Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

URLScan

urlscan

1

http://findnewdate4r...

android-9-x86

1

http://findnewdate4r...

android-10-x64

1

http://findnewdate4r...

android-11-x64

1

Resubmissions

26/12/2023, 03:06 UTC

231226-dl1s6aead3 1

Analysis

  • max time kernel
    2753093s
  • max time network
    150s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    26/12/2023, 03:06 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    http://findnewdate4reschedulingca.info

Score
1/10

Malware Config

Signatures

Processes

  • com.android.chrome
    1⤵
      PID:4170

    Network

    • flag-us
      DNS
      findnewdate4reschedulingca.info
      Remote address:
      1.1.1.1:53
      Request
      findnewdate4reschedulingca.info
      IN A
      Response
      findnewdate4reschedulingca.info
      IN A
      84.32.248.46
    • flag-lt
      GET
      http://findnewdate4reschedulingca.info/
      Remote address:
      84.32.248.46:80
      Request
      GET / HTTP/1.1
      Host: findnewdate4reschedulingca.info
      Connection: keep-alive
      Upgrade-Insecure-Requests: 1
      User-Agent: Mozilla/5.0 (Linux; Android 9; AOSP on IA Emulator Build/PSR1.180720.122) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36
      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
      Accept-Encoding: gzip, deflate
      Accept-Language: en-US,en;q=0.9
      Response
      HTTP/1.1 301 Moved Permanently
      Date: Tue, 26 Dec 2023 03:07:02 GMT
      Server: Apache/2.4.58 (Ubuntu)
      Location: https://findnewdate4reschedulingca.info/
      Content-Length: 345
      Keep-Alive: timeout=5, max=100
      Connection: Keep-Alive
      Content-Type: text/html; charset=iso-8859-1
    • flag-us
      DNS
      safebrowsing.googleapis.com
      Remote address:
      1.1.1.1:53
      Request
      safebrowsing.googleapis.com
      IN A
      Response
      safebrowsing.googleapis.com
      IN A
      142.250.200.42
    • flag-us
      DNS
      href.li
      Remote address:
      1.1.1.1:53
      Request
      href.li
      IN A
      Response
      href.li
      IN A
      192.0.78.26
      href.li
      IN A
      192.0.78.27
    • flag-us
      DNS
      www.canadapost-postescanada.ca
      Remote address:
      1.1.1.1:53
      Request
      www.canadapost-postescanada.ca
      IN A
      Response
      www.canadapost-postescanada.ca
      IN CNAME
      www.canadapost-postescanada.ca.edgekey.net
      www.canadapost-postescanada.ca.edgekey.net
      IN CNAME
      e7621.dscb.akamaiedge.net
      e7621.dscb.akamaiedge.net
      IN A
      104.82.195.246
    • flag-us
      DNS
      assets.adobedtm.com
      Remote address:
      1.1.1.1:53
      Request
      assets.adobedtm.com
      IN A
      Response
      assets.adobedtm.com
      IN CNAME
      cn-assets.adobedtm.com.edgekey.net
      cn-assets.adobedtm.com.edgekey.net
      IN CNAME
      e7808.dscg.akamaiedge.net
      e7808.dscg.akamaiedge.net
      IN A
      104.115.33.21
    • flag-us
      DNS
      www.google.com
      Remote address:
      1.1.1.1:53
      Request
      www.google.com
      IN A
    • flag-us
      DNS
      www.google.com
      Remote address:
      1.1.1.1:53
      Request
      www.google.com
      IN A
      Response
      www.google.com
      IN A
      172.217.16.228
    • flag-us
      DNS
      update.googleapis.com
      Remote address:
      1.1.1.1:53
      Request
      update.googleapis.com
      IN A
      Response
      update.googleapis.com
      IN A
      216.58.213.3
    • flag-us
      DNS
      update.googleapis.com
      Remote address:
      1.1.1.1:53
      Request
      update.googleapis.com
      IN A
    • flag-us
      DNS
      tdyvijbq
      Remote address:
      1.1.1.1:53
      Request
      tdyvijbq
      IN A
      Response
    • flag-us
      DNS
      htsenxvobhfim
      Remote address:
      1.1.1.1:53
      Request
      htsenxvobhfim
      IN A
      Response
    • flag-us
      DNS
      azmnqcyjivpjg
      Remote address:
      1.1.1.1:53
      Request
      azmnqcyjivpjg
      IN A
      Response
    • flag-gb
      POST
      https://update.googleapis.com/service/update2
      Remote address:
      216.58.213.3:443
      Request
      POST /service/update2 HTTP/1.1
      Content-Length: 660
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Dalvik/2.1.0 (Linux; U; Android 9; Pixel 2 Build/PSR1.180720.122)
      Host: update.googleapis.com
      Connection: Keep-Alive
      Accept-Encoding: gzip
      Response
      HTTP/1.1 200 OK
