Windows Analysis Report https://securisync.intermedia.net/us2/s/IpnIUjFRDCv9PeEVchmZ5r003e9fc4

Overview

General Information

Sample URL: https://securisync.intermedia.net/us2/s/IpnIUjFRDCv9PeEVchmZ5r003e9fc4
Analysis ID: 436463
Infos:

Most interesting Screenshot:

Detection

Score: 0
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

Found iframes

Classification

Phishing:

barindex
Found iframes
Source: https://www.intermedia.com/why-intermedia/compliance HTTP Parser: Iframe src: https://www.intermedia.net/crossdomain/frame.html
Source: https://www.intermedia.com/why-intermedia/compliance HTTP Parser: Iframe src: https://app-sj01.marketo.com/index.php/form/XDFrame
Source: https://www.intermedia.com/why-intermedia/compliance HTTP Parser: Iframe src: https://www.intermedia.net/crossdomain/frame.html
Source: https://www.intermedia.com/why-intermedia/compliance HTTP Parser: Iframe src: https://app-sj01.marketo.com/index.php/form/XDFrame
Source: https://www.intermedia.com/products/securisync HTTP Parser: Iframe src: https://www.intermedia.net/crossdomain/frame.html
Source: https://www.intermedia.com/products/securisync HTTP Parser: Iframe src: https://app-sj01.marketo.com/index.php/form/XDFrame
Source: https://www.intermedia.com/products/securisync HTTP Parser: Iframe src: https://www.intermedia.net/crossdomain/frame.html
Source: https://www.intermedia.com/products/securisync HTTP Parser: Iframe src: https://app-sj01.marketo.com/index.php/form/XDFrame
Source: https://www.intermedia.com/why-intermedia/compliance HTTP Parser: No <meta name="author".. found
Source: https://www.intermedia.com/why-intermedia/compliance HTTP Parser: No <meta name="author".. found
Source: https://www.intermedia.com/products/securisync HTTP Parser: No <meta name="author".. found
Source: https://www.intermedia.com/products/securisync HTTP Parser: No <meta name="author".. found
Source: https://www.intermedia.com/why-intermedia/compliance HTTP Parser: No <meta name="copyright".. found
Source: https://www.intermedia.com/why-intermedia/compliance HTTP Parser: No <meta name="copyright".. found
Source: https://www.intermedia.com/products/securisync HTTP Parser: No <meta name="copyright".. found
Source: https://www.intermedia.com/products/securisync HTTP Parser: No <meta name="copyright".. found
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll Jump to behavior
Source: unknown HTTPS traffic detected: 199.193.202.116:443 -> 192.168.2.3:49681 version: TLS 1.2
Source: unknown HTTPS traffic detected: 199.193.202.116:443 -> 192.168.2.3:49680 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.69:443 -> 192.168.2.3:49687 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.69:443 -> 192.168.2.3:49686 version: TLS 1.2
Source: unknown HTTPS traffic detected: 162.244.197.119:443 -> 192.168.2.3:49689 version: TLS 1.2
Source: unknown HTTPS traffic detected: 162.244.197.119:443 -> 192.168.2.3:49688 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.200.121.85:443 -> 192.168.2.3:49691 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.200.121.85:443 -> 192.168.2.3:49692 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.200.121.85:443 -> 192.168.2.3:49690 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.200.121.85:443 -> 192.168.2.3:49693 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.200.121.85:443 -> 192.168.2.3:49695 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.200.121.85:443 -> 192.168.2.3:49694 version: TLS 1.2
Source: unknown HTTPS traffic detected: 199.193.200.116:443 -> 192.168.2.3:49697 version: TLS 1.2
Source: unknown HTTPS traffic detected: 199.193.200.116:443 -> 192.168.2.3:49696 version: TLS 1.2
Source: unknown HTTPS traffic detected: 199.193.200.116:443 -> 192.168.2.3:49698 version: TLS 1.2
Source: unknown HTTPS traffic detected: 199.193.200.116:443 -> 192.168.2.3:49699 version: TLS 1.2
Source: unknown HTTPS traffic detected: 199.193.202.116:443 -> 192.168.2.3:49700 version: TLS 1.2
Source: unknown HTTPS traffic detected: 162.244.197.215:443 -> 192.168.2.3:49702 version: TLS 1.2
Source: unknown HTTPS traffic detected: 162.244.197.215:443 -> 192.168.2.3:49701 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.16.93.80:443 -> 192.168.2.3:49704 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.16.93.80:443 -> 192.168.2.3:49703 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.18.27.190:443 -> 192.168.2.3:49719 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.18.27.190:443 -> 192.168.2.3:49718 version: TLS 1.2
