URL Scan Results for the page [HZ Rat backdoor for macOS harvests data from WeChat and DingTalk | Securelist](https://securelist.com/hz-rat-attacks-wechat-and-dingtalk/113513/)

Document

Links

The outgoing links identified from the page.

JavaScript Variables

Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.

Technology

The technologies identified are present on the scanned URL.

Name	Description	Detected patterns
CMS
WordPress https://wordpress.org	WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.	Type: headers Name: link Regex: rel="https:\/\/api\.w\.org\/"
Blogs
WordPress https://wordpress.org	WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.	Type: headers Name: link Regex: rel="https:\/\/api\.w\.org\/"
Security
reCAPTCHA https://www.google.com/recaptcha/	reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.	Type: scriptSrc Regex: \/recaptcha\/(?:api|enterprise)\.js
HSTS https://www.rfc-editor.org/rfc/rfc6797#section-6.1	HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.	Type: headers Name: strict-transport-security Regex: (?:)
Caching
Varnish https://www.varnish-cache.org	Varnish is a reverse caching proxy.	Type: headers Name: x-varnish Regex: varnish(?: \(Varnish\/([\d.]{1,250})\))?
Programming languages
PHP https://php.net	PHP is a general-purpose scripting language used for web development.	Dependent on WordPress
CDN
Amazon S3 https://aws.amazon.com/s3/	Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.	Type: headers Name: server Regex: s3[^ ]{0,250}amazonaws\.com
Marketing automation
Marketo https://www.marketo.com	Marketo develops and sells marketing automation software for account-based marketing and other marketing services and products including SEO and content creation.	Type: scriptSrc Regex: munchkin\.marketo\.\w{1,250}\/(?:([\d.]{1,250})\/)?munchkin\.js
Databases
MySQL https://mysql.com	MySQL is an open-source relational database management system.	Dependent on WordPress
Tag managers
Google Tag Manager https://www.google.com/tagmanager	Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.	Type: html Regex: googletagmanager\.com\/ns\.html[^>]{1,250}><\/iframe>
JavaScript libraries
jQuery https://jquery.com	jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.	Type: scriptSrc Regex: jquery
PaaS
Amazon Web Services https://aws.amazon.com/	Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.	Dependent on Amazon S3
Cookie compliance
Cookiebot https://www.cookiebot.com	Cookiebot is a cloud-driven solution that automatically controls cookies and trackers, enabling full GDPR/ePrivacy and CCPA compliance for websites.	Type: scriptSrc Regex: consent\.cookiebot\.com

Performance

The speed and efficiency of the scanned URL loads and displays its content.

dns

1 ms

Good

tcp

1 ms

Good

requestTime

102 ms

Good

dom

735 ms

Poor

DNS Record

A DNS record maps a domain name to an IP address or other resource information.

SSL Certificate

An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.

HTTP Headers

HTTP Header

An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.

Content Security Policy

Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.

Cookies

Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.