      Content-Security-Policy: script-src 'report-sample' 'nonce-zJ_j9zx89PMGxtjTpw6-OQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Tue, 26 Dec 2023 03:07:12 GMT
      Content-Type: text/xml; charset=UTF-8
      X-Daynum: 6202
      X-Daystart: 68832
      Content-Encoding: gzip
      X-Content-Type-Options: nosniff
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      Transfer-Encoding: chunked
    • flag-gb
      POST
      https://update.googleapis.com/service/update2
      Remote address:
      216.58.213.3:443
      Request
      POST /service/update2 HTTP/1.1
      Content-Length: 654
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Dalvik/2.1.0 (Linux; U; Android 9; Pixel 2 Build/PSR1.180720.122)
      Host: update.googleapis.com
      Connection: Keep-Alive
      Accept-Encoding: gzip
      Response
      HTTP/1.1 200 OK
      Content-Security-Policy: script-src 'report-sample' 'nonce-k8PiM5N4n-pjRz3F38gWjQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Tue, 26 Dec 2023 03:07:12 GMT
      Content-Type: text/xml; charset=UTF-8
      X-Daynum: 6202
      X-Daystart: 68832
      Content-Encoding: gzip
      X-Content-Type-Options: nosniff
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      Transfer-Encoding: chunked
    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
      Response
      android.apis.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      172.217.16.238
    • flag-us
      DNS
      cdn.cookielaw.org
      Remote address:
      1.1.1.1:53
      Request
      cdn.cookielaw.org
      IN A
      Response
      cdn.cookielaw.org
      IN A
      104.18.130.236
      cdn.cookielaw.org
      IN A
      104.18.131.236
    • flag-us
      DNS
      dpm.demdex.net
      Remote address:
      1.1.1.1:53
      Request
      dpm.demdex.net
      IN A
      Response
      dpm.demdex.net
      IN CNAME
      gslb-2.demdex.net
      gslb-2.demdex.net
      IN CNAME
      edge-irl1.demdex.net
      edge-irl1.demdex.net
      IN CNAME
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      52.210.118.155
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      52.215.118.143
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      52.31.177.145
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      99.80.102.181
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      52.17.48.145
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      52.49.2.43
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      54.194.146.163
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      54.171.3.160
    • flag-us
      DNS
      canadapost.demdex.net
      Remote address:
      1.1.1.1:53
      Request
      canadapost.demdex.net
      IN A
      Response
      canadapost.demdex.net
      IN CNAME
      gslb-2.demdex.net
      gslb-2.demdex.net
      IN CNAME
      edge-irl1.demdex.net
      edge-irl1.demdex.net
      IN CNAME
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      54.247.25.231
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      54.73.144.235
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      52.215.118.143
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      52.49.2.43
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      99.80.102.181
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      52.30.205.242
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      34.243.60.84
      dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
      IN A
      3.248.85.196
    • flag-us
      DNS
      sslstats.canadapost.ca
      Remote address:
      1.1.1.1:53
      Request
      sslstats.canadapost.ca
      IN A
      Response
      sslstats.canadapost.ca
      IN CNAME
      canadapost.ca.ssl.d1.sc.omtrdc.net
      canadapost.ca.ssl.d1.sc.omtrdc.net
      IN A
      66.235.152.113
      canadapost.ca.ssl.d1.sc.omtrdc.net
      IN A
      66.235.152.152
      canadapost.ca.ssl.d1.sc.omtrdc.net
      IN A
      66.235.152.115
      canadapost.ca.ssl.d1.sc.omtrdc.net
      IN A
      66.235.152.126
      canadapost.ca.ssl.d1.sc.omtrdc.net
      IN A
      66.235.152.107
      canadapost.ca.ssl.d1.sc.omtrdc.net
      IN A
      66.235.152.143
    • flag-us
      DNS
      cm.everesttech.net
      Remote address:
      1.1.1.1:53
      Request
      cm.everesttech.net
      IN A
      Response
      cm.everesttech.net
      IN CNAME
      cm.everesttech.net.akadns.net
      cm.everesttech.net.akadns.net
      IN A
      34.255.242.39
      cm.everesttech.net.akadns.net
      IN A
      18.202.182.222
      cm.everesttech.net.akadns.net
      IN A
      52.213.250.206
    • flag-us
      DNS
      canadapost.tt.omtrdc.net
