Windows Analysis Report
https://form.jotform.co/91400704915855

Overview

General Information

Sample URL:	https://form.jotform.co/91400704915855
Analysis ID:	1428510
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Classification

Signatures

HTML body contains low number of good links

Source: https://form.jotform.co/91400704915855

HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://form.jotform.co/91400704915855

HTTP Parser: Title: Instructions does not match URL

Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="author".. found
Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="author".. found
Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="author".. found
Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="author".. found

Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="copyright".. found
Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="copyright".. found
Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="copyright".. found
Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.157.166:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.157.166:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49767 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152

Source: global traffic	HTTP traffic detected: GET /91400704915855 HTTP/1.1Host: form.jotform.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/prototype.forms.js?v=3.3.53134 HTTP/1.1Host: cdn01.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stylebuilder/static/cardforms-default.css?46d0360 HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/vendor/math-processor.js?v=3.3.53134 HTTP/1.1Host: cdn01.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/jotform.forms.js?v=3.3.53134 HTTP/1.1Host: cdn02.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stylebuilder/91400704915855/style.css?themeID=5a55c5f1cf3bfe30640fbfe1&v=1441a7909c087dbbe7ce59881b9df8b9 HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/umd/eb862aaabdf/for-cardform-js.js?4.5 HTTP/1.1Host: cdn01.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5.12.1/bundle.min.js HTTP/1.1Host: browser.sentry-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://form.jotform.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/?family=Roboto&display=swap HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cdn.jotfor.ms/stylebuilder/91400704915855/style.css?themeID=5a55c5f1cf3bfe30640fbfe1&v=1441a7909c087dbbe7ce59881b9df8b9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg?width=2048 HTTP/1.1Host: www.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/umd/eb862aaabdf/for-formuser.js HTTP/1.1Host: cdn01.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ownerView.php?id=91400704915855 HTTP/1.1Host: www.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg HTTP/1.1Host: www.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.jotfor.ms/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/punycode-1.4.1.min.js?v=3.3.53134 HTTP/1.1Host: cdn03.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/hakardesign/form_files/Roundup.5ce5d6152c6430.17556224.jpg HTTP/1.1Host: www.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto/fonts/Roboto-Medium.woff2 HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://form.jotform.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.jotfor.ms/fonts/?family=Roboto&display=swapAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto/fonts/Roboto-Light.woff2 HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://form.jotform.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.jotfor.ms/fonts/?family=Roboto&display=swapAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto/fonts/Roboto-Regular.woff2 HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://form.jotform.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.jotfor.ms/fonts/?family=Roboto&display=swapAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto/fonts/Roboto-Bold.woff2 HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://form.jotform.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.jotfor.ms/fonts/?family=Roboto&display=swapAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jufs/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg?md5=_am6pKaF5m-l77kw6iPdwQ&expires=1713492277 HTTP/1.1Host: files.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.jotfor.ms/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JOTFORM_SESSION=1389d892-56fb-c6a3-19e6-703a7ff3; userReferer=https%3A%2F%2Fform.jotform.co%2F; guest=guest_0647535bc8132518
Source: global traffic	HTTP traffic detected: GET /jufs/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg?md5=_am6pKaF5m-l77kw6iPdwQ&expires=1713492277&width=2048 HTTP/1.1Host: files.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JOTFORM_SESSION=6e8de294-f2e0-1e5e-b33c-c5a8f435; userReferer=https%3A%2F%2Fform.jotform.co%2F; guest=guest_48f3bcffeadb20ff
Source: global traffic	HTTP traffic detected: GET /jufs/hakardesign/form_files/Roundup.5ce5d6152c6430.17556224.jpg?md5=d9g8TwPcqnHX4GBfKudH3A&expires=1713492278 HTTP/1.1Host: files.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /form/91400704915855/?ref=&res=1280x1024&eventID=1713492267426_91400704915855_OgCiYPB&loc=https%253A%252F%252Fform.jotform.co%252F91400704915855 HTTP/1.1Host: events.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /formuser/91400704915855/combinedinfo?master=1 HTTP/1.1Host: api.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://form.jotform.coSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /assets/img/favicons/favicon-2021.svg HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jufs/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg?md5=_am6pKaF5m-l77kw6iPdwQ&expires=1713492277 HTTP/1.1Host: files.jotform.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /jufs/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg?md5=_am6pKaF5m-l77kw6iPdwQ&expires=1713492277&width=2048 HTTP/1.1Host: files.jotform.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /jufs/hakardesign/form_files/Roundup.5ce5d6152c6430.17556224.jpg?md5=d9g8TwPcqnHX4GBfKudH3A&expires=1713492278 HTTP/1.1Host: files.jotform.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /formuser/91400704915855/combinedinfo?master=1 HTTP/1.1Host: api.jotform.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /assets/img/favicons/favicon-2021.svg HTTP/1.1Host: cdn.jotfor.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: form.jotform.co

Source: chromecache_70.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_70.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_70.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_70.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_81.2.dr	String found in binary or memory: http://jsfromhell.com/classes/math-processor
Source: chromecache_79.2.dr	String found in binary or memory: http://loading.retry.widdit.com/
Source: chromecache_71.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_79.2.dr	String found in binary or memory: http://tt.epicplay.com
Source: chromecache_65.2.dr	String found in binary or memory: http://www.jotform.com/form/91400704915855
Source: chromecache_79.2.dr, chromecache_65.2.dr	String found in binary or memory: https://api.jotform.com
Source: chromecache_65.2.dr	String found in binary or memory: https://browser.sentry-cdn.com/5.12.1/bundle.min.js
Source: chromecache_79.2.dr	String found in binary or memory: https://browser.sentry-cdn.com/5.19.0/bundle.min.js
Source: chromecache_79.2.dr	String found in binary or memory: https://cdn.jotfor.ms
Source: chromecache_79.2.dr	String found in binary or memory: https://cdn.jotfor.ms/
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn.jotfor.ms/assets/img/favicons/favicon-2021.svg
Source: chromecache_79.2.dr	String found in binary or memory: https://cdn.jotfor.ms/assets/img/uncategorized/access-image.png
Source: chromecache_79.2.dr	String found in binary or memory: https://cdn.jotfor.ms/assets/img/uncategorized/encrypted-form-badge.png
Source: chromecache_79.2.dr	String found in binary or memory: https://cdn.jotfor.ms/assets/img/uncategorized/hipaa-badge-compliance.png
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Black.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Black.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-BlackItalic.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-BlackItalic.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Bold.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Bold.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-BoldItalic.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-BoldItalic.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Italic.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Italic.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Light.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Light.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-LightItalic.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-LightItalic.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Medium.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Medium.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-MediumItalic.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-MediumItalic.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Regular.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Regular.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Thin.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Thin.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-ThinItalic.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-ThinItalic.woff2)
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn.jotfor.ms/resources/assets/icon/jotform-icon-dark-400x400.png?v=1
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn.jotfor.ms/stylebuilder/91400704915855/style.css?themeID=5a55c5f1cf3bfe30640fbfe1&v=1
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn.jotfor.ms/stylebuilder/static/cardforms-default.css?46d0360
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn01.jotfor.ms/js/vendor/math-processor.js?v=3.3.53134
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn01.jotfor.ms/s/umd/eb862aaabdf/for-formuser.js
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn01.jotfor.ms/static/prototype.forms.js?v=3.3.53134
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn02.jotfor.ms/static/jotform.forms.js?v=3.3.53134
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn03.jotfor.ms/js/punycode-1.4.1.min.js?v=3.3.53134
Source: chromecache_79.2.dr	String found in binary or memory: https://eu-api.jotform.com
Source: chromecache_79.2.dr	String found in binary or memory: https://events.jotform.com/
Source: chromecache_65.2.dr	String found in binary or memory: https://form.jotform.com/91400704915855
Source: chromecache_76.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript
Source: chromecache_79.2.dr	String found in binary or memory: https://hipaa-api.jotform.com
Source: chromecache_79.2.dr	String found in binary or memory: https://hipaa.jotform.com/
Source: chromecache_79.2.dr	String found in binary or memory: https://js.stripe.com/
Source: chromecache_79.2.dr	String found in binary or memory: https://screenshots.jotform.com/opt/templates/screen_editor.html?shot=
Source: chromecache_79.2.dr	String found in binary or memory: https://screenshots.jotform.com/queue/
Source: chromecache_79.2.dr	String found in binary or memory: https://screenshots.jotform.com/wishbox-server.php
Source: chromecache_79.2.dr	String found in binary or memory: https://screenshots.jotform.com/wishbox-server.php?callback=?
Source: chromecache_79.2.dr	String found in binary or memory: https://widgets.jotform.io/mobileResponsive/mobile.responsive.min.css
Source: chromecache_79.2.dr	String found in binary or memory: https://www.jotform.com
Source: chromecache_79.2.dr	String found in binary or memory: https://www.jotform.com/?utm_source=powered_by_jotform&utm_medium=banner&utm_term=
Source: chromecache_79.2.dr	String found in binary or memory: https://www.jotform.com/accessible-forms/?utm_source=formfooter&utm_medium=banner&utm_term=
Source: chromecache_79.2.dr	String found in binary or memory: https://www.jotform.com/encrypted-forms
Source: chromecache_79.2.dr	String found in binary or memory: https://www.jotform.com/hipaa
Source: chromecache_65.2.dr	String found in binary or memory: https://www.jotform.com/oembed/?format=json&url=http://www.jotform.com/form/91400704915855
Source: chromecache_65.2.dr	String found in binary or memory: https://www.jotform.com/oembed/?format=xml&url=http://www.jotform.com/form/'91400704915855
Source: chromecache_79.2.dr	String found in binary or memory: https://www.jotform.com/server.php
Source: chromecache_65.2.dr	String found in binary or memory: https://www.jotform.com/uploads/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.j

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.157.166:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.157.166:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49767 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/46@28/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2204,i,2313981544644397911,16468999574719493747,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://form.jotform.co/91400704915855"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2204,i,2313981544644397911,16468999574719493747,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.19.129.105	www.jotform.com	United States	13335	CLOUDFLARENETUS	false
35.201.118.58	go.lb.jotform.com	United States	15169	GOOGLEUS	false
172.67.7.107	cdn.jotfor.ms	United States	13335	CLOUDFLARENETUS	false
104.19.128.105	api.jotform.com	United States	13335	CLOUDFLARENETUS	false
35.190.41.132	go.files.jotform.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.194.217	browser.sentry-cdn.com	United States	54113	FASTLYUS	false
142.250.9.103	www.google.com	United States	15169	GOOGLEUS	false
104.22.73.81	cdn01.jotfor.ms	United States	13335	CLOUDFLARENETUS	false
104.22.72.81	cdn03.jotfor.ms	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6

Contacted Domains

Name	IP	Active
cdn01.jotfor.ms	104.22.73.81	true
browser.sentry-cdn.com	151.101.194.217	true
cdn.jotfor.ms	172.67.7.107	true
www.jotform.com	104.19.129.105	true
fp2e7a.wpc.phicdn.net	192.229.211.108	true
go.files.jotform.com	35.190.41.132	true
bg.microsoft.map.fastly.net	199.232.214.172	true
go.lb.jotform.com	35.201.118.58	true
edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.50.37	true
cdn03.jotfor.ms	104.22.72.81	true
www.google.com	142.250.9.103	true
api.jotform.com	104.19.128.105	true
cdn02.jotfor.ms	172.67.7.107	true
events.jotform.com	104.19.128.105	true
form.jotform.co	unknown	unknown
files.jotform.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.jotform.com/ownerView.php?id=91400704915855	false		high
https://www.jotform.com/uploads/hakardesign/form_files/Roundup.5ce5d6152c6430.17556224.jpg	false		high
https://cdn.jotfor.ms/stylebuilder/91400704915855/style.css?themeID=5a55c5f1cf3bfe30640fbfe1&v=1441a7909c087dbbe7ce59881b9df8b9	false		high
https://cdn01.jotfor.ms/static/prototype.forms.js?v=3.3.53134	false		high
https://cdn02.jotfor.ms/static/jotform.forms.js?v=3.3.53134	false		high
https://cdn.jotfor.ms/assets/img/favicons/favicon-2021.svg	false		high
https://form.jotform.co/91400704915855	false		high
https://cdn.jotfor.ms/stylebuilder/static/cardforms-default.css?46d0360	false		high
https://cdn01.jotfor.ms/s/umd/eb862aaabdf/for-formuser.js	false		high
https://www.jotform.com/uploads/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg	false		high
https://api.jotform.com/formuser/91400704915855/combinedinfo?master=1	false		high
https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Medium.woff2	false		high
https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Regular.woff2	false		high
https://cdn01.jotfor.ms/s/umd/eb862aaabdf/for-cardform-js.js?4.5	false		high
https://events.jotform.com/form/91400704915855/?ref=&res=1280x1024&eventID=1713492267426_91400704915855_OgCiYPB&loc=https%253A%252F%252Fform.jotform.co%252F91400704915855	false		high
https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Light.woff2	false		high
https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Bold.woff2	false		high
https://cdn.jotfor.ms/fonts/?family=Roboto&display=swap	false		high
https://cdn01.jotfor.ms/js/vendor/math-processor.js?v=3.3.53134	false		high
https://cdn03.jotfor.ms/js/punycode-1.4.1.min.js?v=3.3.53134	false		high
https://browser.sentry-cdn.com/5.12.1/bundle.min.js	false	0%, Virustotal, Browse	unknown
https://www.jotform.com/uploads/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg?width=2048	false		high