Source: unknown HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.3:49722 version: TLS 1.2
Source: unknown HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.3:49723 version: TLS 1.2
Source: unknown HTTPS traffic detected: 192.28.144.84:443 -> 192.168.2.3:49717 version: TLS 1.2
Source: unknown HTTPS traffic detected: 192.28.144.84:443 -> 192.168.2.3:49716 version: TLS 1.2
Source: unknown HTTPS traffic detected: 74.125.140.154:443 -> 192.168.2.3:49729 version: TLS 1.2
Source: unknown HTTPS traffic detected: 74.125.140.154:443 -> 192.168.2.3:49728 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.89.41:443 -> 192.168.2.3:49730 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.89.41:443 -> 192.168.2.3:49731 version: TLS 1.2
Source: unknown HTTPS traffic detected: 162.244.197.215:443 -> 192.168.2.3:49727 version: TLS 1.2
Source: unknown HTTPS traffic detected: 162.244.197.215:443 -> 192.168.2.3:49726 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.29:443 -> 192.168.2.3:49733 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.29:443 -> 192.168.2.3:49732 version: TLS 1.2
Source: unknown HTTPS traffic detected: 108.174.11.69:443 -> 192.168.2.3:49735 version: TLS 1.2
Source: unknown HTTPS traffic detected: 108.174.11.69:443 -> 192.168.2.3:49734 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.111:443 -> 192.168.2.3:49741 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.111:443 -> 192.168.2.3:49740 version: TLS 1.2
Source: unknown HTTPS traffic detected: 107.162.156.70:443 -> 192.168.2.3:49739 version: TLS 1.2
Source: unknown HTTPS traffic detected: 107.162.156.70:443 -> 192.168.2.3:49738 version: TLS 1.2
Source: unknown HTTPS traffic detected: 80.75.66.243:443 -> 192.168.2.3:49746 version: TLS 1.2
Source: unknown HTTPS traffic detected: 80.75.66.243:443 -> 192.168.2.3:49747 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.186.131:443 -> 192.168.2.3:49751 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.186.131:443 -> 192.168.2.3:49750 version: TLS 1.2
Source: unknown HTTPS traffic detected: 93.158.134.119:443 -> 192.168.2.3:49752 version: TLS 1.2
Source: unknown HTTPS traffic detected: 93.158.134.119:443 -> 192.168.2.3:49753 version: TLS 1.2
Source: unknown HTTPS traffic detected: 154.47.36.17:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown HTTPS traffic detected: 154.47.36.17:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown HTTPS traffic detected: 192.28.147.68:443 -> 192.168.2.3:49759 version: TLS 1.2
Source: unknown HTTPS traffic detected: 192.28.147.68:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.68:443 -> 192.168.2.3:49762 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.68:443 -> 192.168.2.3:49761 version: TLS 1.2
Source: unknown HTTPS traffic detected: 107.162.137.162:443 -> 192.168.2.3:49767 version: TLS 1.2
Source: unknown HTTPS traffic detected: 107.162.137.162:443 -> 192.168.2.3:49768 version: TLS 1.2
Source: securisync[1].htm.2.dr String found in binary or memory: <a class="fancybox-media vid-link with-icon" href="https://www.youtube.com/watch?v=IFcmZPTAtic">See how SecuriSync protects against ransomware-related downtime</a> equals www.youtube.com (Youtube)
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: <a class="facebook social-icon" target="_blank" href="https://www.facebook.com/intermedia.inc"> equals www.facebook.com (Facebook)
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: <a class="linkedin social-icon" target="_blank" href="https://www.linkedin.com/company/intermedia"> equals www.linkedin.com (Linkedin)
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: <a class="linkedin social-icon" target="_blank" href="https://www.youtube.com/channel/UCU-qlUSGWdMC95HVO5hHPrg "> equals www.youtube.com (Youtube)
Source: gtm[1].js.2.dr String found in binary or memory: "vtp_html":"\u003Cscript type=\"text\/gtmscript\"\u003E!function(b,e,f,g,a,c,d){b.fbq||(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq||(b._fbq=a),a.push=a,a.loaded=!0,a.version=\"2.0\",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,\"script\",\"https:\/\/connect.facebook.net\/en_US\/fbevents.js\");fbq(\"dataProcessingOptions\",[\"LDU\"],0,0);fbq(\"init\",\"387569738474119\");fbq(\"track\",\"PageView\");\u003C\/script\u003E\n\u003Cnoscript\u003E\u003Cimg height=\"1\" width=\"1\" style=\"display:none\" src=\"https:\/\/www.facebook.com\/tr?id=387569738474119\u0026amp;ev=PageView\u0026amp;noscript=1\u0026amp;dpo=LDU\u0026amp;dpoco=0\u0026amp;dpost=0\"\u003E\u003C\/noscript\u003E", equals www.facebook.com (Facebook)
