shape loader (hertz tenant)
[ok]https://www.hertz.com/A-thou-doe-prospeeceiud-accome-Hauen-heeleepell- ↗
- last ran
- 2026-06-29 19:22 utc
- (5d ago)
- last updated
- 2026-06-29 19:22 utc
- (5d ago)
- size
- 818.8kb
- sha256
- eb0d415c6411
- apis touched
- 47
- 47 raw
- bot tells
- 1
- sinks
- 0
- 0 leaked
- hazards
- 3
- structural
- 0
- anti-debug
- 0
- L3/L4 hazards
- consistency
- 0
- cross-checks
- providers
- 0
categories probed (6)
click a row to drill into every api the script probes in that category.
[+] workers
2 apis · 1 tells · 7 hits[+] importScriptsmedium · bot-tell×1
details + source hits (1)
[+] Bloblow×6
details + source hits (6)
[+] timing
2 apis · 0 tells · 27 hits[+] requestAnimationFramelow×3
details + source hits (3)
[+] Dateinfo×24
details + source hits (24)
[+] events
1 apis · 0 tells · 3 hits[+] *.locationinfo×3
details + source hits (3)
[+] storage
1 apis · 0 tells · 4 hits[+] localStoragelow×4
details + source hits (4)
[+] anti-debug
1 apis · 0 tells · 4 hits[+] consolelow×4
details + source hits (4)
[+] introspection
1 apis · 0 tells · 2 hits[+] *.toStringlow×2
details + source hits (2)
bot-detection tells (1)
strong indicators of bot-detection intent. drill into the categories section below to inspect description, evasion notes, and source snippets for any tell.
dynamic-execution hazards (3)
anywhere the script puts code beyond static reach. eval, function, document.write, dynamic import. these are the holes script2builtins-runtime would fill.
- FunctionL2:106159
`Function` constructor compiles a string into a function. common eval-equivalent in fingerprinting blobs.
Function(_0xe48794(0x3d0)+_0xe48794(0x38b))
- FunctionL2:118885
`Function` constructor compiles a string into a function. common eval-equivalent in fingerprinting blobs.
Function(_0x18f483(0x3d0)+_0x18f483(0x38b))
- FunctionL2:145949
`new Function` constructor compiles a string into a function. common eval-equivalent in fingerprinting blobs.
new Function(_0x1f43f7(0x3d0)+_0x1f43f7(0x38b))