Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 18:53:12 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 18:53:11 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 18:53:11 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 18:53:12 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 18:53:11 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 168
|
ASCII text, with very long lines (501), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 169
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 170
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 171
|
ASCII text, with very long lines (2343)
|
downloaded
|
||
|
Chrome Cache Entry: 172
|
ASCII text, with very long lines (9189)
|
downloaded
|
||
|
Chrome Cache Entry: 173
|
ASCII text, with very long lines (4179)
|
dropped
|
||
|
Chrome Cache Entry: 174
|
ASCII text, with very long lines (65460)
|
downloaded
|
||
|
Chrome Cache Entry: 175
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 176
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 177
|
ASCII text, with very long lines (65451)
|
dropped
|
||
|
Chrome Cache Entry: 178
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 179
|
ASCII text, with very long lines (1513)
|
dropped
|
||
|
Chrome Cache Entry: 180
|
HTML document, ASCII text, with very long lines (782), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 181
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 182
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 183
|
ASCII text, with very long lines (4179)
|
downloaded
|
||
|
Chrome Cache Entry: 184
|
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 444x98, components
3
|
downloaded
|
||
|
Chrome Cache Entry: 185
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 186
|
ASCII text, with very long lines (21229)
|
dropped
|
||
|
Chrome Cache Entry: 187
|
ASCII text, with very long lines (16419)
|
dropped
|
||
|
Chrome Cache Entry: 188
|
ASCII text, with very long lines (471)
|
downloaded
|
||
|
Chrome Cache Entry: 189
|
ASCII text, with very long lines (521)
|
dropped
|
||
|
Chrome Cache Entry: 190
|
ASCII text, with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 191
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 192
|
ASCII text, with very long lines (1513)
|
downloaded
|
||
|
Chrome Cache Entry: 193
|
C source, ASCII text, with very long lines (19497)
|
downloaded
|
||
|
Chrome Cache Entry: 194
|
ASCII text, with very long lines (471)
|
dropped
|
||
|
Chrome Cache Entry: 195
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 196
|
ASCII text, with very long lines (33733)
|
dropped
|
||
|
Chrome Cache Entry: 197
|
ASCII text, with very long lines (45034)
|
dropped
|
||
|
Chrome Cache Entry: 198
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 199
|
ASCII text, with very long lines (56114), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 200
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 201
|
ASCII text, with very long lines (31849)
|
downloaded
|
||
|
Chrome Cache Entry: 202
|
ASCII text, with very long lines (4827), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 203
|
ASCII text, with very long lines (9067)
|
downloaded
|
||
|
Chrome Cache Entry: 204
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 205
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 206
|
ASCII text, with very long lines (24823), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 207
|
ASCII text, with very long lines (521)
|
downloaded
|
||
|
Chrome Cache Entry: 208
|
ASCII text, with very long lines (4179)
|
downloaded
|
||
|
Chrome Cache Entry: 209
|
PNG image data, 12 x 63, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 210
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 211
|
ASCII text, with very long lines (4179)
|
dropped
|
||
|
Chrome Cache Entry: 212
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 213
|
ASCII text, with very long lines (4179)
|
dropped
|
||
|
Chrome Cache Entry: 214
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 215
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 216
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 217
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 218
|
ASCII text, with very long lines (606)
|
downloaded
|
||
|
Chrome Cache Entry: 219
|
ASCII text, with very long lines (4179)
|
downloaded
|
||
|
Chrome Cache Entry: 220
|
ASCII text, with very long lines (361)
|
dropped
|
||
|
Chrome Cache Entry: 221
|
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
|
downloaded
|
||
|
Chrome Cache Entry: 222
|
PNG image data, 12 x 63, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 223
|
ASCII text, with very long lines (799), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 224
|
ASCII text, with very long lines (304)
|
downloaded
|
||
|
Chrome Cache Entry: 225
|
HTML document, ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 226
|
ASCII text, with very long lines (9189)
|
downloaded
|
||
|
Chrome Cache Entry: 227
|
C source, ASCII text, with very long lines (32758)
|
downloaded
|
||
|
Chrome Cache Entry: 228
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 229
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 230
|
HTML document, ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 231
|
ASCII text, with very long lines (5945)
|
downloaded
|
||
|
Chrome Cache Entry: 232
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 233
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 234
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 235
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 236
|
ASCII text, with very long lines (7786), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 237
|
ASCII text, with very long lines (4808), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 238
|
ASCII text, with very long lines (871)
|
downloaded
|
||
|
Chrome Cache Entry: 239
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 240
|
ASCII text, with very long lines (573), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 241
|
ASCII text, with very long lines (45034)
|
downloaded
|
||
|
Chrome Cache Entry: 242
|
gzip compressed data, max compression, from Unix, original size modulo 2^32 136641
|
downloaded
|
||
|
Chrome Cache Entry: 243
|
ASCII text, with very long lines (50476), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 244
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 245
|
ASCII text, with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 246
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 247
|
PNG image data, 221 x 255, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 248
|
ASCII text, with very long lines (2343)
|
dropped
|
||
|
Chrome Cache Entry: 249
|
ASCII text, with very long lines (65451)
|
downloaded
|
||
|
Chrome Cache Entry: 250
|
HTML document, ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 251
|
ASCII text, with very long lines (1335)
|
downloaded
|
||
|
Chrome Cache Entry: 252
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 253
|
PNG image data, 1009 x 558, 8-bit colormap, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 254
|
ASCII text, with very long lines (7711)
|
downloaded
|
||
|
Chrome Cache Entry: 255
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 256
|
ASCII text, with very long lines (65451)
|
downloaded
|
||
|
Chrome Cache Entry: 257
|
ASCII text, with very long lines (501), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 258
|
ASCII text, with very long lines (31849)
|
dropped
|
||
|
Chrome Cache Entry: 259
|
Unicode text, UTF-8 (with BOM) text, with very long lines (4116), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 260
|
ASCII text, with very long lines (16419)
|
downloaded
|
||
|
Chrome Cache Entry: 261
|
ASCII text, with very long lines (33733)
|
downloaded
|
||
|
Chrome Cache Entry: 262
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 263
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 264
|
JPEG image data, progressive, precision 8, 1550x27, components 3
|
dropped
|
||
|
Chrome Cache Entry: 265
|
ASCII text, with very long lines (304)
|
dropped
|
||
|
Chrome Cache Entry: 266
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 267
|
PNG image data, 221 x 255, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 268
|
ASCII text, with very long lines (1894)
|
dropped
|
||
|
Chrome Cache Entry: 269
|
gzip compressed data, was "jquery-1.11.0.js", last modified: Thu Jun 5 21:59:33 2014, max compression, from Unix, original
size modulo 2^32 107842
|
downloaded
|
||
|
Chrome Cache Entry: 270
|
ASCII text, with very long lines (7711)
|
dropped
|
||
|
Chrome Cache Entry: 271
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 272
|
ASCII text, with very long lines (871)
|
dropped
|
||
|
Chrome Cache Entry: 273
|
ASCII text, with very long lines (5945)
|
downloaded
|
||
|
Chrome Cache Entry: 274
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 275
|
ASCII text, with very long lines (7878), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 276
|
ASCII text, with very long lines (606)
|
dropped
|
||
|
Chrome Cache Entry: 277
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 278
|
ASCII text, with very long lines (5552)
|
downloaded
|
||
|
Chrome Cache Entry: 279
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 280
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 281
|
ASCII text, with very long lines (4179)
|
downloaded
|
||
|
Chrome Cache Entry: 282
|
ASCII text, with very long lines (9067)
|
dropped
|
||
|
Chrome Cache Entry: 283
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 284
|
ASCII text, with very long lines (5552)
|
dropped
|
||
|
Chrome Cache Entry: 285
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 286
|
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 287
|
ASCII text, with very long lines (5552)
|
downloaded
|
||
|
Chrome Cache Entry: 288
|
PNG image data, 221 x 255, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 289
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 290
|
ASCII text, with very long lines (24823), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 291
|
gzip compressed data, max compression, from Unix, original size modulo 2^32 136641
|
dropped
|
||
|
Chrome Cache Entry: 292
|
ASCII text, with very long lines (361)
|
downloaded
|
||
|
Chrome Cache Entry: 293
|
gzip compressed data, was "jquery-1.11.0.js", last modified: Thu Jun 5 21:59:33 2014, max compression, from Unix, original
size modulo 2^32 107842
|
dropped
|
||
|
Chrome Cache Entry: 294
|
ASCII text, with very long lines (65460)
|
dropped
|
||
|
Chrome Cache Entry: 295
|
Web Open Font Format, TrueType, length 31808, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 296
|
ASCII text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 297
|
Unicode text, UTF-8 text, with very long lines (41169)
|
dropped
|
||
|
Chrome Cache Entry: 298
|
ASCII text, with very long lines (1413)
|
dropped
|
||
|
Chrome Cache Entry: 299
|
ASCII text, with very long lines (5945)
|
dropped
|
||
|
Chrome Cache Entry: 300
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 301
|
ASCII text, with very long lines (56114), with CRLF line terminators
|
dropped
|
||
|
Chrome Cache Entry: 302
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 303
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 304
|
ASCII text, with very long lines (32717)
|
dropped
|
||
|
Chrome Cache Entry: 305
|
ASCII text, with very long lines (1894)
|
downloaded
|
||
|
Chrome Cache Entry: 306
|
PNG image data, 221 x 255, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 307
|
ASCII text, with very long lines (1413)
|
downloaded
|
||
|
Chrome Cache Entry: 308
|
ASCII text, with very long lines (21229)
|
downloaded
|
||
|
Chrome Cache Entry: 309
|
HTML document, ASCII text, with very long lines (1609)
|
downloaded
|
||
|
Chrome Cache Entry: 310
|
ASCII text, with very long lines (3138)
|
dropped
|
||
|
Chrome Cache Entry: 311
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 312
|
ASCII text, with very long lines (32717)
|
downloaded
|
||
|
Chrome Cache Entry: 313
|
HTML document, ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 314
|
Unicode text, UTF-8 text, with very long lines (64394), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 315
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 316
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 317
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 318
|
C source, ASCII text, with very long lines (19497)
|
dropped
|
||
|
Chrome Cache Entry: 319
|
ASCII text, with very long lines (3825)
|
dropped
|
||
|
Chrome Cache Entry: 320
|
ASCII text, with very long lines (1335)
|
dropped
|
||
|
Chrome Cache Entry: 321
|
HTML document, ASCII text, with very long lines (1830)
|
downloaded
|
||
|
Chrome Cache Entry: 322
|
ASCII text, with very long lines (9189)
|
dropped
|
||
|
Chrome Cache Entry: 323
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 324
|
ASCII text, with very long lines (5552)
|
dropped
|
||
|
Chrome Cache Entry: 325
|
GIF image data, version 89a, 1 x 1
|
dropped
|
||
|
Chrome Cache Entry: 326
|
ASCII text, with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 327
|
HTML document, ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 328
|
ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 329
|
ASCII text, with very long lines (4179)
|
dropped
|
||
|
Chrome Cache Entry: 330
|
C source, ASCII text, with very long lines (32758)
|
dropped
|
||
|
Chrome Cache Entry: 331
|
ASCII text, with very long lines (5945)
|
dropped
|
||
|
Chrome Cache Entry: 332
|
ASCII text, with very long lines (807), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 333
|
Unicode text, UTF-8 text, with very long lines (41169)
|
downloaded
|
||
|
Chrome Cache Entry: 334
|
JPEG image data, progressive, precision 8, 1550x27, components 3
|
downloaded
|
||
|
Chrome Cache Entry: 335
|
PNG image data, 1009 x 558, 8-bit colormap, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 336
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 337
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 338
|
ASCII text, with very long lines (3825)
|
downloaded
|
||
|
Chrome Cache Entry: 339
|
ASCII text, with very long lines (3138)
|
downloaded
|
||
|
Chrome Cache Entry: 340
|
ASCII text, with very long lines (50476), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 341
|
GIF image data, version 89a, 1 x 1
|
downloaded
|
||
|
Chrome Cache Entry: 342
|
PNG image data, 221 x 255, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 343
|
ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 344
|
HTML document, ASCII text, with very long lines (577)
|
downloaded
|
There are 174 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=1692 --field-trial-handle=2036,i,6207693009308876005,15514391467765793469,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://e.email.ticketsatwork.com/click?EbWljaGVsbGUuc3RvbmVAbWFyaW9uY291bnR5Zmwub3Jn/CeyJtaWQiOiIxNzI0OTQ1NTgyNzAwODQ3NzJlZTFiMWJlIiwiY3QiOiJlYmctYjJiLWY0MzU2NjQ2ZDVmNzIyOGMzMjhkYzIyOWFkOTc0NWU2LTAiLCJyZCI6Im1hcmlvbmNvdW50eWZsLm9yZyJ9/VaHR0cHM6Ly93d3cudGlja2V0c2F0d29yay5jb20/SWkhfZWJndGF3X05EQkFNMDgyOTIwMjRjMTM3OTczMWIw/LZWIx/qP3V0bV9jYW1wYWlnbj1zaWdudXAtY3RhJnV0bV9tZWRpdW09VEFXLVJlZ2lzdHJhdGlvbi1SZXdhcmRzLURyaXAtRGF5LTEtTWFyaW9uQ291bnR5JnV0bV9zb3VyY2U9RW1haWwmY29udl9zb3VyY2U9emV0YQ/gZtCUvg/s1pf1b150df"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://e.email.ticketsatwork.com/click?EbWljaGVsbGUuc3RvbmVAbWFyaW9uY291bnR5Zmwub3Jn/CeyJtaWQiOiIxNzI0OTQ1NTgyNzAwODQ3NzJlZTFiMWJlIiwiY3QiOiJlYmctYjJiLWY0MzU2NjQ2ZDVmNzIyOGMzMjhkYzIyOWFkOTc0NWU2LTAiLCJyZCI6Im1hcmlvbmNvdW50eWZsLm9yZyJ9/VaHR0cHM6Ly93d3cudGlja2V0c2F0d29yay5jb20/SWkhfZWJndGF3X05EQkFNMDgyOTIwMjRjMTM3OTczMWIw/LZWIx/qP3V0bV9jYW1wYWlnbj1zaWdudXAtY3RhJnV0bV9tZWRpdW09VEFXLVJlZ2lzdHJhdGlvbi1SZXdhcmRzLURyaXAtRGF5LTEtTWFyaW9uQ291bnR5JnV0bV9zb3VyY2U9RW1haWwmY29udl9zb3VyY2U9emV0YQ/gZtCUvg/s1pf1b150df
|
|||
|
https://stats.g.doubleclick.net/g/collect
|
unknown
|
||
|
https://www.ticketsatwork.com/img/big_logo.jpg
|
104.18.32.247
|
||
|
https://people.api.boomtrain.com/identify/resolve?data=eyJjb29raWUiOnsiYnNpbiI6IiJ9LCJxdWVyeXN0cmluZyI6e30sImV4dGVybmFsX2lkcyI6eyJ6eW5jIjoiZmVhNDY2MjYtMjRmNi00NmY0LWIyYzItYWU3ZGIxZWViMTI2OjE3MjQ5NjEyNTkuMzUzNTEzIn19&site_id=ebg-taw
|
52.6.57.171
|
||
|
https://cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MTIxMDgzMjExMTExNjc4NQ==&forward=
|
172.217.16.194
|
||
|
https://cdn.cookielaw.org/consent/9ea95be0-451b-4ef8-8b4d-41b4b6617c33/018e7240-e674-7d0e-83fb-62b9eb53eb37/en.json
|
104.18.86.42
|
||
|
https://bpi.rtactivate.com/tag/?id=11017&user_id=5141210832111116785
|
18.210.115.99
|
||
|
https://assets.adobedtm.com/a281455e4dfe/053a29fb1fe9/1b91ec224044/RC97cecb5e8409493eaeb3c8b8d686bbe
|
unknown
|
||
|
https://www.ticketsatwork.com/common_resources/tawframework/img/consent_splash_disney.png
|
104.18.32.247
|
||
|
https://www.ticketsatwork.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
|
104.18.32.247
|
||
|
http://jqueryui.com
|
unknown
|
||
|
https://ampcid.google.com/v1/publisher:getClientId
|
unknown
|
||
|
https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
|
104.18.86.42
|
||
|
https://www.p.zjptg.com/tag/1537403/100001
|
18.65.39.51
|
||
|
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1521371654779772&ev=PageView&dl=https%3A%2F%2F5488171.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCILmyLb9mogDFSkF-wMdL20LgQ%3Bsrc%3D5488171%3Btype%3Dlandi0%3Bcat%3Dhomep0%3Bdc_lat%3D%3Bdc_rdid%3D%3Btag_for_child_directed_treatment%3D%3Bord%3D5472315650316.877%3F&rl=https%3A%2F%2Fwww.ticketsatwork.com%2Ftickets%2Ftracking_consent.php&if=true&ts=1724961260504&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.3.1724961260499.142831482480664357&ler=other&cdl=API_unavailable&it=1724961259120&coo=false&rqm=FGET
|
157.240.0.35
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/d32ug/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/
|
104.18.94.41
|
||
|
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=145607262610361&ev=PageView&dl=https%3A%2F%2Fwww.ticketsatwork.com%2Ftickets%2Ftracking_consent.php&rl=https%3A%2F%2Fwww.ticketsatwork.com%2Ftickets%2Ftracking_consent.php&if=false&ts=1724961261146&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.1.1724961261142.490965441248419360&cs_est=true&cdl=API_unavailable&it=1724961259817&coo=false&rqm=FGET
|
157.240.0.35
|
||
|
https://app.five9.com/five9_clients/consoles_latest/SocialWidget/five9-social-widget.min.js
|
198.105.200.32
|
||
|
https://www.google.com
|
unknown
|
||
|
https://www.youtube.com/iframe_api
|
unknown
|
||
|
https://js-agent.newrelic.com/nr-spa-1.264.0.min.js
|
162.247.243.39
|
||
|
https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/otFlat.json
|
104.18.86.42
|
||
|
https://www.ticketsatwork.com/common_resources/campaigns/7994.jpg
|
104.18.32.247
|
||
|
https://www.lightboxcdn.com/vendor/06a28e47-ec2a-40cc-a306-2295daabfafa/lightbox.js?mb=1724961259728
|
104.19.211.131
|
||
|
https://www.ticketsatwork.com/common_resources/li.php
|
104.18.32.247
|
||
|
https://www.ticketsatwork.com/?utm_campaign=signup-cta&utm_medium=TAW-Registration-Rewards-Drip-Day-1-MarionCounty&utm_source=Email&conv_source=zeta
|
|||
|
https://connect.facebook.net/en_US/fbevents.js
|
157.240.0.6
|
||
|
https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=3d2a8d8838269c8df742af4e7943d1f8&k=ebg-taw-pixel-4536&zmpID=ebg-taw&cache_buster=1724961257787
|
18.239.83.63
|
||
|
https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=3d2a8d8838269c8df742af4e7943d1f8&zmpID=ebg-taw&cache_buster=1724961257833&k=ebg-taw-pixel-1688&custom3=tracking%20consent%20landing%20page
|
18.239.83.63
|
||
|
https://connect.facebook.net/signals/config/1521371654779772?v=2.9.166&r=stable&domain=www.ticketsatwork.com&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110
|
157.240.0.6
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
|
104.18.94.41
|
||
|
https://connect.facebook.net/signals/config/145607262610361?v=2.9.166&r=stable&domain=www.ticketsatwork.com&hme=da9a399065fb1c492026018b9e54864148adfb49d800f41752428fb7b59190f8&ex_m=69%2C118%2C104%2C108%2C60%2C4%2C97%2C68%2C16%2C94%2C86%2C50%2C53%2C168%2C171%2C183%2C179%2C180%2C182%2C29%2C98%2C52%2C75%2C181%2C163%2C166%2C176%2C177%2C184%2C127%2C40%2C34%2C139%2C15%2C49%2C190%2C189%2C129%2C18%2C39%2C1%2C42%2C64%2C65%2C66%2C70%2C90%2C17%2C14%2C93%2C89%2C88%2C105%2C51%2C107%2C38%2C106%2C30%2C91%2C26%2C164%2C167%2C136%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C56%2C61%2C63%2C73%2C99%2C27%2C74%2C9%2C8%2C78%2C47%2C21%2C101%2C100%2C102%2C95%2C10%2C20%2C3%2C19%2C83%2C55%2C81%2C33%2C72%2C0%2C92%2C32%2C80%2C85%2C46%2C45%2C84%2C37%2C5%2C87%2C79%2C43%2C35%2C82%2C2%2C36%2C62%2C41%2C103%2C44%2C77%2C67%2C109%2C59%2C58%2C31%2C96%2C57%2C54%2C48%2C76%2C71%2C24%2C110
|
157.240.253.1
|
||
|
https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
|
104.18.86.42
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8baf1623abd28c65/1724961200720/9403a660f557445d874b8b4da87e7da70e2ec16e760928e3ae3b1fdd338ba0f7/NKzVQkFnI3yfGsR
|
104.18.94.41
|
||
|
https://github.com/krux/postscribe/blob/master/LICENSE.
|
unknown
|
||
|
https://5488171.fls.doubleclick.net/activityi;src=5488171;type=landi0;cat=homep0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=5472315650316.877?
|
142.250.185.198
|
||
|
https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=709a910d70f1371b086451223dfeb219&k
|
unknown
|
||
|
https://stats.g.doubleclick.net/j/collect
|
unknown
|
||
|
https://www.lightboxcdn.com/static/fb_lightbox.2.1.5.css?cb=20240725
|
104.19.211.131
|
||
|
https://n2.mouseflow.com/dom?gz=1
|
192.96.202.198
|
||
|
https://secure.adnxs.com/seg?add=27382963&t=2
|
185.89.211.116
|
||
|
https://ps.eyeota.net/match?uid=5141210832111116785&bid=omt9pi0
|
3.121.27.153
|
||
|
https://dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=B5F9FF2554F608410A4C98C6%40AdobeOrg&d_nsid=0&d_coppa=true&ts=1724961253808
|
52.215.138.145
|
||
|
https://assets.adobedtm.com/a281455e4dfe/053a29fb1fe9/1b91ec224044/RC99b61db696a145fa9e0a2f76fd7a953
|
unknown
|
||
|
https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_Acti
|
unknown
|
||
|
https://ib.adnxs.com/setuid?entity=18&code=5141210832111116785
|
37.252.171.149
|
||
|
https://secure.adnxs.com/px?id=963088&seg=11542225&t=2
|
185.89.210.141
|
||
|
https://smetrics.ticketsatwork.com/id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=B5F9FF2554F608410A4C98C6%40AdobeOrg&mid=54209754482825436682262038197076172972&cl=157680000&d_coppa=true&ts=1724961256561
|
63.140.62.222
|
||
|
https://www.mnpa6gtrk.com/scripts/sdk/everflow.js
|
35.244.234.248
|
||
|
https://smetrics.ticketsatwork.com/b/ss/entbentaw,entbenglobal/1/JS-2.23.0-LEWM/s88879875842221?AQB=1&ndh=1&pf=1&t=29%2F7%2F2024%2015%3A54%3A18%204%20240&cid.&adobe_ecid.&id=54209754482825436682262038197076172972&.adobe_ecid&ecid.&id=54209754482825436682262038197076172972&.ecid&mcid.&id=54209754482825436682262038197076172972&.mcid&ot_consent_id.&id=c43a587d-9a6a-4a97-a5e2-23823c84027e&.ot_consent_id&.cid&sdid=40667645CE104185-61989688603A3936&mid=54209754482825436682262038197076172972&aamlh=6&ce=UTF-8&ns=entertainmentbenefits&cdp=2&fpCookieDomainPeriods=2&cl=157680000&pageName=tracking%20consent%20landing%20page&g=https%3A%2F%2Fwww.ticketsatwork.com%2Ftickets%2Ftracking_consent.php&r=https%3A%2F%2Fwww.ticketsatwork.com%2Ftickets%2Ftracking_consent.php&c.&getValOnce=3.0&cleanStr=2.0&getPreviousValue=3.0&cm.&ssf=1&.cm&.c&cc=USD&ch=tracking%20consent%20landing%20page&server=www.ticketsatwork.com&events=event10&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=tracking%20consent%20landing%20page&h1=TicketsAtWork&c5=D%3Dc7&c6=desktop&c7=https%3A%2F%2Fwww.ticketsatwork.com%2Ftickets%2Ftracking_consent.php&c9=anonymous&v9=Thursday%20-%203%3A30PM&c11=anonymous&c13=43%7CTicketsAtWork.com&v13=43&c29=taw&v37=D%3Dc11&c46=August%7C29%7C2024%7CThursday%7C03%7C54%7CPM%7CWeekday%7CAfternoon&c47=tracking%20consent%20landing%20page&v61=54209754482825436682262038197076172972&c66=%2Ftickets%2Ftracking_consent.php&c67=D%3Dc66&c73=OC40Ni4xMjMuMzM%3D&c74=taw%7Ccorp%7Ccorp%7Ctracking_consent&v85=D%3Dc7&v88=D%3Dc73&v96=D%3Dc47&v97=D%3Dc13&v98=D%3Dc46&v108=Bot&v135=08%2F29%2F2024&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=B5F9FF2554F608410A4C98C6%40AdobeOrg&AQE=1
|
63.140.62.222
|
||
|
https://us-u.openx.net/w/1.0/sd?id=537073062&val=5141210832111116785&r=
|
34.98.64.218
|
||
|
https://www.ticketsatwork.com/common_resources/tawframework/img/consent_splash_seaworld.png
|
104.18.32.247
|
||
|
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210832111116785&referrer=https%3A%2F%2Fwww.ticketsatwork.com%2Ftickets%2Ftracking_consent.php&forward=
|
18.239.83.21
|
||
|
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5141210832111116785&referrer=ht
|
unknown
|
||
|
https://product-initjs.prod.rfksrv.com/js/reflektion.js
|
108.156.60.20
|
||
|
https://assets.adobedtm.com/a281455e4dfe/053a29fb1fe9/1b91ec224044/RCeac883f65a3f41babe9d08ad2d6fcd6
|
unknown
|
||
|
https://n2.mouseflow.com/html?website=c1c16582-6159-4100-a131-ef001f8038c7&session=9d1cb620a699bd1bcb5d340da6b03d57&page=0829148681aa6768091e2e9648fcd3253b8a5c49&gz=1
|
192.96.202.198
|
||
|
https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.js
|
unknown
|
||
|
https://www.ticketsatwork.com/common_resources/js/li.js?ebgcbv=258
|
104.18.32.247
|
||
|
https://www.ticketsatwork.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/6790c32b9fc9/main.js?
|
104.18.32.247
|
||
|
https://cct.google/taggy/agent.js
|
unknown
|
||
|
https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=c3e284387cb1dd119ff0a4df13f0fbe5&k
|
unknown
|
||
|
https://adservice.google.com/ddm/fls/z/dc_pre=CKrN5rn9mogDFWgrBgAdMo48Kg;src=6479484;type=retarget;c
|
unknown
|
||
|
https://www.ticketsatwork.com/tickets/travel/?tab=h&ebg_source=custom-ad&ebg_medium=sticky&ebg_campaign=hotels
|
104.18.32.247
|
||
|
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8baf1623abd28c65&lang=auto
|
104.18.94.41
|
||
|
https://connect.facebook.net/
|
unknown
|
||
|
https://live.rezync.com/sync
|
unknown
|
||
|
https://developers.marketo.com/MunchkinLicense.pdf
|
unknown
|
||
|
https://www.google.%/ads/ga-audiences
|
unknown
|
||
|
https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D32659562%26t%3D1%26cb%3D1724961259.3567386
|
185.89.211.116
|
||
|
https://www.ticketsatwork.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8baf1611da6c0f71
|
104.18.32.247
|
||
|
https://www.lightboxcdn.com/vendor/06a28e47-ec2a-40cc-a306-2295daabfafa/user.js?cb=638603029762405697
|
104.19.211.131
|
||
|
https://assets.adobedtm.com/a281455e4dfe/053a29fb1fe9/1b91ec224044/RCc093b72e53704fb1b22d10f023c1608
|
unknown
|
||
|
https://live.rezync.com/sync?c=16b6410431b6374e780104abb0443ca8&p=3d2a8d8838269c8df742af4e7943d1f8&k
|
unknown
|
||
|
https://www.ticketsatwork.com/favicon.ico
|
104.18.32.247
|
||
|
https://www.ticketsatwork.com/common_resources/js/interaction_analytics.js?ebgcbv=258
|
104.18.32.247
|
||
|
https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/v2/otPcTab.json
|
104.18.86.42
|
||
|
https://pixel.mathtag.com/event/js?mt_id=1081963&mt_adid=165802&v1=&v2=&v3=&s1=&s2=&s3=
|
216.200.232.253
|
||
|
https://secure.adnxs.com/px?id=824908&seg=8076102&t=2
|
185.89.210.141
|
||
|
https://cdn.cookielaw.org/scripttemplates/202403.1.0/otBannerSdk.js
|
104.18.86.42
|
||
|
https://partners.tremorhub.com/sync?UIRF=5141210832111116785&r=swvHlAcXNPiA
|
52.1.98.123
|
||
|
https://secure.adnxs.com/seg?add=32659562&t=1&cb=1724961260.9884079
|
unknown
|
||
|
https://contextual.media.net/cksync.php?cs=3&type=rkt&ovsid=5141210832111116785
|
88.221.168.23
|
||
|
https://www.google.com/pagead/1p-user-list/1046644787/?random
|
unknown
|
||
|
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
|
104.18.86.42
|
||
|
https://ps.eyeota.net/match/bounce/?uid=5141210832111116785&bid=omt9pi0
|
3.121.27.153
|
||
|
https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck
|
unknown
|
||
|
https://initjs.rfk.ticketsatwork.com/rfk/js/11273-162496825/init.js
|
18.238.243.33
|
||
|
https://ad.doubleclick.net/ddm/activity/attribution_src_register;crd=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
|
172.217.18.102
|
||
|
https://www.ticketsatwork.com/tickets/?utm_campaign=signup-cta&utm_medium=TAW-Registration-Rewards-Drip-Day-1-MarionCounty&utm_source=Email&conv_source=zeta
|
104.18.32.247
|
||
|
https://www.ticketsatwork.com/common_resources/js/jquery-3.5.1.min.js
|
104.18.32.247
|
||
|
https://www.facebook.com/tr/?id=1521371654779772&ev=PageView&dl=https%3A%2F%2F5488171.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCILmyLb9mogDFSkF-wMdL20LgQ%3Bsrc%3D5488171%3Btype%3Dlandi0%3Bcat%3Dhomep0%3Bdc_lat%3D%3Bdc_rdid%3D%3Btag_for_child_directed_treatment%3D%3Bord%3D5472315650316.877%3F&rl=https%3A%2F%2Fwww.ticketsatwork.com%2Ftickets%2Ftracking_consent.php&if=true&ts=1724961260504&sw=1280&sh=1024&v=2.9.166&r=stable&ec=0&o=4126&fbp=fb.3.1724961260499.142831482480664357&ler=other&cdl=API_unavailable&it=1724961259120&coo=false&rqm=GET
|
157.240.0.35
|
||
|
https://sync-tm.everesttech.net/upi/pid/Mlpt2JaG/?redir=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26p
|
unknown
|
||
|
https://ad.doubleclick.net/ddm/activity/src=11282448;dc_pre=CJrV0bn9mogDFVBXHgIdo3wsxQ;type=unive0;cat=ebg-t00;u3=tracking%20consent%20landing%20page;u4=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1724961259.3567386?
|
142.250.185.166
|
||
|
https://ad.doubleclick.net/ddm/activity/src=11282448;type=unive0;cat=ebg-t00;u3=tracking
|
unknown
|
||
|
https://n2.mouseflow.com/init?v=18.10&p=c1c16582-6159-4100-a131-ef001f8038c7&s=9d1cb620a699bd1bcb5d340da6b03d57&page=0829148681aa6768091e2e9648fcd3253b8a5c49&ret=0&u=05b1c9df74a100ff29126c5c41aad1f6&href=https%3A%2F%2Fwww.ticketsatwork.com%2Ftickets%2Ftracking_consent.php&url=%2Ftickets%2Ftracking_consent.php&ref=https%3A%2F%2Fwww.ticketsatwork.com%2Ftickets%2Ftracking_consent.php&title=&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1280&dh=907&time=6100&pxr=1&gdpr=0&pst=1724961260053
|
192.96.202.198
|
||
|
https://adservice.google.com/ddm/fls/z/dc_pre=CILmyLb9mogDFSkF-wMdL20LgQ;src=5488171;type=landi0;cat
|
unknown
|
||
|
https://www.ticketsatwork.com/cdn-cgi/challenge-platform/h/b/flow/ov1/292098448:1724959896:gfTTWjEKA8WonpP57RFq-otmcgy7uFVeaaGdq7Jlnus/8baf1611da6c0f71/03c91dedd68593c
|
104.18.32.247
|
||
|
https://ad.doubleclick.net/ddm/activity/src=11282448;type=unive0;cat=ebg-t00;u3=tracking%20consent%20landing%20page;u4=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=1724961259.3567386?
|
142.250.185.166
|
||
|
https://cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm
|
unknown
|
||
|
https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5141210832111116785&redir=
|
52.214.186.143
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
dart.l.doubleclick.net
|
142.250.185.198
|
||
|
pixel-origin.mathtag.com
|
216.200.232.253
|
||
|
d3q2gd1c8r2rhy.cloudfront.net
|
108.156.60.20
|
||
|
people.api.boomtrain.com
|
52.6.57.171
|
||
|
user-data-eu.bidswitch.net
|
35.214.136.108
|
||
|
adservice.google.com
|
142.250.185.98
|
||
|
live.rezync.com
|
18.239.83.63
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
|
stats.g.doubleclick.net
|
64.233.184.157
|
||
|
contextual.media.net
|
88.221.168.23
|
||
|
ptjs.pubtag.cjpowered.com
|
18.65.39.51
|
||
|
adobetarget.data.adobedc.net
|
63.140.36.145
|
||
|
ps.eyeota.net
|
3.121.27.153
|
||
|
scontent.xx.fbcdn.net
|
157.240.0.6
|
||
|
idsync.rlcdn.com
|
35.244.174.68
|
||
|
cm.g.doubleclick.net
|
172.217.16.194
|
||
|
dt9s2nur7u2e9.cloudfront.net
|
52.222.149.49
|
||
|
www.google.com
|
216.58.206.68
|
||
|
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
|
52.215.138.145
|
||
|
dzqgaz968u0n0.cloudfront.net
|
108.156.60.43
|
||
|
n2.mouseflow.com
|
192.96.202.198
|
||
|
star-mini.c10r.facebook.com
|
157.240.0.35
|
||
|
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com
|
18.210.115.99
|
||
|
events.api.boomtrain.com
|
107.20.222.134
|
||
|
us-u.openx.net
|
34.98.64.218
|
||
|
ticketsatwork.com.ssl.d2.sc.omtrdc.net
|
63.140.62.222
|
||
|
ad.doubleclick.net
|
172.217.18.102
|
||
|
js-agent.newrelic.com
|
162.247.243.39
|
||
|
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com
|
18.194.21.211
|
||
|
prod-dp-data-events-api-c01-1683509729.us-east-1.elb.amazonaws.com
|
23.22.242.161
|
||
|
www.lightboxcdn.com
|
104.19.211.131
|
||
|
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com
|
34.253.247.99
|
||
|
googleads.g.doubleclick.net
|
142.250.186.130
|
||
|
dsum-sec.casalemedia.com
|
104.18.36.155
|
||
|
dosnujlvxkgze.cloudfront.net
|
143.204.215.98
|
||
|
challenges.cloudflare.com
|
104.18.95.41
|
||
|
d2sr74e7hkgkse.cloudfront.net
|
18.238.243.33
|
||
|
pug-ams-bc.pubmnet.com
|
198.47.127.205
|
||
|
www.ticketsatwork.com
|
104.18.32.247
|
||
|
td.doubleclick.net
|
142.250.185.226
|
||
|
analytics.google.com
|
142.250.185.206
|
||
|
partners-alb-1113315349.us-east-1.elb.amazonaws.com
|
52.1.98.123
|
||
|
409-bcn-480.mktoresp.com
|
192.28.147.68
|
||
|
ib.anycast.adnxs.com
|
185.89.211.116
|
||
|
cdn.cookielaw.org
|
104.18.86.42
|
||
|
geolocation.onetrust.com
|
172.64.155.119
|
||
|
www.mnpa6gtrk.com
|
35.244.234.248
|
||
|
app.five9.com
|
198.105.200.32
|
||
|
www.p.zjptg.com
|
unknown
|
||
|
initjs.rfk.ticketsatwork.com
|
unknown
|
||
|
alweb.rfk.ticketsatwork.com
|
unknown
|
||
|
a.rfihub.com
|
unknown
|
||
|
smetrics.ticketsatwork.com
|
unknown
|
||
|
secure.adnxs.com
|
unknown
|
||
|
20843998p.rfihub.com
|
unknown
|
||
|
assets.adobedtm.com
|
unknown
|
||
|
connect.facebook.net
|
unknown
|
||
|
px.ads.linkedin.com
|
unknown
|
||
|
munchkin.marketo.net
|
unknown
|
||
|
api.lightboxcdn.com
|
unknown
|
||
|
partners.tremorhub.com
|
unknown
|
||
|
sync-tm.everesttech.net
|
unknown
|
||
|
p.rfihub.com
|
unknown
|
||
|
5488171.fls.doubleclick.net
|
unknown
|
||
|
pixel.mathtag.com
|
unknown
|
||
|
e.email.ticketsatwork.com
|
unknown
|
||
|
9767737.fls.doubleclick.net
|
unknown
|
||
|
6479484.fls.doubleclick.net
|
unknown
|
||
|
c1.rfihub.net
|
unknown
|
||
|
cdn.boomtrain.com
|
unknown
|
||
|
image2.pubmatic.com
|
unknown
|
||
|
dpm.demdex.net
|
unknown
|
||
|
aa.agkn.com
|
unknown
|
||
|
www.sjwoe.com
|
unknown
|
||
|
x.bidswitch.net
|
unknown
|
||
|
www.facebook.com
|
unknown
|
||
|
cdn.mouseflow.com
|
unknown
|
||
|
www.linkedin.com
|
unknown
|
||
|
product-initjs.prod.rfksrv.com
|
unknown
|
||
|
x.dlx.addthis.com
|
unknown
|
||
|
snap.licdn.com
|
unknown
|
||
|
starget.ticketsatwork.com
|
unknown
|
||
|
ib.adnxs.com
|
unknown
|
||
|
bpi.rtactivate.com
|
unknown
|
There are 74 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
52.6.57.171
|
people.api.boomtrain.com
|
United States
|
||
|
37.252.171.149
|
unknown
|
European Union
|
||
|
18.210.115.99
|
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com
|
United States
|
||
|
192.96.202.198
|
n2.mouseflow.com
|
United States
|
||
|
192.96.202.199
|
unknown
|
United States
|
||
|
142.250.185.226
|
td.doubleclick.net
|
United States
|
||
|
66.235.152.225
|
unknown
|
United States
|
||
|
185.89.211.116
|
ib.anycast.adnxs.com
|
Germany
|
||
|
63.140.36.145
|
adobetarget.data.adobedc.net
|
United States
|
||
|
198.47.127.205
|
pug-ams-bc.pubmnet.com
|
United States
|
||
|
157.240.0.35
|
star-mini.c10r.facebook.com
|
United States
|
||
|
142.250.185.198
|
dart.l.doubleclick.net
|
United States
|
||
|
63.140.62.17
|
unknown
|
United States
|
||
|
198.105.200.32
|
app.five9.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
52.214.186.143
|
unknown
|
United States
|
||
|
142.250.185.230
|
unknown
|
United States
|
||
|
35.244.174.68
|
idsync.rlcdn.com
|
United States
|
||
|
142.250.185.206
|
analytics.google.com
|
United States
|
||
|
52.7.227.164
|
unknown
|
United States
|
||
|
216.58.212.166
|
unknown
|
United States
|
||
|
142.250.186.130
|
googleads.g.doubleclick.net
|
United States
|
||
|
216.58.206.34
|
unknown
|
United States
|
||
|
142.250.185.166
|
unknown
|
United States
|
||
|
216.200.232.253
|
pixel-origin.mathtag.com
|
United States
|
||
|
64.233.184.157
|
stats.g.doubleclick.net
|
United States
|
||
|
157.240.0.6
|
scontent.xx.fbcdn.net
|
United States
|
||
|
108.156.60.43
|
dzqgaz968u0n0.cloudfront.net
|
United States
|
||
|
192.28.147.68
|
409-bcn-480.mktoresp.com
|
United States
|
||
|
18.239.83.63
|
live.rezync.com
|
United States
|
||
|
107.20.222.134
|
events.api.boomtrain.com
|
United States
|
||
|
104.19.211.131
|
www.lightboxcdn.com
|
United States
|
||
|
18.245.60.59
|
unknown
|
United States
|
||
|
143.204.215.98
|
dosnujlvxkgze.cloudfront.net
|
United States
|
||
|
18.194.21.211
|
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com
|
United States
|
||
|
157.240.253.1
|
unknown
|
United States
|
||
|
18.172.112.91
|
unknown
|
United States
|
||
|
142.250.185.98
|
adservice.google.com
|
United States
|
||
|
18.238.243.127
|
unknown
|
United States
|
||
|
13.32.27.99
|
unknown
|
United States
|
||
|
35.244.234.248
|
www.mnpa6gtrk.com
|
United States
|
||
|
192.168.2.5
|
unknown
|
unknown
|
||
|
108.156.60.20
|
d3q2gd1c8r2rhy.cloudfront.net
|
United States
|
||
|
63.140.62.222
|
ticketsatwork.com.ssl.d2.sc.omtrdc.net
|
United States
|
||
|
52.1.98.123
|
partners-alb-1113315349.us-east-1.elb.amazonaws.com
|
United States
|
||
|
18.65.39.51
|
ptjs.pubtag.cjpowered.com
|
United States
|
||
|
18.173.205.63
|
unknown
|
United States
|
||
|
104.18.95.41
|
challenges.cloudflare.com
|
United States
|
||
|
104.18.36.155
|
dsum-sec.casalemedia.com
|
United States
|
||
|
172.64.155.119
|
geolocation.onetrust.com
|
United States
|
||
|
3.121.27.153
|
ps.eyeota.net
|
United States
|
||
|
104.18.32.247
|
www.ticketsatwork.com
|
United States
|
||
|
52.57.150.20
|
unknown
|
United States
|
||
|
54.228.154.232
|
unknown
|
United States
|
||
|
172.217.18.102
|
ad.doubleclick.net
|
United States
|
||
|
142.250.185.70
|
unknown
|
United States
|
||
|
172.217.16.194
|
cm.g.doubleclick.net
|
United States
|
||
|
172.217.16.196
|
unknown
|
United States
|
||
|
74.125.133.155
|
unknown
|
United States
|
||
|
35.214.136.108
|
user-data-eu.bidswitch.net
|
United States
|
||
|
23.22.242.161
|
prod-dp-data-events-api-c01-1683509729.us-east-1.elb.amazonaws.com
|
United States
|
||
|
104.18.94.41
|
unknown
|
United States
|
||
|
37.252.173.215
|
unknown
|
European Union
|
||
|
34.253.247.99
|
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com
|
United States
|
||
|
172.64.151.101
|
unknown
|
United States
|
||
|
18.239.83.21
|
unknown
|
United States
|
||
|
108.138.26.89
|
unknown
|
United States
|
||
|
162.247.243.39
|
js-agent.newrelic.com
|
United States
|
||
|
88.221.168.23
|
contextual.media.net
|
European Union
|
||
|
52.222.149.49
|
dt9s2nur7u2e9.cloudfront.net
|
United States
|
||
|
74.121.140.211
|
unknown
|
United States
|
||
|
185.89.210.141
|
unknown
|
Germany
|
||
|
216.58.206.68
|
www.google.com
|
United States
|
||
|
185.89.210.90
|
unknown
|
Germany
|
||
|
18.238.243.33
|
d2sr74e7hkgkse.cloudfront.net
|
United States
|
||
|
3.215.58.153
|
unknown
|
United States
|
||
|
34.98.64.218
|
us-u.openx.net
|
United States
|
||
|
142.250.186.164
|
unknown
|
United States
|
||
|
52.215.138.145
|
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
|
United States
|
||
|
104.18.86.42
|
cdn.cookielaw.org
|
United States
|
There are 70 hidden IPs, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://www.ticketsatwork.com/?utm_campaign=signup-cta&utm_medium=TAW-Registration-Rewards-Drip-Day-1-MarionCounty&utm_source=Email&conv_source=zeta
|
||
|
https://www.ticketsatwork.com/?utm_campaign=signup-cta&utm_medium=TAW-Registration-Rewards-Drip-Day-1-MarionCounty&utm_source=Email&conv_source=zeta
|
||
|
https://www.ticketsatwork.com/?utm_campaign=signup-cta&utm_medium=TAW-Registration-Rewards-Drip-Day-1-MarionCounty&utm_source=Email&conv_source=zeta
|
||
|
https://www.ticketsatwork.com/tickets/tracking_consent.php
|
||
|
https://www.ticketsatwork.com/tickets/tracking_consent.php
|
||
|
https://www.ticketsatwork.com/tickets/tracking_consent.php
|
||
|
https://www.ticketsatwork.com/tickets/tracking_consent.php
|
||
|
https://www.ticketsatwork.com/tickets/tracking_consent.php
|
||
|
https://www.ticketsatwork.com/tickets/tracking_consent.php
|
||
|
https://www.ticketsatwork.com/tickets/tracking_consent.php
|
||
|
https://www.ticketsatwork.com/tickets/tracking_consent.php
|
||
|
https://www.ticketsatwork.com/tickets/tracking_consent.php
|
||
|
https://www.ticketsatwork.com/tickets/tracking_consent.php
|
||
|
https://www.ticketsatwork.com/tickets/tracking_consent.php
|
There are 4 hidden doms, click here to show them.