Source: customization[1].json.2.dr String found in binary or memory: "VideosLink": "https://www.youtube.com/playlist?list=PLCRe8TVknTfsvF3zPUZWzwYpDJVlcLz6e", equals www.youtube.com (Youtube)
Source: 387569738474119[1].js.2.dr String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage||function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules||(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]||(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)||(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsGetTier");e.exports=function(b,c){c=a(c);c=c==null?"www.facebook.com":"www."+c+".facebook.com";return"https://"+c+"/signals/iwl.js?pixel_id="+b}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.*\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL||!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.close()};e.src=i(c,g.ENDPOINT);b.body&&b.body.appendChild(e)}var o=!1,p=function(a){return!!(e&&e.pixelsByID&&Object.prototype.hasOwnProperty.call(e.pixelsByID,a))};function q(){if(o)return;var b=n.getItem(m);if(!b)return;b=JSON.parse(b);var c=b.pixelID,d=b.graphToken,e=b.sessionStartTime;o=!0;h(c,function(){var b=p(c)?c:null;a.FacebookIWL.init(b,d,e)})}function r(b){if(o)return;h(b,func
Source: gtm[1].js.2.dr String found in binary or memory: E=V("YT"),D=function(){e(C)};J(u.vtp_gtmOnSuccess);if(E)E.ready&&E.ready(D);else{var I=V("onYouTubeIframeAPIReady");qt("onYouTubeIframeAPIReady",function(){I&&I();D()});J(function(){for(var R=V("document"),Q=R.getElementsByTagName("script"),S=Q.length,T=0;T<S;T++){var Z=Q[T].getAttribute("src");if(b(Z,"iframe_api")||b(Z,"player_api"))return}for(var L=R.getElementsByTagName("iframe"),W=L.length,ca=0;ca<W;ca++)if(!t&&c(L[ca],C.ic)){U("https://www.youtube.com/iframe_api");t=!0;break}})}}else J(u.vtp_gtmOnSuccess)} equals www.youtube.com (Youtube)
Source: gtm[1].js.2.dr String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},ug:function(){e=cb()},Db:function(){d()}}};var zq=["www.youtube.com","www.youtube-nocookie.com"],Aq,Bq=!1,Cq=0; equals www.youtube.com (Youtube)
Source: www-widgetapi[1].js.2.dr String found in binary or memory: n.setup=function(a,b){var c=document;if(a="string"===typeof a?c.getElementById(a):a)if(c="iframe"===a.tagName.toLowerCase(),b.host||(b.host=c?Db(a.src):"https://www.youtube.com"),this.i=new Si(b),c||(b=aj(this,a),this.m=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.h=a,this.h.id||(this.h.id="widget"+Ga(this.h)),Mi[this.h.id]=this,window.postMessage){this.l=new P;bj(this);b=Z(this.i,"events");for(var d in b)b.hasOwnProperty(d)&&this.addEventListener(d,b[d]);for(var e in Oi)Oi.hasOwnProperty(e)&& equals www.youtube.com (Youtube)
Source: yt-tracking[1].js.2.dr String found in binary or memory: tag.src = "https://www.youtube.com/player_api"; equals www.youtube.com (Youtube)
Source: gtm[1].js.2.dr String found in binary or memory: var p=["www.youtube.com","www.youtube-nocookie.com"],q={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},r,t=!1;(function(u){Y.__ytl=u;Y.__ytl.m="ytl";Y.__ytl.o=!0;Y.__ytl.priorityOverride=0})(function(u){u.vtp_triggerStartOption?m(u):vl(function(){m(u)})})}(); equals www.youtube.com (Youtube)
Source: player_api[1].js0.2.dr String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/997fe684\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}if(!window["YT"])var YT={loading:0,loaded:0};if(!window["YTConfig"])var YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: unknown DNS traffic detected: queries for: securisync.intermedia.net
Source: tag[1].js.2.dr String found in binary or memory: http://127.0.0.1
Source: IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].htm.2.dr String found in binary or memory: http://angularjs.org
Source: st[1].js.2.dr String found in binary or memory: http://bestiejs.github.io/json3
Source: vendor.bundle[1].js.2.dr String found in binary or memory: http://g.co/ng/security#xss)
Source: vendor.bundle[1].js.2.dr String found in binary or memory: http://g.co/ng/security#xss).
