Windows Analysis Report https://click-notification.capitalone.com/f/a/_yjkhiR1egtxBe8Wa07kOg~~/AAAAAQA~/RgRirSWZP0R1aHR0cDovL21pLmNhcGl0YWxvbmUuY29tL3AvY3AvMjdlMzgzNWVjNTVmZDcxNi9jP3VybD1odHRwJTNBJTJGJTJGbWkuY2FwaXRhbG9uZS5jb20lMkZwJTJGcnAlMkY4N2EyN2JmYzhiMGI1NzQ3JTJGdXJsVwZjYXBvbmVCCmDImaDKYOdbSflSE3ZibGFpbkBnbGVuZXJneS5jb21YBAAAAAA~

Phishing:

Found iframes

Source: https://verified.capitalone.com/auth/signin?goto_url=https:%2F%2Fmyaccounts.capitalone.com%2FProfile%2Femail%3FemailLabel%3DCustomerPrimaryEmail	HTTP Parser: Iframe src: https://capitaloneservices.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fverified.capitalone.com
Source: https://verified.capitalone.com/auth/signin?goto_url=https:%2F%2Fmyaccounts.capitalone.com%2FProfile%2Femail%3FemailLabel%3DCustomerPrimaryEmail	HTTP Parser: Iframe src: https://capitaloneservices.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fverified.capitalone.com

HTML body contains low number of good links

Source: https://verified.capitalone.com/auth/null	HTTP Parser: Number of links: 0
Source: https://verified.capitalone.com/auth/null	HTTP Parser: Number of links: 0
Source: https://verified.capitalone.com/auth/signin	HTTP Parser: Number of links: 0
Source: https://verified.capitalone.com/auth/signin	HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://verified.capitalone.com/auth/null	HTTP Parser: Title: Sign In does not match URL
Source: https://verified.capitalone.com/auth/null	HTTP Parser: Title: Sign In does not match URL
Source: https://verified.capitalone.com/auth/signin	HTTP Parser: Title: Sign In does not match URL
Source: https://verified.capitalone.com/auth/signin	HTTP Parser: Title: Sign In does not match URL
Source: https://verified.capitalone.com/auth/signin?goto_url=https:%2F%2Fmyaccounts.capitalone.com%2FProfile%2Femail%3FemailLabel%3DCustomerPrimaryEmail	HTTP Parser: Title: Sign In does not match URL
Source: https://verified.capitalone.com/auth/signin?goto_url=https:%2F%2Fmyaccounts.capitalone.com%2FProfile%2Femail%3FemailLabel%3DCustomerPrimaryEmail	HTTP Parser: Title: Sign In does not match URL

META author tag missing

Source: https://www.capitalone.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.capitalone.com/	HTTP Parser: No <meta name="author".. found
Source: https://verified.capitalone.com/auth/null	HTTP Parser: No <meta name="author".. found
Source: https://verified.capitalone.com/auth/null	HTTP Parser: No <meta name="author".. found
Source: https://verified.capitalone.com/auth/signin	HTTP Parser: No <meta name="author".. found
Source: https://verified.capitalone.com/auth/signin	HTTP Parser: No <meta name="author".. found
Source: https://verified.capitalone.com/auth/signin?goto_url=https:%2F%2Fmyaccounts.capitalone.com%2FProfile%2Femail%3FemailLabel%3DCustomerPrimaryEmail	HTTP Parser: No <meta name="author".. found
Source: https://verified.capitalone.com/auth/signin?goto_url=https:%2F%2Fmyaccounts.capitalone.com%2FProfile%2Femail%3FemailLabel%3DCustomerPrimaryEmail	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://www.capitalone.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.capitalone.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://verified.capitalone.com/auth/null	HTTP Parser: No <meta name="copyright".. found
Source: https://verified.capitalone.com/auth/null	HTTP Parser: No <meta name="copyright".. found
Source: https://verified.capitalone.com/auth/signin	HTTP Parser: No <meta name="copyright".. found
Source: https://verified.capitalone.com/auth/signin	HTTP Parser: No <meta name="copyright".. found
Source: https://verified.capitalone.com/auth/signin?goto_url=https:%2F%2Fmyaccounts.capitalone.com%2FProfile%2Femail%3FemailLabel%3DCustomerPrimaryEmail	HTTP Parser: No <meta name="copyright".. found
Source: https://verified.capitalone.com/auth/signin?goto_url=https:%2F%2Fmyaccounts.capitalone.com%2FProfile%2Femail%3FemailLabel%3DCustomerPrimaryEmail	HTTP Parser: No <meta name="copyright".. found

