Windows Analysis Report http://www.coronavirustoday.com

Phishing:

HTML title does not match URL

Source: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.wustl.edu%2F%3Futm_source%3Dantidote01%26utm_medium%3Dantidote01%26utm_campaign%3Dantidote01	HTTP Parser: Title: Log In STOP COVID Trial WordPress does not match URL
Source: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.wustl.edu%2F%3Futm_source%3Dantidote01%26utm_medium%3Dantidote01%26utm_campaign%3Dantidote01	HTTP Parser: Title: Log In STOP COVID Trial WordPress does not match URL

Suspicious form URL found

Source: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.wustl.edu%2F%3Futm_source%3Dantidote01%26utm_medium%3Dantidote01%26utm_campaign%3Dantidote01	HTTP Parser: Form action: https://sites.wustl.edu/stopcovidtrial/wp-login.php
Source: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.wustl.edu%2F%3Futm_source%3Dantidote01%26utm_medium%3Dantidote01%26utm_campaign%3Dantidote01	HTTP Parser: Form action: https://sites.wustl.edu/stopcovidtrial/wp-login.php

META author tag missing

Source: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.wustl.edu%2F%3Futm_source%3Dantidote01%26utm_medium%3Dantidote01%26utm_campaign%3Dantidote01	HTTP Parser: No <meta name="author".. found
Source: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.wustl.edu%2F%3Futm_source%3Dantidote01%26utm_medium%3Dantidote01%26utm_campaign%3Dantidote01	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.wustl.edu%2F%3Futm_source%3Dantidote01%26utm_medium%3Dantidote01%26utm_campaign%3Dantidote01	HTTP Parser: No <meta name="copyright".. found
Source: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.wustl.edu%2F%3Futm_source%3Dantidote01%26utm_medium%3Dantidote01%26utm_campaign%3Dantidote01	HTTP Parser: No <meta name="copyright".. found

Compliance:

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 23.185.0.3:443 -> 192.168.2.5:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.194:443 -> 192.168.2.5:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.194:443 -> 192.168.2.5:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.89:443 -> 192.168.2.5:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.193.44:443 -> 192.168.2.5:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.193.44:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.89:443 -> 192.168.2.5:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.6.139:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.6.139:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.193.75:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.193.75:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.17.33.216:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.17.33.216:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.201.194:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.201.194:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.102.157:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.102.157:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.201.195:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.201.195:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.67.61:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.67.61:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.64.218:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.64.218:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.115:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.115:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.194:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.194:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.194:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.132.33.46:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.132.33.46:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.3:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.215.37.29:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.215.37.29:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.215.37.29:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.215.37.29:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.5.76.163:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.5.76.163:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.51.35:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.51.35:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.7:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.7:443 -> 192.168.2.5:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.217.79:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.217.79:443 -> 192.168.2.5:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.64:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.64:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.5:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.5:49781 version: TLS 1.2

Networking:

Downloads files from webservers via HTTP

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.coronavirustoday.comConnection: Keep-Alive

Found strings which match to known social media urls

Source: js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7yA[2].js.2.dr	String found in binary or memory: var url = root.options.protocol + 'www.facebook.com/sharer.php?'; equals www.facebook.com (Facebook)
Source: js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7yA[2].js.2.dr	String found in binary or memory: var url = root.options.protocol + 'www.linkedin.com/shareArticle?mini=true'; equals www.linkedin.com (Linkedin)
Source: create[1].htm.2.dr	String found in binary or memory: 'https://api.addthis.com/oexchange/0.8/forward/facebook/offer?url=https://www.qr-code-generator.com/create/&pubid=ra-510657be43334197', equals www.facebook.com (Facebook)
Source: create[1].htm.2.dr	String found in binary or memory: 'https://api.addthis.com/oexchange/0.8/forward/twitter/offer?url=https://www.qr-code-generator.com/create/&pubid=ra-510657be43334197', equals www.twitter.com (Twitter)
Source: gtm[1].js.2.dr	String found in binary or memory: "vtp_html":"\n\u003Cscript type=\"text\/gtmscript\"\u003E!function(b,e,f,g,a,c,d){b.fbq||(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq||(b._fbq=a),a.push=a,a.loaded=!0,a.version=\"2.0\",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,\"script\",\"https:\/\/connect.facebook.net\/en_US\/fbevents.js\");fbq(\"init\",\"2449573621959451\");fbq(\"track\",\"PageView\");\u003C\/script\u003E\n\u003Cnoscript\u003E\u003Cimg height=\"1\" width=\"1\" style=\"display:none\" src=\"https:\/\/www.facebook.com\/tr?id=2449573621959451\u0026amp;ev=PageView\u0026amp;noscript=1\"\u003E\u003C\/noscript\u003E\n", equals www.facebook.com (Facebook)
Source: gtm[1].js.2.dr	String found in binary or memory: function yr(a,b){}function zr(a,b,c){};var Ar=!!F.MutationObserver,Br=void 0,Cr=function(a){if(!Br){var b=function(){var c=J.body;if(c)if(Ar)(new MutationObserver(function(){for(var e=0;e<Br.length;e++)L(Br[e])})).observe(c,{childList:!0,subtree:!0});else{var d=!1;gc(c,"DOMNodeInserted",function(){d||(d=!0,L(function(){d=!1;for(var e=0;e<Br.length;e++)L(Br[e])}))})}};Br=[];J.body?b():L(b)}Br.push(a)};var Er=["www.youtube.com","www.youtube-nocookie.com"],Fr,Gr=!1,Hr=0; equals www.youtube.com (Youtube)