Source: st[1].js.2.dr String found in binary or memory: http://james.padolsey.com
Source: jquery-custom-ui.min[1].js.2.dr String found in binary or memory: http://jquery.com/
Source: st[1].js.2.dr, jquery-custom-ui.min[1].js.2.dr String found in binary or memory: http://jquery.org/license
Source: st[1].js.2.dr String found in binary or memory: http://kit.mit-license.org
Source: st[1].js.2.dr String found in binary or memory: http://sizzlejs.com/
Source: st[1].js.2.dr String found in binary or memory: http://unlicense.org/UNLICENSE
Source: jquery.lazyload[1].js.2.dr String found in binary or memory: http://www.appelsiini.net/projects/lazyload
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: http://www.intermedia.co.uk/why-intermedia
Source: compliance[1].htm.2.dr String found in binary or memory: http://www.intermedia.co.uk/why-intermedia/compliance
Source: securisync[1].htm.2.dr String found in binary or memory: http://www.intermedia.com/products/securisync
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: http://www.intermedia.com/why-intermedia
Source: compliance[1].htm.2.dr String found in binary or memory: http://www.intermedia.com/why-intermedia/compliance
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: http://www.jdpower.com
Source: jquery.lazyload[1].js.2.dr String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: customization[1].json.2.dr String found in binary or memory: https://account.securisync.intermedia.net/login/v1.1/
Source: gtm[1].js.2.dr String found in binary or memory: https://ade.googlesyndication.com/ddm/activity
Source: us2[1].json.2.dr, externalshare_IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].json.2.dr String found in binary or memory: https://admin.us2sync.myonlinedata.net/provisioning
Source: js[2].js.2.dr, gtm[1].js.2.dr String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: analytics[1].js.2.dr String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr String found in binary or memory: https://app-sj01.marketo.com/index.php/form/XDFrame
Source: customization[1].json.2.dr String found in binary or memory: https://apps.apple.com/us/app/securisync/id471324547
Source: customization[1].json.2.dr String found in binary or memory: https://auth.myonlinedata.net/locator/
Source: us2[1].json.2.dr, externalshare_IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].json.2.dr String found in binary or memory: https://auth.us2sync.myonlinedata.net/auth
Source: forms2[1].css.2.dr String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=33654
Source: js[2].js.2.dr, gtm[1].js.2.dr String found in binary or memory: https://cct.google/taggy/agent.js
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://cp.intermedia.net/ControlPanel/Login
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://cp.serverdata.net/Portal/Partner/Login
Source: www-widgetapi[1].js.2.dr String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: munchkin[1].js0.2.dr String found in binary or memory: https://developers.marketo.com/?p=7696
Source: munchkin[1].js.2.dr String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://fonts.gstatic.com/
Source: gtm[1].js.2.dr String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: vendor.bundle[1].js.2.dr String found in binary or memory: https://goo.gl/X2J8zc.
Source: vendor.bundle[1].js.2.dr String found in binary or memory: https://goo.gl/wIDDiL
Source: customization[1].json.2.dr String found in binary or memory: https://howto.securisync.com
Source: why-intermedia[1].htm0.2.dr, securisync[1].htm.2.dr String found in binary or memory: https://kb.intermedia.net
Source: securisync[1].htm.2.dr String found in binary or memory: https://kb.intermedia.net/Article/2554
Source: securisync[1].htm.2.dr String found in binary or memory: https://kb.intermedia.net/Article/2652
Source: customization[1].json.2.dr String found in binary or memory: https://kb.intermedia.net/article/3315
Source: us2[1].json.2.dr, externalshare_IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].json.2.dr String found in binary or memory: https://kms.us2sync.myonlinedata.net/kms
Source: tag[1].js.2.dr String found in binary or memory: https://mc.yandex.
Source: tag[1].js.2.dr String found in binary or memory: https://mc.yandex.md/cc
Source: js[2].js.2.dr, gtm[1].js.2.dr String found in binary or memory: https://pagead2.googlesyndication.com
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://partnersales.intermedia.net
Source: customization[1].json.2.dr String found in binary or memory: https://play.google.com/store/apps/details?id=net.intermedia.securisync.ui&hl=en
Source: insight.min[1].js.2.dr String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: insight.min[1].js.2.dr String found in binary or memory: https://px.ads.linkedin.com/insight_tag_errors.gif?
Source: {C4C43A1D-D023-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://securisyn.com/products/securisynclic_share=IpnIUjFRDCv9PeEVchmZ5r003e9f
Source: {C4C43A1D-D023-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://securisyn.com/why-intermedia/complianceRoot
Source: {C4C43A1D-D023-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://securisyn.com/why-intermediasynclic_share=IpnIUjFRDCv9PeEVchmZ5r003e9f
Source: {C4C43A1D-D023-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://securisync.int
Source: {C4C43A1D-D023-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://securisync.inte9fc4
Source: {C4C43A1D-D023-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://securisync.inteRoot
Source: {C4C43A1D-D023-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://securisync.inteame.html
Source: customization[1].json.2.dr String found in binary or memory: https://securisync.intermedia.net/downloads/securisync/documents/SecuriSync%20Get%20Started%20Guide%
Source: customization[1].json.2.dr String found in binary or memory: https://securisync.intermedia.net/downloads/securisync/documents/SecuriSync-Get-Started-Guide-for-Fi
Source: us2[1].json.2.dr, externalshare_IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].json.2.dr String found in binary or memory: https://securisync.intermedia.net/us2
Source: IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].htm.2.dr String found in binary or memory: https://securisync.intermedia.net/us2/
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr, {C4C43A1D-D023-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://securisync.intermedia.net/us2/s/IpnIUjFRDCv9PeEVchmZ5r003e9fc4
Source: {C4C43A1D-D023-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://securisync.intermedia.net/us2/s/IpnIUjFRDCv9PeEVchmZ5r003e9fc4Root
Source: {C4C43A1D-D023-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://securisync.intermedia.net/us2/s/IpnIUjFRDCv9PeEVchmZ5r003e9fc4ermedia.net/us2/s/IpnIUjFRDCv9
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr String found in binary or memory: https://securisync.intermedia.net/us2/s/file?public_share=IpnIUjFRDCv9PeEVchmZ5r003e9fc4
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr String found in binary or memory: https://securisync.intermedia.net/us2/s/login?public_share=IpnIUjFRDCv9PeEVchmZ5r003e9fc4
Source: {C4C43A1D-D023-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://securisync.intermedia.net/us2/s/login?public_share=IpnIUjFRDCv9PeEVchmZ5r003eRoot
Source: {C4C43A1D-D023-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://securisynermedia.net/us2/s/file?public_share=IpnIUjFRDCv9PeEVchmZ5r003e9f
Source: {C4C43A1D-D023-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://securisynermedia.net/us2/s/login?public_share=IpnIUjFRDCv9PeEVchmZ5r003e9
Source: gtm[1].js.2.dr String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: st[1].js.2.dr String found in binary or memory: https://st1.dialogtech.com/st/
Source: st[1].js.2.dr String found in binary or memory: https://st1.dialogtech.com/st/locations
Source: st[1].js.2.dr String found in binary or memory: https://st2.dialogtech.com/st/log
Source: analytics[1].js.2.dr String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: st[1].js.2.dr String found in binary or memory: https://stcdproducer.dialogtech.com/v1/data
Source: analytics[1].js.2.dr String found in binary or memory: https://tagassistant.google.com/
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://twitter.com/intermedia_net
Source: us2[1].json.2.dr, externalshare_IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].json.2.dr String found in binary or memory: https://us2sync.myonlinedata.net/chats
Source: us2[1].json.2.dr, externalshare_IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].json.2.dr String found in binary or memory: https://us2sync.myonlinedata.net/data
Source: us2[1].json.2.dr, externalshare_IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].json.2.dr String found in binary or memory: https://us2sync.myonlinedata.net/data_sse
Source: us2[1].json.2.dr, externalshare_IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].json.2.dr String found in binary or memory: https://us2sync.myonlinedata.net/diagnostic
Source: us2[1].json.2.dr, externalshare_IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].json.2.dr String found in binary or memory: https://us2sync.myonlinedata.net/metadata
Source: us2[1].json.2.dr, externalshare_IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].json.2.dr String found in binary or memory: https://us2sync.myonlinedata.net/update
Source: us2[1].json.2.dr, externalshare_IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].json.2.dr String found in binary or memory: https://us2sync.myonlinedata.net/v3
Source: tp.widget.sync.bootstrap.min[1].js.2.dr String found in binary or memory: https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
Source: us2[1].json.2.dr, externalshare_IpnIUjFRDCv9PeEVchmZ5r003e9fc4[1].json.2.dr String found in binary or memory: https://wopi.us2sync.myonlinedata.net/wopi
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.anymeeting.com/AccountManager/Login.aspx
Source: securisync[1].htm.2.dr String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: analytics[1].js.2.dr String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: analytics[1].js.2.dr String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: js[2].js.2.dr, gtm[1].js.2.dr String found in binary or memory: https://www.google.com
Source: js[2].js.2.dr, gtm[1].js.2.dr String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: js[2].js.2.dr, gtm[1].js.2.dr String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.2.dr String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-N47LFD
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.intermedia.co.uk/
Source: frame[1].htm.2.dr, why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.intermedia.com
Source: customization[1].json.2.dr String found in binary or memory: https://www.intermedia.com/assets/pdf/legal/Intermedia-SecuriSync-EULA.pdf
Source: customization[1].json.2.dr String found in binary or memory: https://www.intermedia.com/assets/pdf/legal/Intermedia-SecuriSync-ExternalUserTerms.pdf
Source: customization[1].json.2.dr String found in binary or memory: https://www.intermedia.com/assets/pdf/legal/Intermedia-SecuriSync-Open-Source-Notice-File.pdf
Source: why-intermedia[1].htm0.2.dr, customization[1].json.2.dr String found in binary or memory: https://www.intermedia.com/assets/pdf/legal/PrivacyPolicy.pdf
Source: imagestore.dat.2.dr String found in binary or memory: https://www.intermedia.com/assets/tracked/img/favicon.ico
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.intermedia.com/blog/animal-hospital-and-pet-resort-sets-new-standards/
Source: securisync[1].htm.2.dr String found in binary or memory: https://www.intermedia.com/blog/judicial-district-uses-technology-to-keep-courts-in-session/
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.intermedia.com/blog/should-your-business-offer-flexible-work-arrangements-permanently/
Source: securisync[1].htm.2.dr String found in binary or memory: https://www.intermedia.com/blog/stranded-oil-leverages-intermedias-communications-and-collaboration-
Source: securisync[1].htm.2.dr String found in binary or memory: https://www.intermedia.com/blog/whats-the-best-cloud-storage-for-business/
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.intermedia.com/blog/why-cloud-phone-systems-are-the-future/
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.intermedia.com/login/voice
Source: customization[1].json.2.dr String found in binary or memory: https://www.intermedia.com/products/SecuriSync
Source: customization[1].json.2.dr, securisync[1].htm.2.dr String found in binary or memory: https://www.intermedia.com/products/securisync
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr String found in binary or memory: https://www.intermedia.com/products/securisynclic_share=IpnIUjFRDCv9PeEVchmZ5r003e9fc4
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr String found in binary or memory: https://www.intermedia.com/products/securisynclic_share=IpnIUjFRDCv9PeEVchmZ5r003e9fc4a.net/us2/s/fi
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr String found in binary or memory: https://www.intermedia.com/products/securisyncrCloud
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr, why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.intermedia.com/why-intermedia
Source: www.intermedia[1].xml.2.dr String found in binary or memory: https://www.intermedia.com/why-intermedia&quot;
Source: customization[1].json.2.dr String found in binary or memory: https://www.intermedia.com/why-intermedia/
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr, compliance[1].htm.2.dr String found in binary or memory: https://www.intermedia.com/why-intermedia/compliance
Source: www.intermedia[1].xml.2.dr String found in binary or memory: https://www.intermedia.com/why-intermedia/compliance&quot;
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr String found in binary or memory: https://www.intermedia.com/why-intermedia/complianceare=IpnIUjFRDCv9PeEVchmZ5r003e9fc4
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr String found in binary or memory: https://www.intermedia.com/why-intermedia/compliancezIT
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr String found in binary or memory: https://www.intermedia.com/why-intermediarWorry-Free
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr String found in binary or memory: https://www.intermedia.com/why-intermediasynclic_share=IpnIUjFRDCv9PeEVchmZ5r003e9fc4
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr String found in binary or memory: https://www.intermedia.com/why-intermediasynclic_share=IpnIUjFRDCv9PeEVchmZ5r003e9fc4com/products/se
Source: frame[1].htm.2.dr String found in binary or memory: https://www.intermedia.net
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.intermedia.net/blog
Source: securisync[1].htm.2.dr String found in binary or memory: https://www.intermedia.net/blog/category/services/securisync/
Source: ~DF7C8DA5896C7BBD32.TMP.1.dr String found in binary or memory: https://www.intermedia.net/crossdomain/frame.html
Source: securisync[1].htm.2.dr String found in binary or memory: https://www.intermedia.net/report/ransomware
Source: securisync[1].htm.2.dr String found in binary or memory: https://www.intermedia.net/report/ransomware#continuity
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.linkedin.com/company/intermedia
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.tsia.com
Source: www-widgetapi[1].js.2.dr, player_api[1].js0.2.dr String found in binary or memory: https://www.youtube.com
Source: why-intermedia[1].htm0.2.dr String found in binary or memory: https://www.youtube.com/channel/UCU-qlUSGWdMC95HVO5hHPrg
Source: gtm[1].js.2.dr String found in binary or memory: https://www.youtube.com/iframe_api
Source: yt-tracking[1].js.2.dr String found in binary or memory: https://www.youtube.com/player_api
Source: customization[1].json.2.dr String found in binary or memory: https://www.youtube.com/playlist?list=PLCRe8TVknTfsvF3zPUZWzwYpDJVlcLz6e
Source: securisync[1].htm.2.dr String found in binary or memory: https://www.youtube.com/watch?v=IFcmZPTAtic
Source: tag[1].js.2.dr String found in binary or memory: https://yandexmetrica.com
Source: tag[1].js.2.dr String found in binary or memory: https://yastatic.net/s3/gdpr/popup/v2/
Source: tag[1].js.2.dr String found in binary or memory: https://ymetrica1.com/watch/3/1
Source: securisync[1].htm.2.dr String found in binary or memory: https://youtu.be/enLvRvNVEdY
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49689
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49686
Source: unknown Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49685
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49684
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49683
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49682
Source: unknown Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49680
Source: unknown Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49685 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49684 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown HTTPS traffic detected: 199.193.202.116:443 -> 192.168.2.3:49681 version: TLS 1.2
Source: unknown HTTPS traffic detected: 199.193.202.116:443 -> 192.168.2.3:49680 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.69:443 -> 192.168.2.3:49687 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.69:443 -> 192.168.2.3:49686 version: TLS 1.2
Source: unknown HTTPS traffic detected: 162.244.197.119:443 -> 192.168.2.3:49689 version: TLS 1.2
Source: unknown HTTPS traffic detected: 162.244.197.119:443 -> 192.168.2.3:49688 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.200.121.85:443 -> 192.168.2.3:49691 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.200.121.85:443 -> 192.168.2.3:49692 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.200.121.85:443 -> 192.168.2.3:49690 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.200.121.85:443 -> 192.168.2.3:49693 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.200.121.85:443 -> 192.168.2.3:49695 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.200.121.85:443 -> 192.168.2.3:49694 version: TLS 1.2
Source: unknown HTTPS traffic detected: 199.193.200.116:443 -> 192.168.2.3:49697 version: TLS 1.2
Source: unknown HTTPS traffic detected: 199.193.200.116:443 -> 192.168.2.3:49696 version: TLS 1.2
Source: unknown HTTPS traffic detected: 199.193.200.116:443 -> 192.168.2.3:49698 version: TLS 1.2
Source: unknown HTTPS traffic detected: 199.193.200.116:443 -> 192.168.2.3:49699 version: TLS 1.2
Source: unknown HTTPS traffic detected: 199.193.202.116:443 -> 192.168.2.3:49700 version: TLS 1.2
Source: unknown HTTPS traffic detected: 162.244.197.215:443 -> 192.168.2.3:49702 version: TLS 1.2
Source: unknown HTTPS traffic detected: 162.244.197.215:443 -> 192.168.2.3:49701 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.16.93.80:443 -> 192.168.2.3:49704 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.16.93.80:443 -> 192.168.2.3:49703 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.18.27.190:443 -> 192.168.2.3:49719 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.18.27.190:443 -> 192.168.2.3:49718 version: TLS 1.2
Source: unknown HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.3:49722 version: TLS 1.2
Source: unknown HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.3:49723 version: TLS 1.2
Source: unknown HTTPS traffic detected: 192.28.144.84:443 -> 192.168.2.3:49717 version: TLS 1.2
Source: unknown HTTPS traffic detected: 192.28.144.84:443 -> 192.168.2.3:49716 version: TLS 1.2
Source: unknown HTTPS traffic detected: 74.125.140.154:443 -> 192.168.2.3:49729 version: TLS 1.2
Source: unknown HTTPS traffic detected: 74.125.140.154:443 -> 192.168.2.3:49728 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.89.41:443 -> 192.168.2.3:49730 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.89.41:443 -> 192.168.2.3:49731 version: TLS 1.2
Source: unknown HTTPS traffic detected: 162.244.197.215:443 -> 192.168.2.3:49727 version: TLS 1.2
Source: unknown HTTPS traffic detected: 162.244.197.215:443 -> 192.168.2.3:49726 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.29:443 -> 192.168.2.3:49733 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.29:443 -> 192.168.2.3:49732 version: TLS 1.2
Source: unknown HTTPS traffic detected: 108.174.11.69:443 -> 192.168.2.3:49735 version: TLS 1.2
Source: unknown HTTPS traffic detected: 108.174.11.69:443 -> 192.168.2.3:49734 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.111:443 -> 192.168.2.3:49741 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.111:443 -> 192.168.2.3:49740 version: TLS 1.2
Source: unknown HTTPS traffic detected: 107.162.156.70:443 -> 192.168.2.3:49739 version: TLS 1.2
Source: unknown HTTPS traffic detected: 107.162.156.70:443 -> 192.168.2.3:49738 version: TLS 1.2
Source: unknown HTTPS traffic detected: 80.75.66.243:443 -> 192.168.2.3:49746 version: TLS 1.2
Source: unknown HTTPS traffic detected: 80.75.66.243:443 -> 192.168.2.3:49747 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.186.131:443 -> 192.168.2.3:49751 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.186.131:443 -> 192.168.2.3:49750 version: TLS 1.2
Source: unknown HTTPS traffic detected: 93.158.134.119:443 -> 192.168.2.3:49752 version: TLS 1.2
Source: unknown HTTPS traffic detected: 93.158.134.119:443 -> 192.168.2.3:49753 version: TLS 1.2
Source: unknown HTTPS traffic detected: 154.47.36.17:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown HTTPS traffic detected: 154.47.36.17:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown HTTPS traffic detected: 192.28.147.68:443 -> 192.168.2.3:49759 version: TLS 1.2
Source: unknown HTTPS traffic detected: 192.28.147.68:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.68:443 -> 192.168.2.3:49762 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.224.99.68:443 -> 192.168.2.3:49761 version: TLS 1.2
Source: unknown HTTPS traffic detected: 107.162.137.162:443 -> 192.168.2.3:49767 version: TLS 1.2
Source: unknown HTTPS traffic detected: 107.162.137.162:443 -> 192.168.2.3:49768 version: TLS 1.2
Source: classification engine Classification label: clean0.win@3/152@33/23
Source: C:\Program Files\internet explorer\iexplore.exe File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High Jump to behavior
Source: C:\Program Files\internet explorer\iexplore.exe File created: C:\Users\user\AppData\Local\Temp\~DF94C390ACE305242B.TMP Jump to behavior
Source: C:\Program Files\internet explorer\iexplore.exe File read: C:\Users\desktop.ini Jump to behavior
Source: unknown Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5888 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5888 CREDAT:17410 /prefetch:2 Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 436463 URL: https://securisync.intermed... Startdate: 18/06/2021 Architecture: WINDOWS Score: 0 11 securisync.intermedia.net 2->11 6 iexplore.exe 2 64 2->6         started        process3 process4 8 iexplore.exe 9 214 6->8         started        dnsIp5 13 mc.yandex.ru 93.158.134.119, 443, 49752, 49753 YANDEXRU Russian Federation 8->13 15 abrtp1.marketo.com 192.28.144.84, 443, 49716, 49717 OMNITUREUS United States 8->15 17 42 other IPs or domains 8->17
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
80.75.66.243
 apikeys-lb.civiccomputing.com United Kingdom
20860 IOMART-ASGB false
13.224.89.41
 d31y97ze264gaa.cloudfront.net United States
16509 AMAZON-02US false
52.200.121.85
 heapanalytics.com United States
14618 AMAZON-AESUS false
107.162.156.70
 stnumreq.dialogtech.com United States
55002 DEFENSE-NETUS false
192.28.144.84
 abrtp1.marketo.com United States
15224 OMNITUREUS false
13.224.99.69
 d38au5kn48shwv.cloudfront.net United States
16509 AMAZON-02US false
157.240.17.15
 scontent.xx.fbcdn.net United States
32934 FACEBOOKUS false
192.28.147.68
 524-vts-832.mktoresp.com United States
53580 MARKETOUS false
13.224.99.68
 widget.trustpilot.com United States
16509 AMAZON-02US false
162.244.197.119
 auth.myonlinedata.net United States
19780 AS-INTERMEDIA2US false
13.224.99.29
 dl7g9llrghqi1.cloudfront.net United States
16509 AMAZON-02US false
93.158.134.119
 mc.yandex.ru Russian Federation
13238 YANDEXRU false
162.244.197.215
 www.intermedia.net United States
19780 AS-INTERMEDIA2US false
199.193.200.116
 auth.us2sync.myonlinedata.net United States
16406 AS-INTERMEDIAUS false
13.224.99.111
 d3bipqqt7o7bp0.cloudfront.net United States
16509 AMAZON-02US false
142.250.186.131
 www.google.ch United States
15169 GOOGLEUS false
108.174.11.69
 pop-eda6.mix.linkedin.com United States
14413 LINKEDINUS false
104.16.93.80
 sj01.mktoedge.com United States
13335 CLOUDFLARENETUS false
107.162.137.162
 stproducer.dialogtech.com United States
55002 DEFENSE-NETUS false
154.47.36.17
 mc.webvisor.org United States
174 COGENT-174US false
74.125.140.154
 stats.l.doubleclick.net United States
15169 GOOGLEUS false
199.193.202.116
 securisync.intermedia.net United States
16406 AS-INTERMEDIAUS false
104.18.27.190
 tracking.g2crowd.com United States
13335 CLOUDFLARENETUS false

Contacted Domains

Name IP Active
abrtp1.marketo.com 192.28.144.84 true
mc.yandex.ru 93.158.134.119 true
stproducer.dialogtech.com 107.162.137.162 true
pop-eda6.mix.linkedin.com 108.174.11.69 true
d3bipqqt7o7bp0.cloudfront.net 13.224.99.111 true
sj01.mktoedge.com 104.16.93.80 true
auth.myonlinedata.net 162.244.197.119 true
dl7g9llrghqi1.cloudfront.net 13.224.99.29 true
scontent.xx.fbcdn.net 157.240.17.15 true
stnumreq.dialogtech.com 107.162.156.70 true
tracking.g2crowd.com 104.18.27.190 true
www.intermedia.net 162.244.197.215 true
d38au5kn48shwv.cloudfront.net 13.224.99.69 true
auth.us2sync.myonlinedata.net 199.193.200.116 true
524-vts-832.mktoresp.com 192.28.147.68 true
stats.l.doubleclick.net 74.125.140.154 true
www.intermedia.com 162.244.197.215 true
us2sync.myonlinedata.net 199.193.200.116 true
apikeys-lb.civiccomputing.com 80.75.66.243 true
securisync.intermedia.net 199.193.202.116 true
heapanalytics.com 52.200.121.85 true
www.google.ch 142.250.186.131 true
widget.trustpilot.com 13.224.99.68 true
d31y97ze264gaa.cloudfront.net 13.224.89.41 true
mc.webvisor.org 154.47.36.17 true
cc.cdn.civiccomputing.com unknown unknown
cdn.jsdelivr.net unknown unknown
apikeys.civiccomputing.com unknown unknown
stats.g.doubleclick.net unknown unknown
js.driftt.com unknown unknown
app-sj01.marketo.com unknown unknown
www.youtube.com unknown unknown
st2.dialogtech.com unknown unknown
cdn.heapanalytics.com unknown unknown
rtp-static.marketo.com unknown unknown
www.linkedin.com unknown unknown
abrtp1-cdn.marketo.com unknown unknown
connect.facebook.net unknown unknown
px.ads.linkedin.com unknown unknown
st1.dialogtech.com unknown unknown
munchkin.marketo.net unknown unknown
snap.licdn.com unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://www.intermedia.com/why-intermedia/compliance false
    		unknown
    https://www.intermedia.com/products/securisync false
      		unknown
      https://securisync.intermedia.net/us2/s/file?public_share=IpnIUjFRDCv9PeEVchmZ5r003e9fc4 false
        		high