WEBSITE ANALYSIS REPORT

https://www.tiktok.com/link/v2?aid=1988&lzdlang=enFSmPWg&scene=bio_url&target=adclick.g.doubleclick.net///////%2f%2fpcs/click?GA4WXfjWKRXTAP84695-nov77emberkd%26amp%3B%26amp%3Badurl=//venezamooca.com.br/fonts/5ppp/shap#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888

16 Oct 2026 · 11:08:30.000 UTCpublic

Report tags
Submit tags

JavaScript

Recorded scripts and browser console observations

Observed scripts. Expand a row for metadata, detections, and available captured source.
#	Introduced by	Size	First seen
1	scriptElement	1.9 KB	02 Oct 202616:54 UTC

2	scriptElement	1.4 KB	16 Sep 202614:24 UTC

3	scriptElement	4.4 KB	16 Oct 202611:08 UTC

Console observations

Browser messages in recorded order

19 messages


Original hash:444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888
First 3 chars:444
Last 3 chars:888
Base64 email extracted:aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=
Removed 3-character strings from both ends. New URL:https://venezamooca.com.br/fonts/5ppp/shap/#aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=
Removed from start:444
Removed from end:888
Hash found (after cleanup):aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=
Base64 decoded:henrik.littecke@lysa.se
Valid Base64 email found:henrik.littecke@lysa.se
Final validated email:henrik.littecke@lysa.se
Encoded Email: henrik.littecke@lysa.se
Redirect URL created:https://passwordset-gqqgggle.com/?92f9b337/henrik.littecke@lysa.se
Hash found (after cleanup):aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=
Base64 decoded:henrik.littecke@lysa.se
Valid Base64 email found:henrik.littecke@lysa.se
Final validated email:henrik.littecke@lysa.se
Encoded Email: henrik.littecke@lysa.se
Redirect URL created:https://passwordset-gqqgggle.com/?92f9b337/henrik.littecke@lysa.se

Browser console observations in recorded order.
#	Level	Message	Recorded source
1	LOG	`Original hash:444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 142 · Column 15
2	LOG	`First 3 chars:444`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 151 · Column 17
3	LOG	`Last 3 chars:888`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 152 · Column 17
4	LOG	`Base64 email extracted:aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 157 · Column 17
5	LOG	`Removed 3-character strings from both ends. New URL:https://venezamooca.com.br/fonts/5ppp/shap/#aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 165 · Column 17
6	LOG	`Removed from start:444`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 166 · Column 17
7	LOG	`Removed from end:888`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 167 · Column 17
8	LOG	`Hash found (after cleanup):aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 188 · Column 15
9	LOG	`Base64 decoded:henrik.littecke@lysa.se`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 195 · Column 17
10	LOG	`Valid Base64 email found:henrik.littecke@lysa.se`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 200 · Column 19
11	LOG	`Final validated email:henrik.littecke@lysa.se`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 216 · Column 17
12	LOG	`Encoded Email: henrik.littecke@lysa.se`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 233 · Column 17
13	LOG	`Redirect URL created:https://passwordset-gqqgggle.com/?92f9b337/henrik.littecke@lysa.se`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 237 · Column 17
14	LOG	`Hash found (after cleanup):aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 188 · Column 15
15	LOG	`Base64 decoded:henrik.littecke@lysa.se`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 195 · Column 17
16	LOG	`Valid Base64 email found:henrik.littecke@lysa.se`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 200 · Column 19
17	LOG	`Final validated email:henrik.littecke@lysa.se`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 216 · Column 17
18	LOG	`Encoded Email: henrik.littecke@lysa.se`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 233 · Column 17
19	LOG	`Redirect URL created:https://passwordset-gqqgggle.com/?92f9b337/henrik.littecke@lysa.se`	https://venezamooca.com.br/fonts/5ppp/shap/#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888 Line 237 · Column 17

https://www.tiktok.com/link/v2?aid=1988&lzdlang=enFSmPWg&scene=bio_url&target=adclick.g.doubleclick.net///////%2f%2fpcs/click?GA4WXfjWKRXTAP84695-nov77emberkd%26amp%3B%26amp%3Badurl=//venezamooca.com.br/fonts/5ppp/shap#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888

JavaScript

Console observations

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://www.tiktok.com/link/v2?aid=1988&lzdlang=enFSmPWg&scene=bio_url&target=adclick.g.doubleclick.net///////%2f%2fpcs/click?GA4WXfjWKRXTAP84695-nov77emberkd%26amp%3B%26amp%3Badurl=//venezamooca.com.br/fonts/5ppp/shap#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888

[JavaScript]

Console observations

https://www.tiktok.com/link/v2?aid=1988&lzdlang=enFSmPWg&scene=bio_url&target=adclick.g.doubleclick.net///////%2f%2fpcs/click?GA4WXfjWKRXTAP84695-nov77emberkd%26amp%3B%26amp%3Badurl=//venezamooca.com.br/fonts/5ppp/shap#444aGVucmlrLmxpdHRlY2tlQGx5c2Euc2U=888

JavaScript