      Remote address:
      1.1.1.1:53
      Request
      canadapost.tt.omtrdc.net
      IN A
    • flag-us
      DNS
      geolocation.onetrust.com
      Remote address:
      1.1.1.1:53
      Request
      geolocation.onetrust.com
      IN A
      Response
      geolocation.onetrust.com
      IN A
      172.64.155.119
      geolocation.onetrust.com
      IN A
      104.18.32.137
    • flag-us
      DNS
      clients1.google.com
      Remote address:
      1.1.1.1:53
      Request
      clients1.google.com
      IN A
    • flag-us
      DNS
      canadapost.tt.omtrdc.net
      Remote address:
      1.1.1.1:53
      Request
      canadapost.tt.omtrdc.net
      IN A
    • flag-us
      DNS
      clients1.google.com
      Remote address:
      1.1.1.1:53
      Request
      clients1.google.com
      IN A
      Response
      clients1.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      142.250.200.46
    • flag-us
      DNS
      googleads.g.doubleclick.net
      Remote address:
      1.1.1.1:53
      Request
      googleads.g.doubleclick.net
      IN A
    • flag-us
      DNS
      googleads.g.doubleclick.net
      Remote address:
      1.1.1.1:53
      Request
      googleads.g.doubleclick.net
      IN A
    • flag-us
      DNS
      sb.scorecardresearch.com
      Remote address:
      1.1.1.1:53
      Request
      sb.scorecardresearch.com
      IN A
      Response
      sb.scorecardresearch.com
      IN A
      18.154.84.63
      sb.scorecardresearch.com
      IN A
      18.154.84.35
      sb.scorecardresearch.com
      IN A
      18.154.84.16
      sb.scorecardresearch.com
      IN A
      18.154.84.17
    • flag-us
      DNS
      snap.licdn.com
      Remote address:
      1.1.1.1:53
      Request
      snap.licdn.com
      IN A
      Response
      snap.licdn.com
      IN CNAME
      od.linkedin.edgesuite.net
      od.linkedin.edgesuite.net
      IN CNAME
      a1916.dscg2.akamai.net
      a1916.dscg2.akamai.net
      IN A
      95.101.28.59
      a1916.dscg2.akamai.net
      IN A
      95.101.28.56
    • flag-us
      DNS
      static.ads-twitter.com
      Remote address:
      1.1.1.1:53
      Request
      static.ads-twitter.com
      IN A
      Response
      static.ads-twitter.com
      IN CNAME
      platform.twitter.map.fastly.net
      platform.twitter.map.fastly.net
      IN A
      199.232.56.157
    • flag-us
      DNS
      connect.facebook.net
      Remote address:
      1.1.1.1:53
      Request
      connect.facebook.net
      IN A
      Response
      connect.facebook.net
      IN CNAME
      scontent.xx.fbcdn.net
      scontent.xx.fbcdn.net
      IN A
      157.240.221.16
    • flag-us
      DNS
      canadapost.tt.omtrdc.net
      Remote address:
      1.1.1.1:53
      Request
      canadapost.tt.omtrdc.net
      IN A
      Response
      canadapost.tt.omtrdc.net
      IN CNAME
      adobetarget.data.adobedc.net
      adobetarget.data.adobedc.net
      IN A
      66.235.152.126
      adobetarget.data.adobedc.net
      IN A
      66.235.152.107
      adobetarget.data.adobedc.net
      IN A
      66.235.152.143
      adobetarget.data.adobedc.net
      IN A
      66.235.152.113
      adobetarget.data.adobedc.net
      IN A
      66.235.152.152
      adobetarget.data.adobedc.net
      IN A
      66.235.152.115
    • flag-us
      DNS
      px.ads.linkedin.com
      Remote address:
      1.1.1.1:53
      Request
      px.ads.linkedin.com
      IN A
    • flag-us
      DNS
      t.co
      Remote address:
      1.1.1.1:53
      Request
      t.co
      IN A
      Response
      t.co
      IN A
      104.244.42.197
    • flag-us
      DNS
      analytics.twitter.com
      Remote address:
      1.1.1.1:53
      Request
      analytics.twitter.com
      IN A
    • flag-us
      DNS
      px.ads.linkedin.com
      Remote address:
      1.1.1.1:53
      Request
      px.ads.linkedin.com
      IN A
      Response
      px.ads.linkedin.com
      IN CNAME
      exp1.www.linkedin.com
      exp1.www.linkedin.com
      IN CNAME
      www-linkedin-com.l-0005.l-msedge.net
      www-linkedin-com.l-0005.l-msedge.net
      IN CNAME
      l-0005.l-msedge.net
      l-0005.l-msedge.net
      IN A
      13.107.42.14
    • flag-us
      DNS
      analytics.twitter.com
      Remote address:
      1.1.1.1:53
      Request
      analytics.twitter.com
      IN A
      Response
      analytics.twitter.com
      IN CNAME
      ads.twitter.com
      ads.twitter.com
      IN CNAME
      s.twitter.com
      s.twitter.com
      IN A
      104.244.42.67
    • flag-us
      DNS
      www.facebook.com
      Remote address:
      1.1.1.1:53