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: www.coronavirustoday.com

URLs found in memory or binary data

Source: js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs[1].js.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9521
Source: js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7yA[2].js.2.dr	String found in binary or memory: http://getbootstrap.com/javascript/#alerts
Source: f[4].txt1.2.dr, f[2].txt2.2.dr, f[2].txt.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: http://ipac-canada.org/coronavirus-resources.php
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: http://ogp.me/ns#
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: http://ogp.me/ns/article#
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: http://ogp.me/ns/book#
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: http://ogp.me/ns/fb
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: http://ogp.me/ns/product#
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: http://ogp.me/ns/profile#
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: http://ogp.me/ns/video#
Source: js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7yA[2].js.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT)
Source: f[4].txt1.2.dr, f[2].txt2.2.dr, f[2].txt.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs[1].js.2.dr	String found in binary or memory: http://plugins.jquery.com/project/once
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: http://schema.org
Source: js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/questions/699941/handle-ajax-error-when-a-user-clicks-refresh.
Source: js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7yA[2].js.2.dr	String found in binary or memory: http://stickyjs.com/
Source: js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7yA[2].js.2.dr	String found in binary or memory: http://vast-engineering.github.com/jquery-popup-overlay/
Source: rx_lidar[1].js.2.dr, f[4].txt1.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: http://www.cdc.gov/coronavirus/about/prevention.html
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: http://www.chictr.org.cn/showproj.aspx?proj=53003
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: http://www.emro.who.int/health-topics/mers-cov/index.html
Source: js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs[1].js.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs[1].js.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: http://www.paho.org/hq/index.php?option=com_content&view=article&id=15696:coronavirus&It
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: http://www.precisionvaccinations.com/vaccines/comirnaty-bnt162b2-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: http://www.precisionvaccinations.com/vaccines/coronavac-sars-cov-2-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: http://www.precisionvaccinations.com/vaccines/nvx-cov2373-sars-cov-2-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: http://www.precisionvaccinations.com/vaccines/vaxart-covid-19-oral-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: http://www.who.int/health-topics/coronavirus
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: http://www.xinhuanet.com/english/2021-05/15/c_139947511.htm#:~:text=GUANGZHOU%2C%20May%2015%20(Xinhu
Source: f[4].txt1.2.dr, fXLPA9CVZ.txt.2.dr	String found in binary or memory: https://adsense.com.
Source: f[4].txt1.2.dr, f[2].txt2.2.dr, fXLPA9CVZ.txt.2.dr	String found in binary or memory: https://adservice.google.com
Source: gtm[1].js.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://antidote.me/match/search/questions/1?utm_source=precisionvaccinations_com&utm_medium=cts
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://antidote.me/match/search/questions/1?utm_source=precisionvaccinations_com&utm_medium=ctsearc
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://antidote.me/match/search/questions/2?utm_source=coronavirustoday_com&utm_medium=COVID19&utm_
Source: js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7yA[2].js.2.dr	String found in binary or memory: https://antidote.me/prescreener/s/en-US/chronic_obstructive_pulmonary_disease-133?utm_source=precisi
Source: create[1].htm.2.dr	String found in binary or memory: https://api.addthis.com/oexchange/0.8/forward/facebook/offer?url=https://www.qr-code-generator.com/c
Source: create[1].htm.2.dr	String found in binary or memory: https://api.addthis.com/oexchange/0.8/forward/google/offer?url=https://www.qr-code-generator.com/cre
Source: create[1].htm.2.dr	String found in binary or memory: https://api.addthis.com/oexchange/0.8/forward/twitter/offer?url=https://www.qr-code-generator.com/cr
Source: create[1].htm.2.dr	String found in binary or memory: https://api.addthis.com/oexchange/0.8/offer?url=https://www.qr-code-generator.com/create/&pubid=ra-5
Source: create[1].htm.2.dr	String found in binary or memory: https://api.w.org/
Source: create[1].htm.2.dr	String found in binary or memory: https://app.qr-code-generator.com/create/new
Source: create[1].htm.2.dr	String found in binary or memory: https://ar.qr-code-generator.com/
Source: f[4].txt1.2.dr, f[2].txt2.2.dr, fXLPA9CVZ.txt.2.dr	String found in binary or memory: https://attestation.android.com
Source: create[1].htm.2.dr	String found in binary or memory: https://bn.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://br.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://br.qr-code-generator.com/create/
Source: js_rsGiM5M1ffe6EhN-RnhM5f3pDyJ8ZAPFJNKpfjtepLk[1].js.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/10076
Source: gtm[1].js.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/%
Source: 77ee6f9e-9c37-487b-9fb6-cdfb977a2841[1].js.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: 77ee6f9e-9c37-487b-9fb6-cdfb977a2841[1].js.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: 77ee6f9e-9c37-487b-9fb6-cdfb977a2841[1].js.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/html5shiv/3.7.3/html5shiv-printshiv.min.js
Source: gtm[1].js.2.dr	String found in binary or memory: https://cdn.taboola.com/libtrc/unip/
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://certify-js.alexametrics.com/atrk.js
Source: atrk[1].js.2.dr	String found in binary or memory: https://certify.alexametrics.com/atrk.gif?
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://certify.alexametrics.com/atrk.gif?account=AFGhu1Fx9f207i
Source: en[1].js.2.dr	String found in binary or memory: https://cookiepedia.co.uk/giving-consent-to-cookies
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://covid19.trackvaccines.org/vaccines/83/
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://cse.google.com/cse?cx=f56c2acaf89aad095
Source: create[1].htm.2.dr	String found in binary or memory: https://dk.qr-code-generator.com/
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://elixirgentherapeutics.com/news/grants-and-funding/elixirgen-therapeutics-planning-to-begin-p
Source: create[1].htm.2.dr	String found in binary or memory: https://es.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://es.qr-code-generator.com/create/
Source: create[1].htm.2.dr	String found in binary or memory: https://fi.qr-code-generator.com/
Source: js_-gZIjmbs1Tu5c9mGeBKS8WC3jG4E0jSDwO9QOdbLUr0[1].js.2.dr	String found in binary or memory: https://fontawesome.com
Source: js_-gZIjmbs1Tu5c9mGeBKS8WC3jG4E0jSDwO9QOdbLUr0[1].js.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v27/4UaGrENHsxJlGDuGo1OIlL3Owpg.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v27/4UabrENHsxJlGDuGo1OIlLU94YtzCwA.woff)
Source: css[1].css2.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/mem5YaGs126MiZpBA-UN7rgOUuhv.woff)
Source: css[1].css2.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/mem5YaGs126MiZpBA-UN_r8OUuhv.woff)
Source: css[1].css2.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/mem8YaGs126MiZpBA-UFVZ0d.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmSU5fBBc-.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmWUlfBBc-.woff)
Source: css2[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmWUlvAA.woff)
Source: css2[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOmCnqEu92Fr1Me5g.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOmCnqEu92Fr1Mu4mxM.woff)
Source: create[1].htm.2.dr	String found in binary or memory: https://fr.qr-code-generator.com/
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/%
Source: 77ee6f9e-9c37-487b-9fb6-cdfb977a2841[1].js.2.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs[1].js.2.dr	String found in binary or memory: https://github.com/angular/angular.js/blob/v1.4.4/src/ng/urlUtils.js
Source: zxcvbn.min[1].js.2.dr	String found in binary or memory: https://github.com/dropbox/zxcvbn
Source: js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs[1].js.2.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.4/ui/tabs.js#L53
Source: js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs[1].js.2.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.4/ui/tabs.js#L58
Source: js_rsGiM5M1ffe6EhN-RnhM5f3pDyJ8ZAPFJNKpfjtepLk[1].js.2.dr	String found in binary or memory: https://github.com/jquery/jquery/commit/a839af034db2bd934e4d4fa6758a3fed8de74174
Source: js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs[1].js.2.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/2432
Source: js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs[1].js.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/4333
Source: gtm[1].js.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7yA[2].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: f[4].txt1.2.dr, f[2].txt2.2.dr, f[2].txt.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9988449257020106&output=html&adk=181227
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9988449257020106&output=html&h=182&slot
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9988449257020106&output=html&h=280&slot
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9988449257020106&output=html&h=436&slot
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9988449257020106&output=html&h=90&slotn
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/drt/si
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/r20210630/r20190131/zrt_lookup.html
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/r20210630/r20190131/zrt_lookup.html#RS-0-&adk=181227
Source: create[1].htm.2.dr	String found in binary or memory: https://gr.qr-code-generator.com/
Source: js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs[1].js.2.dr	String found in binary or memory: https://grack.com/blog/2009/11/17/absolutizing-url-in-javascript
Source: create[1].htm.2.dr	String found in binary or memory: https://hi.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://hu.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://id.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://it.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://it.qr-code-generator.com/create/
Source: create[1].htm.2.dr	String found in binary or memory: https://ja.qr-code-generator.com/
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://jamanetwork.com/journals/jama/fullarticle/2777059?guestAccessKey=5f7ccb45-a621-400b-a9fd-f66
Source: create[1].htm.2.dr	String found in binary or memory: https://jv.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://ko.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://ms.qr-code-generator.com/
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://mx.usembassy.gov/u-s-citizen-services/covid-19-information/
Source: js_rsGiM5M1ffe6EhN-RnhM5f3pDyJ8ZAPFJNKpfjtepLk[1].js.2.dr	String found in binary or memory: https://mydomain.com/node/1
Source: create[1].htm.2.dr	String found in binary or memory: https://nl.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://nl.qr-code-generator.com/create/
Source: create[1].htm.2.dr	String found in binary or memory: https://no.qr-code-generator.com/
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://ose-immuno.com/en/ose-product/covepit/
Source: create[1].htm.2.dr	String found in binary or memory: https://pa.qr-code-generator.com/
Source: f[4].txt1.2.dr, f[2].txt2.2.dr, f[2].txt0.2.dr, gtm[1].js.2.dr, f[2].txt.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: gtm[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: sodar2[1].js.2.dr, runner[1].htm.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/expansion_embed.js
Source: c47d422fae7fd6ebb5f026ba9eeb1907[1].js.2.dr, 2ba3bb6d9f4e2e13c8857867121c1943[1].js.2.dr, f[1].txt2.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204
Source: f[4].txt1.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=
Source: rx_lidar[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=eos
Source: rx_lidar[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=gfp_cw_status
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=imerr&err=
Source: c47d422fae7fd6ebb5f026ba9eeb1907[1].js.2.dr, f[1].txt2.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=jca&jc=
Source: f[2].txt1.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=jca&jc=22&version=
Source: f[3].txt.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=jca&jc=23&version=
Source: f[3].txt1.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=jca&jc=24&version=
Source: f[3].txt0.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=jca&jc=26&version=
Source: f[2].txt0.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=jca&jc=60&version=
Source: f[4].txt1.2.dr, fXLPA9CVZ.txt.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: runner[1].htm.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=223
Source: sodar2[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: 2ba3bb6d9f4e2e13c8857867121c1943[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204unsafeurl&
Source: f[2].txt2.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: f[4].txt1.2.dr, f[2].txt2.2.dr, fXLPA9CVZ.txt.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: f[2].txt2.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/osd.js
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html#aHR0cHM6Ly9pZC5ybGNkbi5jb20vN
Source: aframe[1].htm.2.dr, aframe[2].htm.2.dr, aframe[1].htm0.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: runner[1].htm.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=223
Source: sodar2[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: ads[7].htm.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssITu4x_sQMIa5KeqfcRwOpKAmW_5C14CG1taw
Source: ads[9].htm.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstEJxaXOGWbj7qr6ScX5n3k8aInXMcv8ZhyA6b
Source: ads6XC5RKRX.htm.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstFB_4bP3S17f2UdjIwFnYLnC25N1XmjyJbWb_
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js?domain=
Source: create[1].htm.2.dr	String found in binary or memory: https://pl.qr-code-generator.com/
Source: gtm[1].js.2.dr	String found in binary or memory: https://q.quora.com/_/ad/
Source: create[1].htm.2.dr	String found in binary or memory: https://ro.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://ru.qr-code-generator.com/
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://s3.us-west-2.amazonaws.com/us-west-2.files.campus.edublogs.org/sites.wustl.edu/dist/login-im
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://sb.scorecardresearch.com/p?c1=2&c2=27819162&cv=2.0&cj=1
Source: jetpack[1].css.2.dr	String found in binary or memory: https://secure.gravatar.com/images/grav-share-sprite-2x.png);background-size:16px
Source: jetpack[1].css.2.dr	String found in binary or memory: https://secure.gravatar.com/images/grav-share-sprite.png);background-repeat:no-repeat;width:16px;hei
Source: {725FCFBE-DEC9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://sites.wustl.ed
Source: {725FCFBE-DEC9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://sites.wustl.edstoday.com/
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/Shibboleth.sso/Login?target=https%3A%2F%2Fsites.wustl.edu%2Fwp-login.php%3Fa
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-admin/css/forms.min.css?ver=5.7.2
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-admin/css/l10n.min.css?ver=5.7.2
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-admin/css/login.min.css?ver=5.7.2
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-admin/js/password-strength-meter.min.js?ver=5.7.2
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-admin/js/user-profile.min.js?ver=5.7.2
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-content/plugins/jetpack/css/jetpack.css?ver=9.6.1
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/css/buttons.min.css?ver=5.7.2
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/css/dashicons.min.css?ver=5.7.2
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/dist/hooks.min.js?ver=50e23bed88bcb9e6e14023e9
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/dist/i18n.min.js?ver=db9a9a37da262883343e941c3
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/dist/vendor/wp-polyfill-dom-rect.min.js?ver=3.
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/dist/vendor/wp-polyfill-element-closest.min.js
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/dist/vendor/wp-polyfill-fetch.min.js?ver=3.0.0
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/dist/vendor/wp-polyfill-formdata.min.js?ver=3.
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/dist/vendor/wp-polyfill-node-contains.min.js?v
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/dist/vendor/wp-polyfill-object-fit.min.js?ver=
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/dist/vendor/wp-polyfill-url.min.js?ver=3.6.4
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/underscore.min.js?ver=1.8.3
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/wp-util.min.js?ver=5.7.2
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/zxcvbn-async.min.js?ver=1.0
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-login.php
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-login.php?action=lostpassword
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr, {725FCFBE-DEC9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtri
Source: gtm[1].js.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: gtm[1].js.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: gtm[1].js.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://stopcovidtrial.wustl
Source: wp-login[1].htm.2.dr	String found in binary or memory: https://stopcovidtrial.wustl.edu/?utm_source=antidote01&utm_medium=antidote01&utm_campaign=a
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr, js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7yA[2].js.2.dr, healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://stopcovidtrial.wustl.edu/?utm_source=antidote01&utm_medium=antidote01&utm_campaign=antidote0
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://support.google.com/adsense/#topic=3373519
Source: create[1].htm.2.dr	String found in binary or memory: https://sv.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://ta.qr-code-generator.com/
Source: analytics[1].js.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://th.qr-code-generator.com/
Source: sodar2[1].js.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/%
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr, sodar2[1].js.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/224/runner.html
Source: create[1].htm.2.dr	String found in binary or memory: https://tr.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://tr.qr-code-generator.com/create/
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://travel.gc.ca/travel-covid/travel-restrictions/flying-canada-checklist
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://ttp.dhs.gov/
Source: create[1].htm.2.dr	String found in binary or memory: https://ur.qr-code-generator.com/
Source: create[1].htm.2.dr	String found in binary or memory: https://vi.qr-code-generator.com/
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.americanexpress.com/us/credit-cards/card/blue-cash-preferred/
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.americanway.com/articles/platinum-list-2020-best-vineyard-experiences/
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.americanway.com/articles/platinum-list-2020-best-wellness-resorts/
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.biorxiv.org/content/10.1101/2021.01.09.426032v1
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.cdc.gov/coronavirus/2019-ncov/vaccines/different-vaccines.html
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.cdc.gov/coronavirus/2019-ncov/vaccines/safety/adverse-events.html
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.cdc.gov/coronavirus/mers/about/prevention.html
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.cdc.gov/coronavirus/mers/index.html
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.cdc.gov/mmwr/volumes/70/wr/mm7027e2.htm?s_cid=mm7027e2_w
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.cdc.gov/vaccines/covid-19/info-by-product/clinical-considerations.html?s=03
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.cdc.gov/vaccines/pandemic-guidance/index.html
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.citi.com/credit-cards/credit-card-details/citi.action?ID=aadvantage-mile-up-credit-card#
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.clinicaltrials.gov/ct2/show/NCT04591717
Source: MMULA10Y.htm.2.dr, mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/
Source: MMULA10Y.htm.2.dr, mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/#organization
Source: {725FCFBE-DEC9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.coronavirustoday.com/Root
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/coronavirus
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/covid-19-vaccines
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://www.coronavirustoday.com/covid-19-vaccines=CLYIJWJDkYIW7CZTWZbP-jrAC4vfC72Cd0evhjwu_4R4QASCe
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://www.coronavirustoday.com/covid-19-vaccinesJCOVID-19
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/favicon.ico
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.coronavirustoday.com/favicon.icoHGIF89a
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/mers-news-2020
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/mers-vaccines
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://www.coronavirustoday.com/mers-vaccinesBMERS
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr, newsletter[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/newsletter
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://www.coronavirustoday.com/newsletterel-dealsivacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/people/holly-lutmer-pharmd
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/people/kelley-lu-pharmd
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/people/robert-carlson-md
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://www.coronavirustoday.com/rustoday.com/
Source: MMULA10Y.htm.2.dr, mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/all/themes/pv/images/logos/coronavirustoday-email.gif
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/all/themes/pv/images/social/ct-breaking1.gif
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/all/themes/pv/images/social/ct-breaking1_sq.gif
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/css/css_A1TS9OCzQy41w0fP0kC30zDWlwxEOqow8e4BRAs
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/css/css_MnXiytJtb186Ydycnpwpw34cuUsHaKc80ey5LiQ
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/css/css__tdKzbI3l_TSJW04qa_VswqtxnzfWuDuZMhdVGp
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/css/css_lQaZfjVpwP_oGNqdtWCSpJT1EMqXdMiU84ekLLx
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/js/js_-gZIjmbs1Tu5c9mGeBKS8WC3jG4E0jSDwO9QOdbLU
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/js/js_L50O_PWoAuMOxVjnzZCkNSSmI0kFwhZsO1_KS8WnG
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/js/js_d9zXiowa1Qnq3DxMpED97MIPdr7q-AmKKkCxwRN3t
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/js/js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSD
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/js/js_rsGiM5M1ffe6EhN-RnhM5f3pDyJ8ZAPFJNKpfjtep
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/js/js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/reviewer_thumbnail_2x/public/Hawbaker.Ho
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/reviewer_thumbnail_2x/public/Profile%20P
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/reviewer_thumbnail_2x/public/robert-carl
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/al-abrar-mecca-1
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/blood-5053760%20
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/blood-732298_1.j
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/channel-3547224%
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/covid-19-4961257
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/covid-19-4985549
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/covid-5027031.jp
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/currency-4008635
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/diabetes-528678_
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/dna-4068826_0.jp
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/electrocardiogra
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/family-2923690%2
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/grandpa-2810809_
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/great-wall-of-ch
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/hand-6195098.jpg
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/jonathan-borba-9
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/kids-1093758_0.j
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/morocco-5271734.
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/netherlands-5039
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/oxygen-502887.jp
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/presentation-591
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/salute-5982173.j
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/san-diego-79567.
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/senior-4466290_0
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/sherlock-holmes-
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/sigmund-TJxotQTU
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/smile-191626_0.j
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/soccer-3339036.j
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/steven-cornfield
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/surgical-mask-49
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/szabolcs-toth-o7
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/test-5434382.jpg
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/toronto-863428.j
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/tower-bridge-980
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/styles/teaser_thumbnail/public/woman-4617256.jp
Source: js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs[1].js.2.dr	String found in binary or memory: https://www.drupal.org/project/jquery_update.
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.ecdc.europa.eu/en/middle-east-respiratory-syndrome-coronavirus-mers-cov-situation-update
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.ecdc.europa.eu/en/publications-data/geographical-distribution-confirmed-mers-cov-cases-c
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.ecdc.europa.eu/sites/default/files/documents/communicable-disease-threats-report-10-apri
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.fda.gov/news-events/press-announcements/fda-issues-emergency-use-authorization-third-cov
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.fda.gov/news-events/press-announcements/fda-statement-vaccines-and-related-biological-pr
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.fda.gov/news-events/press-announcements/fda-takes-additional-action-fight-against-covid-
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.gavi.org/vaccineswork/covid-19-vaccine-race
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.globenewswire.com/news-release/2020/11/05/2121346/0/en/OSE-Immunotherapeutics-Provides-C
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.goodrx.com/?c=precisionvaccinations
Source: healthy-travel-deals[1].htm.2.dr, MMULA10Y.htm.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: sodar2[1].js.2.dr, gtm[1].js.2.dr	String found in binary or memory: https://www.google.com
Source: f[4].txt1.2.dr, fXLPA9CVZ.txt.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://www.google.com/adsense/domains/caf.js
Source: gtm[1].js.2.dr	String found in binary or memory: https://www.google.com/pagead/conversion_async.js
Source: s[1].htm.2.dr	String found in binary or memory: https://www.google.com/pagead/drt/ui
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr, sodar2[1].js.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://www.google.com/search?psb=1&tbm=shop&q=
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=CLYIJWJDkYIW7CZTWZbP-jrAC4vfC72Cd0evhjwu_4R4QAS
Source: gtm[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: gtm[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: create[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://www.googletagservices.com/activeview/js/current/osd.js
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.googletagservices.com/tag/js/gpt.js
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.gov.uk/government/publications/coronavirus-covid-19-vaccine-adverse-reactions/coronaviru
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/arrow_left_24px_grey_800.svg
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/close_24px_grey_700.svg
Source: f[4].txt1.2.dr, f[2].txt2.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_blue_600.svg
Source: f[2].txt2.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_grey_800.svg
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.kjim.org/journal/view.php?doi=10.3904/kjim.2018.031
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.medicago.com/en/covid-19-programs/
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.medrxiv.org/content/10.1101/2021.04.07.21253850v1
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.moh.gov.sa/en/CCC/FAQs/Corona/Pages/default.aspx
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.moh.gov.sa/en/CCC/events/national/Documents/Epiwk%2007-21.pdf
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.moh.gov.sa/en/CCC/events/national/Documents/Epiwk%2010-21.pdf
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.moh.gov.sa/en/CCC/events/national/Documents/Epiwk%2018-21.pdf
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.moh.gov.sa/en/CCC/events/national/Documents/Epiwk%2023-21.pdf
Source: {725FCFBE-DEC9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.pixel.labc
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr, healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.pixel.labcorp.com/covid-19
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://www.pixel.labcorp.com/covid-19travel-dealsivacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.w
Source: newsletter[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/newsletter
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/ad26cov2-s-janssen-covid-19-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/ag0301-covid-19-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/astrazeneca-covid-19-vaccine-azd1222
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/bbibp-corv-covid-19-vaccine-new-crown
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/biontech-pfizer-covid-19-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/brilife-coronavirus-vaccine
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/bvrs-gamvac-combi-mers-vaccine
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/chadox1-mers-mers-cov-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/comirnaty-bnt162b2-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/convidicea-ad5-ncov-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/corbevax-covid-19-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/covaxin-sars-cov-2-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/covishield-covid-19-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/covivac-russia-covid-19-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/covlp-sars-cov-2-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/cvncov-sars-cov-2-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/epivaccorona-vaccine
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/ino-4700-mers-cov-vaccine-0
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/ino-4800-covid-19-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/moderna-covid-19-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/moderna-covid-19-vaccine-mrna-1273
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/mrna-1273-sars-cov-2-vaccine
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/mva-mers-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/s-trimer-scb-2019-covid-19-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/sanofi-gsk-sars-cov-2-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/sinopharm-covid-19-vaccine-bbibp-corv
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/soberaba-02-covid-19-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/sputnik-v-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/ub-612-covid-19-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/vaxzevria-covid-19-vaccine-astrazeneca
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/vla2001-covid-19-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/zf2001-covid-19-vaccine
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.precisionvaccinations.com/vaccines/zykov-d-covid-19-vaccine
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qr-code-generator.com
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qr-code-generator.com/?p=17242
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qr-code-generator.com/company/legal-notice/
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qr-code-generator.com/company/privacy-policy/
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qr-code-generator.com/company/terms/
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qr-code-generator.com/create/
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr, {725FCFBE-DEC9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.qr-code-generator.com/create/%3Fut_source%3Dgoogle_c%26ut_medium%3Dcpc%26ut_campaign%3D%
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://www.qr-code-generator.com/create/?ut_source=google_c&ut_medium=cpc&ut_campaign=&ut_content=&
Source: imagestore.dat.2.dr, create[1].htm.2.dr	String found in binary or memory: https://www.qr-code-generator.com/wp-content/themes/qr/favicon.ico?v=2
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.qr-code-generator.com/wp-content/themes/qr/favicon.ico?v=2~
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qr-code-generator.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qr-code-generator.com/wp-includes/wlwmanifest.xml
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qr-code-generator.com/wp-json/
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qr-code-generator.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.qr-code-generator.c
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qr-code-generator.com/wp-json/wp/v2/pages/17242
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qr-code-generator.com/xmlrpc.php?rsd
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qrcode-generator.de
Source: create[1].htm.2.dr	String found in binary or memory: https://www.qrcode-generator.de/create/
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.sciencedirect.com/science/article/pii/S1477893921000673#sec4
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.southwest.com/html/rapidrewards/partners/credit-cards/southwest-airlines-rapid-rewards-c
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.thelancet.com/journals/laninf/article/PIIS1473-3099(19)30266-X/fulltext
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.thelancet.com/pdfs/journals/laninf/PIIS1473-3099(20)30248-6.pdf
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.ultalabtests.com/coronavirustoday
Source: MMULA10Y.htm.2.dr	String found in binary or memory: https://www.ultalabtests.com/coronavirustoday/Shop/Items/Item/COVID-19-Antibody-IgG-Immunoassay?q=Mg
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.ultalabtests.com/precisionvaccinations
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.ultalabtests.com/vaxbeforetravel
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/favicon.ico
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/favicon.icoHGIF89a
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/healthy-hotels-around-world
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/healthy-travel-deals
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://www.vaxbeforetravel.com/healthy-travel-dealsPHealthy
Source: ~DFD5D9CF1DBE8043B1.TMP.1.dr	String found in binary or memory: https://www.vaxbeforetravel.com/healthy-travel-dealsivacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/all/themes/pv/images/logos/vaxbeforetravel-full.gif
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/css/css_A1TS9OCzQy41w0fP0kC30zDWlwxEOqow8e4BRAss
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/css/css_MnXiytJtb186Ydycnpwpw34cuUsHaKc80ey5LiQX
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/css/css__tdKzbI3l_TSJW04qa_VswqtxnzfWuDuZMhdVGpY
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/css/css_lQaZfjVpwP_oGNqdtWCSpJT1EMqXdMiU84ekLLxQ
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/js/js_-gZIjmbs1Tu5c9mGeBKS8WC3jG4E0jSDwO9QOdbLUr
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/js/js_L50O_PWoAuMOxVjnzZCkNSSmI0kFwhZsO1_KS8WnGK
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/js/js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDN
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/js/js_rsGiM5M1ffe6EhN-RnhM5f3pDyJ8ZAPFJNKpfjtepL
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/js/js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7y
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/styles/teaser_thumbnail/public/alaska-4098284.jp
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/styles/teaser_thumbnail/public/boy-3812668_0.jpg
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/styles/teaser_thumbnail/public/cruise-601527_2.j
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/styles/teaser_thumbnail/public/japan-2014617.jpg
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/styles/teaser_thumbnail/public/mexico-city-27193
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/styles/teaser_thumbnail/public/people-2604058.jp
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/styles/teaser_thumbnail/public/plane-3478865_0.j
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/styles/teaser_thumbnail/public/thailand-4798043.
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/sites/default/files/styles/teaser_thumbnail/public/woman-1320103_0.j
Source: healthy-travel-deals[1].htm.2.dr	String found in binary or memory: https://www.vaxbeforetravel.com/travel-vaccines
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.vbivaccines.com/wire/coronavirus-vaccine-program-update/
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.who.int/csr/don/01-february-2021-mers-saudi-arabia/en/
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://www.who.int/emergencies/disease-outbreak-news/item/2021-DON314
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.who.int/publications/m/item/draft-landscape-of-covid-19-candidate-vaccines
Source: covid-19-vaccines[1].htm.2.dr	String found in binary or memory: https://www.zyduscadila.com/public/pdf/financial/Zydus_Covid_Vaccine_Update.pdf
Source: mers-vaccines[1].htm.2.dr	String found in binary or memory: https://wwwnc.cdc.gov/eid/article/27/5/20-4056_article
Source: create[1].htm.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/
Source: js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7yA[2].js.2.dr	String found in binary or memory: https://zenorocha.github.io/clipboard.js
Source: create[1].htm.2.dr	String found in binary or memory: https://zh.qr-code-generator.com/

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 23.185.0.3:443 -> 192.168.2.5:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.194:443 -> 192.168.2.5:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.194:443 -> 192.168.2.5:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.89:443 -> 192.168.2.5:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.193.44:443 -> 192.168.2.5:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.193.44:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.89:443 -> 192.168.2.5:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.6.139:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.6.139:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.193.75:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.193.75:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.17.33.216:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.17.33.216:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.201.194:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.201.194:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.102.157:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.102.157:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.201.195:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.201.195:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.67.61:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.67.61:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.64.218:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.98.64.218:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.115:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.115:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.194:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.194:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.194:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.132.33.46:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.132.33.46:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.3:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.215.37.29:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.215.37.29:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.215.37.29:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.215.37.29:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.5.76.163:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.5.76.163:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.51.35:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.51.35:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.7:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.225.87.7:443 -> 192.168.2.5:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.217.79:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.217.79:443 -> 192.168.2.5:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.64:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.64:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.5:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.5:49781 version: TLS 1.2

System Summary:

Binary contains paths to development resources

Source: website-general[1].woff.2.dr

Binary or memory string: .SlN'p

Classification label

Source: classification engine

Classification label: clean1.win@3/279@30/23

Creates files inside the user directory

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{725FCFBC-DEC9-11EB-90E5-ECF4BB570DC9}.dat

Jump to behavior

Creates temporary files

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF504CADF4A9325EAC.TMP

Jump to behavior

Reads ini files

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:844 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:844 CREDAT:17410 /prefetch:2			Jump to behavior

Found GUI installer (many successful clicks)

Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: Next
Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: Confirm

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior