Analysis Report http://vhpcovidvaccine.com

Phishing:

Found iframes

Source: https://villagehealthpartners.com/independence-medical-village	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=8080+Independence+Pkwy+Suite+200%2c+Plano%2c+TX+75025&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/independence-medical-village	HTTP Parser: Iframe src: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html
Source: https://villagehealthpartners.com/legacy-medical-village	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=5425+W.+Spring+Creek+Pkwy+Suite+200%2c+Plano%2c+TX+75024&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/legacy-medical-village	HTTP Parser: Iframe src: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html
Source: https://villagehealthpartners.com/mckinney-medical-village	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=7300+Eldorado+Pkwy+Suite+200%2c+McKinney%2c+TX+75070&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/mckinney-medical-village	HTTP Parser: Iframe src: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=5425+W.+Spring+Creek+Pkwy+Suite+200%2c+Plano%2c+TX+75024&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=8380+Warren+Parkway+Suite+100%2c+Frisco%2c+TX+75034&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=8080+Independence+Pkwy+Suite+200%2c+Plano%2c+TX+75025&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=7300+Eldorado+Pkwy+Suite+200%2c+McKinney%2c+TX+75070&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=5425+West+Spring+Creek+Pkwy+Suite+175%2c+Plano%2c+TX+75024&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html#rand=0.25047209730439795&iit=1610003496228&tmr=load%3D1610003494981%26core%3D1610003495002%26main%3D1610003496219%26ifr%3D1610003496230&cb=0&cdn=0&md=0&kw=&ab=-&dh=villagehealthpartners.com&dr=https%3A%2F%2Fvillagehealthpartners.com%2Four-blog&du=https%3A%2F%2Fvillagehealthpartners.com%2Four-blog%2Fmoderation-and-balance-for-a-smart-holiday-season&href=https%3A%2F%2Fvillagehealthpartners.com%2Four-blog%2Fmoderation-and-balance-for-a-smart-holiday-season&dt=Moderation%20and%20Balance%20for%20a%20Smart%20Holiday%20Season&dbg=0&cap=tc%3D0%26ab%3D0&inst=1&jsl=0&prod=undefined&lng=en&ogt=type%3Darticle%2Cimage%2Cdescription%2Ctitle%2Curl&pc=men&pub=ra-5da4e141d2d990f8&ssl=1&sid=5ff6b4262153103e&srf=0.01&ver=300&xck=0&xtr=0&og=url%3Dhttps%253A%252F%252Fvillagehealthpartners.com%252Four-blog%252Fmoderation-and-balance-for-a-smart-holiday-season%26title%3DModeration%2520and%2520Balance%2520for%2520a%2520Smart%2520Holiday%2520Season%26description%3DDietitian%2520Melanie%2520Wilder%2520shares%2520her%2520tips%2520for%2520a%2520well-balanced%2520holiday.%26image%3Dhttps%253A%252F%252Fassets.doctorlogic.com%252FImages%252FSites%252FV%252FVillageHealthPartners%252F582850.png%253Fcrop%253D(0.00%252C2.88%252C%25201125.00%252C635.69)%2526srotate%253D0%26type%3Darticle&csi=undefined&rev=v8.28.8-wp&ct=1&xld=1&xd=1
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.youtube.com/embed/ikjTv4l8LfQ?autoplay=0&enablejsapi=1&fs=1&modestbranding=1&rel=0
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.youtube.com/embed/o5xIKmNRz7U?autoplay=0&enablejsapi=1&fs=1&modestbranding=1&rel=0
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: //www.youtube.com/embed/skljnYidGGE?autoplay=0&enablejsapi=1&fs=1&modestbranding=1&rel=0
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=5425+W.+Spring+Creek+Pkwy+Suite+200%2c+Plano%2c+TX+75024&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=8380+Warren+Parkway+Suite+100%2c+Frisco%2c+TX+75034&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=8080+Independence+Pkwy+Suite+200%2c+Plano%2c+TX+75025&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=7300+Eldorado+Pkwy+Suite+200%2c+McKinney%2c+TX+75070&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=5425+West+Spring+Creek+Pkwy+Suite+175%2c+Plano%2c+TX+75024&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html#rand=0.25047209730439795&iit=1610003454216&tmr=load%3D1610003417024%26core%3D1610003417081%26main%3D1610003454198%26ifr%3D1610003454219&cb=0&cdn=0&md=0&kw=&ab=-&dh=villagehealthpartners.com&dr=&du=https%3A%2F%2Fvillagehealthpartners.com%2Four-blog%2Fcovid-19-vaccine&href=https%3A%2F%2Fvillagehealthpartners.com%2Four-blog%2Fcovid-19-vaccine&dt=COVID-19%20VACCINE%20UPDATES&dbg=0&cap=tc%3D0%26ab%3D0&inst=1&jsl=0&prod=undefined&lng=en&ogt=type%3Darticle%2Cimage%2Cdescription%2Ctitle%2Curl&pc=men&pub=ra-5da4e141d2d990f8&ssl=1&sid=5ff6b3d99b3fdd2c&srf=0.01&ver=300&xck=0&xtr=0&og=url%3Dhttps%253A%252F%252Fvillagehealthpartners.com%252Four-blog%252Fcovid-19-vaccine%26title%3DCOVID-19%2520VACCINE%2520UPDATES%26description%3DGet%2520updates%2520on%2520the%2520COVID-19%2520vaccine%2520here.%26image%3Dhttps%253A%252F%252Fassets.doctorlogic.com%252FImages%252FSites%252FV%252FVillageHealthPartners%252FMasterPage%252F582169.jpg%253Fcrop%253D(0.00%252C0.00%252C%25201152.00%252C648.00)%2526srotate%253D0%26type%3Darticle&csi=undefined&rev=v8.28.8-wp&ct=1&xld=1&xd=1
Source: https://villagehealthpartners.com/frisco-medical-village	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=8380+Warren+Parkway+Suite+100%2c+Frisco%2c+TX+75034&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/frisco-medical-village	HTTP Parser: Iframe src: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html
Source: https://villagehealthpartners.com/independence-medical-village	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=8080+Independence+Pkwy+Suite+200%2c+Plano%2c+TX+75025&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/independence-medical-village	HTTP Parser: Iframe src: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html
Source: https://villagehealthpartners.com/legacy-medical-village	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=5425+W.+Spring+Creek+Pkwy+Suite+200%2c+Plano%2c+TX+75024&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/legacy-medical-village	HTTP Parser: Iframe src: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html
Source: https://villagehealthpartners.com/mckinney-medical-village	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=7300+Eldorado+Pkwy+Suite+200%2c+McKinney%2c+TX+75070&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/mckinney-medical-village	HTTP Parser: Iframe src: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=5425+W.+Spring+Creek+Pkwy+Suite+200%2c+Plano%2c+TX+75024&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=8380+Warren+Parkway+Suite+100%2c+Frisco%2c+TX+75034&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=8080+Independence+Pkwy+Suite+200%2c+Plano%2c+TX+75025&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=7300+Eldorado+Pkwy+Suite+200%2c+McKinney%2c+TX+75070&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=5425+West+Spring+Creek+Pkwy+Suite+175%2c+Plano%2c+TX+75024&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Iframe src: https://s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html#rand=0.25047209730439795&iit=1610003496228&tmr=load%3D1610003494981%26core%3D1610003495002%26main%3D1610003496219%26ifr%3D1610003496230&cb=0&cdn=0&md=0&kw=&ab=-&dh=villagehealthpartners.com&dr=https%3A%2F%2Fvillagehealthpartners.com%2Four-blog&du=https%3A%2F%2Fvillagehealthpartners.com%2Four-blog%2Fmoderation-and-balance-for-a-smart-holiday-season&href=https%3A%2F%2Fvillagehealthpartners.com%2Four-blog%2Fmoderation-and-balance-for-a-smart-holiday-season&dt=Moderation%20and%20Balance%20for%20a%20Smart%20Holiday%20Season&dbg=0&cap=tc%3D0%26ab%3D0&inst=1&jsl=0&prod=undefined&lng=en&ogt=type%3Darticle%2Cimage%2Cdescription%2Ctitle%2Curl&pc=men&pub=ra-5da4e141d2d990f8&ssl=1&sid=5ff6b4262153103e&srf=0.01&ver=300&xck=0&xtr=0&og=url%3Dhttps%253A%252F%252Fvillagehealthpartners.com%252Four-blog%252Fmoderation-and-balance-for-a-smart-holiday-season%26title%3DModeration%2520and%2520Balance%2520for%2520a%2520Smart%2520Holiday%2520Season%26description%3DDietitian%2520Melanie%2520Wilder%2520shares%2520her%2520tips%2520for%2520a%2520well-balanced%2520holiday.%26image%3Dhttps%253A%252F%252Fassets.doctorlogic.com%252FImages%252FSites%252FV%252FVillageHealthPartners%252F582850.png%253Fcrop%253D(0.00%252C2.88%252C%25201125.00%252C635.69)%2526srotate%253D0%26type%3Darticle&csi=undefined&rev=v8.28.8-wp&ct=1&xld=1&xd=1
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.youtube.com/embed/ikjTv4l8LfQ?autoplay=0&enablejsapi=1&fs=1&modestbranding=1&rel=0
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.youtube.com/embed/o5xIKmNRz7U?autoplay=0&enablejsapi=1&fs=1&modestbranding=1&rel=0
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: //www.youtube.com/embed/skljnYidGGE?autoplay=0&enablejsapi=1&fs=1&modestbranding=1&rel=0
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=5425+W.+Spring+Creek+Pkwy+Suite+200%2c+Plano%2c+TX+75024&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=8380+Warren+Parkway+Suite+100%2c+Frisco%2c+TX+75034&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=8080+Independence+Pkwy+Suite+200%2c+Plano%2c+TX+75025&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=7300+Eldorado+Pkwy+Suite+200%2c+McKinney%2c+TX+75070&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=5425+West+Spring+Creek+Pkwy+Suite+175%2c+Plano%2c+TX+75024&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Iframe src: https://s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html#rand=0.25047209730439795&iit=1610003454216&tmr=load%3D1610003417024%26core%3D1610003417081%26main%3D1610003454198%26ifr%3D1610003454219&cb=0&cdn=0&md=0&kw=&ab=-&dh=villagehealthpartners.com&dr=&du=https%3A%2F%2Fvillagehealthpartners.com%2Four-blog%2Fcovid-19-vaccine&href=https%3A%2F%2Fvillagehealthpartners.com%2Four-blog%2Fcovid-19-vaccine&dt=COVID-19%20VACCINE%20UPDATES&dbg=0&cap=tc%3D0%26ab%3D0&inst=1&jsl=0&prod=undefined&lng=en&ogt=type%3Darticle%2Cimage%2Cdescription%2Ctitle%2Curl&pc=men&pub=ra-5da4e141d2d990f8&ssl=1&sid=5ff6b3d99b3fdd2c&srf=0.01&ver=300&xck=0&xtr=0&og=url%3Dhttps%253A%252F%252Fvillagehealthpartners.com%252Four-blog%252Fcovid-19-vaccine%26title%3DCOVID-19%2520VACCINE%2520UPDATES%26description%3DGet%2520updates%2520on%2520the%2520COVID-19%2520vaccine%2520here.%26image%3Dhttps%253A%252F%252Fassets.doctorlogic.com%252FImages%252FSites%252FV%252FVillageHealthPartners%252FMasterPage%252F582169.jpg%253Fcrop%253D(0.00%252C0.00%252C%25201152.00%252C648.00)%2526srotate%253D0%26type%3Darticle&csi=undefined&rev=v8.28.8-wp&ct=1&xld=1&xd=1
Source: https://villagehealthpartners.com/frisco-medical-village	HTTP Parser: Iframe src: https://www.google.com/maps/embed/v1/place?q=8380+Warren+Parkway+Suite+100%2c+Frisco%2c+TX+75034&key=AIzaSyCrx3rbllrFhuPBc1cg06LH041jBIlOALw&zoom=12
Source: https://villagehealthpartners.com/frisco-medical-village	HTTP Parser: Iframe src: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html

