Windows Analysis Report
http://url9106.loopup.com/ls/click?upn=m2FkTpuxf3MMDVE4-2BUdo6OZ1ogZ1i7-2BItXVpxfGySsFXTjIbgrW3plPpeWNQT8-2B8IKeKWdgC-2FZLYEDyTScfdtzC0D2boMTgfmcYgujGh85K9V1zT3NO14DQb3vPIAw9N-2BoldR-2Byp5Hy9QCdMkLsz6ZFtcerw6jU0VP-2BZYoaCm4ueFrOwfz-2FyY-2BFGeBAMLJHNfbLNPZQ-2FT6-2FXCuh0O665iAeqbwhGIdja-2FqyZGqfrJAsjJ

Overview

General Information

Sample URL: http://url9106.loopup.com/ls/click?upn=m2FkTpuxf3MMDVE4-2BUdo6OZ1ogZ1i7-2BItXVpxfGySsFXTjIbgrW3plPpeWNQT8-2B8IKeKWdgC-2FZLYEDyTScfdtzC0D2boMTgfmcYgujGh85K9V1zT3NO14DQb3vPIAw9N-2BoldR-2Byp5Hy9QCdMkLsz6
Analysis ID: 715066
Infos:

Detection

Score: 1
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

HTML body contains low number of good links
No HTML title found

Classification

HTML body contains low number of good links
Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q HTTP Parser: Number of links: 0
Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q HTTP Parser: Number of links: 0
No HTML title found
Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q HTTP Parser: HTML title missing
Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q HTTP Parser: HTML title missing
Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q HTTP Parser: No <meta name="copyright".. found
Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q HTTP Parser: No <meta name="copyright".. found
Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q HTTP Parser: No <meta name="author".. found
Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q HTTP Parser: No <meta name="author".. found
Source: global traffic HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q HTTP/1.1Host: account.loopup.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /lib-login-55dc6eaf1e2d88feae20.css HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /login-1bf734ac65e784b01c3f.css HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /v2/polyfill.js HTTP/1.1Host: cdn.polyfill.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /vendor-c605e28acee1608bdf2a.js HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /set-password-843b75cabf5b10af7d2c.js HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /analytics.js/v1/B8FzKqGyLPvZEr2Nba5HROK8ChLNnqAk/analytics.min.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /v1/projects/B8FzKqGyLPvZEr2Nba5HROK8ChLNnqAk/settings HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://account.loopup.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /spritemap-b09c8813136ef89a548157b5ec780fa7.svg HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: imageReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /analytics-next/bundles/870.bundle.323974846b6d45afb45e.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /analytics-next/bundles/ajs-destination.bundle.35a8f6f19959bf2f455f.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /analytics-next/bundles/schemaFilter.bundle.debb169c1abb431faaa6.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /next-integrations/integrations/mixpanel/3.2.1/mixpanel.dynamic.js.gz HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /next-integrations/integrations/vendor/commons.c42222c4cb2f8913500f.js.gz HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /libs/mixpanel-2-latest.min.js HTTP/1.1Host: cdn.mxpnl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /manifest.json HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ajs_anonymous_id=70454b91-c2ff-4066-aeb8-c9c4d75bd378; mp_a3ae95b743019d5b7ce3044021eb2fdd_mixpanel=%7B%22distinct_id%22%3A%20%22183a00b2e64269-0b8d445013ed18-26021d51-140000-183a00b2e653c2%22%2C%22%24device_id%22%3A%20%22183a00b2e64269-0b8d445013ed18-26021d51-140000-183a00b2e653c2%22%2C%22mp_lib%22%3A%20%22Segment%3A%20web%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Source: global traffic HTTP traffic detected: GET /android-chrome-144x144.png HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ajs_anonymous_id=70454b91-c2ff-4066-aeb8-c9c4d75bd378; mp_a3ae95b743019d5b7ce3044021eb2fdd_mixpanel=%7B%22distinct_id%22%3A%20%22183a00b2e64269-0b8d445013ed18-26021d51-140000-183a00b2e653c2%22%2C%22%24device_id%22%3A%20%22183a00b2e64269-0b8d445013ed18-26021d51-140000-183a00b2e653c2%22%2C%22mp_lib%22%3A%20%22Segment%3A%20web%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Source: global traffic HTTP traffic detected: GET /ls/click?upn=m2FkTpuxf3MMDVE4-2BUdo6OZ1ogZ1i7-2BItXVpxfGySsFXTjIbgrW3plPpeWNQT8-2B8IKeKWdgC-2FZLYEDyTScfdtzC0D2boMTgfmcYgujGh85K9V1zT3NO14DQb3vPIAw9N-2BoldR-2Byp5Hy9QCdMkLsz6ZFtcerw6jU0VP-2BZYoaCm4ueFrOwfz-2FyY-2BFGeBAMLJHNfbLNPZQ-2FT6-2FXCuh0O665iAeqbwhGIdja-2FqyZGqfrJAsjJa6WmUe0Xd3VT1OXu3-2F3bR3D10VOV-2BEVAw7Ovp-2Fbj2ldIuGwy8t9cEDhzNZDd379DYOEuWGd5khLoCSvnzj2M6r93HYa9V1t9DoJ6KqtJDRFr-2B1q9g3XuwTlcS-2Bw4w0-3DB-xY_-2Bf7U4f-2FcA3eglWKxOUvEGek0SZ8zf-2BjU2dBJ2-2FD3ryk1OnsRAzFCY6eUsa5GuArLj584tMmc86KT8HXvoDZhY4Y4QO1b-2FHXvxE0aeR87r8rhf0P4SLr53QgCGLDSSeg-2BDiyCpJVLTQX27XfLZaKssG7aVpqtAmo9Kpxpbb1bw1bpnRXHhO-2FuPAIFApxW6siNmlLhfprKt4p9G1DSeX-2B4ZVmK5vS5lo3wHzPocFDUEylxCEL-2Brmx8U9vmL1RzKZgsZa-2FPRJG8f8Srzedh-2FuUiX4wllqCTsoVyAbrdYbZeXHvOvaKIoNfyy7XsKh8-2B6gNguqOCvCs4-2FJ0OjWI-2FXVWJDFKfQq4yQnxEC9dtH6mez-2BLlfRiFyI6zEDFEKmGv6yBfNNAUoqUaT-2Bfb6YrdAfHzzKMxrYBWlaTSDKsz8-2FHR9pN-2FJ2jM35lOsd7pMXb00Jps HTTP/1.1Host: url9106.loopup.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: unknown DNS traffic detected: queries for: url9106.loopup.com
Source: unknown Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-ENID=6.SE=Md0Ynyf9ahpkx1CxTGF0vY434NJ6ymH-gDI2Tl5Ly-NQYGPjnNfggtiFRMAwx4JRDOC_gavEPcD5cTBJzUgtbJobmBEuJ8xi2UuotxvOZgApoqSIg1b0RP47U08XG8Bz_SExSzKy0ETSsajbToDlYyFsxfI93p7AyRAd-OeIBA0; CONSENT=PENDING+070
Source: classification engine Classification label: clean1.win@24/0@14/13
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1968 --field-trial-handle=1696,i,18024863391692357054,13729395438895295201,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://url9106.loopup.com/ls/click?upn=m2FkTpuxf3MMDVE4-2BUdo6OZ1ogZ1i7-2BItXVpxfGySsFXTjIbgrW3plPpeWNQT8-2B8IKeKWdgC-2FZLYEDyTScfdtzC0D2boMTgfmcYgujGh85K9V1zT3NO14DQb3vPIAw9N-2BoldR-2Byp5Hy9QCdMkLsz6ZFtcerw6jU0VP-2BZYoaCm4ueFrOwfz-2FyY-2BFGeBAMLJHNfbLNPZQ-2FT6-2FXCuh0O665iAeqbwhGIdja-2FqyZGqfrJAsjJa6WmUe0Xd3VT1OXu3-2F3bR3D10VOV-2BEVAw7Ovp-2Fbj2ldIuGwy8t9cEDhzNZDd379DYOEuWGd5khLoCSvnzj2M6r93HYa9V1t9DoJ6KqtJDRFr-2B1q9g3XuwTlcS-2Bw4w0-3DB-xY_-2Bf7U4f-2FcA3eglWKxOUvEGek0SZ8zf-2BjU2dBJ2-2FD3ryk1OnsRAzFCY6eUsa5GuArLj584tMmc86KT8HXvoDZhY4Y4QO1b-2FHXvxE0aeR87r8rhf0P4SLr53QgCGLDSSeg-2BDiyCpJVLTQX27XfLZaKssG7aVpqtAmo9Kpxpbb1bw1bpnRXHhO-2FuPAIFApxW6siNmlLhfprKt4p9G1DSeX-2B4ZVmK5vS5lo3wHzPocFDUEylxCEL-2Brmx8U9vmL1RzKZgsZa-2FPRJG8f8Srzedh-2FuUiX4wllqCTsoVyAbrdYbZeXHvOvaKIoNfyy7XsKh8-2B6gNguqOCvCs4-2FJ0OjWI-2FXVWJDFKfQq4yQnxEC9dtH6mez-2BLlfRiFyI6zEDFEKmGv6yBfNNAUoqUaT-2Bfb6YrdAfHzzKMxrYBWlaTSDKsz8-2FHR9pN-2FJ2jM35lOsd7pMXb00Jps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1968 --field-trial-handle=1696,i,18024863391692357054,13729395438895295201,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 process2 2 Behavior Graph ID: 715066 URL: http://url9106.loopup.com/l... Startdate: 03/10/2022 Architecture: WINDOWS Score: 1 5 chrome.exe 14 2->5         started        8 chrome.exe 2->8         started        dnsIp3 13 192.168.2.1 unknown unknown 5->13 15 239.255.255.250 unknown Reserved 5->15 10 chrome.exe 5->10         started        process4 dnsIp5 17 sendgrid.net 167.89.118.83, 49710, 49712, 49713 SENDGRIDUS United States 10->17 19 part-0032.t-0009.t-msedge.net 13.107.246.60, 443, 49715, 49718 MICROSOFT-CORP-MSN-AS-BLOCKUS United States 10->19 21 19 other IPs or domains 10->21
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
142.250.203.100
 www.google.com United States
15169 GOOGLEUS false
44.238.17.91
 api.segment.io United States
16509 AMAZON-02US false
167.89.118.83
 sendgrid.net United States
11377 SENDGRIDUS false
142.250.203.110
 clients.l.google.com United States
15169 GOOGLEUS false
151.101.1.26
 dualstack.polyfill.map.fastly.net United States
54113 FASTLYUS false
13.107.246.60
 part-0032.t-0009.t-msedge.net United States
8068 MICROSOFT-CORP-MSN-AS-BLOCKUS false
130.211.5.208
 cdn.mxpnl.com United States
15169 GOOGLEUS false
35.190.25.25
 api-js.mixpanel.com United States
15169 GOOGLEUS false
239.255.255.250
 unknown Reserved
unknown unknown false
99.86.8.175
 d296je7bbdd650.cloudfront.net United States
16509 AMAZON-02US false
142.250.203.109
 accounts.google.com United States
15169 GOOGLEUS false

Private

IP
192.168.2.1
127.0.0.1

Contacted Domains

Name IP Active
d296je7bbdd650.cloudfront.net 99.86.8.175 true
accounts.google.com 142.250.203.109 true
api-js.mixpanel.com 35.190.25.25 true
sendgrid.net 167.89.118.83 true
part-0032.t-0009.t-msedge.net 13.107.246.60 true
www.google.com 142.250.203.100 true
api.segment.io 44.238.17.91 true
dualstack.polyfill.map.fastly.net 151.101.1.26 true
clients.l.google.com 142.250.203.110 true
cdn.mxpnl.com 130.211.5.208 true
use.typekit.net unknown unknown
account.loopup.com unknown unknown
url9106.loopup.com unknown unknown
cdn.jsdelivr.net unknown unknown
cdn.polyfill.io unknown unknown
cdn.segment.com unknown unknown
clients2.google.com unknown unknown
p.typekit.net unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://account.loopup.com/login-1bf734ac65e784b01c3f.css false
    		high
    https://account.loopup.com/android-chrome-144x144.png false
      		high
      https://cdn.segment.com/analytics.js/v1/B8FzKqGyLPvZEr2Nba5HROK8ChLNnqAk/analytics.min.js false
        		high
        https://account.loopup.com/set-password-843b75cabf5b10af7d2c.js false
          		high
          https://cdn.segment.com/next-integrations/integrations/vendor/commons.c42222c4cb2f8913500f.js.gz false
            		high
            https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard false
              		high
              https://cdn.segment.com/analytics-next/bundles/ajs-destination.bundle.35a8f6f19959bf2f455f.js false
                		high
                https://account.loopup.com/manifest.json false
                  		high
                  https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 false
                    		high
                    https://account.loopup.com/lib-login-55dc6eaf1e2d88feae20.css false
                      		high
                      https://cdn.segment.com/v1/projects/B8FzKqGyLPvZEr2Nba5HROK8ChLNnqAk/settings false
                        		high
                        https://cdn.segment.com/analytics-next/bundles/870.bundle.323974846b6d45afb45e.js false
                          		high
                          https://api.segment.io/v1/p false
                            		high
                            https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.debb169c1abb431faaa6.js false
                              		high
                              https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q false
                                		high
                                https://cdn.polyfill.io/v2/polyfill.js false
                                  		high
                                  https://account.loopup.com/vendor-c605e28acee1608bdf2a.js false
                                    		high
                                    https://account.loopup.com/favicon.ico false
                                      		high
                                      https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q false
                                        		high
                                        https://account.loopup.com/spritemap-b09c8813136ef89a548157b5ec780fa7.svg false
                                          		high