Windows Analysis Report https://lp.constantcontactpages.com/sh/RbYGdWx/onlineDOC

Overview

General Information

Sample URL: https://lp.constantcontactpages.com/sh/RbYGdWx/onlineDOC
Analysis ID: 532867
Infos:

Most interesting Screenshot:

Detection

HTMLPhisher
Score: 60
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Antivirus / Scanner detection for submitted sample
Yara detected HtmlPhish10
Phishing site detected (based on logo template match)
HTML body contains low number of good links
Invalid T&C link found
No HTML title found

Classification

AV Detection:

barindex
Antivirus / Scanner detection for submitted sample
Source: https://lp.constantcontactpages.com/sh/RbYGdWx/onlineDOC SlashNext: detection malicious, Label: Fake Login Page type: Phishing & Social Engineering

Phishing:

barindex
Yara detected HtmlPhish10
Source: Yara match File source: 40360.1.pages.csv, type: HTML
Phishing site detected (based on logo template match)
Source: https://electricperformancecompany.com/ysl/Odrivex/ Matcher: Template: onedrive matched
HTML body contains low number of good links
Source: https://electricperformancecompany.com/ysl/Odrivex/ HTTP Parser: Number of links: 0
Source: https://electricperformancecompany.com/ysl/Odrivex/ HTTP Parser: Number of links: 0
Invalid T&C link found
Source: https://electricperformancecompany.com/ysl/Odrivex/ HTTP Parser: Invalid link: Privacy & Cookies
Source: https://electricperformancecompany.com/ysl/Odrivex/ HTTP Parser: Invalid link: Privacy & Cookies
No HTML title found
Source: https://electricperformancecompany.com/ysl/Odrivex/ HTTP Parser: HTML title missing
Source: https://electricperformancecompany.com/ysl/Odrivex/ HTTP Parser: HTML title missing
Source: https://electricperformancecompany.com/ysl/Odrivex/ HTTP Parser: No <meta name="author".. found
Source: https://electricperformancecompany.com/ysl/Odrivex/ HTTP Parser: No <meta name="author".. found
Source: https://electricperformancecompany.com/ysl/Odrivex/ HTTP Parser: No <meta name="copyright".. found
Source: https://electricperformancecompany.com/ysl/Odrivex/ HTTP Parser: No <meta name="copyright".. found
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic Jump to behavior
Source: unknown HTTPS traffic detected: 208.75.122.102:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown DNS traffic detected: queries for: clients2.google.com
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49800
Source: global traffic HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfmX-Goog-Update-Updater: chromecrx-85.0.4183.121Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /sh/RbYGdWx/onlineDOC HTTP/1.1Host: lp.constantcontactpages.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /shopping-cart-sdk.js HTTP/1.1Host: st-shop.mywebsitebuilder.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lp.constantcontactpages.com/sh/RbYGdWx/onlineDOCAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /shopping-cart-sdk/sdk.js HTTP/1.1Host: st-shop.mywebsitebuilder.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lp.constantcontactpages.com/sh/RbYGdWx/onlineDOCAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /1/po?a=1138071500063&ca=7d5dcb14-e76c-45e9-bf9b-1314d1909511&si=${lp.sourceId}&st=${lp.sourceType} HTTP/1.1Host: a.rs6.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lp.constantcontactpages.com/sh/RbYGdWx/onlineDOCAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: lp.constantcontactpages.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lp.constantcontactpages.com/sh/RbYGdWx/onlineDOCAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=890B2773C90C293090938756B98A926B; BIGipServerP2_CampaignLP=!GHKRmmrUi7CfZAI3dp7rloh37r4G23AWJ3tDbltX9X8WeoQVpyu/E4us5u5jE7N7bxhdc2QG7dvU1U0=
Source: global traffic HTTP traffic detected: GET /1/po?a=1138071500063&ca=7d5dcb14-e76c-45e9-bf9b-1314d1909511&si=${lp.sourceId}&st=${lp.sourceType} HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: a.rs6.net
Source: global traffic HTTP traffic detected: GET /ysl/Odrivex HTTP/1.1Host: electricperformancecompany.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ysl/Odrivex/ HTTP/1.1Host: electricperformancecompany.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://electricperformancecompany.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://electricperformancecompany.com/ysl/Odrivex/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://electricperformancecompany.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://electricperformancecompany.com/ysl/Odrivex/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://electricperformancecompany.com/ysl/Odrivex/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://electricperformancecompany.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://electricperformancecompany.com/ysl/Odrivex/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ysl/Odrivex/1.png HTTP/1.1Host: electricperformancecompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://electricperformancecompany.com/ysl/Odrivex/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: electricperformancecompany.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://electricperformancecompany.com/ysl/Odrivex/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 02 Dec 2021 18:08:38 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: angular.js.0.dr String found in binary or memory: http://angularjs.org
Source: angular.js.0.dr String found in binary or memory: http://errors.angularjs.org/1.6.4-local
Source: pnacl_public_x86_64_pnacl_sz_nexe.0.dr, pnacl_public_x86_64_pnacl_llc_nexe.0.dr String found in binary or memory: http://llvm.org/):
Source: mirroring_hangouts.js.0.dr String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: mirroring_hangouts.js.0.dr String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: mirroring_hangouts.js.0.dr String found in binary or memory: http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions
Source: mirroring_hangouts.js.0.dr String found in binary or memory: http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01
Source: Reporting and NEL.1.dr String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=uawGGe%2FIcxMIrLgws9hxn%2F%2F5cvDBdd3LyIKbLgR6dCThVZz8%2BnH
Source: 2048ce58-218e-4f25-8adf-490eb2db01b7.tmp.1.dr, 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr, manifest.json0.0.dr String found in binary or memory: https://accounts.google.com
Source: craw_window.js.0.dr String found in binary or memory: https://accounts.google.com/MergeSession
Source: 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr String found in binary or memory: https://ajax.googleapis.com
Source: data_1.1.dr String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: 2048ce58-218e-4f25-8adf-490eb2db01b7.tmp.1.dr, 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr, manifest.json0.0.dr String found in binary or memory: https://apis.google.com
Source: data_1.1.dr String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: data_1.1.dr String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.jskf
Source: pnacl_public_x86_64_crtend_o.0.dr, pnacl_public_x86_64_ld_nexe.0.dr String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-clang.git
Source: pnacl_public_x86_64_crtend_o.0.dr, pnacl_public_x86_64_ld_nexe.0.dr String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
Source: 2048ce58-218e-4f25-8adf-490eb2db01b7.tmp.1.dr, 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr String found in binary or memory: https://clients2.google.com
Source: mirroring_hangouts.js.0.dr String found in binary or memory: https://clients2.google.com/cr/report
Source: manifest.json1.0.dr, manifest.json0.0.dr, manifest.json.0.dr String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 2048ce58-218e-4f25-8adf-490eb2db01b7.tmp.1.dr, 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr String found in binary or memory: https://clients2.googleusercontent.com
Source: mirroring_hangouts.js.0.dr String found in binary or memory: https://clients6.google.com
Source: pnacl_public_x86_64_ld_nexe.0.dr String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry
Source: pnacl_public_x86_64_ld_nexe.0.dr String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry%s:
Source: data_1.1.dr String found in binary or memory: https://code.jquery.com/jquery-3.2.1.slim.min.js
Source: data_1.1.dr String found in binary or memory: https://code.jquery.com/jquery-3.4.1.min.js
Source: 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr String found in binary or memory: https://content-autofill.googleapis.com
Source: data_1.1.dr String found in binary or memory: https://content-autofill.googleapis.com/v1/pages/Chc2LjEuMTcxNS4xNDQyL2VuIChHR0xMKRIfCQn0XxietmZxEgk
Source: manifest.json0.0.dr String found in binary or memory: https://content.googleapis.com
Source: mirroring_hangouts.js.0.dr String found in binary or memory: https://creativecommons.org/publicdomain/zero/1.0/.
Source: Reporting and NEL.1.dr String found in binary or memory: https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers
Source: 2048ce58-218e-4f25-8adf-490eb2db01b7.tmp.1.dr, 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr, d604bb94-06fa-4adc-afc5-f945ac5175b1.tmp.1.dr String found in binary or memory: https://dns.google
Source: Network Action Predictor.0.dr String found in binary or memory: https://electricperformancecompany.com/
Source: data_1.1.dr String found in binary or memory: https://electricperformancecompany.com/favicon.ico
Source: data_1.1.dr String found in binary or memory: https://electricperformancecompany.com/favicon.icoChIKBw1TVYG1GgAKBw2tCa6xGgA=
Source: Current Session.0.dr, data_1.1.dr String found in binary or memory: https://electricperformancecompany.com/ysl/Odrivex
Source: Current Session.0.dr String found in binary or memory: https://electricperformancecompany.com/ysl/Odrivex.
Source: Current Session.0.dr, data_1.1.dr, data_2.1.dr String found in binary or memory: https://electricperformancecompany.com/ysl/Odrivex/
Source: data_1.1.dr String found in binary or memory: https://electricperformancecompany.com/ysl/Odrivex/1.png
Source: data_2.1.dr String found in binary or memory: https://electricperformancecompany.com/ysl/Odrivex/Content-Length:
Source: manifest.json0.0.dr String found in binary or memory: https://feedback.googleusercontent.com
Source: data_1.1.dr String found in binary or memory: https://files.constantcontact.com/f15f85af801/919c5015-79e5-4a8d-8188-c28ed8c10ec1.png
Source: data_1.1.dr String found in binary or memory: https://files.constantcontact.com/f15f85af801/919c5015-79e5-4a8d-8188-c28ed8c10ec1.png-
Source: 2048ce58-218e-4f25-8adf-490eb2db01b7.tmp.1.dr, 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr String found in binary or memory: https://fonts.googleapis.com
Source: Network Action Predictor.0.dr String found in binary or memory: https://fonts.googleapis.com/
Source: data_1.1.dr String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: manifest.json0.0.dr String found in binary or memory: https://fonts.googleapis.com;
Source: 2048ce58-218e-4f25-8adf-490eb2db01b7.tmp.1.dr, 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr String found in binary or memory: https://fonts.gstatic.com
Source: data_2.1.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v27/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4gaVI
Source: data_2.1.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v27/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4iaVI
Source: data_2.1.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v27/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4jaVI
Source: data_2.1.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v27/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4kaVI
Source: data_2.1.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v27/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4saVI
Source: data_2.1.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v27/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4taVI
Source: data_2.1.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v27/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4uaVI
Source: data_2.1.dr String found in binary or memory: https://fonts.gstatic.com/s/opensans/v27/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4vaVI
Source: manifest.json0.0.dr String found in binary or memory: https://fonts.gstatic.com;
Source: material_css_min.css.0.dr, angular.js.0.dr String found in binary or memory: https://github.com/angular/material
Source: craw_window.js.0.dr, craw_background.js.0.dr String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: mirroring_hangouts.js.0.dr String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: mirroring_hangouts.js.0.dr String found in binary or memory: https://hangouts.clients6.google.com
Source: manifest.json0.0.dr String found in binary or memory: https://hangouts.google.com/
Source: mirroring_hangouts.js.0.dr String found in binary or memory: https://hangouts.google.com/hangouts/_/logpref
Source: data_1.1.dr String found in binary or memory: https://imgssl.constantcontact.com/letters/images/1101116784221/S.gif
Source: data_1.1.dr String found in binary or memory: https://imgssl.constantcontact.com/ui/images/cart.svg
Source: data_2.1.dr String found in binary or memory: https://imgssl.constantcontact.com/ui/images/cart.svg);background-repeat:no-repeat;background-positi
Source: data_1.1.dr String found in binary or memory: https://lp.constantcontactpages.com/favicon.ico
Source: data_1.1.dr String found in binary or memory: https://lp.constantcontactpages.com/favicon.icotW
Source: Current Session.0.dr, data_1.1.dr String found in binary or memory: https://lp.constantcontactpages.com/sh/RbYGdWx/onlineDOC
Source: History Provider Cache.0.dr String found in binary or memory: https://lp.constantcontactpages.com/sh/RbYGdWx/onlineDOC2
Source: Network Action Predictor.0.dr String found in binary or memory: https://maxcdn.bootstrapcdn.com/
Source: data_1.1.dr String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Source: data_1.1.dr String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Source: data_1.1.dr String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.jsM
Source: mirroring_hangouts.js.0.dr String found in binary or memory: https://meetings.clients6.google.com
Source: 2048ce58-218e-4f25-8adf-490eb2db01b7.tmp.1.dr, 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr String found in binary or memory: https://ogs.google.com
Source: craw_window.js.0.dr, manifest.json.0.dr String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: mirroring_hangouts.js.0.dr String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: mirroring_hangouts.js.0.dr String found in binary or memory: https://preprod-hangouts-googleapis.sandbox.google.com
Source: 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr String found in binary or memory: https://r4---sn-h0jeenl6.gvt1.com
Source: data_1.1.dr String found in binary or memory: https://r4---sn-h0jeenl6.gvt1.com/edgedl/chrome/dict/en-us-9-0.bdic?cms_redirect=yes&mh=I2&mip=84.17
Source: 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr String found in binary or memory: https://redirector.gvt1.com
Source: data_1.1.dr String found in binary or memory: https://redirector.gvt1.com/edgedl/chrome/dict/en-us-9-0.bdic
Source: craw_window.js.0.dr, manifest.json.0.dr String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: data_2.1.dr String found in binary or memory: https://sketch.com
Source: 2048ce58-218e-4f25-8adf-490eb2db01b7.tmp.1.dr, 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr String found in binary or memory: https://ssl.gstatic.com
Source: data_1.1.dr String found in binary or memory: https://st-shop.mywebsitebuilder.com/shopping-cart-sdk.js
Source: data_1.1.dr String found in binary or memory: https://st-shop.mywebsitebuilder.com/shopping-cart-sdk.js1Q
Source: data_1.1.dr, data_2.1.dr String found in binary or memory: https://st-shop.mywebsitebuilder.com/shopping-cart-sdk/sdk.js
Source: data_2.1.dr String found in binary or memory: https://st-shop.mywebsitebuilder.com/shopping-cart-sdk/sdk.jsx-appm-cached:
Source: data_1.1.dr String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Source: data_1.1.dr String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.jsW1t
Source: data_1.1.dr String found in binary or memory: https://static.ctctcdn.com/h/lp-assets-static/1.0.75/assets.css
Source: data_1.1.dr String found in binary or memory: https://static.ctctcdn.com/h/lp-assets-static/1.0.80/assets.min.js
Source: data_1.1.dr, data_2.1.dr String found in binary or memory: https://static.ctctcdn.com/ui/images1/favicon/favicon.png?rb=2
Source: data_2.1.dr String found in binary or memory: https://static.ctctcdn.com/ui/images1/favicon/favicon.png?rb=2Content-Length:
Source: data_1.1.dr String found in binary or memory: https://static.ctctcdn.com/ui/images1/favicon/favicon.png?rb=2D
Source: messages.json5.0.dr, messages.json7.0.dr, messages.json37.0.dr, messages.json49.0.dr, feedback.html.0.dr, messages.json75.0.dr, messages.json59.0.dr, messages.json79.0.dr, messages.json82.0.dr, messages.json44.0.dr, messages.json74.0.dr, messages.json33.0.dr, messages.json35.0.dr, messages.json0.0.dr, messages.json85.0.dr, messages.json88.0.dr, messages.json87.0.dr, messages.json57.0.dr, messages.json18.0.dr, messages.json76.0.dr, messages.json.0.dr, messages.json80.0.dr, messages.json68.0.dr, messages.json51.0.dr, messages.json36.0.dr, messages.json50.0.dr, messages.json43.0.dr, messages.json67.0.dr, messages.json10.0.dr, messages.json9.0.dr, messages.json8.0.dr, messages.json78.0.dr, messages.json60.0.dr, messages.json81.0.dr, messages.json31.0.dr String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json5.0.dr, messages.json7.0.dr, messages.json37.0.dr, messages.json49.0.dr, feedback.html.0.dr, messages.json75.0.dr, messages.json59.0.dr, messages.json79.0.dr, messages.json82.0.dr, messages.json44.0.dr, messages.json74.0.dr, messages.json33.0.dr, messages.json35.0.dr, messages.json0.0.dr, messages.json85.0.dr, messages.json88.0.dr, messages.json87.0.dr, messages.json57.0.dr, messages.json18.0.dr, messages.json76.0.dr, messages.json.0.dr, messages.json80.0.dr, messages.json68.0.dr, messages.json51.0.dr, messages.json36.0.dr, messages.json50.0.dr, messages.json43.0.dr, messages.json67.0.dr, messages.json10.0.dr, messages.json9.0.dr, messages.json8.0.dr, messages.json78.0.dr, messages.json60.0.dr, messages.json81.0.dr, messages.json31.0.dr String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: craw_window.js.0.dr, craw_background.js.0.dr String found in binary or memory: https://www-googleapis-staging.sandbox.google.com
Source: 2048ce58-218e-4f25-8adf-490eb2db01b7.tmp.1.dr, 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr, manifest.json0.0.dr String found in binary or memory: https://www.google.com
Source: manifest.json.0.dr String found in binary or memory: https://www.google.com/
Source: craw_window.js.0.dr String found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1
Source: craw_window.js.0.dr String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: craw_window.js.0.dr String found in binary or memory: https://www.google.com/images/dot2.gif
Source: craw_window.js.0.dr String found in binary or memory: https://www.google.com/images/x2.gif
Source: craw_background.js.0.dr String found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html
Source: mirroring_hangouts.js.0.dr String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: manifest.json0.0.dr String found in binary or memory: https://www.google.com;
Source: craw_window.js.0.dr, craw_background.js.0.dr, 2048ce58-218e-4f25-8adf-490eb2db01b7.tmp.1.dr, 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr String found in binary or memory: https://www.googleapis.com
Source: manifest.json.0.dr String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json.0.dr String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.0.dr String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json.0.dr String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.0.dr String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: 2048ce58-218e-4f25-8adf-490eb2db01b7.tmp.1.dr, 1bcd67af-389e-4dc0-90cb-eb33b1668598.tmp.1.dr String found in binary or memory: https://www.gstatic.com
Source: manifest.json0.0.dr String found in binary or memory: https://www.gstatic.com;
Source: unknown HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: unknown HTTPS traffic detected: 208.75.122.102:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Local\Temp\65fa2c9b-944c-4590-b366-f4e80594c486.tmp Jump to behavior
Source: classification engine Classification label: mal60.phis.win@32/247@17/15
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "https://lp.constantcontactpages.com/sh/RbYGdWx/onlineDOC
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1512,5283024375197413106,569383924251714523,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1928 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1512,5283024375197413106,569383924251714523,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1928 /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Program Files\Google\Chrome\Application\Dictionaries Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-61A98A27-1678.pma Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Automated click: Next
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 532867 URL: https://lp.constantcontactp... Startdate: 02/12/2021 Architecture: WINDOWS Score: 60 20 imgssl.constantcontact.com 2->20 22 files.constantcontact.com 2->22 24 a.rs6.net 2->24 38 Antivirus / Scanner detection for submitted sample 2->38 40 Yara detected HtmlPhish10 2->40 42 Phishing site detected (based on logo template match) 2->42 7 chrome.exe 15 409 2->7         started        signatures3 process4 dnsIp5 26 192.168.2.1 unknown unknown 7->26 28 192.168.2.255 unknown unknown 7->28 30 239.255.255.250 unknown Reserved 7->30 14 C:\...\pnacl_public_x86_64_pnacl_sz_nexe, ELF 7->14 dropped 16 C:\...\pnacl_public_x86_64_pnacl_llc_nexe, ELF 7->16 dropped 18 C:\Users\user\...\pnacl_public_x86_64_ld_nexe, ELF 7->18 dropped 11 chrome.exe 28 7->11         started        file6 process7 dnsIp8 32 electricperformancecompany.com 144.126.156.3, 443, 49790, 49791 LOYOLAUS United States 11->32 34 clients.l.google.com 142.250.203.110, 443, 49753, 57152 GOOGLEUS United States 11->34 36 17 other IPs or domains 11->36
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
208.75.122.102
 a.rs6.net United States
40444 ASN-CCUS false
104.18.10.207
 stackpath.bootstrapcdn.com United States
13335 CLOUDFLARENETUS false
142.250.203.110
 clients.l.google.com United States
15169 GOOGLEUS false
104.18.11.207
 maxcdn.bootstrapcdn.com United States
13335 CLOUDFLARENETUS false
172.217.168.45
 accounts.google.com United States
15169 GOOGLEUS false
142.250.203.97
 googlehosted.l.googleusercontent.com United States
15169 GOOGLEUS false
239.255.255.250
 unknown Reserved
unknown unknown false
172.217.168.3
 gstaticadssl.l.google.com United States
15169 GOOGLEUS false
104.16.18.94
 cdnjs.cloudflare.com United States
13335 CLOUDFLARENETUS false
208.75.122.57
 campaignlp.constantcontact.com United States
40444 ASN-CCUS false
144.126.156.3
 electricperformancecompany.com United States
36413 LOYOLAUS false
104.19.163.10
 st-shop.mywebsitebuilder.com United States
13335 CLOUDFLARENETUS false

Private
IP
192.168.2.1
192.168.2.255
127.0.0.1

Contacted Domains

Name IP Active
a.rs6.net 208.75.122.102 true
gstaticadssl.l.google.com 172.217.168.3 true
stackpath.bootstrapcdn.com 104.18.10.207 true
accounts.google.com 172.217.168.45 true
cdnjs.cloudflare.com 104.16.18.94 true
maxcdn.bootstrapcdn.com 104.18.11.207 true
campaignlp.constantcontact.com 208.75.122.57 true
clients.l.google.com 142.250.203.110 true
electricperformancecompany.com 144.126.156.3 true
st-shop.mywebsitebuilder.com 104.19.163.10 true
googlehosted.l.googleusercontent.com 142.250.203.97 true
clients2.googleusercontent.com unknown unknown
clients2.google.com unknown unknown
lp.constantcontactpages.com unknown unknown
code.jquery.com unknown unknown
static.ctctcdn.com unknown unknown
imgssl.constantcontact.com unknown unknown
files.constantcontact.com unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://electricperformancecompany.com/ysl/Odrivex false
  • Avira URL Cloud: safe
 unknown
https://electricperformancecompany.com/favicon.ico false
  • Avira URL Cloud: safe
 unknown
https://electricperformancecompany.com/ysl/Odrivex/1.png true
  • Avira URL Cloud: safe
 unknown
https://a.rs6.net/1/po?a=1138071500063&ca=7d5dcb14-e76c-45e9-bf9b-1314d1909511&si=${lp.sourceId}&st=${lp.sourceType} false
    		high
    https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx false
      		high
      https://electricperformancecompany.com/ysl/Odrivex/ true
        		unknown
        https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js false
          		high
          https://electricperformancecompany.com/ysl/Odrivex/ true
            		unknown
            https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 false
              		high
              https://st-shop.mywebsitebuilder.com/shopping-cart-sdk.js false
              • Avira URL Cloud: safe
              		 unknown
              https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard false
                		high
                https://lp.constantcontactpages.com/favicon.ico false
                • Avira URL Cloud: safe
                		 unknown
                https://st-shop.mywebsitebuilder.com/shopping-cart-sdk/sdk.js false
                • Avira URL Cloud: safe
                		 unknown
                https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js false
                  		high
                  https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css false
                    		high
                    https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js false
                      		high
                      https://lp.constantcontactpages.com/sh/RbYGdWx/onlineDOC true
                        		unknown
                        https://lp.constantcontactpages.com/sh/RbYGdWx/onlineDOC true
                          		unknown