HTML title does not match URL

Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Title: Moderation and Balance for a Smart Holiday Season does not match URL
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Title: COVID-19 VACCINE UPDATES does not match URL
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: Title: Moderation and Balance for a Smart Holiday Season does not match URL
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: Title: COVID-19 VACCINE UPDATES does not match URL

META author tag missing

Source: https://villagehealthpartners.com/independence-medical-village	HTTP Parser: No <meta name="author".. found
Source: https://villagehealthpartners.com/legacy-medical-village	HTTP Parser: No <meta name="author".. found
Source: https://villagehealthpartners.com/mckinney-medical-village	HTTP Parser: No <meta name="author".. found
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: No <meta name="author".. found
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: No <meta name="author".. found
Source: https://villagehealthpartners.com/frisco-medical-village	HTTP Parser: No <meta name="author".. found
Source: https://villagehealthpartners.com/independence-medical-village	HTTP Parser: No <meta name="author".. found
Source: https://villagehealthpartners.com/legacy-medical-village	HTTP Parser: No <meta name="author".. found
Source: https://villagehealthpartners.com/mckinney-medical-village	HTTP Parser: No <meta name="author".. found
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: No <meta name="author".. found
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: No <meta name="author".. found
Source: https://villagehealthpartners.com/frisco-medical-village	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://villagehealthpartners.com/independence-medical-village	HTTP Parser: No <meta name="copyright".. found
Source: https://villagehealthpartners.com/legacy-medical-village	HTTP Parser: No <meta name="copyright".. found
Source: https://villagehealthpartners.com/mckinney-medical-village	HTTP Parser: No <meta name="copyright".. found
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: No <meta name="copyright".. found
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: No <meta name="copyright".. found
Source: https://villagehealthpartners.com/frisco-medical-village	HTTP Parser: No <meta name="copyright".. found
Source: https://villagehealthpartners.com/independence-medical-village	HTTP Parser: No <meta name="copyright".. found
Source: https://villagehealthpartners.com/legacy-medical-village	HTTP Parser: No <meta name="copyright".. found
Source: https://villagehealthpartners.com/mckinney-medical-village	HTTP Parser: No <meta name="copyright".. found
Source: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season	HTTP Parser: No <meta name="copyright".. found
Source: https://villagehealthpartners.com/our-blog/covid-19-vaccine	HTTP Parser: No <meta name="copyright".. found
Source: https://villagehealthpartners.com/frisco-medical-village	HTTP Parser: No <meta name="copyright".. found

Compliance:

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 172.67.128.211:443 -> 192.168.2.3:49687 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.128.211:443 -> 192.168.2.3:49686 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.7.78:443 -> 192.168.2.3:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.7.78:443 -> 192.168.2.3:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.23.239:443 -> 192.168.2.3:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.23.239:443 -> 192.168.2.3:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.23.239:443 -> 192.168.2.3:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.23.239:443 -> 192.168.2.3:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.202.55:443 -> 192.168.2.3:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.202.55:443 -> 192.168.2.3:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.97.3:443 -> 192.168.2.3:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.97.3:443 -> 192.168.2.3:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.140.154:443 -> 192.168.2.3:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.140.154:443 -> 192.168.2.3:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.202.59:443 -> 192.168.2.3:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.202.59:443 -> 192.168.2.3:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.3:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.3:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.3:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.3:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.54:443 -> 192.168.2.3:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.54:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.1:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.1:443 -> 192.168.2.3:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.23.239:443 -> 192.168.2.3:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.208.57.208:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.112.193:443 -> 192.168.2.3:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.112.193:443 -> 192.168.2.3:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.24.121.182:443 -> 192.168.2.3:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.24.120.182:443 -> 192.168.2.3:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.24.120.182:443 -> 192.168.2.3:49781 version: TLS 1.2

Networking:

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: vhpcovidvaccine.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.villagepediatricsplano.comConnection: Keep-Alive

Found strings which match to known social media urls

Source: gtm[1].js.2.dr	String found in binary or memory: "vtp_html":"\n\n\n\u003Cscript type=\"text\/gtmscript\"\u003E!function(b,e,f,g,a,c,d){b.fbq||(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq||(b._fbq=a),a.push=a,a.loaded=!0,a.version=\"2.0\",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,\"script\",\"https:\/\/connect.facebook.net\/en_US\/fbevents.js\");fbq(\"init\",\"321601481588665\");fbq(\"track\",\"Lead\");\u003C\/script\u003E\n\n\n\u003Cnoscript\u003E\n\u003Cimg height=\"1\" width=\"1\" src=\"https:\/\/www.facebook.com\/tr?id=321601481588665\u0026amp;ev=Lead\u0026amp;noscript=1\"\u003E\n\u003C\/noscript\u003E\n\n\n", equals www.facebook.com (Facebook)
Source: gtm[1].js.2.dr	String found in binary or memory: "vtp_html":"\n\n\n\u003Cscript type=\"text\/gtmscript\"\u003E!function(b,e,f,g,a,c,d){b.fbq||(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq||(b._fbq=a),a.push=a,a.loaded=!0,a.version=\"2.0\",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,\"script\",\"https:\/\/connect.facebook.net\/en_US\/fbevents.js\");fbq(\"init\",\"321601481588665\");fbq(\"track\",\"PageView\");\u003C\/script\u003E\n\n\n\u003Cnoscript\u003E\n\n\n\u003Cimg height=\"1\" width=\"1\" src=\"https:\/\/www.facebook.com\/tr?id=321601481588665\u0026amp;ev=PageView\u0026amp;noscript=1\"\u003E\n\n\n\u003C\/noscript\u003E\n\n\n", equals www.facebook.com (Facebook)
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: "https://www.facebook.com/VillageHealthPartners", equals www.facebook.com (Facebook)
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: "https://www.youtube.com/user/vhpdoctors" equals www.youtube.com (Youtube)
Source: ikjTv4l8LfQ[1].htm.2.dr	String found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=ikjTv4l8LfQ"> equals www.youtube.com (Youtube)
Source: o5xIKmNRz7U[1].htm.2.dr	String found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=o5xIKmNRz7U"> equals www.youtube.com (Youtube)
Source: skljnYidGGE[1].htm.2.dr	String found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=skljnYidGGE"> equals www.youtube.com (Youtube)
Source: fbevents[1].js.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage||function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules||(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]||(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)||(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsGetTier");e.exports=function(b,c){c=a(c);c=c==null?"www.facebook.com":"www."+c+".facebook.com";return"https://"+c+"/signals/iwl.js?pixel_id="+b}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.*\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL||!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.close()};e.src=i(c,g.ENDPOINT);b.body&&b.body.appendChild(e)}var o=!1,p=function(a){return!!(e&&e.pixelsByID&&Object.prototype.hasOwnProperty.call(e.pixelsByID,a))};function q(){if(o)return;var b=n.getItem(m);if(!b)return;b=JSON.parse(b);var c=b.pixelID,d=b.graphToken,e=b.sessionStartTime;o=!0;h(c,function(){var b=p(c)?c:null;a.FacebookIWL.init(b,d,e)})}function r(b){if(o)return;h(b,func
Source: base[1].js.2.dr	String found in binary or memory: (g.Tm(b,"www.youtube.com"),c=b.toString()):c=yw(c);b=new Aw(c);b.set("cmo=pf","1");d&&b.set("cmo=td","a1.googlevideo.com");return b}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: (r=r.vss_host||"s.youtube.com",this.aa("www_for_videostats")&&"s.youtube.com"===r&&(r=GD(this.S)||"www.youtube.com")):r="video.google.com";this.Dp=r;this.ph(a,!0);this.P=new dD;g.D(this,this.P);r=b?b.innertubeApiKey:mD("",a.innertube_api_key);p=b?b.innertubeApiVersion:mD("",a.innertube_api_version);n=b?b.innertubeContextClientVersion:mD("",a.innertube_context_client_version);this.ha={innertubeApiKey:xo("INNERTUBE_API_KEY")||r,innertubeApiVersion:xo("INNERTUBE_API_VERSION")||p,SD:g.L("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO"), equals www.youtube.com (Youtube)
Source: www-widgetapi[1].js.2.dr	String found in binary or memory: ;var ph=new Set,qh=0,rh=0,sh=["PhantomJS","Googlebot","TO STOP THIS SECURITY SCAN go/scan"];function Y(a,b,c){this.o=this.h=this.i=null;this.m=Ba(this);this.j=0;this.u=!1;this.s=[];this.l=null;this.F=c;this.H={};c=document;if(a="string"===typeof a?c.getElementById(a):a)if(c="iframe"==a.tagName.toLowerCase(),b.host||(b.host=c?Ub(a.src):"https://www.youtube.com"),this.i=new Xe(b),c||(b=th(this,a),this.o=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.h=a,this.h.id||(this.h.id="widget"+Ba(this.h)),Re[this.h.id]=this,window.postMessage){this.l=new P;uh(this);b=R(this.i,"events");for(var d in b)b.hasOwnProperty(d)&& equals www.youtube.com (Youtube)
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: <a class="footer__social-link footer__social-link--facebook" href="https://www.facebook.com/VillageHealthPartners" target="_blank"> equals www.facebook.com (Facebook)
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: <a class="footer__social-link footer__social-link--youtube" href="https://www.youtube.com/user/vhpdoctors" target="_blank"> equals www.youtube.com (Youtube)
Source: ikjTv4l8LfQ[1].htm.2.dr	String found in binary or memory: <div id="player"></div><script >yt.setConfig({"ENABLE_JS_API":true,"INNERTUBE_API_KEY":"AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8","VISITOR_DATA":"CgtkMmo2bWdRR1dNayjJ6tj_BQ%3D%3D","INNERTUBE_CONTEXT":{"client":{"hl":"en","gl":"GB","visitorData":"CgtkMmo2bWdRR1dNayjJ6tj_BQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko,gzip(gfe)","clientName":"WEB_EMBEDDED_PLAYER","clientVersion":"20201222","osName":"Windows","osVersion":"10.0","browserName":"IE","browserVersion":"11.0"},"request":{"sessionId":"6914772865941538274"}},"VIDEO_ID":"ikjTv4l8LfQ","INNERTUBE_CONTEXT_GL":"GB","GAPI_HOST":"https:\/\/apis.google.com","XSRF_TOKEN":"QUFFLUhqbUJ0T3Z1eVkzUUtNeXI4LXZQQUFXX3EyNjRPd3xBQ3Jtc0tsMWswLUd0eEdmc0psLUFyTDFJdFA4b01oUkFzOUlXTVVCaGdFYmpaN3A2YzJ4ZHBESXBZZDlVRTRvWE1UeG1lYnM1SkR1ZTZsSnczMG4yTDZmalp2WFVONW5haERjVGdhemlLejZ6SkpFLUtCelpFMDM5UHljZVZlZlhBVjQxNGtvVVNJb1lzZlptWDlGNGVqekowUHJieF9HLWc=","EVENT_ID":"STX2X76TCf6jx_APzZGnyAs","XSRF_FIELD_NAME":"session_token","GAPI_LOCALE":"en_US","XHR_APIARY_HOST":"youtubei.youtube.com","INNERTUBE_CONTEXT_CLIENT_NAME":56,"PLAYER_VARS":{"playsinline":false,"adformat":null,"modestbranding":"1","fs":"1","co_rel":"1","autoplay":"0","eventid":"STX2X76TCf6jx_APzZGnyAs","allow_autonav":"1","embedded_player_response":"{\"responseContext\":{\"serviceTrackingParams\":[{\"service\":\"CSI\",\"params\":[{\"key\":\"c\",\"value\":\"WEB_EMBEDDED_PLAYER\"},{\"key\":\"cver\",\"value\":\"20201222\"},{\"key\":\"yt_li\",\"value\":\"0\"},{\"key\":\"GetEmbeddedPlayer_rid\",\"value\":\"0x037ac3a740a44755\"}]},{\"service\":\"GFEEDBACK\",\"params\":[{\"key\":\"logged_in\",\"value\":\"0\"},{\"key\":\"e\",\"value\":\"23932523,23983731,23942633,23891344,23965962,23975059,23969486,23973542,23911055,23804281,23946269,23946420,23975726,23839597,23973496,1714245,23981908,23891347,23951620,23944779,23744176,23950598,23974595,23961732,23972240,23968386,23970974,23918597,23884386,23857950,23882502,23934970,23948841,23976578,23969934\"}]},{\"service\":\"GUIDED_HELP\",\"params\":[{\"key\":\"logged_in\",\"value\":\"0\"}]},{\"service\":\"ECATCHER\",\"params\":[{\"key\":\"client.version\",\"value\":\"20201222\"},{\"key\":\"client.name\",\"value\":\"WEB_EMBEDDED_PLAYER\"}]}]},\"embedPreview\":{\"thumbnailPreviewRenderer\":{\"title\":{\"runs\":[{\"text\":\"COVID- 19 Vaccine Update by Dr. Eppich\"}]},\"defaultThumbnail\":{\"thumbnails\":[{\"url\":\"https:\/\/i.ytimg.com\/vi\/ikjTv4l8LfQ\/default.jpg\",\"width\":120,\"height\":90},{\"url\":\"https:\/\/i.ytimg.com\/vi\/ikjTv4l8LfQ\/hqdefault.jpg?sqp=-oaymwEWCKgBEF5IWvKriqkDCQgBFQAAiEIYAQ==\\u0026rs=AOn4CLCL3JzOAhRodrnEqzkiOfPw4aoDFQ\",\"width\":168,\"height\":94},{\"url\":\"https:\/\/i.ytimg.com\/vi\/ikjTv4l8LfQ\/hqdefault.jpg?sqp=-oaymwEWCMQBEG5IWvKriqkDCQgBFQAAiEIYAQ==\\u0026rs=AOn4CLCMM8NFGQefezqWfEDuT1FV9kn9GQ\",\"width\":196,\"height\":110},{\"url\":\"https:\/\/i.ytimg.com\/vi\/ikjTv4l8LfQ\/hqdefault.jpg?sqp=-oaymwEXCPYBEIoBSFryq4qpAwkIARUAAIhCGAE=\\u0026rs=AOn4CLCTMYo
Source: skljnYidGGE[1].htm.2.dr	String found in binary or memory: <div id="player"></div><script >yt.setConfig({"XSRF_FIELD_NAME":"session_token","INNERTUBE_API_KEY":"AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8","GAPI_HOST":"https:\/\/apis.google.com","VISITOR_DATA":"Cgs3b1MweE0tQmRSVSjJ6tj_BQ%3D%3D","INNERTUBE_CONTEXT_CLIENT_NAME":56,"PLAYER_VARS":{"co_rel":"1","playsinline":false,"autoplay":"0","eventid":"STX2X-yVCcyD8gOSwpLoCQ","el":"embedded","is_embed":"1","fs":"1","loaderUrl":"https:\/\/villagehealthpartners.com\/our-blog\/covid-19-vaccine","enablejsapi":"1","modestbranding":"1","rel":"0","allow_autonav":"1","enablecastapi":"1","adformat":null,"video_id":"skljnYidGGE","embedded_player_response":"{\"responseContext\":{\"serviceTrackingParams\":[{\"service\":\"CSI\",\"params\":[{\"key\":\"c\",\"value\":\"WEB_EMBEDDED_PLAYER\"},{\"key\":\"cver\",\"value\":\"20201222\"},{\"key\":\"yt_li\",\"value\":\"0\"},{\"key\":\"GetEmbeddedPlayer_rid\",\"value\":\"0x54c71f4e42585ab3\"}]},{\"service\":\"GFEEDBACK\",\"params\":[{\"key\":\"logged_in\",\"value\":\"0\"},{\"key\":\"e\",\"value\":\"23970974,23983732,23942633,23876025,1714250,23882685,23981908,23804281,23884386,23839597,23969934,23932523,23946420,23946269,23969486,23973542,23965962,23975726,23891344,23911055,23973496,23976578,23948841,23744176,23940248,23974595,23961732,23934970,23944779,23918597,23951620,23950598,23968386,23972240\"}]},{\"service\":\"GUIDED_HELP\",\"params\":[{\"key\":\"logged_in\",\"value\":\"0\"}]},{\"service\":\"ECATCHER\",\"params\":[{\"key\":\"client.version\",\"value\":\"20201222\"},{\"key\":\"client.name\",\"value\":\"WEB_EMBEDDED_PLAYER\"}]}]},\"embedPreview\":{\"thumbnailPreviewRenderer\":{\"title\":{\"runs\":[{\"text\":\"Dr. Eppich Discusses the COVID-19 Vaccine\"}]},\"defaultThumbnail\":{\"thumbnails\":[{\"url\":\"https:\/\/i.ytimg.com\/vi\/skljnYidGGE\/default.jpg\",\"width\":120,\"height\":90},{\"url\":\"https:\/\/i.ytimg.com\/vi\/skljnYidGGE\/hqdefault.jpg?sqp=-oaymwEWCKgBEF5IWvKriqkDCQgBFQAAiEIYAQ==\\u0026rs=AOn4CLBI61c6pNr31BbOUXXkwBnA8s1kfw\",\"width\":168,\"height\":94},{\"url\":\"https:\/\/i.ytimg.com\/vi\/skljnYidGGE\/hqdefault.jpg?sqp=-oaymwEWCMQBEG5IWvKriqkDCQgBFQAAiEIYAQ==\\u0026rs=AOn4CLAUeObdHPGNaUDuk3Nvx96Ya1-iGQ\",\"width\":196,\"height\":110},{\"url\":\"https:\/\/i.ytimg.com\/vi\/skljnYidGGE\/hqdefault.jpg?sqp=-oaymwEXCPYBEIoBSFryq4qpAwkIARUAAIhCGAE=\\u0026rs=AOn4CLDc9_FWgrDYgQ2CNpoM4MobxiNisA\",\"width\":246,\"height\":138},{\"url\":\"https:\/\/i.ytimg.com\/vi\/skljnYidGGE\/mqdefault.jpg\",\"width\":320,\"height\":180},{\"url\":\"https:\/\/i.ytimg.com\/vi\/skljnYidGGE\/hqdefault.jpg?sqp=-oaymwEXCNACELwBSFryq4qpAwkIARUAAIhCGAE=\\u0026rs=AOn4CLCjFI9UrwtykINQxkZQTZFe65PHFw\",\"width\":336,\"height\":188},{\"url\":\"https:\/\/i.ytimg.com\/vi\/skljnYidGGE\/hqdefault.jpg\",\"width\":480,\"height\":360},{\"url\":\"https:\/\/i.ytimg.com\/vi\/skljnYidGGE\/sddefault.jpg\",\"width\":640,\"height\":480},{\"url\":\"https:\/\/i.ytimg.com\/vi\/skljnYidGGE\/maxresdefault.jpg\",\"width\":1920,\"height\":1080}]},\"playButton\":{\"buttonR
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: <iframe id="youtube-iframe" src="//www.youtube.com/embed/skljnYidGGE?autoplay=0&amp;enablejsapi=1&amp;fs=1&amp;modestbranding=1&amp;rel=0" type="text/html"></iframe> equals www.youtube.com (Youtube)
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: <iframe id="youtube-iframe" src="https://www.youtube.com/embed/ikjTv4l8LfQ?autoplay=0&amp;enablejsapi=1&amp;fs=1&amp;modestbranding=1&amp;rel=0" type="text/html"></iframe> equals www.youtube.com (Youtube)
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: <iframe id="youtube-iframe" src="https://www.youtube.com/embed/o5xIKmNRz7U?autoplay=0&amp;enablejsapi=1&amp;fs=1&amp;modestbranding=1&amp;rel=0" type="text/html"></iframe> equals www.youtube.com (Youtube)
Source: ikjTv4l8LfQ[1].htm.2.dr	String found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="https://www.youtube.com/watch?v=ikjTv4l8LfQ" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: o5xIKmNRz7U[1].htm.2.dr	String found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="https://www.youtube.com/watch?v=o5xIKmNRz7U" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: skljnYidGGE[1].htm.2.dr	String found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="https://www.youtube.com/watch?v=skljnYidGGE" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: js[1].js.2.dr	String found in binary or memory: F=V("YT"),M=function(){f(D)};I(v.vtp_gtmOnSuccess);if(F)F.ready&&F.ready(M);else{var P=V("onYouTubeIframeAPIReady");Cm("onYouTubeIframeAPIReady",function(){P&&P();M()});I(function(){for(var X=V("document"),aa=X.getElementsByTagName("script"),pa=aa.length,J=0;J<pa;J++){var K=aa[J].getAttribute("src");if(b(K,"iframe_api")||b(K,"player_api"))return}for(var T=X.getElementsByTagName("iframe"),R=T.length,O=0;O<R;O++)if(!u&&d(T[O],D.cf)){N("https://www.youtube.com/iframe_api");u=!0;break}})}}else I(v.vtp_gtmOnSuccess)} equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: Zga=function(a,b){if(!a.u["0"]){var c=new kx("0","fakesb",void 0,new fx(0,0,0,void 0,void 0,"auto"),null,null,1);a.u["0"]=b?new Xx(new Aw("http://www.youtube.com/videoplayback"),c,"fake"):new $x(new Aw("http://www.youtube.com/videoplayback"),c,new Hu(0,0),new Hu(0,0),0,NaN)}}; equals www.youtube.com (Youtube)
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: ^https://www.youtube.com/embed/ikjTv4l8LfQ?autoplay=0&enablejsapi=1&fs=1&modestbranding=1&rel=0 equals www.youtube.com (Youtube)
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: ^https://www.youtube.com/embed/o5xIKmNRz7U?autoplay=0&enablejsapi=1&fs=1&modestbranding=1&rel=0 equals www.youtube.com (Youtube)
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: ^https://www.youtube.com/embed/skljnYidGGE?autoplay=0&enablejsapi=1&fs=1&modestbranding=1&rel=0 equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: a.BASE_YT_URL)||"")||tw(this.Bc)||this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;f="detailpage";"adunit"===h?f=this.B?"embedded":"detailpage":"embedded"===h||this.C?f=kD(f,h,vha):h&&(f="embedded");this.fa=f;Dp();h=null;f=b?b.playerStyle:a.ps;var l=g.jb(qD,f);!f||l&&!this.C||(h=f);this.playerStyle=h;this.K=(this.I=g.jb(qD,this.playerStyle))&&"area120-boutique"!==this.playerStyle&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.Os=!this.K;this.ba=R(!1,a.disableplaybackui);this.Sc= equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: b),this.P=!1,this.videoData.aa("html5_playready_enable_non_persist_license")&&(this.D.pst="0"));b=HC(this.B)?fxa(c.initData).replace("skd://","https://"):this.B.C;this.videoData.aa("enable_shadow_yttv_channels")&&(b=new g.Rm(b),document.location.origin&&document.location.origin.includes("green")?g.Tm(b,"web-green-qa.youtube.com"):g.Tm(b,"www.youtube.com"),b=b.toString());this.baseUrl=b;this.fairplayKeyId=Qd(this.baseUrl,"ek")||"";if(b=Qd(this.baseUrl,"cpi")||"")this.cryptoPeriodIndex=Number(b);this.fa= equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: fG.prototype.replace=function(a,b){for(var c=g.q(a),d=c.next();!d.done;d=c.next())delete this.u[d.value.encryptedTokenJarContents];eG(this,b)};hG.prototype.B=function(a){var b,c,d=null===(b=a.responseContext)||void 0===b?void 0:b.locationPlayabilityToken;void 0!==d&&(this.locationPlayabilityToken=d,this.u=void 0,"TVHTML5"===(null===(c=a.responseContext)||void 0===c?void 0:c.clientName)?(this.localStorage=gG(this))&&this.localStorage.set("yt-location-playability-token",d,15552E3):g.Aq("YT_CL",JSON.stringify({r5:d}),15552E3,void 0,!0))};var kG={bluetooth:"CONN_DISCO",cellular:"CONN_CELLULAR_UNKNOWN",ethernet:"CONN_WIFI",none:"CONN_NONE",wifi:"CONN_WIFI",wimax:"CONN_CELLULAR_4G",other:"CONN_UNKNOWN",unknown:"CONN_UNKNOWN","slow-2g":"CONN_CELLULAR_2G","2g":"CONN_CELLULAR_2G","3g":"CONN_CELLULAR_3G","4g":"CONN_CELLULAR_4G"};var sia=/[&\?]action_proxy=1/,ria=/[&\?]token=([\w-]*)/,tia=/[&\?]video_id=([\w-]*)/,uia=/[&\?]index=([\d-]*)/,via=/[&\?]m_pos_ms=([\d-]*)/,wia=/[&\?]vvt=([\w-]*)/,xia=/[&\?]mt=([\d-]*)/,oia="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),xG="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "), equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.CU.prototype.C=function(a){var b=this;eua(this);var c=a.Px,d=this.api.T();"GENERIC_WITHOUT_LINK"!==c||d.I?"TOO_MANY_REQUESTS"===c?(d=this.api.getVideoData(),this.Ec(FU(this,"TOO_MANY_REQUESTS_WITH_LINK",d.Rk(),void 0,void 0,void 0,!1))):"HTML5_NO_AVAILABLE_FORMATS_FALLBACK"!==c||d.I?this.Ec(g.DU(a.errorMessage)):this.Ec(FU(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Md(c, equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.PD=function(a){a=GD(a.S);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.fE=function(a){var b=g.QD(a);!a.aa("yt_embeds_disable_new_error_lozenge_url")&&xha.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.k.clone=function(){var a=new Xm;a.C=this.C;this.u&&(a.u=this.u.clone(),a.B=this.B);return a};var dn="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),xda=/\bocr\b/;var yda=/(?:\[|%5B)([a-zA-Z0-9_]+)(?:\]|%5D)/g;gn.prototype.set=function(a,b){b=void 0===b?!0:b;0<=a&&52>a&&0===a%1&&this.B[a]!=b&&(this.B[a]=b,this.u=-1)}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.QD(this);d&&"www.youtube.com"===c?d="https://youtu.be/"+a:g.KD(this)?(d="https://"+c+"/fire",b.v=a):(d=this.protocol+"://"+c+"/watch",b.v=a,sr&&(a=Xp())&&(b.ebc=a));return g.Md(d,b)}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: jja(this.videoData),this.V("highrepfallback");else if(a.u){var d=this.Aa?this.Aa.K.F:null;if(cya(a)&&d&&d.isLocked())var e="FORMAT_UNAVAILABLE";else if(!this.Sa.I&&"auth"===a.errorCode&&"429"===a.details.rc){e="TOO_MANY_REQUESTS";var f="6"}this.V("playererror",a.errorCode,e,g.HB(a.details),f)}else d=/^pp/.test(this.videoData.clientPlaybackNonce),AZ(this,a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(d="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+ equals www.youtube.com (Youtube)
Source: js[1].js.2.dr	String found in binary or memory: var n=["www.youtube.com","www.youtube-nocookie.com"],t={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},p,u=!1;(function(v){Z.__ytl=v;Z.__ytl.b="ytl";Z.__ytl.g=!0;Z.__ytl.priorityOverride=0})(function(v){v.vtp_triggerStartOption?q(v):Eh(function(){q(v)})})}(); equals www.youtube.com (Youtube)
Source: iframe_api[1].js.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/5dd3f3b2\/www-widgetapi.vflset\/www-widgetapi.js';if(!window["YT"])var YT={loading:0,loaded:0};if(!window["YTConfig"])var YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: vhpcovidvaccine.com

Urls found in memory or binary data

Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: http://...
Source: flickity[1].css.2.dr	String found in binary or memory: http://flickity.metafizzy.co
Source: fontawesome-webfont[1].eot.2.dr, core[1].css.2.dr	String found in binary or memory: http://fontawesome.io
Source: core[1].css.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: fontawesome-webfont[1].eot.2.dr	String found in binary or memory: http://fontawesome.io/license/
Source: fontawesome-webfont[1].eot.2.dr	String found in binary or memory: http://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/licens
Source: js[1].js0.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: bootstrap.custom[1].css.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: box-469cf41adb11dc78be68c1ae7f9457a4[1].htm.2.dr	String found in binary or memory: http://insights-staging.hotjar.com
Source: box-469cf41adb11dc78be68c1ae7f9457a4[1].htm.2.dr	String found in binary or memory: http://local.hotjar.com
Source: onion[1].js.2.dr	String found in binary or memory: http://maps.google.cn
Source: init_embed[1].js.2.dr	String found in binary or memory: http://maps.gstatic.cn
Source: init_embed[1].js.2.dr	String found in binary or memory: http://maps.gstatic.cn/mapfiles/embed/images/entity11.png)
Source: init_embed[1].js.2.dr	String found in binary or memory: http://maps.gstatic.cn/mapfiles/embed/images/entity11_hdpi.png)
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: http://schema.org
Source: core[1].css.2.dr	String found in binary or memory: http://upload.wikimedia.org/wikipedia/commons/thumb/1/16/Deletion_icon.svg/600px-Deletion_icon.svg.p
Source: js[1].js0.2.dr	String found in binary or memory: http://www.broofa.com
Source: common[1].js.2.dr	String found in binary or memory: http://www.google.cn
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: http://www.villagepediatricsplano.com/
Source: base[1].js.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: js[1].js.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity
Source: base[1].js.2.dr	String found in binary or memory: https://admin.youtube.com
Source: gtm[1].js.2.dr	String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: js[1].js.2.dr	String found in binary or memory: https://analytics.google.com/g/collect
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://assets.doctorlogic.com/Images/Sites/V/VillageHealthPartners/586188.png
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://assets.doctorlogic.com/Images/Sites/V/VillageHealthPartners/MasterPage/582169.jpg?crop=(0.00
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://assets.doctorlogic.com/Images/Sites/V/VillageHealthPartners/favicon.ico?deviceType=DesktopU
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://assets.doctorlogic.com/Images/Sites/V/VillageHealthPartners/favicon.ico?deviceType=Desktopm
Source: imagestore.dat.2.dr	String found in binary or memory: https://assets.doctorlogic.com/Images/Sites/V/VillageHealthPartners/favicon.ico?deviceType=Desktop~
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://assets.doctorlogic.com/Images/Sites/V/VillagePediatrics/favicon.ico?deviceType=DesktopE
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://browser-uartners.com/directoryoderation-
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://browser-uartners.com/find-a-locationRoot
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://browser-uartners.com/frisco-medical-villa
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://browser-uartners.com/independence-medical
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://browser-uartners.com/legacy-medical-villa
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://browser-uartners.com/mckinney-medical-vil
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://browser-uartners.com/our-blog/moderation-
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://browser-uartners.com/our-blogationRoot
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://browser-uartners.com/owser.html#3.3.26:villagehealthpartners.comRoot
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://browser-uartners.com/request-an-appointme
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://browser-uicsplano.com/kinney-medical-vil
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://browser-update.org/update-browser.html
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://browser-update.org/update-browser.html#3.3.26:villagehealthpartners.com
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://browser-update.org/update-browser.htmlP
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://browser-updateartners.com/our-blog/covid-19-vaccine
Source: js[1].js0.2.dr	String found in binary or memory: https://cbks0.googleapis.com/cbk?
Source: js[1].js0.2.dr	String found in binary or memory: https://cbks1.googleapis.com/cbk?
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://demo-app.well-health-app.com/livechat/remote/index.js?h=
Source: common[1].js.2.dr, util[1].js.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: www-widgetapi[1].js.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: base[1].js.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: core[1].css.2.dr	String found in binary or memory: https://doctorlogic.atlassian.net/wiki/x/BYBxAQ
Source: core[1].css.2.dr	String found in binary or memory: https://doctorlogic.atlassian.net/wiki/x/P4BgAQ
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://doctorlogic.com/
Source: js[1].js0.2.dr	String found in binary or memory: https://earthbuilder.googleapis.com
Source: ZuEecj_9OwcpcjSVHGiQyegdDhQ[1].js.2.dr	String found in binary or memory: https://embedded.cloudflareapps.com
Source: core[1].css.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat:400
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat:700&display=swap
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v15/JTURjIg1_i6t8kCHKm45_ZpC3gnD-A.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v15/JTURjIg1_i6t8kCHKm45_bZF3gnD-A.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v15/JTUSjIg1_i6t8kCHKm459WlhzQ.woff)
Source: js[1].js0.2.dr	String found in binary or memory: https://geo0.ggpht.com/cbk
Source: js[1].js0.2.dr	String found in binary or memory: https://geo1.ggpht.com/cbk
Source: js[1].js0.2.dr	String found in binary or memory: https://geo2.ggpht.com/cbk
Source: js[1].js0.2.dr	String found in binary or memory: https://geo3.ggpht.com/cbk
Source: gtm[1].js.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: bootstrap.custom[1].css.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://google.com/article
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://healow.com/apps/provider/aleksandra-fuller-2104200
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://healow.com/apps/provider/kristen-dirks-2052699
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://healow.com/apps/provider/marissa-stanfilllpc-2104410
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://healow.com/apps/provider/melanie-tschirhart-2052700
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://healow.com/apps/provider/sweta-manekfnp-2123283
Source: box-469cf41adb11dc78be68c1ae7f9457a4[1].htm.2.dr	String found in binary or memory: https://insights-staging.hotjar.com
Source: js[1].js0.2.dr	String found in binary or memory: https://khms.googleapis.com/mz?v=883
Source: js[1].js0.2.dr	String found in binary or memory: https://khms0.google.com/kh?v=128
Source: js[1].js0.2.dr	String found in binary or memory: https://khms0.google.com/kh?v=883
Source: js[1].js0.2.dr	String found in binary or memory: https://khms0.googleapis.com/kh?v=128
Source: js[1].js0.2.dr	String found in binary or memory: https://khms0.googleapis.com/kh?v=883
Source: js[1].js0.2.dr	String found in binary or memory: https://khms1.google.com/kh?v=128
Source: js[1].js0.2.dr	String found in binary or memory: https://khms1.google.com/kh?v=883
Source: js[1].js0.2.dr	String found in binary or memory: https://khms1.googleapis.com/kh?v=128
Source: js[1].js0.2.dr	String found in binary or memory: https://khms1.googleapis.com/kh?v=883
Source: js[1].js0.2.dr	String found in binary or memory: https://lh3.ggpht.com/
Source: js[1].js0.2.dr	String found in binary or memory: https://lh4.ggpht.com/
Source: js[1].js0.2.dr	String found in binary or memory: https://lh5.ggpht.com/
Source: js[1].js0.2.dr	String found in binary or memory: https://lh6.ggpht.com/
Source: box-469cf41adb11dc78be68c1ae7f9457a4[1].htm.2.dr	String found in binary or memory: https://local.hotjar.com
Source: js[1].js0.2.dr	String found in binary or memory: https://maps.google.com
Source: js[1].js0.2.dr	String found in binary or memory: https://maps.googleapis.com
Source: js[1].js0.2.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/43/4
Source: js[1].js0.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js/GeoPhotoService.GetMetadata
Source: js[1].js0.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js/GeoPhotoService.SingleImageSearch
Source: place[2].htm0.2.dr, place[3].htm.2.dr, place[2].htm.2.dr, place[1].htm.2.dr, place[1].htm0.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geo
Source: init_embed[1].js.2.dr	String found in binary or memory: https://maps.gstatic.com
Source: js[1].js0.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/
Source: init_embed[1].js.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/defaultphoto
Source: init_embed[1].js.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/entity11.png);background-size:70px
Source: init_embed[1].js.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/entity11_hdpi.png);background-size:70px
Source: init_embed[1].js.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/exp2.png);background-size:109px
Source: init_embed[1].js.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/exp2_hdpi.png);background-size:109px
Source: js[1].js0.2.dr	String found in binary or memory: https://maps.gstatic.com/maps-api-v3/api/images/
Source: place[2].htm0.2.dr	String found in binary or memory: https://maps.gstatic.com/maps-api-v3/embed/js/43/4/init_embed.js
Source: init_embed[1].js.2.dr	String found in binary or memory: https://mt0.google.com/vt/icon/name=icons/spotlight/star_S_8x.png&scale=
Source: js[1].js0.2.dr	String found in binary or memory: https://mts.googleapis.com/maps/vt/icon
Source: init_embed[1].js.2.dr	String found in binary or memory: https://myaccount.google.com/
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://mycw104.ecwcloud.com/portal14156/jsp/100mp/login_otp.jsp
Source: gtm[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: js[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: base[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/osd.js
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://podcasts.google.com/feed/aHR0cHM6Ly93d3cub21ueWNvbnRlbnQuY29tL2QvcGxheWxpc3QvYWFlYTRlNjktYWY
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html#rand=0.25047209730439795&iit=16100034
Source: hotjar-1553786[1].js.2.dr	String found in binary or memory: https://script.hotjar.com/
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: js[1].js0.2.dr	String found in binary or memory: https://static.panoramio.com.storage.googleapis.com/photos/
Source: js[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: js[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: js[1].js0.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: init_embed[1].js.2.dr	String found in binary or memory: https://support.google.com/maps/?p=thirdpartymaps
Source: init_embed[1].js.2.dr	String found in binary or memory: https://support.google.com/maps?p=kml
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: remote[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/7640706
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://twitter.com/VHPDocs
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://vars.hotjar.com/box-469cf41adb11dc78be68c1ae7f9457a4.html
Source: base[1].js.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://villagehealthpartners.com/Item/Post/42560
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/WdtRWdtRtps://villagehealthpartners.com/
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://villagehealthpartners.com/archived-blogs/rss
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/directory
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://villagehealthpartners.com/directory?name=&procedure=&role=dietitian&facility=
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/directoryVhttps://villagehealthpartners.com/directory
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/directoryoderation-and-balance-for-a-smart-holiday-seasonad%3D1610
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/fPlano
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/find-a-location
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/find-a-location.26:villagehealthpartners.comhttps://villagehealthp
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/find-a-location~Family
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/frisco-medical-village
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/frisco-medical-villagege?deviceType=Desktop&crop=(880
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/independence-medical-village
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/independence-medical-villagejFamily
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/legacy-medical-village
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/legacy-medical-villagevillagehealthpartners.com&dr=https%3A%2F%2Fv
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/mckinney-medical-village
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/mckinney-medical-villagebFamily
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/mckinney-medical-villagege
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/our-blog
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/our-blog/covid-19-vaccine
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/our-blog/covid-19-vaccine0COVID-19
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://villagehealthpartners.com/our-blog/covid-19-vaccineRoot
Source: {60E2BCB5-50B7-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://villagehealthpartners.com/our-blog/covid-19-vaccineartners.com/our-blog/covid-19-vaccineRoot
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/our-blog/covid-19-vaccinee=Desktop&crop=(880
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-season
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/our-blog/moderation-and-balance-for-a-smart-holiday-seasonbModerat
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://villagehealthpartners.com/our-blog/rss
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/our-blogation
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/owser.html#3.3.26:villagehealthpartners.com
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/owser.html#3.3.26:villagehealthpartners.comf
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/request-an-appointment
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagehealthpartners.com/request-an-appointmentbalance-for-a-smart-holiday-seasonts.doctorl
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagepediatricsplano.com/
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagepediatricsplano.com/VPlano
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagepediatricsplano.com/kinney-medical-villagege
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagepediatricsplano.com/kinney-medical-villagege//villagehealthpartners.com/mckinney-medi
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://villagepediatricsplano.com/kinney-medical-villagege?deviceType=Desktop&crop=(880
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://www.dshs.texas.gov/coronavirus/immunize/vaccine.aspx
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://www.dshs.texas.gov/coronavirus/immunize/vaccine.aspx?fbclid=IwAR0oJGAcbwa0azGbtJJKQwAkbz0Tsd
Source: js[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: js[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/g/collect
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: js[1].js0.2.dr, common[1].js.2.dr, gtm[1].js.2.dr, js[1].js.2.dr	String found in binary or memory: https://www.google.com
Source: js[1].js0.2.dr	String found in binary or memory: https://www.google.com/maps
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://www.google.com/maps/embed/v1/place?q=5425
Source: covid-19-vaccine[1].htm.2.dr, ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://www.google.com/maps/embed/v1/place?q=7300
Source: covid-19-vaccine[1].htm.2.dr, ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://www.google.com/maps/embed/v1/place?q=8080
Source: covid-19-vaccine[1].htm.2.dr, ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://www.google.com/maps/embed/v1/place?q=8380
Source: js[1].js0.2.dr	String found in binary or memory: https://www.google.com/maps/preview/log204
Source: js[1].js.2.dr	String found in binary or memory: https://www.google.com/travel/flights/click/conversion/
Source: base[1].js.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: gtm[1].js.2.dr, js[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: js[1].js.2.dr	String found in binary or memory: https://www.googletraveladservices.com/travel/clk/pagead/conversion/
Source: remote[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: box-469cf41adb11dc78be68c1ae7f9457a4[1].htm.2.dr	String found in binary or memory: https://www.hotjar.com
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/de.html
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/el.html
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/es.html
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/fi.html
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/fr.html
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/it.html
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/nl.html
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/pl.html
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/pt.html
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/pt_br.html
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/ru.html
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/sq.html
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/sv.html
Source: modules.bbf52a84e7a5d87de773[1].js.2.dr	String found in binary or memory: https://www.hotjarconsent.com/zh.html
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://www.nytimes.com/interactive/2020/12/03/opinion/covid-19-vaccine-timeline.html
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://www.vhpcareers.com/
Source: iframe_api[1].js.2.dr, www-widgetapi[1].js.2.dr	String found in binary or memory: https://www.youtube.com
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/embed/ikjTv4l8LfQ?autoplay=0&enablejsapi=1&fs=1&modestbranding=1
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://www.youtube.com/embed/ikjTv4l8LfQ?autoplay=0&enablejsapi=1&fs=1&modestbranding=1&rel=0
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/embed/o5xIKmNRz7U?autoplay=0&enablejsapi=1&fs=1&modestbranding=1
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://www.youtube.com/embed/o5xIKmNRz7U?autoplay=0&enablejsapi=1&fs=1&modestbranding=1&rel=0
Source: ~DF03AF1C1A9C9B4C16.TMP.1.dr	String found in binary or memory: https://www.youtube.com/embed/skljnYidGGE?autoplay=0&enablejsapi=1&fs=1&modestbranding=1&rel=0
Source: base[1].js.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: js[1].js.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: covid-19-vaccine[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/user/vhpdoctors
Source: ikjTv4l8LfQ[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=ikjTv4l8LfQ
Source: o5xIKmNRz7U[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=o5xIKmNRz7U
Source: skljnYidGGE[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=skljnYidGGE
Source: base[1].js.2.dr	String found in binary or memory: https://youtu.be/
Source: base[1].js.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: base[1].js.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: base[1].js.2.dr	String found in binary or memory: https://yurt.corp.google.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49686
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 172.67.128.211:443 -> 192.168.2.3:49687 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.128.211:443 -> 192.168.2.3:49686 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.7.78:443 -> 192.168.2.3:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.7.78:443 -> 192.168.2.3:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.23.239:443 -> 192.168.2.3:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.23.239:443 -> 192.168.2.3:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.23.239:443 -> 192.168.2.3:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.23.239:443 -> 192.168.2.3:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.202.55:443 -> 192.168.2.3:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.202.55:443 -> 192.168.2.3:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.97.3:443 -> 192.168.2.3:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.97.3:443 -> 192.168.2.3:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.140.154:443 -> 192.168.2.3:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.140.154:443 -> 192.168.2.3:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.202.59:443 -> 192.168.2.3:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.202.59:443 -> 192.168.2.3:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.3:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.3:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.3:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.3:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.54:443 -> 192.168.2.3:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.54:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.1:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.1:443 -> 192.168.2.3:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.23.239:443 -> 192.168.2.3:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.208.57.208:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.112.193:443 -> 192.168.2.3:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.112.193:443 -> 192.168.2.3:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.24.121.182:443 -> 192.168.2.3:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.24.120.182:443 -> 192.168.2.3:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.24.120.182:443 -> 192.168.2.3:49781 version: TLS 1.2

System Summary:

Classification label

Source: classification engine

Classification label: clean1.win@3/87@25/16

Creates files inside the user directory

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Creates temporary files

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DFF36F967C030C902A.TMP

Jump to behavior

Reads ini files

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5972 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5972 CREDAT:17410 /prefetch:2			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior