HTTP traffic detected: GET /_next/static/chunks/6851.153c297dc5f790b7.js HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjoleaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: __session={%22eraserTheme%22:%22system%22}cookie: amp_f168e1=_qTmtIIT7nLhM1tpP_DIuB...1itdcg6ub.1itdcg6uc.1.0.1
Source: global traffic HTTP traffic detected: GET /favicon.svg HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjoleaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: __session={%22eraserTheme%22:%22system%22}cookie: amp_f168e1=_qTmtIIT7nLhM1tpP_DIuB...1itdcg6ub.1itdcg6uc.1.0.1priority: u=1, i
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjoleaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: __session={%22eraserTheme%22:%22system%22}cookie: amp_f168e1=_qTmtIIT7nLhM1tpP_DIuB...1itdcg6ub.1itdcg6uc.1.0.1priority: u=1, i
Source: global traffic HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: manifestreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjoleaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=2
Source: global traffic HTTP traffic detected: GET /widget/fqp3uy63 HTTP/1.1host: widget.intercom.iosec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://app.eraser.io/accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1host: app.eraser.iouser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: */*sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: __session={%22eraserTheme%22:%22system%22}cookie: amp_f168e1=_qTmtIIT7nLhM1tpP_DIuB...1itdcg6ub.1itdcg6uc.1.0.1priority: u=1, i
Source: global traffic HTTP traffic detected: GET /favicon.svg HTTP/1.1host: app.eraser.iouser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: */*sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: __session={%22eraserTheme%22:%22system%22}cookie: amp_f168e1=_qTmtIIT7nLhM1tpP_DIuB...1itdcg6ub.1itdcg6uc.1.0.1priority: u=1, i
Source: global traffic HTTP traffic detected: GET /api/workspace/bk3hvlunuo62wlgcjole/notes HTTP/1.1host: app.eraser.iosec-ch-ua-platform: "Windows"authorization: Bearer eyJhbGciOiJSUzI1NiIsImtpZCI6ImE0YTEwZGVjZTk4MzY2ZDZmNjNlMTY3Mjg2YWU5YjYxMWQyYmFhMjciLCJ0eXAiOiJKV1QifQ.eyJwcm92aWRlcl9pZCI6ImFub255bW91cyIsImlzcyI6Imh0dHBzOi8vc2VjdXJldG9rZW4uZ29vZ2xlLmNvbS9zZWNvbmQtcGV0YWwtMjk1ODIyIiwiYXVkIjoic2Vjb25kLXBldGFsLTI5NTgyMiIsImF1dGhfdGltZSI6MTc0OTU3NDc1NSwidXNlcl9pZCI6InVxaldSRTNHU1NXSVQ1UVdOWHNLUnVUMm44QjMiLCJzdWIiOiJ1cWpXUkUzR1NTV0lUNVFXTlhzS1J1VDJuOEIzIiwiaWF0IjoxNzQ5NTc0NzU1LCJleHAiOjE3NDk1NzgzNTUsImZpcmViYXNlIjp7ImlkZW50aXRpZXMiOnt9LCJzaWduX2luX3Byb3ZpZGVyIjoiYW5vbnltb3VzIn19.la0iW2lzI5W7wbEZpwq2GGzFcn_DctyUyj_SuiNo1HY79a0XcjC9mGu0oPl-4jZmmoegu-G_NgLoTNlvfiI1D3ZuxD6-sTwAG_ZYGUiMRNJM5VYQbbA3dkkuDfALmm_tykyPj-Nk661HglRCkXV2HZ1PSATE-cLGgVz6kEWJHthsX2SsPiuLvJcrXso0MsKHEZiduowIYrKCS8QFt_Egx0_rvm_5GrqLS4iQNZsrqRRQNmwZdGUmVZcgNRPq7xjMi2VUe1PsF9ty-yvgxT3gRA-IrbjVGCzNNgeHe1urDCgglU0BnW-5y5LuWZfW3Lksgg3INknfYRI4JUWI0oRVHwuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"content-type: application/json; charset=UTF-8sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: emptyreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjoleaccept-encoding: identityaccept-language: en-U
Source: global traffic HTTP traffic detected: GET /api/optimizely/datafile HTTP/1.1host: app.eraser.iouser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: */*sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: __session={%22eraserTheme%22:%22system%22}cookie: amp_f168e1=_qTmtIIT7nLhM1tpP_DIuB...1itdcg6ub.1itdcg6uc.1.0.1priority: u=1, i
Source: global traffic HTTP traffic detected: GET /api/report/amped HTTP/1.1host: app.eraser.iouser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: */*sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: __session={%22eraserTheme%22:%22system%22}cookie: amp_f168e1=_qTmtIIT7nLhM1tpP_DIuB...1itdcg6ub.1itdcg6uc.1.0.1priority: u=1, i
Source: global traffic HTTP traffic detected: GET /vendor-modern.353a08a0.js HTTP/1.1host: js.intercomcdn.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /frame-modern.812e80a5.js HTTP/1.1host: js.intercomcdn.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: */*sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /user-createAnonymousToken HTTP/1.1host: us-central1-second-petal-295822.cloudfunctions.netuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: */*sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic HTTP traffic detected: GET /api/report/amped HTTP/1.1host: app.eraser.iouser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: */*sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: analyticsId=uqjWRE3GSSWIT5QWNXsKRuT2n8B3cookie: userSessionToken=eyJhbGciOiJSUzI1NiIsImtpZCI6ImE0YTEwZGVjZTk4MzY2ZDZmNjNlMTY3Mjg2YWU5YjYxMWQyYmFhMjciLCJ0eXAiOiJKV1QifQ.eyJwcm92aWRlcl9pZCI6ImFub255bW91cyIsImlzcyI6Imh0dHBzOi8vc2VjdXJldG9rZW4uZ29vZ2xlLmNvbS9zZWNvbmQtcGV0YWwtMjk1ODIyIiwiYXVkIjoic2Vjb25kLXBldGFsLTI5NTgyMiIsImF1dGhfdGltZSI6MTc0OTU3NDc1NSwidXNlcl9pZCI6InVxaldSRTNHU1NXSVQ1UVdOWHNLUnVUMm44QjMiLCJzdWIiOiJ1cWpXUkUzR1NTV0lUNVFXTlhzS1J1VDJuOEIzIiwiaWF0IjoxNzQ5NTc0NzU1LCJleHAiOjE3NDk1NzgzNTUsImZpcmViYXNlIjp7ImlkZW50aXRpZXMiOnt9LCJzaWduX2luX3Byb3ZpZGVyIjoiYW5vbnltb3VzIn19.la0iW2lzI5W7wbEZpwq2GGzFcn_DctyUyj_SuiNo1HY79a0XcjC9mGu0oPl-4jZmmoegu-G_NgLoTNlvfiI1D3ZuxD6-sTwAG_ZYGUiMRNJM5VYQbbA3dkkuDfALmm_tykyPj-Nk661HglRCkXV2HZ1PSATE-cLGgVz6kEWJHthsX2SsPiuLvJcrXso0MsKHEZiduowIYrKCS8QFt_Egx0_rvm_5GrqLS4iQNZsrqRRQNmwZdGUmVZcgNRPq7xjMi2VUe1PsF9ty-yvgxT3gRA-IrbjVGCzNNgeHe1urDCgglU0BnW-5y5LuWZfW3Lksgg3INknfYRI4JUWI0oRVHwcookie: __session={%22eraserTheme%22:%22light%22%2C%22userSessionToken%22:%22eyJhbGciOiJSUzI1NiIsImtpZCI6ImE0YTEwZGVjZTk4MzY2ZDZmNjNlMTY3Mjg2YWU5YjYxMWQyYmFhMjciLCJ0eXAiOiJK
Source: global traffic HTTP traffic detected: GET /messenger/web/launcher_settings HTTP/1.1host: api-iam.intercom.iouser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: */*sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic HTTP traffic detected: GET /messenger/web/ping HTTP/1.1host: api-iam.intercom.iouser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: */*sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic HTTP traffic detected: GET /pubsub/5-M2Q37P2RtcPov2JVKoX3ebDCs8MDJ9PQFEMLWhspSiTEqcD9jk8DE0_f11CjBLKfok0HVNQjGNl_Ldgv_hitn--7cyn5ZIlByPmi?X-Nexus-New-Client=true&X-Nexus-Version=0.14.0&user_role=visitor HTTP/1.1Host: nexus-websocket-a.intercom.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://app.eraser.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: Eg3w+TETQp5OjhGEWoL3Ug==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic HTTP traffic detected: GET /messenger/web/ping HTTP/1.1host: api-iam.intercom.iouser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: */*sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DH6Byfv5LD4FMMn&MD=8oFZYg5L HTTP/1.1host: slscr.update.microsoft.comaccept: */*user-agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33accept-encoding: identity
Source: global traffic HTTP traffic detected: GET /messenger/web/metrics HTTP/1.1host: api-iam.intercom.iouser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: */*sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DH6Byfv5LD4FMMn&MD=8oFZYg5L HTTP/1.1host: slscr.update.microsoft.comaccept: */*user-agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33accept-encoding: identity
Source: global traffic HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: */*If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: chromecache_88.1.dr String found in binary or memory: gp(b)||$m(a,b)},b)},Tu=function(){return[K.m.V,K.m.W]},Xu=/^gad_source[_=](\d+)$/;function bv(){return rp("dedupe_gclid",function(){return is()})};var cv=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,dv=/^www.googleadservices.com$/;function ev(a){a||(a=fv());return a.Gq?!1:a.Gp||a.Hp||a.Kp||a.Ip||a.Zf||a.qp||a.Jp||a.wp?!0:!1}function fv(){var a={},b=Ns(!0);a.Gq=!!b._up;var c=pu();a.Gp=c.aw!==void 0;a.Hp=c.dc!==void 0;a.Kp=c.wbraid!==void 0;a.Ip=c.gbraid!==void 0;a.Jp=c.gclsrc==="aw.ds";a.Zf=Ru().Zf;var d=y.referrer?uk(Ak(y.referrer),"host"):"";a.wp=cv.test(d);a.qp=dv.test(d);return a};function gv(a){var b=window,c=b.webkit;delete b.webkit;a(b.webkit);b.webkit=c}function hv(a){var b={action:"gcl_setup"};if("CWVWebViewMessage"in a.messageHandlers)return a.messageHandlers.CWVWebViewMessage.postMessage({command:"awb",payload:b}),!0;var c=a.messageHandlers.awb;return c?(c.postMessage(b),!0):!1};function iv(){return["ad_storage","ad_user_data"]}function jv(a){if(E(38)&&!Tn(On.aa.Dl)&&"webkit"in window&&window.webkit.messageHandlers){var b=function(){try{gv(function(c){c&&("CWVWebViewMessage"in c.messageHandlers||"awb"in c.messageHandlers)&&(Sn(On.aa.Dl,function(d){d.gclid&&vu(d.gclid,a)}),hv(c)||N(178))})}catch(c){N(177)}};Zm(function(){St(iv())?b():$m(b,iv())},iv())}};var kv=["https://www.google.com","https://www.youtube.com","https://m.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_88.1.dr String found in binary or memory: return f}UI.N="internal.enableAutoEventOnTimer";var dc=wa(["data-gtm-yt-inspected-"]),WI=["www.youtube.com","www.youtube-nocookie.com"],XI,YI=!1; equals www.youtube.com (Youtube)
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic DNS traffic detected: DNS query: app.eraser.io
Source: global traffic DNS traffic detected: DNS query: second-petal-295822-default-rtdb.firebaseio.com
Source: global traffic DNS traffic detected: DNS query: widget.intercom.io
Source: global traffic DNS traffic detected: DNS query: js.intercomcdn.com
Source: global traffic DNS traffic detected: DNS query: us-central1-second-petal-295822.cloudfunctions.net
Source: global traffic DNS traffic detected: DNS query: api-iam.intercom.io
Source: global traffic DNS traffic detected: DNS query: nexus-websocket-a.intercom.io
Source: global traffic DNS traffic detected: DNS query: e2c83.gcp.gvt2.com
Source: global traffic DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic DNS traffic detected: DNS query: beacons.gvt2.com
Source: unknown HTTP traffic detected: POST /api/report/amped HTTP/1.1host: app.eraser.iocontent-length: 1399sec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"content-type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0accept: */*origin: https://app.eraser.iosec-fetch-site: same-originsec-fetch-mode: corssec-fetch-dest: emptyreferer: https://app.eraser.io/workspace/bk3hvlunuo62wlgcjoleaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: __session={%22eraserTheme%22:%22system%22}cookie: amp_f168e1=_qTmtIIT7nLhM1tpP_DIuB...1itdcg6ub.1itdcg6uc.1.0.1priority: u=1, i
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: application/json; charset=utf-8etag: "bxk7yrrbye3f"vary: Accept-Encodingx-cloud-trace-context: d1646654653f89025efe0201d3610c63date: Tue, 10 Jun 2025 16:59:15 GMTserver: Google Frontendcontent-length: 123via: 1.1 googlex-content-type-options: nosniffreferrer-policy: strict-origin-when-cross-originpermissions-policy: camera=(), usb=(), geolocation=(), microphone=(), display-capture=()cache-control: no-cache, no-storestrict-transport-security: max-age=31536000; includeSubDomains; preloadcontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.firebaseio.com https://*.firebase.com https://*.algolia.net https://*.algolianet.com https://*.intercom.io https://*.intercomcdn.com https://*.googleapis.com https://apis.google.com https://www.googletagmanager.com https://connect-cdn.atl-paas.net; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'self' https://*.googleapis.com; connect-src 'self' https://*.cloudfunctions.net https://*.firebaseio.com wss://*.firebaseio.com https://*.firebase.com https://*.algolia.net https://*.algolianet.com https://*.intercom.io https://*.intercomcdn.com wss://*.intercom.io https://*.googleapis.com https://firebaselogging-pa.googleapis.com https://www.google-analytics.com https://github.com https://*.github.com https://gitlab.com
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: application/json; charset=utf-8etag: "bxk7yrrbye3f"vary: Accept-Encodingx-cloud-trace-context: 8514fe9620db49135efe0201d36104e9date: Tue, 10 Jun 2025 16:59:15 GMTserver: Google Frontendcontent-length: 123via: 1.1 googlex-content-type-options: nosniffreferrer-policy: strict-origin-when-cross-originpermissions-policy: camera=(), usb=(), geolocation=(), microphone=(), display-capture=()cache-control: no-cache, no-storestrict-transport-security: max-age=31536000; includeSubDomains; preloadcontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.firebaseio.com https://*.firebase.com https://*.algolia.net https://*.algolianet.com https://*.intercom.io https://*.intercomcdn.com https://*.googleapis.com https://apis.google.com https://www.googletagmanager.com https://connect-cdn.atl-paas.net; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'self' https://*.googleapis.com; connect-src 'self' https://*.cloudfunctions.net https://*.firebaseio.com wss://*.firebaseio.com https://*.firebase.com https://*.algolia.net https://*.algolianet.com https://*.intercom.io https://*.intercomcdn.com wss://*.intercom.io https://*.googleapis.com https://firebaselogging-pa.googleapis.com https://www.google-analytics.com https://github.com https://*.github.com https://gitlab.com
Source: chromecache_78.1.dr String found in binary or memory: http://jed.is/
Source: chromecache_78.1.dr String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_88.1.dr String found in binary or memory: https://ad.doubleclick.net/activity;
Source: chromecache_88.1.dr String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;
Source: chromecache_88.1.dr String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/
Source: chromecache_88.1.dr String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_88.1.dr String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_78.1.dr String found in binary or memory: https://eraser.io
Source: chromecache_78.1.dr String found in binary or memory: https://feross.org
Source: chromecache_78.1.dr String found in binary or memory: https://firebase.google.com/pricing/.
Source: chromecache_78.1.dr String found in binary or memory: https://firebaseinstallations.googleapis.com/v1/projects/
Source: chromecache_78.1.dr String found in binary or memory: https://firebaselogging.googleapis.com/v0cc/log?format=json_proto
Source: chromecache_120.1.dr String found in binary or memory: https://github.com/faisalman/ua-parser-js
Source: chromecache_78.1.dr String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_92.1.dr String found in binary or memory: https://github.com/primer/github-syntax-light
Source: chromecache_88.1.dr String found in binary or memory: https://google.com/ccm/form-data
Source: chromecache_88.1.dr String found in binary or memory: https://google.com/pagead/form-data
Source: chromecache_88.1.dr String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion
Source: chromecache_88.1.dr String found in binary or memory: https://m.youtube.com
Source: chromecache_88.1.dr String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_88.1.dr String found in binary or memory: https://pagead2.googlesyndication.com/ccm/collect
Source: chromecache_88.1.dr String found in binary or memory: https://pagead2.googlesyndication.com/ccm/conversion
Source: chromecache_88.1.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/conversion
Source: chromecache_88.1.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_92.1.dr String found in binary or memory: https://quilljs.com/
Source: chromecache_114.1.dr String found in binary or memory: https://second-petal-295822-default-rtdb.firebaseio.com
Source: chromecache_78.1.dr String found in binary or memory: https://securetoken.google.com/
Source: chromecache_88.1.dr String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_88.1.dr String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_93.1.dr String found in binary or memory: https://widget.intercom.io/widget/
Source: chromecache_88.1.dr String found in binary or memory: https://www.google.com
Source: chromecache_88.1.dr String found in binary or memory: https://www.google.com/ccm/collect
Source: chromecache_88.1.dr String found in binary or memory: https://www.google.com/ccm/conversion
Source: chromecache_88.1.dr String found in binary or memory: https://www.google.com/ccm/form-data
Source: chromecache_88.1.dr String found in binary or memory: https://www.google.com/pagead/1p-conversion
Source: chromecache_88.1.dr String found in binary or memory: https://www.google.com/pagead/form-data
Source: chromecache_88.1.dr String found in binary or memory: https://www.google.com/travel/flights/click/conversion
Source: chromecache_88.1.dr String found in binary or memory: https://www.googleadservices.com
Source: chromecache_88.1.dr String found in binary or memory: https://www.googleadservices.com/ccm/conversion
Source: chromecache_88.1.dr String found in binary or memory: https://www.googleadservices.com/pagead/conversion
Source: chromecache_88.1.dr String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_88.1.dr String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_78.1.dr String found in binary or memory: https://www.googletagmanager.com/gtag/js
Source: chromecache_88.1.dr String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_88.1.dr String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_88.1.dr String found in binary or memory: https://www.youtube.com
Source: unknown Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.7:49737 version: TLS 1.2
Source: classification engine Classification label: clean0.win@22/86@51/11
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1956,i,12885240125386627005,11813151431592858060,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2080 /prefetch:3
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://app.eraser.io/workspace/bk3hvlunuo62wlgcjole?origin=share?"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1956,i,12885240125386627005,11813151431592858060,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2080 /prefetch:3 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1711282 URL: http://app.eraser.io/worksp... Startdate: 10/06/2025 Architecture: WINDOWS Score: 0 14 e2c83.gcp.gvt2.com 2->14 16 beacons.gvt2.com 2->16 18 2 other IPs or domains 2->18 6 chrome.exe 2 2->6         started        9 chrome.exe 2->9         started        process3 dnsIp4 20 192.168.2.5 unknown unknown 6->20 22 192.168.2.7, 443, 49474, 49691 unknown unknown 6->22 11 chrome.exe 6->11         started        process5 dnsIp6 24 www.google.com 142.251.40.164, 443, 49691 GOOGLEUS United States 11->24 26 us-central1-second-petal-295822.cloudfunctions.net 216.239.36.54, 443, 49718, 49720 GOOGLEUS United States 11->26 28 11 other IPs or domains 11->28
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
54.198.3.158
 api-iam.intercom.io United States 14618 AMAZON-AESUS false
18.208.47.123
 unknown United States 14618 AMAZON-AESUS false
35.174.127.31
 nexus-websocket-a.intercom.io United States 14618 AMAZON-AESUS false
35.190.39.113
 second-petal-295822-default-rtdb.firebaseio.com United States 15169 GOOGLEUS false
13.249.91.16
 widget.intercom.io United States 16509 AMAZON-02US false
34.8.177.196
 app.eraser.io United States 2686 ATGS-MMD-ASUS false
142.251.40.164
 www.google.com United States 15169 GOOGLEUS false
108.139.47.21
 js.intercomcdn.com United States 16509 AMAZON-02US false
216.239.36.54
 us-central1-second-petal-295822.cloudfunctions.net United States 15169 GOOGLEUS false

Private

IP
192.168.2.7
192.168.2.5

Contacted Domains

Name IP Active
e2c83.gcp.gvt2.com 34.51.131.60 true
us-central1-second-petal-295822.cloudfunctions.net 216.239.36.54 true
widget.intercom.io 13.249.91.16 true
beacons-handoff.gcp.gvt2.com 142.250.75.163 true
second-petal-295822-default-rtdb.firebaseio.com 35.190.39.113 true
www.google.com 142.251.40.164 true
app.eraser.io 34.8.177.196 true
api-iam.intercom.io 54.198.3.158 true
nexus-websocket-a.intercom.io 35.174.127.31 true
beacons.gvt2.com 142.250.75.67 true
js.intercomcdn.com 108.139.47.21 true
beacons.gcp.gvt2.com unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
http://c.pki.goog/r/r4.crl false
    		high
    https://app.eraser.io/workspace/bk3hvlunuo62wlgcjole false
      		high
      https://second-petal-295822-default-rtdb.firebaseio.com/.ws?v=5 false
        		unknown
        https://nexus-websocket-a.intercom.io/pubsub/5-M2Q37P2RtcPov2JVKoX3ebDCs8MDJ9PQFEMLWhspSiTEqcD9jk8DE0_f11CjBLKfok0HVNQjGNl_Ldgv_hitn--7cyn5ZIlByPmi?X-Nexus-New-Client=true&X-Nexus-Version=0.14.0&user_role=visitor false
          		high