Windows Analysis Report
https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

Overview

General Information

Sample URL:	https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483
Analysis ID:	1431946
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML title does not match URL

Suspicious form URL found

Classification

Signatures

HTML title does not match URL

Source: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

HTTP Parser: Title: MailWizz does not match URL

Suspicious form URL found

Source: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

HTTP Parser: Form action: /index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

Source: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

HTTP Parser: No favicon

Source: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

HTTP Parser: No <meta name="author".. found

Source: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.197.180.115:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.197.180.115:443 -> 192.168.2.4:49761 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.136.128
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.136.128
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.136.128
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.136.128
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483 HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/bootstrap.min.css?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/css/adminlte.css?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/css/style.css?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/css/skin-blue.css?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/cache/591dbfd1/jquery.min.js HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/bootstrap.min.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css?av=9ec570bf HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qhs-rx.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/ionicons/2.0.1/css/ionicons.min.css?av=9ec570bf HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qhs-rx.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/knockout.min.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/notify.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/adminlte.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/cookie.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/app.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/js/app.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: qhs-rx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B

Source: global traffic	DNS traffic detected: DNS query: qhs-rx.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_71.2.dr	String found in binary or memory: http://almsaeedstudio.com
Source: chromecache_69.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: chromecache_60.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_60.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_61.2.dr, chromecache_77.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_69.2.dr	String found in binary or memory: http://ionicons.com/
Source: chromecache_59.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_71.2.dr, chromecache_74.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_74.2.dr	String found in binary or memory: http://www.almsaeedstudio.com
Source: chromecache_59.2.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_59.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat:300
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-mPCLQ7A.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-oPCI.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AUi-qJCY.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AXC-q.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwaPGR_p.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI3wi_FQft1dw.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI3wi_Gwft.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_FQft1dw.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_69.2.dr	String found in binary or memory: https://github.com/driftyco/ionicons
Source: chromecache_69.2.dr	String found in binary or memory: https://github.com/google/material-design-icons
Source: chromecache_70.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/lipis/bootstrap-social
Source: chromecache_61.2.dr, chromecache_77.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_69.2.dr	String found in binary or memory: https://twitter.com/benjsperry
Source: chromecache_69.2.dr	String found in binary or memory: https://twitter.com/ionicframework
Source: chromecache_56.2.dr, chromecache_76.2.dr, chromecache_68.2.dr	String found in binary or memory: https://www.mailwizz.com)
Source: chromecache_56.2.dr, chromecache_76.2.dr, chromecache_68.2.dr	String found in binary or memory: https://www.mailwizz.com/
Source: chromecache_56.2.dr, chromecache_76.2.dr, chromecache_68.2.dr	String found in binary or memory: https://www.mailwizz.com/license/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 23.197.180.115:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.197.180.115:443 -> 192.168.2.4:49761 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/45@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2020,i,2194234812516978810,3701196606030679472,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2020,i,2194234812516978810,3701196606030679472,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.15.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
69.64.48.35	qhs-rx.com	United States	30083	AS-30083-GO-DADDY-COM-LLCUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

Contacted Domains

Name	IP	Active
cdnjs.cloudflare.com	104.17.25.14	true
www.google.com	172.217.15.196	true
qhs-rx.com	69.64.48.35	true
fp2e7a.wpc.phicdn.net	192.229.211.108	true

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://qhs-rx.com/assets/js/knockout.min.js?av=9ec570bf	false	Avira URL Cloud: safe	unknown
https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483	false		unknown
https://qhs-rx.com/assets/js/notify.js?av=9ec570bf	false	Avira URL Cloud: safe	unknown
https://qhs-rx.com/frontend/assets/cache/591dbfd1/jquery.min.js	false	Avira URL Cloud: safe	unknown
https://qhs-rx.com/assets/css/adminlte.css?av=9ec570bf	false	Avira URL Cloud: safe	unknown
https://qhs-rx.com/assets/css/skin-blue.css?av=9ec570bf	false	Avira URL Cloud: safe	unknown
https://qhs-rx.com/assets/js/cookie.js?av=9ec570bf	false	Avira URL Cloud: safe	unknown
https://qhs-rx.com/frontend/assets/css/style.css?av=9ec570bf	false	Avira URL Cloud: safe	unknown
https://qhs-rx.com/assets/js/app.js?av=9ec570bf	false	Avira URL Cloud: safe	unknown
https://qhs-rx.com/assets/js/bootstrap.min.js?av=9ec570bf	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css?av=9ec570bf	false		high
https://qhs-rx.com/assets/js/adminlte.js?av=9ec570bf	false	Avira URL Cloud: safe	unknown
https://qhs-rx.com/frontend/assets/js/app.js?av=9ec570bf	false	Avira URL Cloud: safe	unknown
https://qhs-rx.com/assets/css/bootstrap.min.css?av=9ec570bf	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/ionicons/2.0.1/css/ionicons.min.css?av=9ec570bf	false		high
https://qhs-rx.com/favicon.ico	false	Avira URL Cloud: safe	unknown

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 56	Unicode text, UTF-8 text	7EA0D3C764C478BBC3C9AE6D0B001CAD	19BA17B7FD02563B89F03FF6F1D8576539FF1392	EB611854A404011A74A21D0D982954C5A220C582B894B25C3C04B9474BA24DE4
Chrome Cache Entry: 57	ASCII text	736DC5A80D350F34661EEB11EC02C7EE	AD568E0FEF2C72BDF111E8E1F55E9245FD45AD30	D028883419FBC261A8588DE03FCBA282DEBB5E92853974D69BCA9F5DF9F4904D
Chrome Cache Entry: 58	ASCII text	0704FE77A703921A5520C4EF079B3AC4	C8D27D838B3E0F80232E76FFC0EC2C8AF08727CE	6A6249EB2886276D28435052D388FE35557EA936825D1E06629849EC700BFD95
Chrome Cache Entry: 59	ASCII text, with very long lines (564)	FA8662C7A8415D0355F444EAFF534845	B60C2C301C280378B4D51769CB20A46E65989C73	972F13893B7056C0567637A44EA4C994B1B3DD1B20E185EBF3478AE9086D74CB
Chrome Cache Entry: 60	ASCII text, with very long lines (27303)	4FBD15CB6047AF93373F4F895639C8BF	12D6861075DE8E293265FF6FF03B1F3ADCB44C76	DDD92F10AD162C7449EFF0ACAF40598C05B1111739587EDB75E5326B6697C5D5
Chrome Cache Entry: 61	ASCII text, with very long lines (65366)	8A7442CA6BEDD62CEC4881040B9A9E83	E2D2B846E9EA72A1985458A3748AAB4E01A8FB3A	E9503448692B738DD260FBD7F7CABF2E11F09B600FA97E6EB3A56EBA5B1A7E9B
Chrome Cache Entry: 62	ASCII text, with very long lines (32086)	8101D596B2B8FA35FE3A634EA342D7C3	D6C1F41972DE07B09BFA63D2E50F9AB41EC372BD	540BC6DEC1DD4B92EA4D3FB903F69EABF6D919AFD48F4E312B163C28CFF0F441
Chrome Cache Entry: 63	MS Windows icon resource - 1 icon, 16x16, 2 colors	FF82D748B4ADD52E4DD7C8F0B58B89F2	EA69CEBF29F461D7831368697F303EA4F0C69A2D	DE88C1F678413736E858B27974CD5D2181B3DF891B8999DD93835384B0CA2D8F
Chrome Cache Entry: 64	ASCII text	8749E6D6C19DD95CDFC3E3C303492900	41CF6B40E12097D9545DF2294364E3FEB6896C81	0D9740A58F2FEE125EDF28CEA3CB1D2C98971BB6F2BDCE19635575B3DA4725A0
Chrome Cache Entry: 65	MS Windows icon resource - 1 icon, 16x16, 2 colors	FF82D748B4ADD52E4DD7C8F0B58B89F2	EA69CEBF29F461D7831368697F303EA4F0C69A2D	DE88C1F678413736E858B27974CD5D2181B3DF891B8999DD93835384B0CA2D8F
Chrome Cache Entry: 66	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0	057478083C1D55EA0C2182B24F6DD72F	CAF557CD276A76992084EFC4C8857B66791A6B7F	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
Chrome Cache Entry: 67	ASCII text, with very long lines (1572)	91AC03E451A4BAAE0CF9B1704A46298E	89F3C96528C24B8CFAAD5B25EB6D7B650944EB7F	3309A12DA2ED18DB77A65BFD52B4FB97A0DFD77E4F22889BD708A010FFD2F9C3
Chrome Cache Entry: 68	ASCII text	5154609F598BE8D873FF615D521B6D60	55165AF84A2129E8432F1E96326EE686A07392BD	0AD96C8BCA01A84D8B932DA6E7CB095707BCE86F4844ACD88925B295A7422F2F
Chrome Cache Entry: 69	Unicode text, UTF-8 text, with very long lines (50806)	0D6763B67616CB9183F3931313D42971	F0459300E39155DF7AA5E94B3BDB8C8594F49A60	DE2BBD8E0B32F53A53C1729BEDB350CEA59E9115FBA4F2BED8E2E3DD1F76D9FA
Chrome Cache Entry: 70	ASCII text	449DD3907404CEAD5D8BA6203B3550DC	C9BB690411C3F46145F8EA137E6783929D8C27AA	3585A42757908BA2ACE27F41B01256F6CF4FFB9679F7AC0FF8957817D5CCFDE1
Chrome Cache Entry: 71	ASCII text	01F8DB2276C0B4C5D5A502CA9BF43759	AB5722BE0ECE9EB4E4BD6C769AB25B5676960911	D3F66D9BCCBA43D10358A37DED977507E077B86354677ED726109C2A00393142
Chrome Cache Entry: 72	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0	015C126A3520C9A8F6A27979D0266E96	2ACF956561D44434A6D84204670CF849D3215D5F	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
Chrome Cache Entry: 73	ASCII text, with no line terminators	4485A2BAFD72B3EB2371C9B1286BBDF3	502BABAD61CDB4D2CFA39D15AE3D23395E9AD97B	9C6EF9763E8B7231452141B50CEC16E9281C6E18E11298FE1DE104E9B6E9406F
Chrome Cache Entry: 74	ASCII text, with very long lines (9373)	ADD5B3F0900365F3B4240664DA17760E	7CBD53BFCF830E7C150D6BB55EFCC2832E7543E7	42338BC162A705B04953FC72340216DBEFB55CF12EC1A6E7CAD04E5E680E26BC
Chrome Cache Entry: 75	ASCII text	C63492A79EC1D8A78013E948CFCBB870	81777F6625EEE4BA7C2CE91124996C2217A32CE4	634EE2714F31338B7D877EC553062F3ACC336A9DEAA81D1735DE58FCB8DE6AF8
Chrome Cache Entry: 76	ASCII text	FCE662FE3DD4BD3BE35B6C3ABEC80FF9	F76E098AD417541EF91067C3DE79A52A9B19F9C3	81B55A53574A03BF7AA7847D9C12DA1A44F2EF01F6ECEF5BF5F818426150CD78
Chrome Cache Entry: 77	ASCII text, with very long lines (28941)	BA847811448EF90D98D272AECCEF2A95	5814E91BB6276F4DE8B7951C965F2F190A03978D	898D05A17F2CFC5120DDCDBA47A885C378C0B466F30F0700E502757E24B403A1
Chrome Cache Entry: 78	ASCII text	12021F68B16D4BF9BAE3F4F854F56836	47DBACBDD374F89EB3A3687C273EB6D0995CA480	43BDC741A39D63EA7941307ED84368023175DDDC6F79748578FCC312CF91B874

HTML title does not match URL

Source: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

HTTP Parser: Title: MailWizz does not match URL

Suspicious form URL found

Source: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

HTTP Parser: Form action: /index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

Source: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

HTTP Parser: No favicon

Source: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

HTTP Parser: No <meta name="author".. found

Source: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.197.180.115:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.197.180.115:443 -> 192.168.2.4:49761 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.180.115
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.136.128
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.136.128
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.136.128
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.136.128
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483 HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/bootstrap.min.css?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/css/adminlte.css?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/css/style.css?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/css/skin-blue.css?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/cache/591dbfd1/jquery.min.js HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/bootstrap.min.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css?av=9ec570bf HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qhs-rx.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/ionicons/2.0.1/css/ionicons.min.css?av=9ec570bf HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qhs-rx.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/knockout.min.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/notify.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/adminlte.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/cookie.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/app.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/js/app.js?av=9ec570bf HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: qhs-rx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: qhs-rx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=ae3g6am8blqj2gt0k4eqv5k0mh; csrf_token=3f8399b79b2cb45822f58d614d78dc4528f1ff18s%3A88%3A%22QUdJUFdDVFBEVTRZRnV2d094MkNvaEtIb3E5eHBZZm-tpA3oTctBy3wbK3ZLsu8yRvpbH63zGQKfhhjPTtPPXg%3D%3D%22%3B

Source: global traffic	DNS traffic detected: DNS query: qhs-rx.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_71.2.dr	String found in binary or memory: http://almsaeedstudio.com
Source: chromecache_69.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: chromecache_60.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_60.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_61.2.dr, chromecache_77.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_69.2.dr	String found in binary or memory: http://ionicons.com/
Source: chromecache_59.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_71.2.dr, chromecache_74.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_74.2.dr	String found in binary or memory: http://www.almsaeedstudio.com
Source: chromecache_59.2.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_59.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat:300
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-mPCLQ7A.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-oPCI.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AUi-qJCY.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AXC-q.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwaPGR_p.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI3wi_FQft1dw.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI3wi_Gwft.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_FQft1dw.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_69.2.dr	String found in binary or memory: https://github.com/driftyco/ionicons
Source: chromecache_69.2.dr	String found in binary or memory: https://github.com/google/material-design-icons
Source: chromecache_70.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/lipis/bootstrap-social
Source: chromecache_61.2.dr, chromecache_77.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_69.2.dr	String found in binary or memory: https://twitter.com/benjsperry
Source: chromecache_69.2.dr	String found in binary or memory: https://twitter.com/ionicframework
Source: chromecache_56.2.dr, chromecache_76.2.dr, chromecache_68.2.dr	String found in binary or memory: https://www.mailwizz.com)
Source: chromecache_56.2.dr, chromecache_76.2.dr, chromecache_68.2.dr	String found in binary or memory: https://www.mailwizz.com/
Source: chromecache_56.2.dr, chromecache_76.2.dr, chromecache_68.2.dr	String found in binary or memory: https://www.mailwizz.com/license/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 23.197.180.115:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.197.180.115:443 -> 192.168.2.4:49761 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/45@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2020,i,2194234812516978810,3701196606030679472,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2020,i,2194234812516978810,3701196606030679472,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

ID:	1431946
Product:	CloudBasic
Start time:	03:28:56
Start date:	26.04.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://qhs-rx.com/index.php/lists/qf0856g1wm416/unsubscribe/oq197fczd8113/bt706mvd1j483