      Request
      www.facebook.com
      IN A
      Response
      www.facebook.com
      IN CNAME
      star-mini.c10r.facebook.com
      star-mini.c10r.facebook.com
      IN A
      157.240.214.35
    • flag-us
      DNS
      googleads.g.doubleclick.net
      Remote address:
      1.1.1.1:53
      Request
      googleads.g.doubleclick.net
      IN A
      Response
      googleads.g.doubleclick.net
      IN A
      142.250.180.2
    • flag-us
      DNS
      www.google.co.uk
      Remote address:
      1.1.1.1:53
      Request
      www.google.co.uk
      IN A
    • flag-us
      DNS
      www.google.co.uk
      Remote address:
      1.1.1.1:53
      Request
      www.google.co.uk
      IN A
    • flag-us
      DNS
      www.google.co.uk
      Remote address:
      1.1.1.1:53
      Request
      www.google.co.uk
      IN A
      Response
      www.google.co.uk
      IN A
      172.217.16.227
    • flag-us
      DNS
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      Remote address:
      1.1.1.1:53
      Request
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      IN A
    • flag-us
      DNS
      privacyportal-ca.onetrust.com
      Remote address:
      1.1.1.1:53
      Request
      privacyportal-ca.onetrust.com
      IN A
      Response
      privacyportal-ca.onetrust.com
      IN A
      172.64.155.119
      privacyportal-ca.onetrust.com
      IN A
      104.18.32.137
    • flag-us
      DNS
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      Remote address:
      1.1.1.1:53
      Request
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      IN A
    • flag-us
      DNS
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      Remote address:
      1.1.1.1:53
      Request
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      IN A
      Response
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      IN CNAME
      siteintercept.qprod2.net
      siteintercept.qprod2.net
      IN CNAME
      prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net
      prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net
      IN A
      104.17.208.240
      prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net
      IN A
      104.17.209.240
    • flag-us
      DNS
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      Remote address:
      1.1.1.1:53
      Request
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      IN A
    • flag-us
      DNS
      siteintercept.qualtrics.com
      Remote address:
      1.1.1.1:53
      Request
      siteintercept.qualtrics.com
      IN A
    • flag-us
      DNS
      siteintercept.qualtrics.com
      Remote address:
      1.1.1.1:53
      Request
      siteintercept.qualtrics.com
      IN A
      Response
      siteintercept.qualtrics.com
      IN CNAME
      siteintercept.qprod2.net
      siteintercept.qprod2.net
      IN CNAME
      prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net
      prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net
      IN A
      104.17.208.240
      prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net
      IN A
      104.17.209.240
    • flag-us
      DNS
      evaluation.canadapost-postescanada.ca
      Remote address:
      1.1.1.1:53
      Request
      evaluation.canadapost-postescanada.ca
      IN A
      Response
      evaluation.canadapost-postescanada.ca
      IN CNAME
      canadapostdigital.vanity7.ca1.qualtrics.com
      canadapostdigital.vanity7.ca1.qualtrics.com
      IN CNAME
      akamaisecure7.qualtrics.com.edgekey.net
      akamaisecure7.qualtrics.com.edgekey.net
      IN CNAME
      e3960.b.akamaiedge.net
      e3960.b.akamaiedge.net
      IN A
      23.223.124.28
    • flag-us
      DNS
      google.com
      Remote address:
      1.1.1.1:53
      Request
      google.com
      IN A
      Response
      google.com
      IN A
      172.217.169.78
    • flag-us
      DNS
      au1.qualtrics.com
      Remote address:
      1.1.1.1:53
      Request
      au1.qualtrics.com
      IN A
    • flag-us
      DNS
      au1.qualtrics.com
      Remote address:
      1.1.1.1:53
      Request
      au1.qualtrics.com
      IN A
      Response
      au1.qualtrics.com
      IN CNAME
      cloudenhanced.qualtrics.com.edgekey.net
      cloudenhanced.qualtrics.com.edgekey.net
      IN CNAME
      e12398.b.akamaiedge.net
      e12398.b.akamaiedge.net
      IN A
      104.110.244.156
    • 84.32.248.46:80
      findnewdate4reschedulingca.info
      216 B
       112 B
       4
      2
    • 84.32.248.46:80
      http://findnewdate4reschedulingca.info/
      http
      1.3kB
       890 B
       8
      5

      HTTP Request

      GET http://findnewdate4reschedulingca.info/

      HTTP Response

      301
    • 84.32.248.46:443
      findnewdate4reschedulingca.info
      tls
      2.1kB
       5.7kB
       16
      13
    • 192.0.78.26:443
      href.li
      tls
      1.4kB
       7.1kB
       16
      16
    • 104.82.195.246:443
      www.canadapost-postescanada.ca
      tls
      58.7kB
       741.3kB
       311
      489
    • 104.82.195.246:443
      www.canadapost-postescanada.ca
      tls
      19.8kB
       404.6kB
       182
      285
    • 104.82.195.246:443
      www.canadapost-postescanada.ca
      tls
      7.4kB
       74.6kB
       37
      62
    • 104.82.195.246:443
      www.canadapost-postescanada.ca
      tls
      26.2kB
       344.3kB
       170
      244
    • 104.82.195.246:443
      www.canadapost-postescanada.ca
      tls
      39.3kB
       191.0kB
       114
      150
    • 104.82.195.246:443
      www.canadapost-postescanada.ca
      tls
      4.5kB
       78.8kB
       38
      58
    • 104.115.33.21:443
      assets.adobedtm.com
      tls
      6.0kB
       207.6kB
       92
      157
    • 172.217.16.228:443
      www.google.com
      tls
      1.5kB
       6.9kB
       14
      18
    • 216.58.213.3:443
      https://update.googleapis.com/service/update2
      tls, http
      2.7kB
       8.2kB
       10
      15

      HTTP Request

      POST https://update.googleapis.com/service/update2

      HTTP Response

      200

      HTTP Request

      POST https://update.googleapis.com/service/update2

      HTTP Response

      200
    • 172.217.16.238:443
      tls, https
      1.7kB
       40 B
       2
      1
    • 172.217.16.238:443
      android.apis.google.com
      tls
      4.0kB
       7.8kB
       18
      20
    • 104.18.130.236:443
      cdn.cookielaw.org
      tls
      4.3kB
       114.0kB
       55
      72
    • 52.210.118.155:443
      dpm.demdex.net
      tls
      2.5kB
       8.3kB
       20
      19
    • 104.18.130.236:443
      cdn.cookielaw.org
      328 B
       164 B
       6
      3
    • 104.18.130.236:443
      cdn.cookielaw.org
      tls
      3.3kB
       58.2kB
       39
      48
    • 54.247.25.231:443
      canadapost.demdex.net
      tls
      2.0kB
       9.1kB
       17
      18
    • 34.255.242.39:443
      cm.everesttech.net
      276 B
       112 B
       5
      2
    • 66.235.152.113:443
      sslstats.canadapost.ca
      344 B
       112 B
       6
      2
    • 172.64.155.119:443
      geolocation.onetrust.com
      tls
      1.5kB
       4.2kB
       13
      11
    • 54.247.25.231:443
      canadapost.demdex.net
      276 B
       112 B
       5
      2
    • 66.235.152.113:443
      sslstats.canadapost.ca
      tls
      4.2kB
       5.2kB
       24
      16
    • 34.255.242.39:443
      cm.everesttech.net
      tls
      1.7kB
       7.0kB
       14
      13
    • 172.64.155.119:443
      geolocation.onetrust.com
      336 B
       160 B
       6
      3
    • 142.250.200.46:443
      clients1.google.com
      328 B
       224 B
       6
      4
    • 142.250.200.46:443
      clients1.google.com
      tls
      1.6kB
       9.0kB
       15
      19
    • 18.154.84.63:443
      sb.scorecardresearch.com
      tls
      2.2kB
       10.3kB
       17
      19
    • 95.101.28.59:443
      snap.licdn.com
      tls
      1.8kB
       22.8kB
       19
      26
    • 199.232.56.157:443
      static.ads-twitter.com
      tls
      1.6kB
       22.3kB
       17
      23
    • 157.240.221.16:443
      connect.facebook.net
      tls
      3.8kB
       103.9kB
       56
      84
    • 66.235.152.126:443
      canadapost.tt.omtrdc.net
      tls
      2.4kB
       5.7kB
       20
      16
    • 157.240.221.16:443
      connect.facebook.net
      380 B
       224 B
       7
      4
    • 104.244.42.197:443
      t.co
      388 B
       172 B
       7
      3
    • 104.244.42.197:443
      t.co
      tls
      2.4kB
       4.8kB
       14
      11
    • 13.107.42.14:443
      px.ads.linkedin.com
      240 B
       92 B
       5
      2
    • 13.107.42.14:443
      px.ads.linkedin.com
      tls
      1.1kB
       5.8kB
       10
      9
    • 104.244.42.67:443
      analytics.twitter.com
      tls
      1.7kB
       5.6kB
       13
      11
    • 157.240.214.35:443
      www.facebook.com
      tls
      3.1kB
       4.9kB
       23
      19
    • 13.107.42.14:443
      px.ads.linkedin.com
      tls
      4.9kB
       8.8kB
       25
      22
    • 142.250.180.2:443
      googleads.g.doubleclick.net
      tls
      1.3kB
       429 B
       10
      4
    • 142.250.180.2:443
      googleads.g.doubleclick.net
      tls
      1.3kB
       429 B
       10
      4
    • 142.250.180.2:443
      googleads.g.doubleclick.net
      396 B
       164 B
       7
      3
    • 142.250.180.2:443
      googleads.g.doubleclick.net
      tls
      935 B
       5.3kB
       10
      9
    • 142.250.180.2:443
      googleads.g.doubleclick.net
      tls
      8.0kB
       22.4kB
       52
      52
    • 172.217.16.228:443
      www.google.com
      336 B
       164 B
       6
      3
    • 172.217.16.228:443
      www.google.com
      tls
      1.2kB
       472 B
       9
      6
    • 172.217.16.228:443
      www.google.com
      tls
      7.1kB
       9.4kB
       34
      51
    • 172.217.16.228:443
      www.google.com
      tls
      970 B
       4.9kB
       10
      7
    • 172.217.16.228:443
      www.google.com
      tls
      906 B
       4.9kB
       9
      7
    • 172.217.16.228:443
      www.google.com
      tls
      970 B
       5.0kB
       10
      8
    • 172.217.16.227:443
      www.google.co.uk
      tls
      1.2kB
       4.9kB
       10
      7
    • 172.217.16.227:443
      www.google.co.uk
      tls
      7.2kB
       9.8kB
       33
      58
    • 172.217.16.227:443
      www.google.co.uk
      tls
      1.2kB
       5.1kB
       11
      10
    • 172.217.16.227:443
      www.google.co.uk
      tls
      1.2kB
       5.1kB
       12
      10
    • 172.217.16.227:443
      www.google.co.uk
      tls
      1.2kB
       5.1kB
       12
      10
    • 172.64.155.119:443
      privacyportal-ca.onetrust.com
      tls
      13.8kB
       6.5kB
       24
      24
    • 104.17.208.240:443
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      224 B
       112 B
       4
      2
    • 104.17.208.240:443
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      tls
      7.5kB
       108.6kB
       92
      138
    • 104.17.208.240:443
      siteintercept.qualtrics.com
      tls
      751 B
       5.5kB
       8
      8
    • 104.17.208.240:443
      siteintercept.qualtrics.com
      tls
      3.2kB
       9.2kB
       20
      22
    • 23.223.124.28:443
      evaluation.canadapost-postescanada.ca
      tls
      19.2kB
       548.7kB
       238
      388
    • 172.217.169.78:443
      google.com
      tls
      5.2kB
       10.5kB
       36
      38
    • 172.217.169.78:443
      google.com
      tls
      1.1kB
       7.8kB
       13
      12
    • 172.217.169.78:443
      google.com
      tls
      1.7kB
       7.7kB
       12
      10
    • 172.217.169.78:443
      google.com
      tls
      1.6kB
       7.6kB
       11
      9
    • 104.110.244.156:443
      au1.qualtrics.com
      tls
      1.2kB
       5.6kB
       13
      12
    • 216.58.212.202:443
      tls, https
      1.2kB
       40 B
       1
      1
    • 224.0.0.251:5353
      3.8kB
       12
    • 1.1.1.1:53
      findnewdate4reschedulingca.info
      dns
      77 B
       93 B
       1
      1

      DNS Request

      findnewdate4reschedulingca.info

      DNS Response

      84.32.248.46

    • 1.1.1.1:53
      safebrowsing.googleapis.com
      dns
      73 B
       89 B
       1
      1

      DNS Request

      safebrowsing.googleapis.com

      DNS Response

      142.250.200.42

    • 1.1.1.1:53
      href.li
      dns
      53 B
       85 B
       1
      1

      DNS Request

      href.li

      DNS Response

      192.0.78.26
      192.0.78.27

    • 1.1.1.1:53
      www.canadapost-postescanada.ca
      dns
      76 B
       184 B
       1
      1

      DNS Request

      www.canadapost-postescanada.ca

      DNS Response

      104.82.195.246

    • 1.1.1.1:53
      assets.adobedtm.com
      dns
      65 B
       165 B
       1
      1

      DNS Request

      assets.adobedtm.com

      DNS Response

      104.115.33.21

    • 1.1.1.1:53
      www.google.com
      dns
      60 B
       1

      DNS Request

      www.google.com

    • 1.1.1.1:53
      www.google.com
      dns
      60 B
       76 B
       1
      1

      DNS Request

      www.google.com

      DNS Response

      172.217.16.228

    • 1.1.1.1:53
      update.googleapis.com
      dns
      134 B
       83 B
       2
      1

      DNS Request

      update.googleapis.com

      DNS Request

      update.googleapis.com

      DNS Response

      216.58.213.3

    • 1.1.1.1:53
      tdyvijbq
      dns
      54 B
       129 B
       1
      1

      DNS Request

      tdyvijbq

    • 1.1.1.1:53
      htsenxvobhfim
      dns
      59 B
       134 B
       1
      1

      DNS Request

      htsenxvobhfim

    • 1.1.1.1:53
      azmnqcyjivpjg
      dns
      59 B
       134 B
       1
      1

      DNS Request

      azmnqcyjivpjg

    • 1.1.1.1:53
      android.apis.google.com
      dns
      69 B
       109 B
       1
      1

      DNS Request

      android.apis.google.com

      DNS Response

      172.217.16.238

    • 1.1.1.1:53
      cdn.cookielaw.org
      dns
      63 B
       95 B
       1
      1

      DNS Request

      cdn.cookielaw.org

      DNS Response

      104.18.130.236
      104.18.131.236

    • 1.1.1.1:53
      dpm.demdex.net
      dns
      60 B
       305 B
       1
      1

      DNS Request

      dpm.demdex.net

      DNS Response

      52.210.118.155
      52.215.118.143
      52.31.177.145
      99.80.102.181
      52.17.48.145
      52.49.2.43
      54.194.146.163
      54.171.3.160

    • 1.1.1.1:53
      canadapost.demdex.net
      dns
      67 B
       312 B
       1
      1

      DNS Request

      canadapost.demdex.net

      DNS Response

      54.247.25.231
      54.73.144.235
      52.215.118.143
      52.49.2.43
      99.80.102.181
      52.30.205.242
      34.243.60.84
      3.248.85.196

    • 1.1.1.1:53
      sslstats.canadapost.ca
      dns
      68 B
       212 B
       1
      1

      DNS Request

      sslstats.canadapost.ca

      DNS Response

      66.235.152.113
      66.235.152.152
      66.235.152.115
      66.235.152.126
      66.235.152.107
      66.235.152.143

    • 1.1.1.1:53
      cm.everesttech.net
      dns
      64 B
       152 B
       1
      1

      DNS Request

      cm.everesttech.net

      DNS Response

      34.255.242.39
      18.202.182.222
      52.213.250.206

    • 1.1.1.1:53
      canadapost.tt.omtrdc.net
      dns
      70 B
       1

      DNS Request

      canadapost.tt.omtrdc.net

    • 1.1.1.1:53
      geolocation.onetrust.com
      dns
      70 B
       102 B
       1
      1

      DNS Request

      geolocation.onetrust.com

      DNS Response

      172.64.155.119
      104.18.32.137

    • 1.1.1.1:53
      clients1.google.com
      dns
      65 B
       1

      DNS Request

      clients1.google.com

    • 1.1.1.1:53
      canadapost.tt.omtrdc.net
      dns
      70 B
       1

      DNS Request

      canadapost.tt.omtrdc.net

    • 1.1.1.1:53
      clients1.google.com
      dns
      65 B
       105 B
       1
      1

      DNS Request

      clients1.google.com

      DNS Response

      142.250.200.46

    • 1.1.1.1:53
      googleads.g.doubleclick.net
      dns
      73 B
       1

      DNS Request

      googleads.g.doubleclick.net

    • 1.1.1.1:53
      googleads.g.doubleclick.net
      dns
      73 B
       1

      DNS Request

      googleads.g.doubleclick.net

    • 1.1.1.1:53
      sb.scorecardresearch.com
      dns
      70 B
       134 B
       1
      1

      DNS Request

      sb.scorecardresearch.com

      DNS Response

      18.154.84.63
      18.154.84.35
      18.154.84.16
      18.154.84.17

    • 1.1.1.1:53
      snap.licdn.com
      dns
      60 B
       164 B
       1
      1

      DNS Request

      snap.licdn.com

      DNS Response

      95.101.28.59
      95.101.28.56

    • 1.1.1.1:53
      static.ads-twitter.com
      dns
      68 B
       129 B
       1
      1

      DNS Request

      static.ads-twitter.com

      DNS Response

      199.232.56.157

    • 1.1.1.1:53
      connect.facebook.net
      dns
      66 B
       114 B
       1
      1

      DNS Request

      connect.facebook.net

      DNS Response

      157.240.221.16

    • 1.1.1.1:53
      canadapost.tt.omtrdc.net
      dns
      70 B
       205 B
       1
      1

      DNS Request

      canadapost.tt.omtrdc.net

      DNS Response

      66.235.152.126
      66.235.152.107
      66.235.152.143
      66.235.152.113
      66.235.152.152
      66.235.152.115

    • 1.1.1.1:53
      px.ads.linkedin.com
      dns
      65 B
       1

      DNS Request

      px.ads.linkedin.com

    • 1.1.1.1:53
      t.co
      dns
      50 B
       66 B
       1
      1

      DNS Request

      t.co

      DNS Response

      104.244.42.197

    • 1.1.1.1:53
      analytics.twitter.com
      dns
      67 B
       1

      DNS Request

      analytics.twitter.com

    • 1.1.1.1:53
      px.ads.linkedin.com
      dns
      65 B
       168 B
       1
      1

      DNS Request

      px.ads.linkedin.com

      DNS Response

      13.107.42.14

    • 1.1.1.1:53
      analytics.twitter.com
      dns
      67 B
       117 B
       1
      1

      DNS Request

      analytics.twitter.com

      DNS Response

      104.244.42.67

    • 1.1.1.1:53
      www.facebook.com
      dns
      62 B
       107 B
       1
      1

      DNS Request

      www.facebook.com

      DNS Response

      157.240.214.35

    • 1.1.1.1:53
      googleads.g.doubleclick.net
      dns
      73 B
       89 B
       1
      1

      DNS Request

      googleads.g.doubleclick.net

      DNS Response

      142.250.180.2

    • 1.1.1.1:53
      www.google.co.uk
      dns
      62 B
       1

      DNS Request

      www.google.co.uk

    • 1.1.1.1:53
      www.google.co.uk
      dns
      62 B
       1

      DNS Request

      www.google.co.uk

    • 1.1.1.1:53
      www.google.co.uk
      dns
      62 B
       78 B
       1
      1

      DNS Request

      www.google.co.uk

      DNS Response

      172.217.16.227

    • 1.1.1.1:53
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      dns
      109 B
       1

      DNS Request

      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com

    • 1.1.1.1:53
      privacyportal-ca.onetrust.com
      dns
      75 B
       107 B
       1
      1

      DNS Request

      privacyportal-ca.onetrust.com

      DNS Response

      172.64.155.119
      104.18.32.137

    • 1.1.1.1:53
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      dns
      109 B
       1

      DNS Request

      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com

    • 1.1.1.1:53
      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com
      dns
      218 B
       243 B
       2
      1

      DNS Request

      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com

      DNS Request

      zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com

      DNS Response

      104.17.208.240
      104.17.209.240

    • 1.1.1.1:53
      siteintercept.qualtrics.com
      dns
      73 B
       1

      DNS Request

      siteintercept.qualtrics.com

    • 1.1.1.1:53
      siteintercept.qualtrics.com
      dns
      73 B
       207 B
       1
      1

      DNS Request

      siteintercept.qualtrics.com

      DNS Response

      104.17.208.240
      104.17.209.240

    • 1.1.1.1:53
      evaluation.canadapost-postescanada.ca
      dns
      83 B
       242 B
       1
      1

      DNS Request

      evaluation.canadapost-postescanada.ca

      DNS Response

      23.223.124.28

    • 1.1.1.1:53
      google.com
      dns
      56 B
       72 B
       1
      1

      DNS Request

      google.com

      DNS Response

      172.217.169.78

    • 1.1.1.1:53
      au1.qualtrics.com
      dns
      63 B
       1

      DNS Request

      au1.qualtrics.com

    • 1.1.1.1:53
      au1.qualtrics.com
      dns
      63 B
       166 B
       1
      1

      DNS Request

      au1.qualtrics.com

      DNS Response

      104.110.244.156

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • files/dom-0.html

      Filesize

      596KB

      MD5

      ba2919ac7d04bfc681167f4c73f598e1

      SHA1

      427e2b0773a253adc8f63a54cb89cef57310791f

      SHA256

      3fd4a384760e303bc5744e709361b38a4d2d881f9bfac7e78adf88dcac6da2db

      SHA512

      3a73d258ec77a6077e787be3c7de1178f756d28f0dc0e29fc6c0812486b809f7b254ff52c6a4ca5f898bcab9e7f84b96d79b0e870002d67316704a10c354342c

      Download Submit

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.