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 59	SVG Scalable Vector Graphics image	22D0D6C28D15653EEF6FBA8C6B3B2CD9	2DF46016F6C452B0E94ABBB5BAAD83D5260D9668	50031717A4E9AA52BB82D14D99299C51565BE44789DD646F2DEC7B2F7626B209
Chrome Cache Entry: 60	SVG Scalable Vector Graphics image	22D0D6C28D15653EEF6FBA8C6B3B2CD9	2DF46016F6C452B0E94ABBB5BAAD83D5260D9668	50031717A4E9AA52BB82D14D99299C51565BE44789DD646F2DEC7B2F7626B209
Chrome Cache Entry: 61	Web Open Font Format (Version 2), TrueType, length 65976, version 2.8978	F6E8581B385445FDC2CD79074AED2B57	A6C4231D1FFEAC70025899AB812891A248C713E9	8CB58B06E0C6CD07D7F711952DC1B670C6FB821353D40C65097352FB523D2593
Chrome Cache Entry: 62	ASCII text, with very long lines (2753)	F57ED28889AC6C64CD5F338C757F3A5A	89A78113A6D87756C5C17B3CC5D901F21222D7AA	E18BD528FF34A5E1E62A82CDE24E3271F4F2296DB9FCCB6F11C94A4DDF4B193E
Chrome Cache Entry: 63	ASCII text, with very long lines (65536), with no line terminators	CB2082A161D5357DB9C0AA22F2073478	A3FAD114C2B154E74DE7165205EE0D4E4A41B761	52CA5E1307B32CDA924051D40A68AA84929DFDD23DB1BF051C3962B00486E3B0
Chrome Cache Entry: 64	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=2981, bps=182, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D3100, orientation=upper-left, width=4472], baseline, precision 8, 2048x1365, components 3	C4DFDD0F1F016ACAFB67E79B737D96AA	257D0906DD4B4588DB57D87E8F8D3DD583AF4A08	B6480A6B3EE64D93F9FA9BEBAF75D5B36294D3760009F9B23166AF32ED1DF34E
Chrome Cache Entry: 65	HTML document, Unicode text, UTF-8 text, with very long lines (41331)	35C1218E515BABEA69DCC288261A819B	94C8709626F98A78979810921FE2BEB2EBE1C66C	29D2C191E11B4AA12A958E75894D90EE8E0891D2DB9A79AAFA6F2C30CCFC619D
Chrome Cache Entry: 66	JSON data	606EA3BB392F7A28E1CF5A1A3FB5B2BF	F5977AE32849A879EE85B658BFC56960E43DD209	8D344D68D91FA31947AED1FEAA37BAABD3E51EF58212501BBBF708C37559CBF8
Chrome Cache Entry: 67	ASCII text, with no line terminators	9D25748B8C5675D512279DCA4336F898	471FEC2155AE1B17F314188E00B32C150AB1F2ED	C5CFFF99665CA30FE516B0F75DE6EB06EAF36A2ADC8197AF6BA4E8EEE5B828AA
Chrome Cache Entry: 68	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 827x749, components 3	445F1598245531CB6B287B617F325215	DF965A8DF93D040018920AEDE849455837ACACE9	1FEE9C02EB43ACDEE243FEDBC99CD13F9B990636C2EA4EF93D64F7410D18A224
Chrome Cache Entry: 69	Web Open Font Format (Version 2), TrueType, length 66592, version 2.8978	18210229D6366235FC0A33341240E47D	D1CCC9174457C0C6FF135CAACA32DC7A36E621FF	842049C9398EF9DFDCF19C71A494C86CD97A6648049E47D1747DDC9C833F8AB8
Chrome Cache Entry: 70	ASCII text, with very long lines (32766)	D89D037C075723BA4A91D0EF52F4D9D4	3BC79FDB7BD581635F52CB7AF93E1AB96276C5F9	45E6F72F61BDAD3B953B9BC0D195F0E671122DEE5AF377D7027A9D0034A4629F
Chrome Cache Entry: 71	ASCII text, with very long lines (2199)	F804F62127E351B24C131D521B73A657	5287AFCBBBDD5C62506EAE2BCFF359C5A7907812	FFACE13AE112A253E99FB74EB69FB02CF6698EEE1D8EF55F03FAE545680B128E
Chrome Cache Entry: 72	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=2981, bps=182, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D3100, orientation=upper-left, width=4472], baseline, precision 8, 2048x1365, components 3	C4DFDD0F1F016ACAFB67E79B737D96AA	257D0906DD4B4588DB57D87E8F8D3DD583AF4A08	B6480A6B3EE64D93F9FA9BEBAF75D5B36294D3760009F9B23166AF32ED1DF34E
Chrome Cache Entry: 73	Web Open Font Format (Version 2), TrueType, length 66388, version 2.8978	2643258ADA907C31CAD24A00AFB658F8	E09182A4A2E0FE18E90E3084D5AD207F9798AA4B	D8E11447FBD0800512F9089C87B13A84B4CE5AA42680CE75B839D02A065190C0
Chrome Cache Entry: 74	Web Open Font Format (Version 2), TrueType, length 67028, version 2.8978	9A78A2FE33B8DDDCA2584273D74C3C1E	03093D16AC533EA975396693522045C280FB7A9D	092783BC7ECA891BED9CA566C42B131F12ACB864B8FFD8C7F849EBB4E22DD7B5
Chrome Cache Entry: 75	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=2981, bps=182, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D3100, orientation=upper-left, width=4472], progressive, precision 8, 4472x2981, components 3	5320A65B72DDB997C2020773C08DF007	15C8D0F9529B710C0136D2EC5FD0F00372A087D7	F864A86B890A487D4E6B29CA899CD44406C37BA6999B9930CA19C5FA768D5450
Chrome Cache Entry: 76	ASCII text, with very long lines (56138)	9D0C32954AECFE9412681A2734C4F961	9C4E8156D111E5C9A8B238C114895BB0FA59CF4D	75457B054E6E1E89F10DDA4B777D5676404ACAA1541618F03D4ED055A3857E05
Chrome Cache Entry: 77	ASCII text	E9B66E5D23AE2F1AFA1E175B924A45C1	405F736EAC1BA4D8272AFFBE3BB7439CDF012D11	C375043F418D3BD18ECCFA0388D8CEDDD30D471D7DF5AAC81E8232A4FA39CE15
Chrome Cache Entry: 78	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators	203D53BC05CFD7BB14E110D3BDC7533C	0903EEB4E227817623104E749068EF228E07300D	6ADAA46F955E30F521CA4117D97179A48567ACF86E80640A9E2F68AE5CF86DF8
Chrome Cache Entry: 79	Unicode text, UTF-8 text, with very long lines (6048)	B11453D6286D3A946A9990201A0A4986	7B0643B85A86658AE8EBB782EB8FD53384054D68	66C84D1FA5BCB17E25AE07841CDD5D3E1D138F3B9665BA058E85A06EE58C9C7B
Chrome Cache Entry: 80	ASCII text, with very long lines (65536), with no line terminators	2B3E80CD39439C11FE133E691C6D03D9	E0D83C26CB934FA30B8CE409DB88F684712AD9FD	1BB1F7D718361D6614391372A4F82B6A53A42147194440B54338E08BA6BC6454
Chrome Cache Entry: 81	ASCII text, with CRLF line terminators	C1E5FD57B38BFEBA34FB59BB79CD1081	56D2F830289DA66545DD513D80CD23458A1289BA	65EF65684DE3E75A6C4FF9B3EB494774F51DEF93FA0920EBD7840C450160836E
Chrome Cache Entry: 82	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 827x749, components 3	445F1598245531CB6B287B617F325215	DF965A8DF93D040018920AEDE849455837ACACE9	1FEE9C02EB43ACDEE243FEDBC99CD13F9B990636C2EA4EF93D64F7410D18A224
Chrome Cache Entry: 83	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=2981, bps=182, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D3100, orientation=upper-left, width=4472], progressive, precision 8, 4472x2981, components 3	5320A65B72DDB997C2020773C08DF007	15C8D0F9529B710C0136D2EC5FD0F00372A087D7	F864A86B890A487D4E6B29CA899CD44406C37BA6999B9930CA19C5FA768D5450

HTML body contains low number of good links

Source: https://form.jotform.co/91400704915855

HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://form.jotform.co/91400704915855

HTTP Parser: Title: Instructions does not match URL

Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="author".. found
Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="author".. found
Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="author".. found
Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="author".. found

Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="copyright".. found
Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="copyright".. found
Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="copyright".. found
Source: https://form.jotform.co/91400704915855	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.157.166:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.157.166:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49767 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.157.166
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152

Source: global traffic	HTTP traffic detected: GET /91400704915855 HTTP/1.1Host: form.jotform.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/prototype.forms.js?v=3.3.53134 HTTP/1.1Host: cdn01.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stylebuilder/static/cardforms-default.css?46d0360 HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/vendor/math-processor.js?v=3.3.53134 HTTP/1.1Host: cdn01.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/jotform.forms.js?v=3.3.53134 HTTP/1.1Host: cdn02.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stylebuilder/91400704915855/style.css?themeID=5a55c5f1cf3bfe30640fbfe1&v=1441a7909c087dbbe7ce59881b9df8b9 HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/umd/eb862aaabdf/for-cardform-js.js?4.5 HTTP/1.1Host: cdn01.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5.12.1/bundle.min.js HTTP/1.1Host: browser.sentry-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://form.jotform.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/?family=Roboto&display=swap HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cdn.jotfor.ms/stylebuilder/91400704915855/style.css?themeID=5a55c5f1cf3bfe30640fbfe1&v=1441a7909c087dbbe7ce59881b9df8b9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg?width=2048 HTTP/1.1Host: www.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/umd/eb862aaabdf/for-formuser.js HTTP/1.1Host: cdn01.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ownerView.php?id=91400704915855 HTTP/1.1Host: www.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg HTTP/1.1Host: www.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.jotfor.ms/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/punycode-1.4.1.min.js?v=3.3.53134 HTTP/1.1Host: cdn03.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/hakardesign/form_files/Roundup.5ce5d6152c6430.17556224.jpg HTTP/1.1Host: www.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto/fonts/Roboto-Medium.woff2 HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://form.jotform.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.jotfor.ms/fonts/?family=Roboto&display=swapAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto/fonts/Roboto-Light.woff2 HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://form.jotform.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.jotfor.ms/fonts/?family=Roboto&display=swapAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto/fonts/Roboto-Regular.woff2 HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://form.jotform.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.jotfor.ms/fonts/?family=Roboto&display=swapAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto/fonts/Roboto-Bold.woff2 HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://form.jotform.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.jotfor.ms/fonts/?family=Roboto&display=swapAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jufs/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg?md5=_am6pKaF5m-l77kw6iPdwQ&expires=1713492277 HTTP/1.1Host: files.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.jotfor.ms/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JOTFORM_SESSION=1389d892-56fb-c6a3-19e6-703a7ff3; userReferer=https%3A%2F%2Fform.jotform.co%2F; guest=guest_0647535bc8132518
Source: global traffic	HTTP traffic detected: GET /jufs/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg?md5=_am6pKaF5m-l77kw6iPdwQ&expires=1713492277&width=2048 HTTP/1.1Host: files.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JOTFORM_SESSION=6e8de294-f2e0-1e5e-b33c-c5a8f435; userReferer=https%3A%2F%2Fform.jotform.co%2F; guest=guest_48f3bcffeadb20ff
Source: global traffic	HTTP traffic detected: GET /jufs/hakardesign/form_files/Roundup.5ce5d6152c6430.17556224.jpg?md5=d9g8TwPcqnHX4GBfKudH3A&expires=1713492278 HTTP/1.1Host: files.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /form/91400704915855/?ref=&res=1280x1024&eventID=1713492267426_91400704915855_OgCiYPB&loc=https%253A%252F%252Fform.jotform.co%252F91400704915855 HTTP/1.1Host: events.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /formuser/91400704915855/combinedinfo?master=1 HTTP/1.1Host: api.jotform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://form.jotform.coSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /assets/img/favicons/favicon-2021.svg HTTP/1.1Host: cdn.jotfor.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://form.jotform.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jufs/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg?md5=_am6pKaF5m-l77kw6iPdwQ&expires=1713492277 HTTP/1.1Host: files.jotform.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /jufs/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.jpeg?md5=_am6pKaF5m-l77kw6iPdwQ&expires=1713492277&width=2048 HTTP/1.1Host: files.jotform.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /jufs/hakardesign/form_files/Roundup.5ce5d6152c6430.17556224.jpg?md5=d9g8TwPcqnHX4GBfKudH3A&expires=1713492278 HTTP/1.1Host: files.jotform.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /formuser/91400704915855/combinedinfo?master=1 HTTP/1.1Host: api.jotform.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: userReferer=https%3A%2F%2Fform.jotform.co%2F; JOTFORM_SESSION=df783002-7f2b-86eb-6758-7a389115; guest=guest_e53dafd55fcb9e90
Source: global traffic	HTTP traffic detected: GET /assets/img/favicons/favicon-2021.svg HTTP/1.1Host: cdn.jotfor.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: form.jotform.co

Source: chromecache_70.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_70.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_70.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_70.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_81.2.dr	String found in binary or memory: http://jsfromhell.com/classes/math-processor
Source: chromecache_79.2.dr	String found in binary or memory: http://loading.retry.widdit.com/
Source: chromecache_71.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_79.2.dr	String found in binary or memory: http://tt.epicplay.com
Source: chromecache_65.2.dr	String found in binary or memory: http://www.jotform.com/form/91400704915855
Source: chromecache_79.2.dr, chromecache_65.2.dr	String found in binary or memory: https://api.jotform.com
Source: chromecache_65.2.dr	String found in binary or memory: https://browser.sentry-cdn.com/5.12.1/bundle.min.js
Source: chromecache_79.2.dr	String found in binary or memory: https://browser.sentry-cdn.com/5.19.0/bundle.min.js
Source: chromecache_79.2.dr	String found in binary or memory: https://cdn.jotfor.ms
Source: chromecache_79.2.dr	String found in binary or memory: https://cdn.jotfor.ms/
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn.jotfor.ms/assets/img/favicons/favicon-2021.svg
Source: chromecache_79.2.dr	String found in binary or memory: https://cdn.jotfor.ms/assets/img/uncategorized/access-image.png
Source: chromecache_79.2.dr	String found in binary or memory: https://cdn.jotfor.ms/assets/img/uncategorized/encrypted-form-badge.png
Source: chromecache_79.2.dr	String found in binary or memory: https://cdn.jotfor.ms/assets/img/uncategorized/hipaa-badge-compliance.png
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Black.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Black.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-BlackItalic.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-BlackItalic.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Bold.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Bold.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-BoldItalic.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-BoldItalic.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Italic.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Italic.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Light.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Light.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-LightItalic.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-LightItalic.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Medium.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Medium.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-MediumItalic.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-MediumItalic.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Regular.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Regular.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Thin.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-Thin.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-ThinItalic.woff)
Source: chromecache_77.2.dr	String found in binary or memory: https://cdn.jotfor.ms/fonts/Roboto/fonts/Roboto-ThinItalic.woff2)
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn.jotfor.ms/resources/assets/icon/jotform-icon-dark-400x400.png?v=1
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn.jotfor.ms/stylebuilder/91400704915855/style.css?themeID=5a55c5f1cf3bfe30640fbfe1&v=1
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn.jotfor.ms/stylebuilder/static/cardforms-default.css?46d0360
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn01.jotfor.ms/js/vendor/math-processor.js?v=3.3.53134
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn01.jotfor.ms/s/umd/eb862aaabdf/for-formuser.js
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn01.jotfor.ms/static/prototype.forms.js?v=3.3.53134
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn02.jotfor.ms/static/jotform.forms.js?v=3.3.53134
Source: chromecache_65.2.dr	String found in binary or memory: https://cdn03.jotfor.ms/js/punycode-1.4.1.min.js?v=3.3.53134
Source: chromecache_79.2.dr	String found in binary or memory: https://eu-api.jotform.com
Source: chromecache_79.2.dr	String found in binary or memory: https://events.jotform.com/
Source: chromecache_65.2.dr	String found in binary or memory: https://form.jotform.com/91400704915855
Source: chromecache_76.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript
Source: chromecache_79.2.dr	String found in binary or memory: https://hipaa-api.jotform.com
Source: chromecache_79.2.dr	String found in binary or memory: https://hipaa.jotform.com/
Source: chromecache_79.2.dr	String found in binary or memory: https://js.stripe.com/
Source: chromecache_79.2.dr	String found in binary or memory: https://screenshots.jotform.com/opt/templates/screen_editor.html?shot=
Source: chromecache_79.2.dr	String found in binary or memory: https://screenshots.jotform.com/queue/
Source: chromecache_79.2.dr	String found in binary or memory: https://screenshots.jotform.com/wishbox-server.php
Source: chromecache_79.2.dr	String found in binary or memory: https://screenshots.jotform.com/wishbox-server.php?callback=?
Source: chromecache_79.2.dr	String found in binary or memory: https://widgets.jotform.io/mobileResponsive/mobile.responsive.min.css
Source: chromecache_79.2.dr	String found in binary or memory: https://www.jotform.com
Source: chromecache_79.2.dr	String found in binary or memory: https://www.jotform.com/?utm_source=powered_by_jotform&utm_medium=banner&utm_term=
Source: chromecache_79.2.dr	String found in binary or memory: https://www.jotform.com/accessible-forms/?utm_source=formfooter&utm_medium=banner&utm_term=
Source: chromecache_79.2.dr	String found in binary or memory: https://www.jotform.com/encrypted-forms
Source: chromecache_79.2.dr	String found in binary or memory: https://www.jotform.com/hipaa
Source: chromecache_65.2.dr	String found in binary or memory: https://www.jotform.com/oembed/?format=json&url=http://www.jotform.com/form/91400704915855
Source: chromecache_65.2.dr	String found in binary or memory: https://www.jotform.com/oembed/?format=xml&url=http://www.jotform.com/form/'91400704915855
Source: chromecache_79.2.dr	String found in binary or memory: https://www.jotform.com/server.php
Source: chromecache_65.2.dr	String found in binary or memory: https://www.jotform.com/uploads/hakardesign/form_files/pexels-photo-134878.5ce62ba0b5bfd0.35611671.j

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.157.166:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.157.166:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49767 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/46@28/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2204,i,2313981544644397911,16468999574719493747,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://form.jotform.co/91400704915855"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2204,i,2313981544644397911,16468999574719493747,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

ID:	1428510
Product:	CloudBasic
Start time:	04:03:32
Start date:	19.04.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://form.jotform.co/91400704915855

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://form.jotform.co/91400704915855

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://form.jotform.co/91400704915855