Compliance:

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 44.239.252.108:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.239.252.108:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.9:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.9:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.124.173.63:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.124.173.63:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.193.42:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.193.42:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.87.60.181:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.87.60.181:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.2.11:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.2.11:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.31.176.223:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.31.176.223:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.227.160.99:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.227.160.99:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.18.85.49:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.18.85.49:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.176.210:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.176.210:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.40:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.40:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.212.164.82:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.98:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.98:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.154.208.108:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.154.208.108:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.227:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.227:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.154.86.12:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.154.86.12:443 -> 192.168.2.5:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.110:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.110:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.242.20:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.242.20:443 -> 192.168.2.5:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.109:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.109:443 -> 192.168.2.5:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.176.210:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.176.210:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.29.225.117:443 -> 192.168.2.5:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.29.225.117:443 -> 192.168.2.5:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.19.154.16:443 -> 192.168.2.5:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.19.154.16:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.75.9.158:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.33:443 -> 192.168.2.5:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.33:443 -> 192.168.2.5:49803 version: TLS 1.2

Spreading:

Checks for available system drives (often done to infect USB drives)

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: z:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: x:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: v:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: t:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: r:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: p:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: n:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: l:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: j:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: h:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: f:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: b:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: y:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: w:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: u:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: s:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: q:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: o:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: m:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: k:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: i:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: g:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: e:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: c:			Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	File opened: a:			Jump to behavior

Networking:

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /p/cp/27e3835ec55fd716/c?url=http%3A%2F%2Fmi.capitalone.com%2Fp%2Frp%2F87a27bfc8b0b5747%2Furl HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateConnection: Keep-AliveHost: mi.capitalone.com
Source: global traffic	HTTP traffic detected: GET /p/rp/87a27bfc8b0b5747/url HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateConnection: Keep-AliveHost: mi.capitalone.comCookie: _micpn=esp:27e3835ec55fd716::1624541776158; _mibhv=84.17.52.9_5057

Found strings which match to known social media urls

Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr

String found in binary or memory: c){return function(d){d=a.scrub(d,"facebook"),c.subscriber("facebook received data:",d);var e=new Image(1,1);e.style.display="none";const f=d.dpo||"LDU",g=d.dpoco||0,h=d.dpost||0;var i="https://www.facebook.com/tr?id\x3d"+d.id+"\x26ev\x3d"+d.ev+"\x26dpo\x3d"+f+"\x26dpoco\x3d"+g+"\x26dpost\x3d"+h;if(d.cd)for(var j in d.cd)i+="\x26cd["+j+"]\x3d"+d.cd[j];return d.order_id&&(i+="\x26cd[order_id]\x3d"+d.order_id),d.page_id&&(i+="\x26cd[page_id]\x3d"+d.page_id),d.brand_cd&&(i+="\x26cd[brand_cd]\x3d"+d.brand_cd), equals www.facebook.com (Facebook)

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: click-notification.capitalone.com

URLs found in memory or binary data

Source: angular-platform-browser.842dc5a07ae90c8926b0[1].js.2.dr	String found in binary or memory: http://g.co/ng/security#xss)
Source: 247px[1].js0.2.dr	String found in binary or memory: http://www.247-inc.com
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: en_us[1].json.2.dr	String found in binary or memory: http://www.capitalone.com
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: http://www.dfs.ny.gov.
Source: cc[1].js.2.dr	String found in binary or memory: http://www.vietcomic.comVNI-Thufap2
Source: 840332faff16ffbd9b96723a42a9f100[1].js.2.dr	String found in binary or memory: https://806653.fls.doubleclick.net/activityi;src
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://aa.agkn.com
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.
Source: neustar-page-advisor[1].js.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.json?sid=9212299498&page=
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://adadvisor.net/adscores/g.js?sid
Source: js[2].js.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity
Source: js[2].js.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: angular-common.8eee33d56a365b103fb8[1].js.2.dr	String found in binary or memory: https://angular.io/api/common/NgForOf#change-propagation
Source: faf3b532d256b2bda8347f91a388687c[1].js.2.dr	String found in binary or memory: https://api.capitalone.com/private/ASVHOMEPAGE/v1/keymaster/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://autopreapproval.capitalone.com/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://autorefi.capitalone.com/login
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://autorefi.capitalone.com/login/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://autorefi.capitalone.com/prequalify
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://autorefi.capitalone.com/prequalify/sign-in
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://bam.nr-data.net
Source: en_us[1].json.2.dr	String found in binary or memory: https://banking.capitalone.com/olb-web/entry
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://bfp.capitalone.com/browserFingerPrintv1.min.js
Source: f[1].txt.2.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://bm.adentifi.com
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://bm.adentifi.com/pixel/c?
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://capitaloneservices.demdex.net/dest5.html?d_nsid=0
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://capitaloneservices.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fverified.capitalone.com
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://capitaloneservices.tt.omtrdc.net/m2/capitaloneservices/ubox/image?
Source: js[2].js.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: 840332faff16ffbd9b96723a42a9f100[1].js.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: en_us[1].json.2.dr	String found in binary or memory: https://creditkeeper-qa.cloud.capitalone.com/
Source: en_us[1].json.2.dr	String found in binary or memory: https://creditkeeper.capitalone.com/#/platforms
Source: en_us[1].json.2.dr	String found in binary or memory: https://creditwise.capitalone.com/#/authenticated
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://creditwise.capitalone.com/home
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://creditwise.capitalone.com/home&q;
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://d.agkn.com
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr, 840332faff16ffbd9b96723a42a9f100[1].js.2.dr	String found in binary or memory: https://d.agkn.com/pixel/
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net/live/
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://dc.ads.linkedin.com/collect/?fmt
Source: credit-cards[1].htm.2.dr, signin[1].htm0.2.dr	String found in binary or memory: https://deviceinfo.capitalone.com
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://deviceinfo.capitalone.com/collector/s2?t=AUuQ6sxndcAPQfxVeA26FDWV&x=1&sid=b57e9686e0bc24f0&t
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://deviceinfo.capitalone.com/collector/s2?t=AZ06K65wFFfpZDiN4jf3%2BlDP&x=1&sid=b57e9686e0bc24f0
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://deviceinfo.capitalone.com/collector/s2?t=Ab6ttJcFWHcNfZI33pSWidWe&x=1&sid=b57e9686e0bc24f0&t
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://deviceinfo.capitalone.com/collector/s2?t=Af75TRt2X%2FRHn6OEfeu1gu2F&x=1&sid=b57e9686e0bc24f0
Source: en_us[1].json.2.dr	String found in binary or memory: https://ease-qa.clouddqtext.capitalone.com/welcome
Source: credit-cards[1].htm.2.dr, signin[1].htm0.2.dr	String found in binary or memory: https://ecm.capitalone.com
Source: signin[1].htm0.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/fonts/Optimist_W_Lt.woff2
Source: signin[1].htm0.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/fonts/Optimist_W_Rg.woff2
Source: signin[1].htm0.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/fonts/Optimist_W_SBd.woff2
Source: en_us[1].json0.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/common/icons/selective/alert-notification.svg
Source: en_us[1].json0.2.dr, en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/common/icons/selective/caution.svg
Source: en_us[1].json0.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/common/icons/selective/contact.svg
Source: en_us[1].json0.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/common/icons/selective/documents.svg
Source: en_us[1].json0.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/common/icons/selective/instantissuance.svg
Source: en_us[1].json0.2.dr, en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/common/icons/selective/security.svg
Source: en_us[1].json0.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/common/icons/selective/success.svg
Source: en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/common/icons/success.svg
Source: en_us[1].json0.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/common/icons/ui/lined-car.svg
Source: en_us[1].json0.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/common/icons/ui/lined-card.svg
Source: en_us[1].json0.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/common/icons/ui/lined-check.svg
Source: en_us[1].json0.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/common/icons/ui/lined-savings.svg
Source: en_us[1].json0.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/header/sign-in.svg
Source: en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/product/ui-enterprise-sign-in/icon-360.svg
Source: en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/product/ui-enterprise-sign-in/icon-branch.svg
Source: en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/product/ui-enterprise-sign-in/icon-credit-card.sv
Source: en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/product/ui-enterprise-sign-in/icon-creditwise.svg
Source: en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/product/ui-enterprise-sign-in/icon-help.svg
Source: en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/product/ui-enterprise-sign-in/icon-location.svg
Source: en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/product/ui-enterprise-sign-in/icon-lock.svg
Source: en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/product/ui-enterprise-sign-in/icon-online.svg
Source: en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/product/ui-enterprise-sign-in/icon-swish.svg
Source: en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/product/ui-enterprise-sign-in/icon-user.svg
Source: en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/product/ui-enterprise-sign-in/other-products-busi
Source: en_us[1].json.2.dr	String found in binary or memory: https://ecm.capitalone.com/CI_Common/assets/images/product/ui-enterprise-sign-in/other-products-comm
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/photos/e4.checkered_creditwise_desktop_1120/desktop.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/photos/e4.checkered_creditwise_desktop_1120/mobile.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/photos/e4.checkered_creditwise_desktop_1120/rdesktop.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/photos/e4.checkered_creditwise_desktop_1120/rmobile.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/photos/e4.checkered_creditwise_desktop_1120/rtablet.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/photos/e4.checkered_creditwise_desktop_1120/tablet.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/photos/learn-grow/more-than-a-bank-section/more-than-a-bank-
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/photos/revised-desktop/desktop.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/photos/revised-desktop/mobile.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/photos/revised-desktop/rdesktop.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/photos/revised-desktop/rmobile.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/photos/revised-desktop/rtablet.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/photos/revised-desktop/tablet.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/testing/photos/hero/preapproval_desktop/desktop.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/testing/photos/hero/preapproval_desktop/mobile.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/testing/photos/hero/preapproval_desktop/rdesktop.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/testing/photos/hero/preapproval_desktop/rmobile.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/testing/photos/hero/preapproval_desktop/rtablet.jpg
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://ecm.capitalone.com/WCM/homepage/testing/photos/hero/preapproval_desktop/tablet.jpg
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://ep.bankrate.com/pixel_tracking/Pixel.aspx?
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://goto.capitalone.com/conv/?irchannel
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://insight.adsrvr.org/track/up
Source: en_us[1].json.2.dr	String found in binary or memory: https://intellix.capitalonebank.com/treasury-management-portal-web/appmanager/TresMgmtPortal/Treasur
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://js-agent.newrelic.com
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://locations.capitalone.com/
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://log-23811e0f.us.v2.we-stats.com/api/v1/sendLogs
Source: 840332faff16ffbd9b96723a42a9f100[1].js.2.dr	String found in binary or memory: https://logx.optimizely.com/v1/events
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://mboxedge34.tt.omtrdc.net
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://myaccount-data.capitalone.co.uk/auth/outbound?service=Root
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://myaccount-data.capitalone.co.uk/auth/outbound?service=login
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://myaccount-data.capitalone.co.uk/auth/outbound?service=loginX
Source: en_us[1].json.2.dr	String found in binary or memory: https://myaccounts.capitalone.com/welcomeBack
Source: en_us[1].json.2.dr	String found in binary or memory: https://nsbqa2.kdc.capitalone.com/app.html#/accountSummary/
Source: en_us[1].json.2.dr	String found in binary or memory: https://olbr-waf-qa.cloud.capitalone.com/olb-web/entry
Source: en_us[1].json.2.dr	String found in binary or memory: https://olbrqa5.kdc.capitalone.com/olb-web/entry
Source: js[2].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: js[1].js1.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: en_us[1].json.2.dr	String found in binary or memory: https://preprod-creditwise.kdc.capitalone.com/#/authenticated
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/activity;xsp
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?fmt
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/activate
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/applications/mobile/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/auto-financing
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/auto-financing/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/auto-financing/calculators/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/auto-financing/faq/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/auto-financing/refinance/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/autoenroll/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/banking-features/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/cds/ira/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/cds/online-cds/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/checking-accounts/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/checking-accounts/online-checking-account/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/checking-accounts/teen-checking-account/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/home-lending/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/location-types/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/money-management/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/open-an-account/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/savings-accounts/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/savings-accounts/ira/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/savings-accounts/kids-savings-account/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/bank/savings-accounts/online-performance-savings-account/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/cars/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/cars/find
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/cars/learn/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/cars/learn/managing-your-money-wisely/how-do-car-loans-affect-my-c
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/cars/login/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/cars/prequalify/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/cars/search-model/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/commercial/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/commercial/corporate-cards
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/commercial/solutions/corporate-cards/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/learn-grow/privacy-security/contactless-credit-cards/?external_id=
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/small-business-bank
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/small-business-bank/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/small-business-bank/checking-accounts/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/small-business-bank/escrow/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/small-business-bank/financing/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/small-business-bank/merchant-services
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/small-business-bank/merchant-services/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/small-business-bank/savings-cds/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/small-business/credit-cards/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/small-business/credit-cards/cash-back/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/small-business/credit-cards/homepage/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/small-business/credit-cards/travel-and-miles/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://qamain-cdn.capitalone.com/trade-credit/small-business/
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://resources.xg4ken.com
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://s.yimg.com/wi/ytc.js
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://secure.adnxs.com/px?
Source: en_us[1].json.2.dr	String found in binary or memory: https://secure.capitalone360.com/myaccount/banking/postlogin
Source: en_us[1].json.2.dr	String found in binary or memory: https://smartview.capitalone.com/
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://smetrics.capitalone.com
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: en_us[1].json.2.dr	String found in binary or memory: https://sparkbusiness.capitalone.com/app.html#/accountSummary/
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: analytics[1].js.2.dr, f[1].txt.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://tms.capitalone.com
Source: signin[1].htm0.2.dr	String found in binary or memory: https://tms.capitalone.com/capitalone/prod/Bootstrap.js
Source: serverComponent[1].js.2.dr	String found in binary or memory: https://tms.capitalone.com/capitalone/prod/code/1869557101d202264b2538fd7f6fecfc.js?conditionId0=483
Source: serverComponent[1].js.2.dr	String found in binary or memory: https://tms.capitalone.com/capitalone/prod/code/540869e9c8eacf0b9e40d89eec2ed62e.js?conditionId0=238
Source: serverComponent[1].js.2.dr	String found in binary or memory: https://tms.capitalone.com/capitalone/prod/code/ed18d403cfc846a758ceebb35369d96f.js?conditionId0=421
Source: en_us[1].json.2.dr	String found in binary or memory: https://transite-qa2.capitalone360qa.com/myaccount/banking/postlogin
Source: signin[1].htm0.2.dr	String found in binary or memory: https://uba.capitalone.com
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://verified-it.capitalone.com/auth/signin
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://verified-it.capitalone.com/auth/signin?Product=Card&Action=Pay
Source: en_us[1].json0.2.dr	String found in binary or memory: https://verified-it.capitalone.com/esic-ui/#/enrollment
Source: en_us[1].json0.2.dr	String found in binary or memory: https://verified-it.capitalone.com/sic-ui/#/pathFinder
Source: en_us[1].json0.2.dr	String found in binary or memory: https://verified-it.capitalone.com/sign-in/
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified..capitalone.co.uk/auth/outbound?service=loginRoot
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified..com/about/accessibility-commitmign
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified..com/com/enroll/pii?originatorId=SICCRoot
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified..com/credit-cards/lity-commitmign
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified..com/small-business/credit-cardsign
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified.Root
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified.alone.com/auth/nullth/outbound?service=loginRoot
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified.alone.com/auth/signinRoot
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified.alone.com/enroll/#/pii?originatorId=SICRoot
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified.alone.com/enroll/pii?originatorId=SICCRoot
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified.capit
Source: signin[1].htm0.2.dr	String found in binary or memory: https://verified.capitalone.com/assets/enterprise/js/cp_common.js
Source: enroll[1].htm.2.dr	String found in binary or memory: https://verified.capitalone.com/auth/assets/js/bfp-ah-min.js
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://verified.capitalone.com/auth/assets/js/jsencrypt.js
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://verified.capitalone.com/auth/assets/js/web_properties.js
Source: imagestore.dat.2.dr	String found in binary or memory: https://verified.capitalone.com/auth/favicon.ico
Source: imagestore.dat.2.dr	String found in binary or memory: https://verified.capitalone.com/auth/favicon.ico~
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://verified.capitalone.com/auth/nullth/outbound?service=login
Source: ~DF47AFD4647431015E.TMP.1.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://verified.capitalone.com/auth/signin
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://verified.capitalone.com/auth/signin/outbound?service=login
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://verified.capitalone.com/auth/signin?Product=Card&Action=Pay
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr, ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://verified.capitalone.com/auth/signin?goto_url=https%3A%2F%2Fmyaccounts.capitalone.com%2FProfi
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://verified.capitalone.com/auth/signin?goto_url=https:%2F%2Fmyaccounts.capitalone.com%2FProfile
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified.capitalone.com/auth/signin?goto_url=https://myaccounts.capitalone.com/Profile/email
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://verified.capitalone.com/auth/signingoto_url=https:%2F%2Fmyaccounts.capitalone.com%2FProfile%
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified.capitalone.com/enroll/
Source: en_us[1].json0.2.dr	String found in binary or memory: https://verified.capitalone.com/enroll/#/faq
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://verified.capitalone.com/enroll/#/pii
Source: redirectLinkInfo[1].json.2.dr, {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr, ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://verified.capitalone.com/enroll/#/pii?originatorId=SIC
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://verified.capitalone.com/enroll/#/pii?originatorId=SIC%2Fmyaccounts.capitalone.com%2FProfile%
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified.capitalone.com/enroll/:
Source: imagestore.dat.2.dr	String found in binary or memory: https://verified.capitalone.com/enroll/favicon.ico
Source: imagestore.dat.2.dr	String found in binary or memory: https://verified.capitalone.com/enroll/favicon.ico~
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified.capitalone.com/enroll/pii?originatorId=SIC
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://verified.capitalone.com/enroll/pii?originatorId=SICC
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified.capitalone.com/enroll/pii?originatorId=SICvhttps://verified.capitalone.com/enroll/p
Source: en_us[1].json0.2.dr	String found in binary or memory: https://verified.capitalone.com/esic-ui/#/enrollment
Source: en_us[1].json0.2.dr	String found in binary or memory: https://verified.capitalone.com/sic-ui/#/pathFinder
Source: en_us[1].json0.2.dr	String found in binary or memory: https://verified.capitalone.com/sign-in/
Source: en_us[1].json0.2.dr	String found in binary or memory: https://verified.capitalone.com/signinhelp.html?client=ENROLLMENT
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://verified.login
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://w.usabilla.com/678cb8b6da55.js?lv=1
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://wup-23811e0f.us.v2.we-stats.com/client/v3/web/wup?cid
Source: en_us[1].json.2.dr	String found in binary or memory: https://www.capitalone.ca/privacypolicy
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.capitalone.coRoot
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr, en_us[1].json.2.dr	String found in binary or memory: https://www.capitalone.com/
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/about/
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr, ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://www.capitalone.com/about/accessibility-commitment/
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.capitalone.com/about/accessibility-commitment/FAccessibility
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.capitalone.com/about/accessibility-commitment/favicon.ico
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.capitalone.com/about/accessibility-commitment/favicon.ico~
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.capitalone.com/about/accessibility-commitmentRoot
Source: en_us[1].json0.2.dr, universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/activate
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/applications/eno/virtualnumbers/&q;
Source: credit-cards[1].htm.2.dr, accessibility-commitment[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/applications/identity-protection/commitment/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/applications/mobile/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/assets/compass/contentful/1h6lncjoeq27/3c4p5MFpIcgNwJDQnn0Yfv/36cc1bbb057
Source: credit-cards[1].htm.2.dr, accessibility-commitment[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/assets/compass/contentful/1h6lncjoeq27/5vsvNc14jKiO6G8siOgsAs/06df255aae4
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/assets/compass/contentful/1h6lncjoeq27/6WWPn2LDNrhlqlC2EV9nc1/63a34510e51
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/assets/compass/contentful/1h6lncjoeq27/6xRrcV1RLyuZ3LsmFTexPK/e6af25557c1
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/assets/enterprise/deviceType/c1SiteVars.js
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/assets/enterprise/fonts/Optimist_W_Lt.woff2
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/assets/enterprise/fonts/Optimist_W_Rg.woff2
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/assets/enterprise/fonts/Optimist_W_SBd.woff2
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/assets/enterprise/fonts/Optimist_W_XLt.woff2
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/assets/enterprise/fonts/icomoon.woff2
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/assets/enterprise/js/adobe/at.js
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/assets/enterprise/js/adobe/visitorAPI.js
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/assets/enterprise/js/tags/neustar-page-advisor.js
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.capitalone.com/assets/shell/favicon.ico
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.capitalone.com/assets/shell/favicon.ico~
Source: accessibility-commitment[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/assets/universal-nav/js/universal-nav.7b539fa57c10e5efd1b0.js
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/assets/universal-nav/js/universal-nav.a9e03fd0acfe5fe2644f.js
Source: credit-cards[1].htm.2.dr, 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/assets/universal-nav/styles/universal-nav.860d399c371947573242.styles.css
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/auto-financing
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/auto-financing/
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/auto-financing/calculators&q;
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/auto-financing/calculators/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/auto-financing/faq/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/auto-financing/refinance/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/autoenroll/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/banking-features/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/cds/ira/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/cds/online-cds/
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/bank/cds/online-cds/&q;
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/checking-accounts/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/checking-accounts/online-checking-account/
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/bank/checking-accounts/online-checking-account/&q;
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/checking-accounts/teen-checking-account/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/home-lending/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/location-types/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/money-management/
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/bank/money-management/savings-account/budget-when-broke/&q;
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/open-an-account/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/savings-accounts/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/savings-accounts/ira/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/savings-accounts/kids-savings-account/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/bank/savings-accounts/online-performance-savings-account/
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/bank/savings-accounts/online-performance-savings-account/&q;
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/bank/security-fraud-protection/&q;
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/cars/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/cars/find
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/cars/learn/
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/cars/learn/getting-a-good-deal/avoid-the-monthly-payment-mistake/1021&q;
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/cars/learn/managing-your-money-wisely/can-i-buy-a-car-with-this-credit-sc
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/cars/learn/managing-your-money-wisely/how-do-car-loans-affect-my-credit-s
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/cars/login/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/cars/prequalify/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/cars/search-model/
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://www.capitalone.com/com/enroll/pii?originatorId=SICC
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://www.capitalone.com/com/enroll/pii?originatorId=SICCersion11.00.17134.1
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/commercial/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/commercial/corporate-cards
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/commercial/solutions/corporate-cards/
Source: en_us[1].json0.2.dr	String found in binary or memory: https://www.capitalone.com/corporate/terms
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.capitalone.com/credit-cards/
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/credit-cards/average-and-building/&q;
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.capitalone.com/credit-cards/bExplore
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://www.capitalone.com/credit-cards/lity-commitment/
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://www.capitalone.com/credit-cards/lity-commitment/N
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://www.capitalone.com/credit-cards/lity-commitment/nt/favicon.ico
Source: en_us[1].json0.2.dr	String found in binary or memory: https://www.capitalone.com/identity-protection/commitment
Source: en_us[1].json0.2.dr	String found in binary or memory: https://www.capitalone.com/identity-protection/privacy
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/learn-grow/?external_id=COF01_HUB_HPBANNER_D99
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/learn-grow/life-events/how-to-get-a-car-loan/?external_id=USCARD_COF01_HU
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/learn-grow/money-management/credit-card-approved/?external_id=COF01_HUB_H
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/learn-grow/money-management/how-to-build-and-use-emergency-funds/?externa
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/learn-grow/money-management/manage-your-money/?external_id=COF01_HUB_HPBA
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/learn-grow/privacy-security/capital-one-credit-card-security-features/?ex
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/learn-grow/privacy-security/contactless-credit-cards/?external_id=COF01_H
Source: en_us[1].json0.2.dr	String found in binary or memory: https://www.capitalone.com/legal/corporate/terms
Source: credit-cards[1].htm.2.dr, accessibility-commitment[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/legal/terms-conditions
Source: en_us[1].json0.2.dr, accessibility-commitment[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/privacy
Source: credit-cards[1].htm.2.dr, accessibility-commitment[1].htm.2.dr	String found in binary or memory: https://www.capitalone.com/privacy/online-privacy-policy#collecting-using-sharing-information-accord
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/small-business-bank
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/small-business-bank/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/small-business-bank/checking-accounts/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/small-business-bank/escrow/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/small-business-bank/financing/
Source: universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/small-business-bank/merchant-services
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/small-business-bank/merchant-services/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/small-business-bank/savings-cds/
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr, ~DF47AFD4647431015E.TMP.1.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/small-business/credit-cards/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/small-business/credit-cards/cash-back/
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/small-business/credit-cards/homepage/
Source: ~DF47AFD4647431015E.TMP.1.dr	String found in binary or memory: https://www.capitalone.com/small-business/credit-cards/t/N
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr, universal-nav.7b539fa57c10e5efd1b0[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/small-business/credit-cards/travel-and-miles/
Source: {93B91841-D53C-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.capitalone.com/small-business/credit-cards/vSpark
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/support-center/credit-cards/set-up-AutoPay/&q;
Source: 5A7K5T8U.htm.2.dr	String found in binary or memory: https://www.capitalone.com/tech/machine-learning/?utm_medium=capitalone.com&utm_source=referral&
Source: universal-nav.a9e03fd0acfe5fe2644f[1].js.2.dr	String found in binary or memory: https://www.capitalone.com/trade-credit/small-business/
Source: en_us[1].json.2.dr	String found in binary or memory: https://www.commercialcardconnect.com/Centre/Public/Logon/Index?ReturnUrl=%2fcentre%2f%3fcapitalone&
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://www.depositaccounts.com/trk/pxl/?
Source: credit-cards[1].htm.2.dr, accessibility-commitment[1].htm.2.dr	String found in binary or memory: https://www.fdic.gov/
Source: js[1].js0.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: js[2].js.2.dr, js[1].js1.2.dr	String found in binary or memory: https://www.google.com
Source: credit-cards[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: js[2].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: js[2].js.2.dr, f[1].txt.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: ade330cec8af44dbf5656fc0a9f4b8d6[1].js0.2.dr, faf3b532d256b2bda8347f91a388687c[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: 3736fd7072cdecb18278259d395f6fe5[1].js.2.dr	String found in binary or memory: https://www.nextinsure.com/ListingDisplay/Outcome/?O

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 44.239.252.108:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.239.252.108:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.9:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.9:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.124.173.63:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.124.173.63:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.193.42:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.193.42:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.87.60.181:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.87.60.181:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.2.11:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.2.11:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.31.176.223:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.31.176.223:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.227.160.99:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.227.160.99:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.18.85.49:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.18.85.49:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.176.210:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.176.210:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.40:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.40:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.212.164.82:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.98:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.98:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.154.208.108:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.154.208.108:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.227:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.227:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.154.86.12:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.154.86.12:443 -> 192.168.2.5:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.110:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.110:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.242.20:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.242.20:443 -> 192.168.2.5:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.109:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.109:443 -> 192.168.2.5:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.176.210:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.176.210:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.29.225.117:443 -> 192.168.2.5:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.29.225.117:443 -> 192.168.2.5:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.19.154.16:443 -> 192.168.2.5:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.19.154.16:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.75.9.158:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.33:443 -> 192.168.2.5:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.33:443 -> 192.168.2.5:49803 version: TLS 1.2

System Summary:

Classification label

Source: classification engine

Classification label: clean2.win@3/228@60/26

Creates files inside the user directory

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{93B9183F-D53C-11EB-90E5-ECF4BB570DC9}.dat

Jump to behavior

Creates temporary files

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF8968EEF0BC1C713B.TMP

Jump to behavior

Reads ini files

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2968 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2968 CREDAT:17410 /prefetch:2			Jump to behavior

Tries to open an application configuration file (.cfg)

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Windows\SysWOW64\Macromed\Flash\ss.cfg

Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior