Analysis Report https://lermansenter.unicornplatform.com/

AV Detection:

Antivirus detection for URL or domain

Source: https://deerfieldwi.buzz/lERMANSENTER/

SlashNext: Label: Fake Login Page type: Phishing & Social Engineering

Phishing:

Phishing site detected (based on shot template match)

Source: https://deerfieldwi.buzz/lERMANSENTER/

Matcher: Template: onedrive matched

Yara detected HtmlPhish_7

Source: Yara match	File source: 579569.1.links.csv, type: HTML
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\lERMANSENTER[1].htm, type: DROPPED

Phishing site detected (based on image similarity)

Source: https://deerfieldwi.buzz/lERMANSENTER/images/Onedrive-logo.png

Matcher: Found strong image similarity, brand: Microsoft

Jump to dropped file

Compliance:

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 52.6.97.115:443 -> 192.168.2.3:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.6.97.115:443 -> 192.168.2.3:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.165:443 -> 192.168.2.3:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.165:443 -> 192.168.2.3:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.165:443 -> 192.168.2.3:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.165:443 -> 192.168.2.3:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.32.238.98:443 -> 192.168.2.3:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.32.238.98:443 -> 192.168.2.3:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.32.238.98:443 -> 192.168.2.3:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.85.41.146:443 -> 192.168.2.3:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.85.41.146:443 -> 192.168.2.3:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.32.238.98:443 -> 192.168.2.3:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.52.20:443 -> 192.168.2.3:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.52.20:443 -> 192.168.2.3:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.3:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.3:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.225.242.222:443 -> 192.168.2.3:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.225.242.222:443 -> 192.168.2.3:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.111.9.35:443 -> 192.168.2.3:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.111.9.35:443 -> 192.168.2.3:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.184.220.66:443 -> 192.168.2.3:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.184.220.66:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.140.154:443 -> 192.168.2.3:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.140.154:443 -> 192.168.2.3:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.129:443 -> 192.168.2.3:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.129:443 -> 192.168.2.3:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.141:443 -> 192.168.2.3:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.141:443 -> 192.168.2.3:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.141:443 -> 192.168.2.3:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.141:443 -> 192.168.2.3:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.2:443 -> 192.168.2.3:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.2:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.230.83:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.230.83:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.233.50:443 -> 192.168.2.3:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.233.50:443 -> 192.168.2.3:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.114.208:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.114.208:443 -> 192.168.2.3:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 146.185.130.157:443 -> 192.168.2.3:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 146.185.130.157:443 -> 192.168.2.3:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.100.80:443 -> 192.168.2.3:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.100.80:443 -> 192.168.2.3:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.24:443 -> 192.168.2.3:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.24:443 -> 192.168.2.3:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.68:443 -> 192.168.2.3:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.68:443 -> 192.168.2.3:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.88.208.102:443 -> 192.168.2.3:49770 version: TLS 1.2

Networking:

Found strings which match to known social media urls

Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: </span>UPVOTE<span class="styles_bigButtonCount__1DS7y">694</span></span></button></div><div style="max-width:100%" class="styles_flex__363IJ styles_flex-align-flex-start__3RSvk styles_flex-direction-column__203zO styles_flex-justify-center__3kSv0 styles_responsive__96EZc"><span class="styles_font__2Nqit styles_grey__3J1TQ styles_small__2bw6M styles_normal__iGf4Q styles_container__14gv3 styles_lineHeight__2RYYy styles_underline__20yPd">Check it out on<a title="Twitter" target="_blank" class="styles_item__2WB3i" href="https://twitter.com/unicornplatform">Twitter</a><a title="Facebook" target="_blank" class="styles_item__2WB3i" href="https://www.facebook.com/unicornplatform">Facebook</a><a title="Instagram" target="_blank" class="styles_item__2WB3i" href="https://www.instagram.com/unicornplatform">Instagram</a></span></div></div><div class="styles_container__3xLls styles_container__EElPy spacings_large__3NY-z"><div class="styles_content__2SyXA styles_white__13AB5 styles_padding__2Z8vM"><div class="styles_font__2Nqit styles_grey__3J1TQ styles_xSmall__1eYHj styles_normal__iGf4Q styles_hunter__1oa2L styles_lineHeight__2RYYy styles_underline__20yPd styles_uppercase__2YIgd">Hunter</div><div class="styles_makersContainer__1N77x"><a class="styles_card__lc6A-" href="/@alexanderisora"><div><div><div class="styles_container__mO53e"><div class="lazyload-wrapper"><div style="height:30px" class="lazyload-placeholder"></div></div></div></div></div><div class="styles_content__2OcVn"><div class="styles_font__2Nqit styles_small__2bw6M styles_semiBold__2IC3i styles_title__1J4mU styles_lineHeight__2RYYy styles_underline__20yPd">Alexander Isora equals www.facebook.com (Facebook)
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: </span>UPVOTE<span class="styles_bigButtonCount__1DS7y">694</span></span></button></div><div style="max-width:100%" class="styles_flex__363IJ styles_flex-align-flex-start__3RSvk styles_flex-direction-column__203zO styles_flex-justify-center__3kSv0 styles_responsive__96EZc"><span class="styles_font__2Nqit styles_grey__3J1TQ styles_small__2bw6M styles_normal__iGf4Q styles_container__14gv3 styles_lineHeight__2RYYy styles_underline__20yPd">Check it out on<a title="Twitter" target="_blank" class="styles_item__2WB3i" href="https://twitter.com/unicornplatform">Twitter</a><a title="Facebook" target="_blank" class="styles_item__2WB3i" href="https://www.facebook.com/unicornplatform">Facebook</a><a title="Instagram" target="_blank" class="styles_item__2WB3i" href="https://www.instagram.com/unicornplatform">Instagram</a></span></div></div><div class="styles_container__3xLls styles_container__EElPy spacings_large__3NY-z"><div class="styles_content__2SyXA styles_white__13AB5 styles_padding__2Z8vM"><div class="styles_font__2Nqit styles_grey__3J1TQ styles_xSmall__1eYHj styles_normal__iGf4Q styles_hunter__1oa2L styles_lineHeight__2RYYy styles_underline__20yPd styles_uppercase__2YIgd">Hunter</div><div class="styles_makersContainer__1N77x"><a class="styles_card__lc6A-" href="/@alexanderisora"><div><div><div class="styles_container__mO53e"><div class="lazyload-wrapper"><div style="height:30px" class="lazyload-placeholder"></div></div></div></div></div><div class="styles_content__2OcVn"><div class="styles_font__2Nqit styles_small__2bw6M styles_semiBold__2IC3i styles_title__1J4mU styles_lineHeight__2RYYy styles_underline__20yPd">Alexander Isora equals www.twitter.com (Twitter)
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: \u003c/div\u003e","promo":null,"socialImageMediaId":null,"media":[{"type":"id","generated":false,"id":"Media1207669","typename":"Media"},{"type":"id","generated":false,"id":"Media1207668","typename":"Media"},{"type":"id","generated":false,"id":"Media1207667","typename":"Media"},{"type":"id","generated":false,"id":"Media1207666","typename":"Media"},{"type":"id","generated":false,"id":"Media1207665","typename":"Media"},{"type":"id","generated":false,"id":"Media1207664","typename":"Media"},{"type":"id","generated":false,"id":"Media1207663","typename":"Media"},{"type":"id","generated":false,"id":"Media1207662","typename":"Media"},{"type":"id","generated":false,"id":"Media1207837","typename":"Media"},{"type":"id","generated":false,"id":"Media1207661","typename":"Media"}],"productLinks":[{"type":"id","generated":false,"id":"ProductLink339899","typename":"ProductLink"}],"featuredAt":"2020-08-04T00:31:01-07:00","makerInviteUrl":null,"productId":237359,"jobs({\"first\":4})":{"type":"id","generated":true,"id":"$Post227392.jobs({\"first\":4})","typename":"JobConnection"},"moderationReason":null,"alternativesCount":22,"recommendedPosts":[{"type":"id","generated":false,"id":"Post53552","typename":"Post"},{"type":"id","generated":false,"id":"Post242932","typename":"Post"},{"type":"id","generated":false,"id":"Post142962","typename":"Post"},{"type":"id","generated":false,"id":"Post230554","typename":"Post"},{"type":"id","generated":false,"id":"Post339","typename":"Post"},{"type":"id","generated":false,"id":"Post171901","typename":"Post"},{"type":"id","generated":false,"id":"Post277372","typename":"Post"},{"type":"id","generated":false,"id":"Post269052","typename":"Post"}],"updatedAt":"2021-02-19T02:38:35-08:00","angellistUrl":null,"facebookUrl":"https://www.facebook.com/unicornplatform","githubUrl":null,"instagramUrl":"https://www.instagram.com/unicornplatform","mediumUrl":null,"twitterUrl":"https://twitter.com/unicornplatform","productState":"default","thumbnail":{"type":"id","generated":false,"id":"Media1207837","typename":"Media"},"hasVoted":false,"topics":{"type":"id","generated":true,"id":"$Post227392.topics","typename":"TopicConnection"},"user":{"type":"id","generated":false,"id":"User447318","typename":"User"},"makers":[{"type":"id","generated":false,"id":"User1658582","typename":"User"},{"type":"id","generated":false,"id":"User1562033","typename":"User"},{"type":"id","generated":false,"id":"User447318","typename":"User"}],"embedBadgeMessage":null},"AdChannel2454":{"id":"2454","post":{"type":"id","generated":false,"id":"Post283128","typename":"Post"},"ctaText":null,"dealText":null,"name":"monday.com CRM","tagline":"The easy-to-use CRM solution customizable to every business","thumbnailUuid":"d4cb18d8-03a8-412f-a8ca-cf920cdf1f43.gif","url":"/r/ad/2454","__typename":"AdChannel"},"Post283128":{"id":"283128","slug":"monday-com-crm","name":"monday.com CRM","updatedAt":"2021-02-22T06:30:16-08:00","commentsCount":3,"_id":"UG9zdC0yODMxMjg=","featuredAt":"2021-02-
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: \u003c/div\u003e","promo":null,"socialImageMediaId":null,"media":[{"type":"id","generated":false,"id":"Media1207669","typename":"Media"},{"type":"id","generated":false,"id":"Media1207668","typename":"Media"},{"type":"id","generated":false,"id":"Media1207667","typename":"Media"},{"type":"id","generated":false,"id":"Media1207666","typename":"Media"},{"type":"id","generated":false,"id":"Media1207665","typename":"Media"},{"type":"id","generated":false,"id":"Media1207664","typename":"Media"},{"type":"id","generated":false,"id":"Media1207663","typename":"Media"},{"type":"id","generated":false,"id":"Media1207662","typename":"Media"},{"type":"id","generated":false,"id":"Media1207837","typename":"Media"},{"type":"id","generated":false,"id":"Media1207661","typename":"Media"}],"productLinks":[{"type":"id","generated":false,"id":"ProductLink339899","typename":"ProductLink"}],"featuredAt":"2020-08-04T00:31:01-07:00","makerInviteUrl":null,"productId":237359,"jobs({\"first\":4})":{"type":"id","generated":true,"id":"$Post227392.jobs({\"first\":4})","typename":"JobConnection"},"moderationReason":null,"alternativesCount":22,"recommendedPosts":[{"type":"id","generated":false,"id":"Post53552","typename":"Post"},{"type":"id","generated":false,"id":"Post242932","typename":"Post"},{"type":"id","generated":false,"id":"Post142962","typename":"Post"},{"type":"id","generated":false,"id":"Post230554","typename":"Post"},{"type":"id","generated":false,"id":"Post339","typename":"Post"},{"type":"id","generated":false,"id":"Post171901","typename":"Post"},{"type":"id","generated":false,"id":"Post277372","typename":"Post"},{"type":"id","generated":false,"id":"Post269052","typename":"Post"}],"updatedAt":"2021-02-19T02:38:35-08:00","angellistUrl":null,"facebookUrl":"https://www.facebook.com/unicornplatform","githubUrl":null,"instagramUrl":"https://www.instagram.com/unicornplatform","mediumUrl":null,"twitterUrl":"https://twitter.com/unicornplatform","productState":"default","thumbnail":{"type":"id","generated":false,"id":"Media1207837","typename":"Media"},"hasVoted":false,"topics":{"type":"id","generated":true,"id":"$Post227392.topics","typename":"TopicConnection"},"user":{"type":"id","generated":false,"id":"User447318","typename":"User"},"makers":[{"type":"id","generated":false,"id":"User1658582","typename":"User"},{"type":"id","generated":false,"id":"User1562033","typename":"User"},{"type":"id","generated":false,"id":"User447318","typename":"User"}],"embedBadgeMessage":null},"AdChannel2454":{"id":"2454","post":{"type":"id","generated":false,"id":"Post283128","typename":"Post"},"ctaText":null,"dealText":null,"name":"monday.com CRM","tagline":"The easy-to-use CRM solution customizable to every business","thumbnailUuid":"d4cb18d8-03a8-412f-a8ca-cf920cdf1f43.gif","url":"/r/ad/2454","__typename":"AdChannel"},"Post283128":{"id":"283128","slug":"monday-com-crm","name":"monday.com CRM","updatedAt":"2021-02-22T06:30:16-08:00","commentsCount":3,"_id":"UG9zdC0yODMxMjg=","featuredAt":"2021-02-
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: \u003c/p\u003e","bodyHtml":"\u003cp\u003eThe 3rd version of Unicorn Platform - the landing page builder for startups - is here!\u003c/p\u003e\u003cp\u003eFirst, thanks for joining our celebration today! We are full of enthusiasm to spend this day like never before.\u003c/p\u003e\n\n\u003cimg src=\"https://monosnap.com/image/O3bNCmX6Z78OI6KdITmfvh56PAdqqd\" style=\"max-width: 100%\"\u003e\n\n\u003cp\u003e\n\u003c/p\u003e\u003cp\u003e\n\u003c/p\u003e\u003cb\u003eN\u003cstrong\u003eew in this version:\u003c/strong\u003e\u003c/b\u003e\u003cp\u003eThe\u003ca href=\"https://unicornplatform.com/changelog\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"\u003e changelog\u003c/a\u003e includes:\u003c/p\u003e\u003cp\u003e- Realistic device mockups\u003c/p\u003e\u003cp\u003e- Google Sheet integration\u003c/p\u003e\u003cp\u003e- Stripe Integration\u003c/p\u003e\u003cp\u003e- Blogs (beta)\u003c/p\u003e\u003cp\u003e- 301 redirects\u003c/p\u003e\u003cp\u003e- Custom fonts\u003c/p\u003e\u003cp\u003e- Forms builder\u003c/p\u003e\u003cp\u003e- HTML export\u003c/p\u003e\u003cp\u003e- Background images\u003c/p\u003e\u003cp\u003e- Caching and CDN by default for everyone\u003c/p\u003e\u003cp\u003e- Alts for images\u003c/p\u003e\u003cp\u003e- Hundreds and hundreds of little improvements: SEO optimizations, faster page loading, 245+ new emoji.\u003c/p\u003e\u003cp\u003e\n\u003c/p\u003e\u003cb\u003eWhat is next:\u003c/b\u003e\u003cp\u003eUnicorn Platform will always remain the user-centric company providing \u003ca href=\"https://www.indiehackers.com/karthik_2206/post/4b6a8aa93b\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"\u003eextraordinary support\u003c/a\u003e and focusing on demanded features and integrations. Our only mission is to build a perfect product that saves time of a busy maker and gives joy.\u003c/p\u003e\u003cp\u003eThere are plenty of new features coming soon. You can vote and comment it in our \u003ca href=\"https://unicornplatform.com/roadmap\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"\u003eTrello Roadmap\u003c/a\u003e.\u003c/p\u003e\u003cp\u003e\n\u003c/p\u003e\u003cb\u003eWe want you to enjoy this launch:\u003c/b\u003e\n\u003cp\u003eWe want to this day to become a special day for us and for all Product Hunt community. This is we present you milestones:\u003c/p\u003e\n\n\u003cimg src=\"https://monosnap.com/image/FHUyo6S3fDIXjQfttg61skL9TQ5HNx\" style=\"max-width: 100%\"\u003e\n\n\u003cp\u003eWe prepared special bonuses and events which be unlocked as our launch is getting more hyping. Let's see how it will go. I believe it is gonna be fun.\u003c/p\u003e\n\u003cp\u003eUpdate: The Magic shakes unlocked: \u003ca href=\"https://twitter.com/alexanderisora/status/1291297449731067904\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"\u003ehttps://twitter.com/alexanderisora/status/1291297449731067904\u003c/a\u003e\u003c/p\u003e\n\n\n\u003cb\u003eFollow the project:\u003c/b\u003e\n\nTwitter: \u003ca href=\"https://twitter.

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: lermansenter.unicornplatform.com

Urls found in memory or binary data

Source: core.min[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: position.min[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: vendors~main.b8f98575[1].js.2.dr	String found in binary or memory: http://git.io/TrdQbw
Source: position.min[1].js.2.dr	String found in binary or memory: http://jquery.org/license
Source: position.min[1].js.2.dr	String found in binary or memory: http://jqueryui.com
Source: collapse[1].js.2.dr	String found in binary or memory: http://plugins.twinpictures.de/plugins/collapse-o-matic/
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: http://schema.org
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: http://schema.org/BreadcrumbList
Source: privacy-policy[1].htm.2.dr, disclaimer[1].htm.2.dr	String found in binary or memory: http://schema.org/ListItem
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: http://schema.org/Organization
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: http://schema.org/PostalAddress
Source: KFOlCnqEu92Fr1MmYUtfBBc9[1].ttf.2.dr, KFOmCnqEu92Fr1Mu4mxP[1].ttf.2.dr, KFOlCnqEu92Fr1MmEU9fBBc9[1].ttf.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: unicorn-platform-logo[1].svg.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: http://www.fcba.org/
Source: flexslider[1].css.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: unicornplatform[1].htm.2.dr	String found in binary or memory: https://abs.twimg.com/errors/logo46x38
Source: unicornplatform[1].htm.2.dr	String found in binary or memory: https://abs.twimg.com/errors/logo46x38.png
Source: imagestore.dat.2.dr	String found in binary or memory: https://abs.twimg.com/favicons/twitter.ico
Source: unicornplatform[1].htm.2.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web-legacy/i18n/en.089031c5.js
Source: unicornplatform[1].htm.2.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web-legacy/main.189b0285.js
Source: unicornplatform[1].htm.2.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web-legacy/polyfills.e0f21315.js
Source: unicornplatform[1].htm.2.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web-legacy/vendors~main.b8f98575.js
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: privacy-policy[1].htm.2.dr, disclaimer[1].htm.2.dr	String found in binary or memory: https://api.w.org/
Source: QQTZ8ZTA.htm.2.dr	String found in binary or memory: https://app.unicornplatform.com/static/img/logos/unicorn-platform-logo.svg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://bestlawfirms.usnews.com/profile/lerman-senter-pllc/overview/46985
Source: unicornplatform[1].htm.2.dr	String found in binary or memory: https://business.twitter.com/en/help/troubleshooting/how-twitter-ads-work.html
Source: lERMANSENTER[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/tether/1.4.0/js/tether.min.js
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://chrome.google.com/webstore/detail/likjafohlgffamccflcidmedfongmkee
Source: lERMANSENTER[1].htm.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.slim.min.js
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://d2yyd1h5u9mauk.cloudfront.net/integrations/web/v1/library/
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://deerfieldwi.bu
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://deerfieldwi.buzz/lERMANSENTER/
Source: ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://deerfieldwi.buzz/lERMANSENTER//
Source: ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://deerfieldwi.buzz/lERMANSENTER//n
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: QQTZ8ZTA.htm.2.dr	String found in binary or memory: https://dvzvtsvyecfyp.cloudfront.net/static/css/main.9f9fa0f6b643.css
Source: QQTZ8ZTA.htm.2.dr	String found in binary or memory: https://dvzvtsvyecfyp.cloudfront.net/static/img/icons/social/white/product-hunt.svg
Source: QQTZ8ZTA.htm.2.dr	String found in binary or memory: https://dvzvtsvyecfyp.cloudfront.net/static/img/icons/social/white/twitter.svg
Source: QQTZ8ZTA.htm.2.dr	String found in binary or memory: https://dvzvtsvyecfyp.cloudfront.net/static/js/main.4c99c0fbc106.js
Source: all[1].css.2.dr	String found in binary or memory: https://fontawesome.com
Source: all[1].css.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: QQTZ8ZTA.htm.2.dr, privacy-policy[1].htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Lato:400
Source: style[1].css.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: privacy-policy[1].htm.2.dr, framework[1].css.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=PT
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Rufina:400
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: css[3].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u8w4BMUTPHjxsAXC-s.woff)
Source: css[3].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u9w4BMUTPHh6UVSwiPHw.woff)
Source: css[3].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u_w4BMUTPHjxsI5wq_Gwfr.woff)
Source: css[3].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6uyw4BMUTPHjx4wWA.woff)
Source: icon[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v77/flUhRq6tzZclQEJ-Vdg-IuiaDsNa.woff)
Source: css[2].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v15/JTUQjIg1_i6t8kCHKm45_QpRyS7g.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhv.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN8rsOUuhv.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN_r8OUuhv.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UNirkOUuhv.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem6YaGs126MiZpBA-UFUK0Zdcs.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0d.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKW-U9hrIqU.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKWiUNhrIqU.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKWyV9hrIqU.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKXGUdhrIqU.woff)
Source: css[2].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v12/jizYRExUiTo99u79D0e0x8mO.woff)
Source: css[2].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v12/jizaRExUiTo99u79D0KEww.woff)
Source: css[2].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v12/jizdRExUiTo99u79D0e8fOydLxUb.woff)
Source: css[2].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v12/jizfRExUiTo99u79B_mh0O6tKw.woff)
Source: css[3].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsansnarrow/v12/BngSUXNadjH0qYEzV7ab-oWlsbg95AiFW_s.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptserif/v12/EJRQQgYoZZY2vCFuvAFT9gaQZynfpg.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptserif/v12/EJRSQgYoZZY2vCFuvAnt66qSVy0.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptserif/v12/EJRTQgYoZZY2vCFuvAFT_r21dA.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptserif/v12/EJRVQgYoZZY2vCFuvAFWzrk.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rufina/v8/Yq6V-LyURyLy-aKCpB5j.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rufina/v8/Yq6W-LyURyLy-aKKHztwu8ZZ.woff)
Source: bootstrap.min[1].js.2.dr, bootstrap.min[1].css.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: bootstrap.min[1].js.2.dr, bootstrap.min[1].css.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: bootstrap.min[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: unicornplatform[1].htm.2.dr	String found in binary or memory: https://help.twitter.com/using-twitter/twitter-supported-browsers
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://instagram.com/unicornplatform
Source: unicornplatform[1].htm.2.dr	String found in binary or memory: https://legal.twitter.com/imprint
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.u
Source: ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.com/
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.com/0Hom/
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.com/0HomRoot
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.com/0Home
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.com/0Homer.com/disclaimer/Root
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.com/0Homer.com/privacy-policy/Root
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.com/0Homicornplatform-policy/Root
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.com/0Homm.com/sts/unicorn-platform-v3-ST
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.com/0Homnicornplatform.com/Root
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.com/0Homt.com/posts/unicorn-platform-v3-ST
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.com/0Homzz/lERMANSENTER//Root
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.com/Root
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.com/t
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://lermansenter.unicornplatform.comRoot
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://maps.google.com/maps?q=2001%20L%20Street%2C%20NW%20Washington%2C%20DC%2020036
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://monosnap.com/image/FHUyo6S3fDIXjQfttg61skL9TQ5HNx
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://monosnap.com/image/O3bNCmX6Z78OI6KdITmfvh56PAdqqd
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-avatars.imgix.net/1562033/original?auto=format
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-avatars.imgix.net/1658582/original?auto=format
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-avatars.imgix.net/447318/original?auto=format
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/347f35f9-870c-49dc-9b47-d38211de9097.jpeg?auto=format
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/347f35f9-870c-49dc-9b47-d38211de9097.jpeg?auto=format&auto=compress&codec
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/4e111239-652d-4990-a8ea-6a81f727e121.jpeg?auto=format
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/4e111239-652d-4990-a8ea-6a81f727e121.jpeg?auto=format&auto=compress&codec
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/5bfe9bda-8216-4e93-a8da-cf41b8aea2d4.jpeg?auto=format
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/5bfe9bda-8216-4e93-a8da-cf41b8aea2d4.jpeg?auto=format&auto=compress&codec
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/86fac5e1-1619-4098-bb25-6419ec168977.jpeg?auto=format
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/86fac5e1-1619-4098-bb25-6419ec168977.jpeg?auto=format&auto=compress&codec
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/9b545e31-493c-4827-96f6-c7e3b85f8020.jpeg?auto=format
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/9b545e31-493c-4827-96f6-c7e3b85f8020.jpeg?auto=format&fit=crop&fr
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/9b545e31-493c-4827-96f6-c7e3b85f8020.jpeg?auto=format&auto=compress&codec
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/b085131a-8e8b-438e-b648-603eccfa9e1a.jpeg?auto=format
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/b085131a-8e8b-438e-b648-603eccfa9e1a.jpeg?auto=format&auto=compress&codec
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/bf8cd8d0-5f2d-4a93-807a-d7cb3015880d.jpeg?auto=format
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/bf8cd8d0-5f2d-4a93-807a-d7cb3015880d.jpeg?auto=format&auto=compress&codec
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/c000b3a6-945b-4cce-a447-50f7b7917fac.png?auto=format
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/c000b3a6-945b-4cce-a447-50f7b7917fac.png?auto=format&auto=compress&codec=
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/d51aceea-f041-4b97-8bdb-a848dd563435.jpeg?auto=format
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/d51aceea-f041-4b97-8bdb-a848dd563435.jpeg?auto=format&auto=compress&codec
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/dbccb786-c763-4932-806f-6a5c7c6141ec.jpeg?auto=format
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-files.imgix.net/dbccb786-c763-4932-806f-6a5c7c6141ec.jpeg?auto=format&auto=compress&codec
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-static.imgix.net//favicon.ico?auto=format&auto=compress
Source: imagestore.dat.2.dr	String found in binary or memory: https://ph-static.imgix.net//favicon.ico?auto=format&auto=compress
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://ph-static.imgix.net/ph-ios-icon.png?auto=format&auto=compress
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://platform.twitter.com/widgets.js
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://profiles.superlawyers.com/washington-dc/washington/lawfirm/lerman-senter-pllc/5945ecbb-4d2a-
Source: widgets[1].js.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: privacy-policy[1].htm.2.dr, disclaimer[1].htm.2.dr	String found in binary or memory: https://schema.org
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://support.google.com/ads/answer/2662922?hl=en
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: unicornplatform[1].htm.2.dr	String found in binary or memory: https://support.twitter.com/articles/20170514
Source: bundle.NetworkInstrument.e27a6a75[1].js.2.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web-legacy/bundle.NetworkInstrumen
Source: en.089031c5[1].js.2.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web-legacy/en.089031c5.js.map
Source: loader.AppModules.e2c762e5[1].js.2.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web-legacy/loader.AppModules.e2c76
Source: main.189b0285[1].js.2.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web-legacy/main.189b0285.js.map
Source: ondemand.BranchSdk.59fe4735[1].js.2.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web-legacy/ondemand.BranchSdk.59fe
Source: ondemand.Dropdown.c3a8c6a5[1].js.2.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web-legacy/ondemand.Dropdown.c3a8c
Source: polyfills.e0f21315[1].js.2.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web-legacy/polyfills.e0f21315.js.m
Source: sharedCore.a9390125[1].js.2.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web-legacy/sharedCore.a9390125.js.
Source: vendors~main.b8f98575[1].js.2.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web-legacy/vendors~main.b8f98575.j
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://twitter.com/LermanSenter?ref_src=twsrc%5Etfw
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://twitter.com/alexanderisora/status/1291297449731067904
Source: unicornplatform[1].htm.2.dr	String found in binary or memory: https://twitter.com/privacy
Source: unicornplatform[1].htm.2.dr	String found in binary or memory: https://twitter.com/tos
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://twitter.com/un
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://twitter.com/unicornplatform
Source: ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://twitter.com/unicornplatform-policy/
Source: ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://twitter.com/unicornplatform-policy/defghijklmnopqrstuvwxyz
Source: ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://twitter.com/unicornplatform-policy/h
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://twitter.com/unicornplatformFhttps://twitter.com/unicornplatform
Source: QQTZ8ZTA.htm.2.dr, ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://ucarecdn.com/8a62037b-020b-424d-86ef-ba535f42d15a/favicon_icon0.png
Source: imagestore.dat.2.dr	String found in binary or memory: https://ucarecdn.com/8a62037b-020b-424d-86ef-ba535f42d15a/favicon_icon0.png#
Source: QQTZ8ZTA.htm.2.dr	String found in binary or memory: https://ucarecdn.com/ae330554-a7ee-42b7-b7fe-44ac5e3ecc12/screen-shot-2021-02-22-at-10.35.07-am.png
Source: QQTZ8ZTA.htm.2.dr	String found in binary or memory: https://ucarecdn.com/b4fff1bc-8240-48fd-8a92-42353f40ab5a/screen-shot-2021-02-22-at-10.47.31-am.png
Source: QQTZ8ZTA.htm.2.dr	String found in binary or memory: https://ucarecdn.com/e0d8afc0-9bec-4213-9512-b5d1f1f41efa/
Source: QQTZ8ZTA.htm.2.dr	String found in binary or memory: https://unicornplatform.com/
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://unicornplatform.com/changelog
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://unicornplatform.com/roadmap
Source: ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://unicornplatform.com/sts/unicorn-platform-v3-0
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.9.0/css/all.css
Source: core[1].js.2.dr	String found in binary or memory: https://via.placeholder.com/150X150?text=Image
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://widget.intercom.io/widget/fe4ce68d4a8352909f553b276994db414d33a55c
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.google.com/policies/privacy/partners/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?hl=en&render=explicit&ver=5.5.3
Source: recaptcha__en[1].js.2.dr, api[1].js0.2.dr, bframe[1].htm.2.dr, anchor[1].htm.2.dr, anchor[1].htm0.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcYmHoUAAAAADSmqp5FanLcF4hQAYtmxC1yYpyA&co=aHR0
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: api[1].js0.2.dr, webworker[1].js0.2.dr, bframe[1].htm.2.dr, anchor[1].htm.2.dr, anchor[1].htm0.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/pRiAUlKgZOMcFLsfzZTeGtOA/recaptcha__en.js
Source: bframe[1].htm.2.dr, anchor[1].htm.2.dr, anchor[1].htm0.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/pRiAUlKgZOMcFLsfzZTeGtOA/styles__ltr.css
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.indiehackers.com/karthik_2206/post/4b6a8aa93b
Source: privacy-policy[1].htm.2.dr, disclaimer[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/
Source: disclaimer[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/#website
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/?p=30
Source: disclaimer[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/?p=6
Source: privacy-policy[1].htm.2.dr, disclaimer[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/?s=
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/about-the-firm/
Source: disclaimer[1].htm.2.dr, ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://www.lermansenter.com/disclaimer/
Source: disclaimer[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/disclaimer/#webpage
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.lermansenter.com/disclaimer/4Disclaimer
Source: ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://www.lermansenter.com/disclaimer/t
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/ls-briefs/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/media-regulation-operations/2021/02/11/experts-weigh-in-lerman-senters-
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/media-regulation-operations/2021/02/17/fcc-prepares-to-auction-am-and-f
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/practice-areas/broadband-spectrum-utilities-and-communications-infrastr
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/practice-areas/broadcast-and-media/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/practice-areas/intellectual-property/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/practice-areas/privacy-data-security-and-e-commerce/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/practice-areas/satellite/
Source: privacy-policy[1].htm.2.dr, ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://www.lermansenter.com/privacy-policy/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/privacy-policy/#webpage
Source: ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://www.lermansenter.com/privacy-policy/defghijklmnopqrstuvwxyz
Source: 7e6d7e6e2eb7ad6dac5899b07a11c6c5f9c2aa05[1].js.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-admin/admin-ajax.php
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/plugins/gravityforms/css/browsers.min.css?ver=2.4.22
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/plugins/gravityforms/css/formreset.min.css?ver=2.4.22
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/plugins/gravityforms/css/formsmain.min.css?ver=2.4.22
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/plugins/gravityforms/css/readyclass.min.css?ver=2.4.22
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/plugins/gravityforms/js/gravityforms.min.js?ver=2.4.22
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.4.22
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/plugins/gravityforms/js/jquery.maskedinput.min.js?ver=2.4.22
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/plugins/gravityforms/js/placeholders.jquery.min.js?ver=2.4.2
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/plugins/jquery-collapse-o-matic/js/collapse.js?ver=1.6.23
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/plugins/jquery-collapse-o-matic/light_style.css?ver=1.6
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/plugins/tinymce-formats/editor-styles.css?ver=5.5.3
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/sedlex/inline_scripts/7e6d7e6e2eb7ad6dac5899b07a11c6c5f9c2aa
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/mod-express-103/lermansenter/assets/css/editor-conten
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/mod-express-103/lermansenter/assets/css/posts.css
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/mod-express-103/lermansenter/assets/css/print.css
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/mod-express-103/lermansenter/assets/css/structural.cs
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/mod-express-103/lermansenter/assets/images/logo_1x.pn
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/mod-express-103/lermansenter/assets/images/logo_2x.pn
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/themodernfirm-framework/assets/css/flexslider.css
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/themodernfirm-framework/assets/css/framework.css
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/themodernfirm-framework/assets/css/posts.css
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/themodernfirm-framework/assets/css/print.css
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/themodernfirm-framework/assets/css/scaffolding.css
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/themodernfirm-framework/assets/js/core.js?ver=5.5.3
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/themodernfirm-framework/assets/js/jquery.flexslider-m
Source: privacy-policy[1].htm.2.dr, disclaimer[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/themes/themodernfirm-framework/assets/js/modern-slider-init.
Source: privacy-policy[1].htm.2.dr, imagestore.dat.2.dr, ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/07/favicon.ico
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/07/favicon.ico~
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/07/int_random08_1x.jpg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/07/int_random08_2x.jpg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/07/int_random08_3x.jpg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/07/logo_fcba_1x.png
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/07/logo_fcba_2x.png
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/07/logo_fcba_3x.png
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/07/logo_superlawyers_1x.png
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/07/logo_superlawyers_2x.png
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/07/logo_superlawyers_3x.png
Source: disclaimer[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/10/int_practice_areas_1x.jpg
Source: disclaimer[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/10/int_practice_areas_2x.jpg
Source: disclaimer[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2018/10/int_practice_areas_3x.jpg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2020/10/LS-LOGO-Tag-Color-430px.png
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/2020/11/Best-Law-Firms-Standard-Badge-1-150
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/misc-images/492.png&size=
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-content/uploads/sites/27/misc-images/492.png&size=340x240
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-includes/css/dist/block-library/style.min.css?ver=5.5.3
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-includes/js/jquery/ui/position.min.js?ver=1.11.4
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-includes/js/wp-embed.min.js?ver=5.5.3
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-includes/wlwmanifest.xml
Source: privacy-policy[1].htm.2.dr, disclaimer[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-json/
Source: disclaimer[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.lermansenter.com%2Fdiscl
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.lermansenter.com%2Fpriva
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-json/wp/v2/pages/30
Source: disclaimer[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/wp-json/wp/v2/pages/6
Source: privacy-policy[1].htm.2.dr, disclaimer[1].htm.2.dr	String found in binary or memory: https://www.lermansenter.com/xmlrpc.php?rsd
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.notion.so/Product-Changelog-568b4245b18542dd95a95370c0623ba9
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.producthunt.com/
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.producthunt.com/feed
Source: {9D51973E-759C-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.producthunt.com/pRoot
Source: unicorn-platform-v3-0[1].htm.2.dr, ~DF6F8FE2252B3B826A.TMP.1.dr	String found in binary or memory: https://www.producthunt.com/posts/unicorn-platform-v3-0
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.producthunt.com/posts/unicorn-platform-v3-0#comment-1108123
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.producthunt.com/posts/unicorn-platform-v3-0#comment-1108146
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.producthunt.com/posts/unicorn-platform-v3-0#comment-1108238
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.producthunt.com/posts/unicorn-platform-v3-0#comment-1108239
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.producthunt.com/posts/unicorn-platform-v3-0#comment-1108244
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.producthunt.com/posts/unicorn-platform-v3-0#comment-1108250
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.producthunt.com/posts/unicorn-platform-v3-0#comment-1108253
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.producthunt.com/posts/unicorn-platform-v3-0#comment-1108255
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.producthunt.com/posts/unicorn-platform-v3-0#comment-1108444
Source: unicorn-platform-v3-0[1].htm.2.dr	String found in binary or memory: https://www.producthunt.com/posts/unicorn-platform-v3-0#comment-1108448
Source: QQTZ8ZTA.htm.2.dr	String found in binary or memory: https://www.producthunt.com/posts/unicorn-platform-v3-0/
Source: flexslider[1].css.2.dr	String found in binary or memory: https://www.woocommerce.com/flexslider/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 52.6.97.115:443 -> 192.168.2.3:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.6.97.115:443 -> 192.168.2.3:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.165:443 -> 192.168.2.3:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.165:443 -> 192.168.2.3:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.165:443 -> 192.168.2.3:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.165:443 -> 192.168.2.3:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.32.238.98:443 -> 192.168.2.3:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.32.238.98:443 -> 192.168.2.3:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.32.238.98:443 -> 192.168.2.3:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.85.41.146:443 -> 192.168.2.3:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.85.41.146:443 -> 192.168.2.3:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.32.238.98:443 -> 192.168.2.3:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.52.20:443 -> 192.168.2.3:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.52.20:443 -> 192.168.2.3:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.3:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.3:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.225.242.222:443 -> 192.168.2.3:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.225.242.222:443 -> 192.168.2.3:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.111.9.35:443 -> 192.168.2.3:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.111.9.35:443 -> 192.168.2.3:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.184.220.66:443 -> 192.168.2.3:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.184.220.66:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.140.154:443 -> 192.168.2.3:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.140.154:443 -> 192.168.2.3:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.129:443 -> 192.168.2.3:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.129:443 -> 192.168.2.3:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.141:443 -> 192.168.2.3:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.141:443 -> 192.168.2.3:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.141:443 -> 192.168.2.3:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.141:443 -> 192.168.2.3:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.2:443 -> 192.168.2.3:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.2:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.230.83:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.230.83:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.233.50:443 -> 192.168.2.3:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.233.50:443 -> 192.168.2.3:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.114.208:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.114.208:443 -> 192.168.2.3:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 146.185.130.157:443 -> 192.168.2.3:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 146.185.130.157:443 -> 192.168.2.3:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.100.80:443 -> 192.168.2.3:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.100.80:443 -> 192.168.2.3:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.24:443 -> 192.168.2.3:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.24:443 -> 192.168.2.3:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.68:443 -> 192.168.2.3:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.89.68:443 -> 192.168.2.3:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.88.208.102:443 -> 192.168.2.3:49770 version: TLS 1.2

System Summary:

Classification label

Source: classification engine

Classification label: mal68.phis.win@3/187@25/21

Creates files inside the user directory

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Creates temporary files

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF6B4477C61EE8DEF4.TMP

Jump to behavior

Reads ini files

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3484 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3484 CREDAT:17410 /prefetch:2			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior