Windows Analysis Report
http://links.vagaro.com/ls/click?upn=u001.Kon-2ByeGREPRt-2FMHBJEr-2BNftLQy37C85yyf9YxxAIy-2FJq3PLzYEADzsJOjZJmWPCXrGiBymbDgWNCdEvfm1BNH0-2FZnhE2Fqy-2FSsIOtx7LQpxNX7P-2FfVHKEr1u26UKQFb3D3YG4ki00REj1E04Z7wOIY-2BcCtVQuUoLdAd9amw5SbnkQFbQc5u3vmE7mtTixB8d9wKb0qFk7cm7sMA9XrFhpA-3D-3DExBw_mIOv0XpXx35YG833h

Overview

General Information

Sample URL: http://links.vagaro.com/ls/click?upn=u001.Kon-2ByeGREPRt-2FMHBJEr-2BNftLQy37C85yyf9YxxAIy-2FJq3PLzYEADzsJOjZJmWPCXrGiBymbDgWNCdEvfm1BNH0-2FZnhE2Fqy-2FSsIOtx7LQpxNX7P-2FfVHKEr1u26UKQFb3D3YG4ki00REj1E04
Analysis ID: 1417554
Infos:

Detection

Score: 1
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

HTML body contains low number of good links
Stores files to the Windows start menu directory

Classification

Source: https://busy-lady-health-summit-2404.eventraptor.com/?erclid=4f802863-37bd-48fe-8382-65b6a4d2f259&affiliate=kaitlinrohowetz&ref=kaitlinrohowetz HTTP Parser: Number of links: 0
Source: https://busy-lady-health-summit-2404.eventraptor.com/?erclid=4f802863-37bd-48fe-8382-65b6a4d2f259&affiliate=kaitlinrohowetz&ref=kaitlinrohowetz HTTP Parser: No <meta name="author".. found
Source: https://busy-lady-health-summit-2404.eventraptor.com/?erclid=4f802863-37bd-48fe-8382-65b6a4d2f259&affiliate=kaitlinrohowetz&ref=kaitlinrohowetz HTTP Parser: No <meta name="copyright".. found
Source: unknown HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49725 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.45.150.107:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.45.150.107:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 23.45.150.107
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: global traffic HTTP traffic detected: GET /ls/click?upn=u001.Kon-2ByeGREPRt-2FMHBJEr-2BNftLQy37C85yyf9YxxAIy-2FJq3PLzYEADzsJOjZJmWPCXrGiBymbDgWNCdEvfm1BNH0-2FZnhE2Fqy-2FSsIOtx7LQpxNX7P-2FfVHKEr1u26UKQFb3D3YG4ki00REj1E04Z7wOIY-2BcCtVQuUoLdAd9amw5SbnkQFbQc5u3vmE7mtTixB8d9wKb0qFk7cm7sMA9XrFhpA-3D-3DExBw_mIOv0XpXx35YG833h1gVhf-2FA1eNoj0-2BSNCIA490E8poZf9zhuKmLYcYYPyI5RMEJS5PJmUFKooLWtqsOSMpYE2-2BOTAxpdd-2B3KguZQ5K6bz1FjOXir8VRn09fdBmb-2FxeNzUhfawB0fjZZ8FjZxNc2v24ysSJENH-2Be4CR1FtFHHvX2gk7lqc8PIxYbV1NrZdBCENXvDAhbfFN8KAb664q0yOZ8DucGGGo0lIj0MM6HqZV7nosYet2xgGzS6TiC9DpJ-2FNvR2bhWypVWor1hdGEQp4XXvjonXNjLCNFq6PTPYpyElYH-2BdkOjTwd-2FILPpWGgDeAIX0sIj-2FHa7eUNmYuV3parOJAzsD8hiceOi8nX0-2BZ-2BxevuOmOCkWkIawHXnjgLfhy8HCc0O8SjKUU1RQOLrBV9NEIam7y23K9aLJUXs-2BQiMVtZHrseXBDENslnSKEtCtfBe1ltHbrXJx3nqxUXHIzv6Nr-2B9U7T8X0UQvuyOOA4Gj1qPUffc2o-2FcUW4V0zfPWXpyrms6Rjlwh-2FMVG0QGwr-2B0EByi2qLuaOCEcxLTxWurDtohF-2FC-2FlMW23ZmPNJap HTTP/1.1Host: links.vagaro.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /?erclid=4f802863-37bd-48fe-8382-65b6a4d2f259&affiliate=kaitlinrohowetz&ref=kaitlinrohowetz HTTP/1.1Host: busy-lady-health-summit-2404.eventraptor.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /css/app.css?id=62b9ba2152dd05a0c8f3 HTTP/1.1Host: busy-lady-health-summit-2404.eventraptor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://busy-lady-health-summit-2404.eventraptor.com/?erclid=4f802863-37bd-48fe-8382-65b6a4d2f259&affiliate=kaitlinrohowetz&ref=kaitlinrohowetzAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vYzZWanFTYVFuT0JkdmsydWpMMnc9PSIsInZhbHVlIjoieXdBc1UwRWE4U3VNRjM2ZFZUQjRkM2ZCbFBDeUxYaDE1QllCRzFBbHZuV1JmZTFwam5hZytuWGV3dGsvTktHYjNHeTdFbGlzZG90Zm5pRGxzRG4wQnFFNXNYRVFZOXpTMzRLQUVOWWpzcFFHeStPR1hKQkNMU2tpazF5U2Q3eE4iLCJtYWMiOiI0NDQ1YmRiMzQ0ZTg2ZTM5OTVlMWU3OTk5N2Q3MjA2ZTU5NDE0Y2NkYmJjMTJiNWM0OWQ3YmQ4YmM1YzVkYTJmIiwidGFnIjoiIn0%3D; eventraptor_sites_session=eyJpdiI6IkFvRDd0ZDhHb3RqY2pkK1plZ3dlZmc9PSIsInZhbHVlIjoiTm0zeWZqWnlvb3p4aVFPb3BCQzNkdVB5N3NFN3MrdGZkclhnWi9ESmhHVnNsUG4raUhGMG9LRisrWFpGMUhiL3pzTlEvNmszcThLTG1halo4NnN3dHhxZTZ3WFg1RzJTTFpyb2NBVWluTlJ2UXFSVkRYcjJESEFFeE95cVpTUFgiLCJtYWMiOiIzOTJiMzA0OTM2MTc3Zjc3YzUyZDRkYzFkOWNhMWE5OGIwYmEyYmM1YjNlMGE4NzJjZWNiZDBkMDAzYTcyOTBmIiwidGFnIjoiIn0%3D; affiliate-234384203058384890=eyJpdiI6IjFYclIzNHRzQy9zSUNYRHFiNi9CK1E9PSIsInZhbHVlIjoiVUZMN29zSHh3RXVBN1VRVlVuWXdKTlQ0NTdCQ2ltSHpESkYxb0ZmZnhteVNsMEtxMTRmOG1mbUlvY0lTS0REZDRMVm82eHVOZWRBRTM1SVowcFBwblE9PSIsIm1hYyI6ImU3OTJkMWZkY2VhODdhMzZjMmJhYjNkZTU4MDhlYzNjNTJlZTc0NTVkNjQyYzFiNWYwNzQyMzk3NTA0OTIzNGQiLCJ0YWciOiIifQ%3D%3D; erclid-234384203058384890=eyJpdiI6Imx0Tm50UCtWZEdsOE9tazY4Yk1DVEE9PSIsInZhbHVlIjoicUhXN3hvN3M4VDlQNTg5ZjN1ZkJHbllzZVkzWGYyWlh3OWJibng0QWQrWWF0Nmo3MmFENTRHS1NNVWZESVB3L3BOU2tXM0ROSUV4eWxlZk84cjVxeG14Zk9tNVF1UVRMS3UwT1RINzUwNTA9IiwibWFjIjoiZGY0ZDRjYzQ0NWNiOWYzZDQyMmMwYjc1YWY0YzU0NzA0NjVkNzlhZDdhMDg2NTAxN2Y3YmM4ZTdkNmMzYmMwYSIsInRhZyI6IiJ9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014736/summit-cover-20240228170836.jpg HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014736/summit-cover-20240228170836.jpg HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00015372/event-234384203058384890-3d-png-2.png HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00015373/event-234384203058384890-2024-logo.png HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00015373/event-234384203058384890-2024-logo.png HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00015372/event-234384203058384890-3d-png-2.png HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /vendor/livewire/livewire.js?id=c69d0f2801c01fcf8166 HTTP/1.1Host: sites.eventraptor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /js/app.js?id=d3ad6175d28b8e97af07 HTTP/1.1Host: busy-lady-health-summit-2404.eventraptor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://busy-lady-health-summit-2404.eventraptor.com/?erclid=4f802863-37bd-48fe-8382-65b6a4d2f259&affiliate=kaitlinrohowetz&ref=kaitlinrohowetzAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vYzZWanFTYVFuT0JkdmsydWpMMnc9PSIsInZhbHVlIjoieXdBc1UwRWE4U3VNRjM2ZFZUQjRkM2ZCbFBDeUxYaDE1QllCRzFBbHZuV1JmZTFwam5hZytuWGV3dGsvTktHYjNHeTdFbGlzZG90Zm5pRGxzRG4wQnFFNXNYRVFZOXpTMzRLQUVOWWpzcFFHeStPR1hKQkNMU2tpazF5U2Q3eE4iLCJtYWMiOiI0NDQ1YmRiMzQ0ZTg2ZTM5OTVlMWU3OTk5N2Q3MjA2ZTU5NDE0Y2NkYmJjMTJiNWM0OWQ3YmQ4YmM1YzVkYTJmIiwidGFnIjoiIn0%3D; eventraptor_sites_session=eyJpdiI6IkFvRDd0ZDhHb3RqY2pkK1plZ3dlZmc9PSIsInZhbHVlIjoiTm0zeWZqWnlvb3p4aVFPb3BCQzNkdVB5N3NFN3MrdGZkclhnWi9ESmhHVnNsUG4raUhGMG9LRisrWFpGMUhiL3pzTlEvNmszcThLTG1halo4NnN3dHhxZTZ3WFg1RzJTTFpyb2NBVWluTlJ2UXFSVkRYcjJESEFFeE95cVpTUFgiLCJtYWMiOiIzOTJiMzA0OTM2MTc3Zjc3YzUyZDRkYzFkOWNhMWE5OGIwYmEyYmM1YjNlMGE4NzJjZWNiZDBkMDAzYTcyOTBmIiwidGFnIjoiIn0%3D; affiliate-234384203058384890=eyJpdiI6IjFYclIzNHRzQy9zSUNYRHFiNi9CK1E9PSIsInZhbHVlIjoiVUZMN29zSHh3RXVBN1VRVlVuWXdKTlQ0NTdCQ2ltSHpESkYxb0ZmZnhteVNsMEtxMTRmOG1mbUlvY0lTS0REZDRMVm82eHVOZWRBRTM1SVowcFBwblE9PSIsIm1hYyI6ImU3OTJkMWZkY2VhODdhMzZjMmJhYjNkZTU4MDhlYzNjNTJlZTc0NTVkNjQyYzFiNWYwNzQyMzk3NTA0OTIzNGQiLCJ0YWciOiIifQ%3D%3D; erclid-234384203058384890=eyJpdiI6Imx0Tm50UCtWZEdsOE9tazY4Yk1DVEE9PSIsInZhbHVlIjoicUhXN3hvN3M4VDlQNTg5ZjN1ZkJHbllzZVkzWGYyWlh3OWJibng0QWQrWWF0Nmo3MmFENTRHS1NNVWZESVB3L3BOU2tXM0ROSUV4eWxlZk84cjVxeG14Zk9tNVF1UVRMS3UwT1RINzUwNTA9IiwibWFjIjoiZGY0ZDRjYzQ0NWNiOWYzZDQyMmMwYjc1YWY0YzU0NzA0NjVkNzlhZDdhMDg2NTAxN2Y3YmM4ZTdkNmMzYmMwYSIsInRhZyI6IiJ9
Source: global traffic HTTP traffic detected: GET /activity.js HTTP/1.1Host: activity.marketivia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=dAvv4oBrTk9ElAK&MD=bPna1VXS HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /storage/media/00/0000/00000794/1626616670_WrQFjjMJD5NSQ9zD.png HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0000/00009348/speaker-profile-avatar-20230308225915.jpg HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /images/favicon.png HTTP/1.1Host: app.eventraptor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.18.9ff7=37767dd3cf6aa844.1711724619.; _pk_ses.18.9ff7=1
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014755/event-presentation-speaker_profile_avatar-20240229210758.jpg HTTP/1.1Host: app.eventraptor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.18.9ff7=37767dd3cf6aa844.1711724619.; _pk_ses.18.9ff7=1
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014953/event-presentation-speaker_profile_avatar-20240309152614.jpg HTTP/1.1Host: app.eventraptor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.18.9ff7=37767dd3cf6aa844.1711724619.; _pk_ses.18.9ff7=1
Source: global traffic HTTP traffic detected: GET /storage/media/00/0000/00000794/1626616670_WrQFjjMJD5NSQ9zD.png HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /images/favicon.png HTTP/1.1Host: app.eventraptor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.18.9ff7=37767dd3cf6aa844.1711724619.; _pk_ses.18.9ff7=1
Source: global traffic HTTP traffic detected: GET /storage/media/00/0000/00009348/speaker-profile-avatar-20230308225915.jpg HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014953/event-presentation-speaker_profile_avatar-20240309152614.jpg HTTP/1.1Host: app.eventraptor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.18.9ff7=37767dd3cf6aa844.1711724619.; _pk_ses.18.9ff7=1
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014755/event-presentation-speaker_profile_avatar-20240229210758.jpg HTTP/1.1Host: app.eventraptor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.18.9ff7=37767dd3cf6aa844.1711724619.; _pk_ses.18.9ff7=1
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014568/speaker-profile-avatar-20240217182517.jpg HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014314/speaker-profile-avatar-20240201201707.jpg HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0000/00006873/speaker-profile-avatar-20221010195841.jpg HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014965/event-presentation-speaker_profile_avatar-20240310155559.jpg HTTP/1.1Host: app.eventraptor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.18.9ff7=37767dd3cf6aa844.1711724619.; _pk_ses.18.9ff7=1
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014568/speaker-profile-avatar-20240217182517.jpg HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0000/00006873/speaker-profile-avatar-20221010195841.jpg HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014314/speaker-profile-avatar-20240201201707.jpg HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014965/event-presentation-speaker_profile_avatar-20240310155559.jpg HTTP/1.1Host: app.eventraptor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.18.9ff7=37767dd3cf6aa844.1711724619.; _pk_ses.18.9ff7=1
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014601/speaker-profile-avatar-20240219223739.jpg HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014773/event-presentation-speaker_profile_avatar-20240303170842.jpg HTTP/1.1Host: app.eventraptor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.18.9ff7=37767dd3cf6aa844.1711724619.; _pk_ses.18.9ff7=1
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014964/event-presentation-speaker_profile_avatar-20240310153502.jpg HTTP/1.1Host: app.eventraptor.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.18.9ff7=37767dd3cf6aa844.1711724619.; _pk_ses.18.9ff7=1
Source: global traffic HTTP traffic detected: GET /avatar/3587bc859c65dca23714908494dc7445?s=192&d=404 HTTP/1.1Host: www.gravatar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014601/speaker-profile-avatar-20240219223739.jpg HTTP/1.1Host: app-eventraptor.b-cdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /avatar/3587bc859c65dca23714908494dc7445?s=192&d=404 HTTP/1.1Host: www.gravatar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014773/event-presentation-speaker_profile_avatar-20240303170842.jpg HTTP/1.1Host: app.eventraptor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.18.9ff7=37767dd3cf6aa844.1711724619.; _pk_ses.18.9ff7=1
Source: global traffic HTTP traffic detected: GET /storage/media/00/0001/00014964/event-presentation-speaker_profile_avatar-20240310153502.jpg HTTP/1.1Host: app.eventraptor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.18.9ff7=37767dd3cf6aa844.1711724619.; _pk_ses.18.9ff7=1
Source: global traffic HTTP traffic detected: GET /ls/click?upn=u001.Kon-2ByeGREPRt-2FMHBJEr-2BNftLQy37C85yyf9YxxAIy-2FJq3PLzYEADzsJOjZJmWPCXrGiBymbDgWNCdEvfm1BNH0-2FZnhE2Fqy-2FSsIOtx7LQpxNX7P-2FfVHKEr1u26UKQFb3D3YG4ki00REj1E04Z7wOIY-2BcCtVQuUoLdAd9amw5SbnkQFbQc5u3vmE7mtTixB8d9wKb0qFk7cm7sMA9XrFhpA-3D-3DExBw_mIOv0XpXx35YG833h1gVhf-2FA1eNoj0-2BSNCIA490E8poZf9zhuKmLYcYYPyI5RMEJS5PJmUFKooLWtqsOSMpYE2-2BOTAxpdd-2B3KguZQ5K6bz1FjOXir8VRn09fdBmb-2FxeNzUhfawB0fjZZ8FjZxNc2v24ysSJENH-2Be4CR1FtFHHvX2gk7lqc8PIxYbV1NrZdBCENXvDAhbfFN8KAb664q0yOZ8DucGGGo0lIj0MM6HqZV7nosYet2xgGzS6TiC9DpJ-2FNvR2bhWypVWor1hdGEQp4XXvjonXNjLCNFq6PTPYpyElYH-2BdkOjTwd-2FILPpWGgDeAIX0sIj-2FHa7eUNmYuV3parOJAzsD8hiceOi8nX0-2BZ-2BxevuOmOCkWkIawHXnjgLfhy8HCc0O8SjKUU1RQOLrBV9NEIam7y23K9aLJUXs-2BQiMVtZHrseXBDENslnSKEtCtfBe1ltHbrXJx3nqxUXHIzv6Nr-2B9U7T8X0UQvuyOOA4Gj1qPUffc2o-2FcUW4V0zfPWXpyrms6Rjlwh-2FMVG0QGwr-2B0EByi2qLuaOCEcxLTxWurDtohF-2FC-2FlMW23ZmPNJap HTTP/1.1Host: links.vagaro.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: unknown DNS traffic detected: queries for: links.vagaro.com
Source: unknown HTTP traffic detected: POST /activity.php?action_name=busy-lady-health-summit-2404.eventraptor.com%2FBusy%20Woman%20Health%20Summit%3A%20Empowering%20Women%27s%20Wellness&idsite=18&rec=1&r=998004&h=16&m=3&s=38&url=https%3A%2F%2Fbusy-lady-health-summit-2404.eventraptor.com%2F%3Ferclid%3D4f802863-37bd-48fe-8382-65b6a4d2f259%26affiliate%3Dkaitlinrohowetz%26ref%3Dkaitlinrohowetz&_id=37767dd3cf6aa844&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pv_id=37ii30&pf_net=439&pf_srv=535&pf_tfr=111&pf_dm1=8600&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D HTTP/1.1Host: activity.marketivia.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=utf-8Accept: */*Origin: https://busy-lady-health-summit-2404.eventraptor.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://busy-lady-health-summit-2404.eventraptor.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: chromecache_165.1.dr String found in binary or memory: https://developer.matomo.org/api-reference/tracking-javascript
Source: chromecache_165.1.dr String found in binary or memory: https://developer.matomo.org/guides/tracking-javascript-guide#multiple-piwik-trackers
Source: chromecache_132.1.dr String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2)
Source: chromecache_132.1.dr String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2)
Source: chromecache_132.1.dr String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1pL7SUc.woff2)
Source: chromecache_132.1.dr String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa25L7SUc.woff2)
Source: chromecache_132.1.dr String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2JL7SUc.woff2)
Source: chromecache_132.1.dr String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2ZL7SUc.woff2)
Source: chromecache_132.1.dr String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2pL7SUc.woff2)
Source: chromecache_133.1.dr String found in binary or memory: https://github.com/jonschlinkert/get-value
Source: chromecache_133.1.dr String found in binary or memory: https://github.com/jonschlinkert/isobject
Source: chromecache_165.1.dr String found in binary or memory: https://github.com/matomo-org/matomo/blob/master/js/piwik.js
Source: chromecache_165.1.dr String found in binary or memory: https://piwik.org
Source: chromecache_165.1.dr String found in binary or memory: https://piwik.org/free-software/bsd/
Source: unknown Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49725 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.45.150.107:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown HTTPS traffic detected: 23.45.150.107:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: classification engine Classification label: clean1.win@14/68@26/8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://links.vagaro.com/ls/click?upn=u001.Kon-2ByeGREPRt-2FMHBJEr-2BNftLQy37C85yyf9YxxAIy-2FJq3PLzYEADzsJOjZJmWPCXrGiBymbDgWNCdEvfm1BNH0-2FZnhE2Fqy-2FSsIOtx7LQpxNX7P-2FfVHKEr1u26UKQFb3D3YG4ki00REj1E04Z7wOIY-2BcCtVQuUoLdAd9amw5SbnkQFbQc5u3vmE7mtTixB8d9wKb0qFk7cm7sMA9XrFhpA-3D-3DExBw_mIOv0XpXx35YG833h1gVhf-2FA1eNoj0-2BSNCIA490E8poZf9zhuKmLYcYYPyI5RMEJS5PJmUFKooLWtqsOSMpYE2-2BOTAxpdd-2B3KguZQ5K6bz1FjOXir8VRn09fdBmb-2FxeNzUhfawB0fjZZ8FjZxNc2v24ysSJENH-2Be4CR1FtFHHvX2gk7lqc8PIxYbV1NrZdBCENXvDAhbfFN8KAb664q0yOZ8DucGGGo0lIj0MM6HqZV7nosYet2xgGzS6TiC9DpJ-2FNvR2bhWypVWor1hdGEQp4XXvjonXNjLCNFq6PTPYpyElYH-2BdkOjTwd-2FILPpWGgDeAIX0sIj-2FHa7eUNmYuV3parOJAzsD8hiceOi8nX0-2BZ-2BxevuOmOCkWkIawHXnjgLfhy8HCc0O8SjKUU1RQOLrBV9NEIam7y23K9aLJUXs-2BQiMVtZHrseXBDENslnSKEtCtfBe1ltHbrXJx3nqxUXHIzv6Nr-2B9U7T8X0UQvuyOOA4Gj1qPUffc2o-2FcUW4V0zfPWXpyrms6Rjlwh-2FMVG0QGwr-2B0EByi2qLuaOCEcxLTxWurDtohF-2FC-2FlMW23ZmPNJap
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1976,i,15432172165766021247,5987368293969160484,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1976,i,15432172165766021247,5987368293969160484,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Google Drive.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk Jump to behavior
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs