Edit tour

Windows Analysis Report
http://app-metamask.godaddysites.com/

Overview

General Information

Sample URL:	http://app-metamask.godaddysites.com/
Analysis ID:	1589364
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious URL

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2056,i,3173896954525017430,16113011937734368675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6604 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://app-metamask.godaddysites.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /accounts HTTP/1.1Host: api.ola.godaddy.comConnection: keep-aliveContent-Length: 54sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-Type: application/json;charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://app-metamask.godaddysites.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://app-metamask.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://app-metamask.godaddysites.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://app-metamask.godaddysites.com/404	Avira URL Cloud: Label: phishing
Source: https://app-metamask.godaddysites.com/sw.js	Avira URL Cloud: Label: phishing
Source: https://app-metamask.godaddysites.com/manifest.webmanifest	Avira URL Cloud: Label: phishing
Source: https://app-metamask.godaddysites.com/m/api/reamaze/v2/customers/auth?brand=0e937390-542d-4cdf-8da5-816f67420c2f	Avira URL Cloud: Label: phishing

Source: https://app-metamask.godaddysites.com/#b8c06eb6-5155-441c-8e96-a1a0a089bc75	HTTP Parser: No favicon
Source: https://app-metamask.godaddysites.com/#b8c06eb6-5155-441c-8e96-a1a0a089bc75	HTTP Parser: No favicon

Source: https://app-metamask.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://app-metamask.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://app-metamask.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_133.2.dr, chromecache_234.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Nk:function(){e=nb()},Kd:function(){d()}}};var Vb=wa(["data-gtm-yt-inspected-"]),QE=["www.youtube.com","www.youtube-nocookie.com"],RE,SE=!1; equals www.youtube.com (Youtube)
Source: chromecache_133.2.dr, chromecache_234.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Kh:e,Ih:f,Jh:g,ri:k,si:m,bf:n,Mb:b},q=A.YT;if(q)return q.ready&&q.ready(d),b;var r=A.onYouTubeIframeAPIReady;A.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(aF(w,"iframe_api")\|\|aF(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!SE&&ZE(x[B],p.bf))return lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_247.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(b){var c=typeof a.URL==="function"?a.URL:a.webkitURL;c=new c(b);c=c.hostname.endsWith(".facebook.com")&&c.pathname=="/signals/iwl.js";if(!c)throw new Error("Disallowed script URL");return b}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_247.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_247.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: app-metamask.godaddysites.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: api.ola.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: isteam.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: cdn.reamaze.com
Source: global traffic	DNS traffic detected: DNS query: events.api.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: push.reamaze.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: reamaze.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 12 Jan 2025 00:47:14 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://app-metamask.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: truex-frame-options: SAMEORIGINx-xss-protection: 0x-content-type-options: nosniffx-permitted-cross-domain-policies: nonereferrer-policy: strict-origin-when-cross-originvary: Accept, Origincache-control: no-cachex-request-id: 14663e8ba52a03e809667b37ffd65eb6x-runtime: 0.005478Strict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundLink: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.27.2.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/cabin/v27/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alxw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u8w4BMUTPHh30AXC-q.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossoriginCache-Control: max-age=30Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.comStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadContent-Type: text/html;charset=utf-8Vary: Accept-EncodingServer: DPS/2.0.0+sha-fcac51dX-Version: fcac51dX-SiteId: us-east-1Set-Cookie: dps_site_id=us-east-1; path=/; secureDate: Sun, 12 Jan 2025 00:47:15 GMTConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 12 Jan 2025 00:47:37 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://app-metamask.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: truex-frame-options: SAMEORIGINx-xss-protection: 0x-content-type-options: nosniffx-permitted-cross-domain-policies: nonereferrer-policy: strict-origin-when-cross-originvary: Accept, Origincache-control: no-cachex-request-id: 6f7f2bdebf9cf2b91342b7af2f04ed24x-runtime: 0.004446Strict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 12 Jan 2025 00:47:42 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://app-metamask.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: truex-frame-options: SAMEORIGINx-xss-protection: 0x-content-type-options: nosniffx-permitted-cross-domain-policies: nonereferrer-policy: strict-origin-when-cross-originvary: Accept, Origincache-control: no-cachex-request-id: b9f62d43843de7f7ac0f5993166e9aafx-runtime: 0.006889Strict-Transport-Security: max-age=15724800; includeSubDomains

Source: chromecache_257.2.dr, chromecache_164.2.dr, chromecache_235.2.dr, chromecache_199.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_130.2.dr, chromecache_231.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_234.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_180.2.dr, chromecache_152.2.dr	String found in binary or memory: https://api.ola.$
Source: chromecache_231.2.dr	String found in binary or memory: https://app-metamask.godaddysites.com/
Source: chromecache_130.2.dr	String found in binary or memory: https://app-metamask.godaddysites.com/404
Source: chromecache_180.2.dr, chromecache_152.2.dr	String found in binary or memory: https://cart-checkout.dev-secureserver.net
Source: chromecache_180.2.dr, chromecache_152.2.dr	String found in binary or memory: https://cart-checkout.secureserver.net
Source: chromecache_180.2.dr, chromecache_152.2.dr	String found in binary or memory: https://cart-checkout.test-secureserver.net
Source: chromecache_133.2.dr, chromecache_234.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_163.2.dr	String found in binary or memory: https://cdn.reamaze.com/assets/external/fontawesome6/webfonts/fa-regular-400-7d81a1a7cc07e1ab196e404
Source: chromecache_163.2.dr	String found in binary or memory: https://cdn.reamaze.com/assets/external/fontawesome6/webfonts/fa-regular-400-9169d8be7a8177e5a92a4d0
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Gochi-Hand-latin-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-cyrillic-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-cyrillic-700.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-cyrillic-ext-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-cyrillic-ext-700.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-devanagari-700.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-devanagri-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-greek-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-greek-700.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-greek-ext-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-greek-ext-700.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-latin-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-latin-700.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-latin-ext-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-latin-ext-700.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-vietnamese-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-vietnamese-700.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-300.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-700.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-300.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-700
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-300.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-700.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-ext-300.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-ext-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-ext-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-ext-700.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-vietnamese-300.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-vietnamese-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-vietnamese-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-vietnamese-700.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Sacramento-latin-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Sacramento-latin-ext-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-cyrillic-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-cyrillic-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-cyrillic-ext-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-ext-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-ext-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-ext-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-ext-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-vietnamese-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-vietnamese-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-200.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-300.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-200.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-300.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-200.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-ext-200.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-ext-300.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-ext-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-ext-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-200.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-300.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-ext-200.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-ext-300.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-ext-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-ext-600.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-vietnamese-300.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-vietnamese-400.woff2
Source: chromecache_131.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-vietnamese-600.woff2
Source: chromecache_221.2.dr, chromecache_247.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_130.2.dr, chromecache_231.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_221.2.dr, chromecache_247.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_163.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_163.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_148.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cabin/v27/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alxw.woff2)
Source: chromecache_148.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cabin/v27/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7ilx17r.woff2
Source: chromecache_148.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/cabin/v27/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7mlx17r.woff2
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AUi-qJCY.woff2)
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AXC-q.woff2)
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2)
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2)
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwaPGR_p.woff2)
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2)
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2)
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2)
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_FQft1dw.woff2)
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2)
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_218.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/cabin/v27/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alxw.wof
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/cabin/v27/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7ilx17r.w
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/cabin/v27/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7mlx17r.w
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u8w4BMUTPHh30AUi-qJCY.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u8w4BMUTPHh30AXC-q.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh50XSwaPGR_p.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u_w4BMUTPHjxsI5wq_FQft1dw.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_231.2.dr	String found in binary or memory: https://img1.wsimg.com/isteam/stock/3462
Source: chromecache_130.2.dr, chromecache_231.2.dr	String found in binary or memory: https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
Source: chromecache_234.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_133.2.dr, chromecache_234.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_206.2.dr, chromecache_250.2.dr	String found in binary or memory: https://pusher.com/
Source: chromecache_193.2.dr	String found in binary or memory: https://reamaze.com/assets/default_avatars/missing-21-4e2e2a2e23742ef1ead8b6a171b4118ab3cf17340620fe
Source: chromecache_133.2.dr, chromecache_234.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_133.2.dr, chromecache_234.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_130.2.dr, chromecache_231.2.dr	String found in binary or memory: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica
Source: chromecache_234.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_133.2.dr, chromecache_234.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_234.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_130.2.dr, chromecache_231.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-BF2FDR6KMM
Source: chromecache_133.2.dr, chromecache_234.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_133.2.dr, chromecache_234.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2056,i,3173896954525017430,16113011937734368675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://app-metamask.godaddysites.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2056,i,3173896954525017430,16113011937734368675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.253.35	true	false	high
reamaze.com	52.223.43.160	true	false	high
scontent.xx.fbcdn.net	157.240.253.1	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
www.google.com	216.58.206.36	true	false	high
cdn.reamaze.com	104.22.8.8	true	false	high
app-metamask.godaddysites.com	13.248.243.5	true	true	unknown
isteam.wsimg.com	18.197.103.231	true	false	high
push.reamaze.com	104.22.9.8	true	false	high
proxy.k8s.pnc.iad.secureserver.net	198.71.248.123	true	false	high
img1.wsimg.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
events.api.secureserver.net	unknown	unknown	false	high
api.ola.godaddy.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
csp.secureserver.net	unknown	unknown	false	high

IP	Domain	Country	ASN	ASN Name	Malicious
18.197.103.231	isteam.wsimg.com	United States	16509	AMAZON-02US	false
104.22.9.8	push.reamaze.com	United States	13335	CLOUDFLARENETUS	false
104.22.8.8	cdn.reamaze.com	United States	13335	CLOUDFLARENETUS	false
198.71.248.123	proxy.k8s.pnc.iad.secureserver.net	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
172.67.28.250	unknown	United States	13335	CLOUDFLARENETUS	false
35.71.189.132	unknown	United States	237	MERIT-AS-14US	false
13.248.243.5	app-metamask.godaddysites.com	United States	16509	AMAZON-02US	true
52.223.43.160	reamaze.com	United States	8987	AMAZONEXPANSIONGB	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

IP
192.168.2.4
192.168.2.5

Source	Detection	Scanner	Label
https://app-metamask.godaddysites.com/favicon.ico	100%	Avira URL Cloud	phishing
https://cart-checkout.dev-secureserver.net	0%	Avira URL Cloud	safe
https://app-metamask.godaddysites.com/404	100%	Avira URL Cloud	phishing
https://app-metamask.godaddysites.com/sw.js	100%	Avira URL Cloud	phishing
https://app-metamask.godaddysites.com/manifest.webmanifest	100%	Avira URL Cloud	phishing
https://app-metamask.godaddysites.com/m/api/reamaze/v2/customers/auth?brand=0e937390-542d-4cdf-8da5-816f67420c2f	100%	Avira URL Cloud	phishing
https://cart-checkout.test-secureserver.net	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
https://cdn.reamaze.com/assets/reamaze-godaddy-loader.js	false		high
https://app-metamask.godaddysites.com/#b8c06eb6-5155-441c-8e96-a1a0a089bc75	false		unknown
http://app-metamask.godaddysites.com/	true		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=282429905966327&ev=PageView&dl=https%3A%2F%2Fapp-metamask.godaddysites.com%2F&rl=&if=false&ts=1736642845528&sw=1280&sh=1024&v=2.9.179&r=stable&a=plgodaddy&ec=0&o=4126&fbp=fb.1.1736642845527.680384161167207460&ler=empty&cdl=API_unavailable&it=1736642842834&coo=false&rqm=FGET	false		high
https://app-metamask.godaddysites.com/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://reamaze.com/assets/default_avatars/missing-21-4e2e2a2e23742ef1ead8b6a171b4118ab3cf17340620fef5b078e1faf4ad7cea.png	false		high
https://connect.facebook.net/en_US/fbevents.js	false		high
https://api.ola.godaddy.com/v2/accounts/0e937390-542d-4cdf-8da5-816f67420c2f/services?&with_category_ids=true	false		high
https://cdn.reamaze.com/fonts/Nunito-latin-700.woff2	false		high
https://cdn.reamaze.com/fonts/Nunito-latin-400.woff2	false		high
https://push.reamaze.com/assets/reamaze-push.js	false		high
https://app-metamask.godaddysites.com/m/api/reamaze/v2/customers/auth?brand=0e937390-542d-4cdf-8da5-816f67420c2f	false	Avira URL Cloud: phishing	unknown
https://api.ola.godaddy.com/accounts/0e937390-542d-4cdf-8da5-816f67420c2f/config	false		high
https://api.ola.godaddy.com/accounts	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=282429905966327&ev=PageView&dl=https%3A%2F%2Fapp-metamask.godaddysites.com%2F%23b8c06eb6-5155-441c-8e96-a1a0a089bc75&rl=&if=false&ts=1736642854786&sw=1280&sh=1024&v=2.9.179&r=stable&a=plgodaddy&ec=1&o=4126&fbp=fb.1.1736642845527.680384161167207460&ler=empty&cdl=API_unavailable&it=1736642842834&coo=false&rqm=FGET	false		high
https://app-metamask.godaddysites.com/manifest.webmanifest	false	Avira URL Cloud: phishing	unknown
https://app-metamask.godaddysites.com/	false		unknown
https://cdn.reamaze.com/assets/fonts.css	false		high
https://app-metamask.godaddysites.com/sw.js	false	Avira URL Cloud: phishing	unknown
https://connect.facebook.net/signals/config/282429905966327?v=2.9.179&r=stable&domain=app-metamask.godaddysites.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113	false		high
https://cdnjs.cloudflare.com/ajax/libs/pusher/7.0.1/pusher.min.js	false		high
https://api.ola.godaddy.com/accounts/0e937390-542d-4cdf-8da5-816f67420c2f/config?fields[]=cart	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.reamaze.com/fonts/Source-Code-Pro-vietnamese-600.woff2	chromecache_131.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2)	chromecache_130.2.dr	false		high
https://cdn.reamaze.com/fonts/Noto-Sans-cyrillic-ext-400.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-400.woff2	chromecache_131.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_133.2.dr, chromecache_234.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-vietnamese-400.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Nunito-latin-300.woff2	chromecache_131.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)	chromecache_130.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-ext-600.woff2	chromecache_131.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2)	chromecache_130.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-300.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Noto-Sans-devanagari-700.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-ext-400.woff2	chromecache_131.2.dr	false		high
https://cart-checkout.dev-secureserver.net	chromecache_180.2.dr, chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com	chromecache_163.2.dr	false		high
https://www.google.com	chromecache_234.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_133.2.dr, chromecache_234.2.dr	false		high
https://cdn.reamaze.com/fonts/	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Code-Pro-cyrillic-ext-400.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Nunito-vietnamese-600.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/assets/external/fontawesome6/webfonts/fa-regular-400-7d81a1a7cc07e1ab196e404	chromecache_163.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-300.woff2	chromecache_131.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2)	chromecache_130.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Code-Pro-cyrillic-400.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Sacramento-latin-400.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Noto-Sans-latin-700.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Nunito-cyrillic-400.woff2	chromecache_131.2.dr	false		high
https://cart-checkout.test-secureserver.net	chromecache_180.2.dr, chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
https://img1.wsimg.com/gfonts/s/cabin/v27/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7mlx17r.w	chromecache_130.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-600.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Sacramento-latin-ext-400.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Nunito-cyrillic-700.woff2	chromecache_131.2.dr	false		high
https://img1.wsimg.com/gfonts/s/cabin/v27/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7ilx17r.w	chromecache_130.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6u8w4BMUTPHh30AUi-qJCY.woff2)	chromecache_130.2.dr	false		high
https://cdn.reamaze.com/fonts/Nunito-cyrillic-300.woff2	chromecache_131.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh50XSwaPGR_p.woff2)	chromecache_130.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-600.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-200.woff2	chromecache_131.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2)	chromecache_130.2.dr	false		high
https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-600.woff2	chromecache_131.2.dr	false		high
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica	chromecache_130.2.dr, chromecache_231.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_133.2.dr, chromecache_234.2.dr	false		high
https://connect.facebook.net/	chromecache_221.2.dr, chromecache_247.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-600.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Nunito-latin-ext-400.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-400.woff2	chromecache_131.2.dr	false		high
https://pusher.com/	chromecache_206.2.dr, chromecache_250.2.dr	false		high
https://cdn.reamaze.com/fonts/Noto-Sans-greek-ext-700.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Noto-Sans-vietnamese-400.woff2	chromecache_131.2.dr	false		high
https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc	chromecache_130.2.dr, chromecache_231.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-ext-600.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-700	chromecache_131.2.dr	false		high
https://app-metamask.godaddysites.com/404	chromecache_130.2.dr	false	Avira URL Cloud: phishing	unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-400.woff2	chromecache_131.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6u_w4BMUTPHjxsI5wq_FQft1dw.woff2)	chromecache_130.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-ext-200.woff2	chromecache_131.2.dr	false		high
https://img1.wsimg.com/isteam/stock/3462	chromecache_231.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-ext-400.woff2	chromecache_131.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2)	chromecache_130.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-ext-400.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-200.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-600.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-ext-200.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-vietnamese-600.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Code-Pro-vietnamese-400.woff2	chromecache_131.2.dr	false		high
https://reamaze.com/assets/default_avatars/missing-21-4e2e2a2e23742ef1ead8b6a171b4118ab3cf17340620fe	chromecache_193.2.dr	false		high
https://fontawesome.com/license/free	chromecache_163.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-ext-600.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-400.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-300.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Nunito-latin-ext-700.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-300.woff2	chromecache_131.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)	chromecache_130.2.dr	false		high
https://cart-checkout.secureserver.net	chromecache_180.2.dr, chromecache_152.2.dr	false		high
https://cdn.reamaze.com/fonts/Noto-Sans-greek-ext-400.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Nunito-vietnamese-400.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Noto-Sans-greek-400.woff2	chromecache_131.2.dr	false		high
https://cdn.reamaze.com/fonts/Noto-Sans-vietnamese-700.woff2	chromecache_131.2.dr	false		high

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1589364
Start date and time:	2025-01-12 01:46:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://app-metamask.godaddysites.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.win@17/225@40/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Input	Output
URL: http://app-metamask.godaddysites.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: http://app-metamask.godaddysites.com
URL: https://app-metamask.godaddysites.com/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The script checks for the presence of certain browser features and, if they are not available, loads a polyfill script from a third-party domain. This is a common practice to ensure compatibility across different browsers and is not inherently malicious. However, the use of `document.write()` to inject the script is considered a legacy practice and could potentially cause issues in some cases." }
"IntersectionObserver"in window&&"Intl"in window&&"Locale"in window.Intl\|\|document.write(`\x3Cscript src="https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~locale.en-US">\x3C/script>`)
URL: https://app-metamask.godaddysites.com/... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The script appears to be primarily for analytics and tracking purposes, with some potentially concerning behaviors. It disables Google Analytics tracking, sets up Google Tag Manager, and initializes Facebook Pixel. While these are common tracking practices, the script also uses some legacy APIs and has the ability to revoke Facebook consent, which could be problematic in certain contexts. Overall, the script requires further review due to the mix of legitimate and potentially aggressive behaviors." }
"use strict"; window['ga-disable-G-BF2FDR6KMM'] = true; window.dataLayer = window.dataLayer \|\| []; window._commercegaID = 'G-BF2FDR6KMM'; window.gtag = window.gtag \|\| function () { window.dataLayer.push(arguments); }; gtag('js', new Date()); gtag('set', 'developer_id.dZTZmYj', true); gtag('config', 'G-BF2FDR6KMM'); Core.utils.onAllowCookieTracking(() => { window[`ga-disable-${window._commercegaID}`] = false; window.gtag('config', window._commercegaID); }); "use strict"; !function (f, b, e, v, n, t, s) { if (f.fbq) return; n = f.fbq = function () { n.callMethod ? n.callMethod.apply(n, arguments) : n.queue.push(arguments); }; if (!f._fbq) f._fbq = n; n.push = n; n.loaded = !0; n.version = '2.0'; n.agent = 'plgodaddy'; n.queue = []; t = b.createElement(e); t.async = !0; t.onload = () => Core.utils.onAllowCookieTracking(() => f.fbq('consent', 'grant')); t.src = v; s = b.getElementsByTagName(e)[0]; s.parentNode.insertBefore(t, s); }(window, document, 'script', 'https://connect.facebook.net/en_US/fbevents.js'); fbq('consent', 'revoke'); fbq('init', '282429905966327'); fbq('track', 'PageView'); var t=document.createElement("script");t.type="text/javascript",t.addEventListener("load",()=>{window.tti.calculateTTI(({name:t,value:e}={})=>{let i={"wam_site_hasPopupWidget":false,"wam_site_hasMessagingWidget":true,"wam_site_headerTreatment":false,"wam_site_hasSlideshow":false,"wam_site_hasFreemiumBanner":false,"wam_site_homepageFirstWidgetType":"INTRODUCTION","wam_site_homepageFirstWidgetPreset":"introduction5","wam_site_businessCategory":"accountingbookkeeping","wam_site_theme":"layout22","wam_site_fontPack":"cabin","wam_site_cookieBannerEnabled":true,"wam_site_membershipEnabled":true,"wam_site_hasHomepageHTML":false,"wam_site_hasHomepageShop":false,"wam_site_hasHomepageOla":true,"wam_site_hasHomepageBlog":false,"wam_site_hasShop":false,"wam_site_hasOla":true,"wam_site_planType":"businessPlus","wam_site_isHomepage":true,"wam_site_htmlWidget":false};window.networkInfo&&window.networkInfo.downlink&&(i=Object.assign({},i,{["wam_site_networkSpeed"]:window.networkInfo.downlink.toFixed(2)})),window.tti.setCustomProperties(i),window.tti._collectVitals({name:t,value:e})})}),t.setAttribute("src","//img1.wsimg.com/traffic-assets/js/tccl-tti.min.js"),document.body.appendChild(t);
URL: https://app-metamask.godaddysites.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "ACCOUNTING YOU CAN COUNT ON", "prominent_button_name": "BOOK TODAY", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://app-metamask.godaddysites.com/ Model: Joe Sandbox AI	{ "brands": [ "App-Metamask" ] }
	{ "brands": [ "App-Metamask" ] }
URL: https://app-metamask.godaddysites.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "ACCOUNTING YOU CAN COUNT ON", "prominent_button_name": "BOOK TODAY", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://app-metamask.godaddysites.com/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://app-metamask.godaddysites.com/#b8c06eb6-5155-441c-8e96-a1a0a089bc75 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "SUBSCRIBE", "text_input_field_labels": [ "Email Address" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://app-metamask.godaddysites.com/#b8c06eb6-5155-441c-8e96-a1a0a089bc75 Model: Joe Sandbox AI	{ "brands": [ "GoDaddy" ] }
	{ "brands": [ "GoDaddy" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3167)
Category:	downloaded
Size (bytes):	3223
Entropy (8bit):	5.253449739282575
Encrypted:	false
SSDEEP:	96:MD+wZBKqSs3fcUKyqVCTjavWGqvN7EDrvJfyzXCt7AsM73LiTDU:BwWpCva6wtsBD
MD5:	DEB327250B64A5B6E86BFD1145426C41
SHA1:	96020067BFDCB197FD2F1E1E5C4EE83D10A9D856
SHA-256:	C1D380F8E07102D41823FC24E3FEE45F1BAAA1B6AA84A3BB353ABEC872C44F4A
SHA-512:	8A0540C0B4FD7941A51F27214B0F75A766871267A643B205D90164C43BDE9A6B4911C623C15083C6D4A3195AB2ED3BA4F3F5768463B940DD66CDA7F984B16001
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/bs-ComponentGoPay-2d231fbf.js
Preview:	define("@widget/LAYOUT/bs-ComponentGoPay-2d231fbf.js",["exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-ComponentPropTypes","~/c/bs-dataAids","~/c/bs-index"],(function(t,e,a,r,o){"use strict";class s extends(global.React\|\|guac.react).Component{constructor(t){super(t),e._(this,"setupOlaCart",(async()=>{const{websiteId:t,rootDomain:e,env:r,renderMode:o}=this.props;if(!this.gopayCart)try{const s=!!window.sessionStorage;if(!await a.g({shouldUseCache:s,websiteId:t,rootDomain:e}))return;if(this.setState({olaGopayCartOn:!0}),o!==(global.Core\|\|guac["@wsb/guac-widget-core"]).constants.renderModes.PUBLISH)return;this.gopayCart=await a.l.cartSetup({websiteId:t,env:r}),this.updateOlaStoreState(),this.gopayCartUnsubscribe=this.gopayCart.subscribe(this.updateOlaStoreState),a.h({cart:this.gopayCart,renderMode:o})}catch(t){this.gopayCart=null,this.setState({olaGopayCartOn:!1})}})),e._(this,"updateOlaStoreState",(()=>{if(!this.gopayCart)return;const{quantitiesByType:t}=this.gopayCart.getState(),e=t

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 12, 2025 01:47:01.056849003 CET	53	60273	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:01.106343985 CET	53	53389	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:02.106427908 CET	53	63989	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:04.747507095 CET	50596	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:04.747778893 CET	55239	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:04.754261971 CET	53	50596	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:04.754499912 CET	53	55239	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:06.558502913 CET	58587	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:06.558954954 CET	58232	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:06.567362070 CET	53	58232	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:06.567387104 CET	53	58587	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:07.050081015 CET	63623	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:07.050244093 CET	64938	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:07.059295893 CET	53	64938	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:07.059322119 CET	53	63623	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:07.697724104 CET	53	51436	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:07.698915958 CET	55309	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:07.699136972 CET	60682	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:07.731031895 CET	62183	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:07.731267929 CET	58282	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:07.732106924 CET	51917	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:07.732265949 CET	54593	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:07.740689039 CET	53	62183	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:07.740897894 CET	53	54593	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:07.745074987 CET	53	58282	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:07.754085064 CET	53	51917	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:07.939347029 CET	53	53639	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:08.948447943 CET	49999	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:08.948769093 CET	62384	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:09.250561953 CET	53812	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:09.250758886 CET	52402	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:09.257239103 CET	53	53812	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:09.257616997 CET	53	52402	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:09.419497013 CET	53	52308	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:10.550697088 CET	60506	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:10.550874949 CET	63779	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:10.557353020 CET	53	60506	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:10.557521105 CET	53	63779	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:11.463360071 CET	53	57665	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:13.567826033 CET	61685	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:13.568062067 CET	50443	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:13.575073957 CET	53	61685	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:13.575124979 CET	53	50443	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:14.210643053 CET	50486	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:14.210807085 CET	52820	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:14.217670918 CET	53	50486	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:14.221426010 CET	53	52820	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:15.349483013 CET	58490	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:15.349627972 CET	52926	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:15.593874931 CET	51222	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:15.594199896 CET	58108	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:16.651482105 CET	58694	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:16.651482105 CET	59518	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:17.411763906 CET	138	138	192.168.2.4	192.168.2.255
Jan 12, 2025 01:47:19.067646980 CET	53	59837	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:23.428469896 CET	53	63891	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:26.118545055 CET	52240	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:26.118802071 CET	51652	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:26.125498056 CET	53	51652	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:26.125896931 CET	53	52240	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:26.895790100 CET	64392	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:26.896064997 CET	65312	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:26.898554087 CET	56777	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:26.898771048 CET	58534	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:26.903595924 CET	53	64392	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:26.904495955 CET	53	65312	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:26.905426979 CET	53	56777	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:26.906354904 CET	53	58534	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:27.708816051 CET	59944	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:27.708940029 CET	52818	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:27.715631962 CET	53	59944	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:27.715711117 CET	53	52818	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:38.007172108 CET	53	51531	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:38.949892998 CET	63502	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:38.950064898 CET	55772	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:38.957792997 CET	53	55772	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:38.957966089 CET	53	63502	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:39.873527050 CET	49759	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:39.873678923 CET	61599	53	192.168.2.4	1.1.1.1
Jan 12, 2025 01:47:39.882590055 CET	53	49759	1.1.1.1	192.168.2.4
Jan 12, 2025 01:47:39.882946014 CET	53	61599	1.1.1.1	192.168.2.4
Jan 12, 2025 01:48:00.460316896 CET	53	53472	1.1.1.1	192.168.2.4
Jan 12, 2025 01:48:00.975708008 CET	53	62148	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
Jan 12, 2025 01:47:06.573379993 CET	444	OUT	GET / HTTP/1.1 Host: app-metamask.godaddysites.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 12, 2025 01:47:07.045500040 CET	355	IN	HTTP/1.1 301 Moved Permanently location: https://app-metamask.godaddysites.com/ vary: Accept-Encoding server: DPS/2.0.0+sha-fcac51d x-version: fcac51d x-siteid: us-east-1 set-cookie: dps_site_id=us-east-1; path=/ etag: 33ea6291b0cda1f4eb87e4ca0e5bb613 date: Sun, 12 Jan 2025 00:47:06 GMT keep-alive: timeout=5 transfer-encoding: chunked Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-12 00:47:07 UTC	703	OUT	GET / HTTP/1.1 Host: app-metamask.godaddysites.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
2025-01-12 00:47:07 UTC	917	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.27.2.js>; rel=preload; as=script; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin,<https://api.ola.godaddy.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-fcac51d X-Version: fcac51d X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 33ea6291b0cda1f4eb87e4ca0e5bb613 Date: Sun, 12 Jan 2025 00:47:07 GMT Connection: close Transfer-Encoding: chunked
2025-01-12 00:47:07 UTC	15467	IN	Data Raw: 31 38 65 64 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 4d c3 88 54 c3 82 4d c3 82 53 4b 3a 20 4c 6f 67 69 6e 20 7c 20 53 69 67 6e 20 49 6e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 Data Ascii: 18edb<!DOCTYPE html><html lang="en-US"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>MTMSK: Login \| Sign In</title><meta name="descrip
2025-01-12 00:47:07 UTC	16384	IN	Data Raw: 70 65 72 74 79 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7d 2e 78 20 2e 63 31 2d 38 77 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 73 7d 2e 78 20 2e 63 31 2d 38 78 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 78 20 2e 63 31 2d 38 79 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 7d 2e 78 20 2e 63 31 2d 38 7a 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 36 70 78 7d 2e 78 20 2e 63 31 2d 39 30 7b 63 6f 6c 6f 72 3a 72 67 62 28 32 36 2c 20 32 38 2c 20 32 39 29 7d 2e 78 20 2e 63 31 2d 39 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 31 35 2c 20 32 32 38 2c 20 32 34 35 29 7d 2e 78 20 2e 63 31 2d 39 32 7b 62 6f 72 64 65 Data Ascii: perty:background-color}.x .c1-8w{transition-duration:.3s}.x .c1-8x{transition-timing-function:ease-in-out}.x .c1-8y{display:inline-flex}.x .c1-8z{min-height:56px}.x .c1-90{color:rgb(26, 28, 29)}.x .c1-91{background-color:rgb(215, 228, 245)}.x .c1-92{borde
2025-01-12 00:47:07 UTC	16384	IN	Data Raw: 63 31 2d 61 7a 20 3e 20 3a 6e 74 68 2d 63 68 69 6c 64 28 6e 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 78 20 2e 63 31 2d 62 30 20 20 3e 20 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 78 20 2e 63 31 2d 62 33 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 28 31 30 30 76 77 20 2d 20 34 38 70 78 29 2f 32 29 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 78 20 2e 63 31 2d 64 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 Data Ascii: c1-az > :nth-child(n){margin-bottom:24px}}@media (max-width: 767px){.x .c1-b0 > :last-child{margin-bottom:0 !important}}@media (max-width: 767px){.x .c1-b3{height:calc((100vw - 48px)/2)}}@media (max-width: 767px){.x .c1-dm{font-size:16px}}@media (max-wid
2025-01-12 00:47:07 UTC	16384	IN	Data Raw: 74 69 6c 69 74 69 65 73 4d 65 6e 75 2e 4d 65 6e 75 2e 4c 69 6e 6b 2e 44 65 66 61 75 6c 74 2e 31 33 32 36 30 30 2e 63 6c 69 63 6b 2c 63 6c 69 63 6b 22 3e 43 72 65 61 74 65 20 41 63 63 6f 75 6e 74 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 64 61 74 61 2d 75 78 3d 22 4c 69 73 74 49 74 65 6d 22 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 6c 69 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 34 30 20 63 31 2d 75 20 63 31 2d 33 75 20 63 31 2d 31 36 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 33 7a 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 68 72 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 72 6f 6c 65 3d 22 73 65 70 61 72 61 74 6f 72 22 20 64 61 74 61 2d 75 78 3d 22 48 52 22 Data Ascii: tilitiesMenu.Menu.Link.Default.132600.click,click">Create Account</a></li><li data-ux="ListItem" role="menuitem" class="x-el x-el-li c1-1 c1-2 c1-40 c1-u c1-3u c1-16 c1-b c1-c c1-3z c1-d c1-e c1-f c1-g"><hr aria-hidden="true" role="separator" data-ux="HR"
2025-01-12 00:47:07 UTC	16384	IN	Data Raw: 65 6d 62 65 72 73 68 69 70 2d 61 63 63 6f 75 6e 74 2d 6c 6f 67 67 65 64 2d 6f 75 74 22 20 6e 61 6d 65 3d 22 4d 79 20 41 63 63 6f 75 6e 74 22 20 64 61 74 61 41 69 64 3d 22 4d 45 4d 42 45 52 53 48 49 50 5f 41 43 43 4f 55 4e 54 5f 4c 49 4e 4b 22 20 68 72 65 66 3d 22 2f 6d 2f 61 63 63 6f 75 6e 74 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 4e 61 76 42 65 74 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 61 20 63 31 2d 36 6a 20 63 31 2d 31 64 20 63 31 2d 31 6d 20 63 31 2d 31 6e 20 63 31 2d 31 6f 20 63 31 2d 31 31 20 63 31 2d 31 71 20 63 31 2d 73 20 63 31 2d 74 20 63 31 2d 6f 20 63 31 2d 70 20 63 31 2d 31 33 20 63 31 2d 36 6b 20 63 31 2d 35 37 20 63 31 2d 62 20 63 31 2d 32 33 20 63 31 2d 32 6d 20 63 31 2d 33 34 20 63 31 2d 31 78 20 63 Data Ascii: embership-account-logged-out" name="My Account" dataAid="MEMBERSHIP_ACCOUNT_LINK" href="/m/account" data-typography="NavBeta" class="x-el x-el-a c1-6j c1-1d c1-1m c1-1n c1-1o c1-11 c1-1q c1-s c1-t c1-o c1-p c1-13 c1-6k c1-57 c1-b c1-23 c1-2m c1-34 c1-1x c
2025-01-12 00:47:07 UTC	16384	IN	Data Raw: 2d 32 30 20 63 31 2d 32 31 20 63 31 2d 32 32 20 63 31 2d 75 20 63 31 2d 34 32 20 63 31 2d 36 68 20 63 31 2d 62 35 20 63 31 2d 74 20 63 31 2d 62 20 63 31 2d 32 33 20 63 31 2d 32 6d 20 63 31 2d 33 34 20 63 31 2d 32 6e 20 63 31 2d 32 6f 20 63 31 2d 32 70 20 63 31 2d 32 71 22 3e 43 6f 6d 70 6c 69 61 6e 63 65 3c 2f 68 34 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 43 6f 6e 74 65 6e 74 43 61 72 64 54 65 78 74 22 20 64 61 74 61 2d 61 69 64 3d 22 41 42 4f 55 54 5f 44 45 53 43 52 49 50 54 49 4f 4e 5f 52 45 4e 44 45 52 45 44 30 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 42 6f 64 79 41 6c 70 68 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 6e 20 63 31 2d 31 6f 20 63 31 2d 34 35 20 63 31 2d 32 32 20 63 31 2d 75 Data Ascii: -20 c1-21 c1-22 c1-u c1-42 c1-6h c1-b5 c1-t c1-b c1-23 c1-2m c1-34 c1-2n c1-2o c1-2p c1-2q">Compliance</h4><div data-ux="ContentCardText" data-aid="ABOUT_DESCRIPTION_RENDERED0" data-typography="BodyAlpha" class="x-el c1-1 c1-2 c1-1n c1-1o c1-45 c1-22 c1-u
2025-01-12 00:47:07 UTC	4734	IN	Data Raw: 22 3e 3c 68 34 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 34 22 20 64 61 74 61 2d 75 78 3d 22 48 65 61 64 69 6e 67 22 20 64 61 74 61 2d 61 69 64 3d 22 46 4f 4f 54 45 52 5f 43 4f 4f 4b 49 45 5f 54 49 54 4c 45 5f 52 45 4e 44 45 52 45 44 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 48 65 61 64 69 6e 67 44 65 6c 74 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 68 34 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 6e 20 63 31 2d 31 6f 20 63 31 2d 62 34 20 63 31 2d 32 30 20 63 31 2d 32 31 20 63 31 2d 32 32 20 63 31 2d 75 20 63 31 2d 33 78 20 63 31 2d 62 20 63 31 2d 65 69 20 63 31 2d 32 6d 20 63 31 2d 33 34 20 63 31 2d 32 6e 20 63 31 2d 32 6f 20 63 31 2d 32 70 20 63 31 2d 32 71 22 3e 54 68 69 73 20 Data Ascii: "><h4 role="heading" aria-level="4" data-ux="Heading" data-aid="FOOTER_COOKIE_TITLE_RENDERED" data-typography="HeadingDelta" class="x-el x-el-h4 c1-1 c1-2 c1-1n c1-1o c1-b4 c1-20 c1-21 c1-22 c1-u c1-3x c1-b c1-ei c1-2m c1-34 c1-2n c1-2o c1-2p c1-2q">This

Timestamp	Bytes transferred	Direction	Data
2025-01-12 00:47:09 UTC	550	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://app-metamask.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-12 00:47:10 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-BUD6HcXu' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-01-12 00:47:10 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-01-12 00:47:10 UTC	1	IN	Data Raw: 2f Data Ascii: /
2025-01-12 00:47:10 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2025-01-12 00:47:10 UTC	16384	IN	Data Raw: 7c 64 3d 3d 3d 22 47 54 4d 22 7c 7c 64 3d 3d 3d 22 4a 53 4f 4e 5f 4c 44 22 7c 7c 64 3d 3d 3d 22 4d 45 54 41 5f 54 41 47 22 7c 7c 64 3d 3d 3d 22 4f 50 45 4e 5f 47 52 41 50 48 22 7c 7c 64 3d 3d 3d 22 52 44 46 41 22 7c 7c 64 3d 3d 3d 22 53 43 48 45 4d 41 5f 44 4f 54 5f 4f 52 47 22 7c 7c 64 3d 3d 3d 22 55 52 49 22 3f 64 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e Data Ascii: \|d==="GTM"\|\|d==="JSON_LD"\|\|d==="META_TAG"\|\|d==="OPEN_GRAPH"\|\|d==="RDFA"\|\|d==="SCHEMA_DOT_ORG"\|\|d==="URI"?d:null;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefin
2025-01-12 00:47:10 UTC	16384	IN	Data Raw: 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 73 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f Data Ascii: urn j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExperimentsTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enfo
2025-01-12 00:47:10 UTC	16384	IN	Data Raw: 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 54 79 70 65 64 65 66 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 Data Ascii: odules("SignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsFBEventsPixelTypedef"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefi
2025-01-12 00:47:10 UTC	1703	IN	Data Raw: 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 2e 63 61 6c 6c 26 26 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 64 3f 62 3a 6e 75 6c 6c 3b 62 21 3d 3d 6e 75 6c 6c 26 26 28 6a 5b 61 5b 30 5d 5d 3d 6a 5b 61 5b 30 5d 5d 7c 7c 7b 7d 2c 6a 5b 61 5b 30 5d 5d 5b 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c Data Ascii: b.getProtocol.call&&b.getProtocol()===d?b:null;b!==null&&(j[a[0]]=j[a[0]]\|\|{},j[a[0]][a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).l
2025-01-12 00:47:10 UTC	14681	IN	Data Raw: 6c 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 61 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 6e 63 6f 64 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 69 66 28 67 2e 66 62 71 3d 3d 6e 75 6c 6c 7c 7c 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 Data Ascii: l&&(this.moduleEncodings=a)}},{key:"addEncodings",value:function(a){var c=this;if(g.fbq==null\|\|g.fbq.__fbeventsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(
2025-01-12 00:47:10 UTC	16384	IN	Data Raw: 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 63 3d 62 2e 6c 6f 67 45 72 72 6f 72 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 76 61 72 20 64 3d 62 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 Data Ascii: lsFBEventsLogging"),c=b.logError;b=f.getFbeventsModules("SignalsFBEventsUtils");var d=b.map,e=f.getFbeventsModules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET");f.getFbeventsModule
2025-01-12 00:47:10 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 6e 75 6d 62 65 72 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d Data Ascii: nction p(){return function(a){if(typeof a!=="string")throw new g();return a}}function q(){return function(a){if(typeof a!=="string"&&typeof a!=="number")throw new g();return a}}function r(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://app-metamask.godaddysites.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Windows Analysis Report
http://app-metamask.godaddysites.com/

Timestamp	Bytes transferred	Direction	Data
2025-01-12 00:47:11 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-12 00:47:11 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-BUD6HcXu' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-01-12 00:47:11 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-01-12 00:47:11 UTC	1	IN	Data Raw: 2f Data Ascii: /
2025-01-12 00:47:11 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2025-01-12 00:47:11 UTC	16384	IN	Data Raw: 7c 64 3d 3d 3d 22 47 54 4d 22 7c 7c 64 3d 3d 3d 22 4a 53 4f 4e 5f 4c 44 22 7c 7c 64 3d 3d 3d 22 4d 45 54 41 5f 54 41 47 22 7c 7c 64 3d 3d 3d 22 4f 50 45 4e 5f 47 52 41 50 48 22 7c 7c 64 3d 3d 3d 22 52 44 46 41 22 7c 7c 64 3d 3d 3d 22 53 43 48 45 4d 41 5f 44 4f 54 5f 4f 52 47 22 7c 7c 64 3d 3d 3d 22 55 52 49 22 3f 64 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e Data Ascii: \|d==="GTM"\|\|d==="JSON_LD"\|\|d==="META_TAG"\|\|d==="OPEN_GRAPH"\|\|d==="RDFA"\|\|d==="SCHEMA_DOT_ORG"\|\|d==="URI"?d:null;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefin
2025-01-12 00:47:11 UTC	16384	IN	Data Raw: 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 73 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f Data Ascii: urn j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExperimentsTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enfo
2025-01-12 00:47:11 UTC	16384	IN	Data Raw: 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 54 79 70 65 64 65 66 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 Data Ascii: odules("SignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsFBEventsPixelTypedef"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefi
2025-01-12 00:47:11 UTC	1703	IN	Data Raw: 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 2e 63 61 6c 6c 26 26 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 64 3f 62 3a 6e 75 6c 6c 3b 62 21 3d 3d 6e 75 6c 6c 26 26 28 6a 5b 61 5b 30 5d 5d 3d 6a 5b 61 5b 30 5d 5d 7c 7c 7b 7d 2c 6a 5b 61 5b 30 5d 5d 5b 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c Data Ascii: b.getProtocol.call&&b.getProtocol()===d?b:null;b!==null&&(j[a[0]]=j[a[0]]\|\|{},j[a[0]][a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).l
2025-01-12 00:47:11 UTC	14681	IN	Data Raw: 6c 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 61 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 6e 63 6f 64 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 69 66 28 67 2e 66 62 71 3d 3d 6e 75 6c 6c 7c 7c 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 Data Ascii: l&&(this.moduleEncodings=a)}},{key:"addEncodings",value:function(a){var c=this;if(g.fbq==null\|\|g.fbq.__fbeventsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(
2025-01-12 00:47:11 UTC	16384	IN	Data Raw: 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 63 3d 62 2e 6c 6f 67 45 72 72 6f 72 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 76 61 72 20 64 3d 62 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 Data Ascii: lsFBEventsLogging"),c=b.logError;b=f.getFbeventsModules("SignalsFBEventsUtils");var d=b.map,e=f.getFbeventsModules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET");f.getFbeventsModule
2025-01-12 00:47:11 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 6e 75 6d 62 65 72 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d Data Ascii: nction p(){return function(a){if(typeof a!=="string")throw new g();return a}}function q(){return function(a){if(typeof a!=="string"&&typeof a!=="number")throw new g();return a}}function r(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=

Timestamp	Bytes transferred	Direction	Data
2025-01-12 00:47:14 UTC	560	OUT	GET /assets/reamaze-godaddy-loader.js HTTP/1.1 Host: cdn.reamaze.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://app-metamask.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-12 00:47:14 UTC	315	IN	HTTP/1.1 200 OK Date: Sun, 12 Jan 2025 00:47:14 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-encoding last-modified: Thu, 09 Jan 2025 20:06:02 GMT etag: W/"152-62b4b81e3de80" CF-Cache-Status: HIT Age: 6377 Server: cloudflare CF-RAY: 900922516b4043d5-EWR
2025-01-12 00:47:14 UTC	565	IN	Data Raw: 32 32 65 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 22 63 6f 6f 6b 69 65 5f 74 65 72 6d 73 5f 61 63 63 65 70 74 65 64 22 2c 6e 3d 21 31 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 6e 26 26 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 52 65 61 6d 61 7a 65 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 65 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 65 2e 61 73 79 6e 63 3d 21 30 2c 65 2e 64 65 66 65 72 3d 22 64 65 66 65 72 22 2c 65 2e 73 72 63 3d 22 2f 2f 63 64 6e 2e 72 65 61 6d 61 7a 65 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 72 65 61 6d 61 7a 65 2e 6a 73 22 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 Data Ascii: 22e!function(){var e,t="cookie_terms_accepted",n=!1,a=function(){if(!n&&"undefined"==typeof Reamaze){var e=document.createElement("script");e.type="text/javascript",e.async=!0,e.defer="defer",e.src="//cdn.reamaze.com/assets/reamaze.js";var t=document.ge
2025-01-12 00:47:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-12 00:47:14 UTC	641	OUT	GET /accounts/0e937390-542d-4cdf-8da5-816f67420c2f/config?fields[]=cart HTTP/1.1 Host: api.ola.godaddy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://app-metamask.godaddysites.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://app-metamask.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-12 00:47:14 UTC	750	IN	HTTP/1.1 404 Not Found Date: Sun, 12 Jan 2025 00:47:14 GMT Content-Type: application/json; charset=utf-8 Content-Length: 29 Connection: close access-control-allow-origin: https://app-metamask.godaddysites.com access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD access-control-expose-headers: access-control-max-age: 7200 access-control-allow-credentials: true x-frame-options: SAMEORIGIN x-xss-protection: 0 x-content-type-options: nosniff x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin vary: Accept, Origin cache-control: no-cache x-request-id: 14663e8ba52a03e809667b37ffd65eb6 x-runtime: 0.005478 Strict-Transport-Security: max-age=15724800; includeSubDomains
2025-01-12 00:47:14 UTC	29	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 41 63 63 6f 75 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 7d Data Ascii: {"error":"Account not found"}

Timestamp	Bytes transferred	Direction	Data
2025-01-12 00:47:15 UTC	562	OUT	GET /manifest.webmanifest HTTP/1.1 Host: app-metamask.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://app-metamask.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-12 00:47:15 UTC	739	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: application/manifest+json Vary: Accept-Encoding Server: DPS/2.0.0+sha-fcac51d X-Version: fcac51d X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: c72d89dc1024246d79a6c44532ac9df3 Date: Sun, 12 Jan 2025 00:47:15 GMT Connection: close Transfer-Encoding: chunked
2025-01-12 00:47:15 UTC	427	IN	Data Raw: 31 39 66 0d 0a 7b 22 73 63 6f 70 65 22 3a 22 2f 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 22 31 39 32 78 31 39 32 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 73 72 63 22 3a 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 73 74 61 74 69 63 2f 70 77 61 2d 61 70 70 2f 6c 6f 67 6f 2d 64 65 66 61 75 6c 74 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 39 32 2c 68 3a 31 39 32 2c 6d 22 7d 2c 7b 22 73 69 7a 65 73 22 3a 22 35 31 32 78 35 31 32 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 73 72 63 22 3a 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 Data Ascii: 19f{"scope":"/","start_url":"/","display":"standalone","icons":[{"sizes":"192x192","type":"image/png","src":"//img1.wsimg.com/isteam/ip/static/pwa-app/logo-default.png/:/rs=w:192,h:192,m"},{"sizes":"512x512","type":"image/png","src":"//img1.wsimg.com/is

Timestamp	Bytes transferred	Direction	Data
2025-01-12 00:47:15 UTC	799	OUT	GET /favicon.ico HTTP/1.1 Host: app-metamask.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://app-metamask.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=207d5967-e50e-4f84-9ba1-5e6ba3c996e0; _tccl_visit=207d5967-e50e-4f84-9ba1-5e6ba3c996e0; _scc_session=pc=1&C_TOUCH=2025-01-12T00:47:10.846Z
2025-01-12 00:47:15 UTC	1708	IN	HTTP/1.1 404 Not Found Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.27.2.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/cabin/v27/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alxw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u8w4BMUTPHh30AXC-q.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2>; rel=preload; as=font; crossorigin,<https://fonts [TRUNCATED] Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-fcac51d X-Version: fcac51d X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure Date: Sun, 12 Jan 2025 00:47:15 GMT Connection: close Transfer-Encoding: chunked
2025-01-12 00:47:15 UTC	14676	IN	Data Raw: 66 36 32 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 61 70 70 2d 6d 65 74 61 6d 61 73 6b 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 6d 65 74 Data Ascii: f62f<!DOCTYPE html><html lang="en-US"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>app-metamask</title><meta name="author" content="app-met
2025-01-12 00:47:16 UTC	16384	IN	Data Raw: 2f 2f 73 63 72 69 70 74 73 2e 73 69 6c 2e 6f 72 67 2f 4f 46 4c 0a 0a e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 2d 0a 53 49 4c 20 4f 50 45 4e 20 46 4f 4e 54 20 4c 49 43 45 4e 53 45 20 56 65 72 73 69 6f 6e 20 31 2e 31 20 2d 20 32 36 20 46 65 62 72 75 61 72 79 20 32 30 30 37 0a e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 2d 0a 2a Data Ascii: //scripts.sil.org/OFL-SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007-*
2025-01-12 00:47:16 UTC	16384	IN	Data Raw: 69 65 73 4d 65 6e 75 22 20 69 64 3d 22 6e 2d 34 36 37 37 39 34 36 37 38 36 2d 75 74 69 6c 69 74 79 2d 6d 65 6e 75 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 31 20 63 31 2d 31 33 20 63 31 2d 32 78 20 63 31 2d 32 79 20 63 31 2d 73 20 63 31 2d 74 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 32 76 20 63 31 2d 64 20 63 31 2d 32 7a 20 63 31 2d 33 30 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 73 70 61 6e 20 64 61 74 61 2d 75 78 3d 22 45 6c 65 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 73 70 61 6e 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 Data Ascii: iesMenu" id="n-4677946786-utility-menu" class="x-el x-el-div c1-1 c1-2 c1-11 c1-13 c1-2x c1-2y c1-s c1-t c1-b c1-c c1-2v c1-d c1-2z c1-30 c1-e c1-f c1-g"><span data-ux="Element" class="x-el x-el-span c1-1 c1-2 c1-b c1-c c1-d c1-e c1-f c1-g"><div data-ux="
2025-01-12 00:47:16 UTC	15592	IN	Data Raw: 63 31 2d 36 62 20 63 31 2d 31 6e 20 63 31 2d 31 6f 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 2f 75 6c 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 42 6c 6f 63 6b 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 33 75 20 63 31 2d 64 20 63 31 2d 34 6d 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 4d 65 6d 62 65 72 73 68 69 70 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 70 20 64 61 74 61 2d 75 78 3d 22 4d 65 6d 62 65 72 Data Ascii: c1-6b c1-1n c1-1o c1-b c1-c c1-d c1-e c1-f c1-g"></ul><div data-ux="Block" class="x-el x-el-div c1-1 c1-2 c1-b c1-c c1-3u c1-d c1-4m c1-e c1-f c1-g"><div data-ux="Membership" class="x-el x-el-div c1-1 c1-2 c1-b c1-c c1-d c1-e c1-f c1-g"><p data-ux="Member

Timestamp	Bytes transferred	Direction	Data
2025-01-12 00:47:15 UTC	664	OUT	GET /sw.js HTTP/1.1 Host: app-metamask.godaddysites.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://app-metamask.godaddysites.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=207d5967-e50e-4f84-9ba1-5e6ba3c996e0; _tccl_visit=207d5967-e50e-4f84-9ba1-5e6ba3c996e0; _scc_session=pc=1&C_TOUCH=2025-01-12T00:47:10.846Z
2025-01-12 00:47:15 UTC	736	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: application/javascript Vary: Accept-Encoding Server: DPS/2.0.0+sha-fcac51d X-Version: fcac51d X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 48b988ced6304499168345064ff5afca Date: Sun, 12 Jan 2025 00:47:15 GMT Connection: close Transfer-Encoding: chunked
2025-01-12 00:47:15 UTC	15648	IN	Data Raw: 38 30 62 32 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 38 39 35 3a 28 29 3d 3e 7b 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 63 61 63 68 65 61 62 6c 65 2d 72 65 73 70 6f 6e 73 65 3a 36 2e 34 2e 31 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 32 35 39 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 42 3a 28 29 3d 3e 61 7d 29 2c 73 28 39 31 33 29 3b 63 6c 61 73 73 20 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 65 2c 74 29 3d 3e 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 65 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 74 7d 29 29 7d 7d 7d 2c 31 32 35 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 56 3a Data Ascii: 80b2(()=>{"use strict";var e={895:()=>{try{self["workbox:cacheable-response:6.4.1"]&&_()}catch(e){}},259:(e,t,s)=>{s.d(t,{B:()=>a}),s(913);class a{constructor(){this.promise=new Promise(((e,t)=>{this.resolve=e,this.reject=t}))}}},125:(e,t,s)=>{s.d(t,{V:
2025-01-12 00:47:16 UTC	16384	IN	Data Raw: 2c 72 29 2c 72 7d 76 61 72 20 52 3b 52 3d 64 2c 64 3d 7b 2e 2e 2e 52 2c 67 65 74 3a 28 65 2c 74 2c 73 29 3d 3e 5f 28 65 2c 74 29 7c 7c 52 2e 67 65 74 28 65 2c 74 2c 73 29 2c 68 61 73 3a 28 65 2c 74 29 3d 3e 21 21 5f 28 65 2c 74 29 7c 7c 52 2e 68 61 73 28 65 2c 74 29 7d 2c 73 28 35 35 30 29 3b 63 6f 6e 73 74 20 76 3d 22 63 61 63 68 65 2d 65 6e 74 72 69 65 73 22 2c 62 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 55 52 4c 28 65 2c 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 68 61 73 68 3d 22 22 2c 74 2e 68 72 65 66 7d 3b 63 6c 61 73 73 20 78 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 5f 64 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 61 63 68 65 4e 61 6d 65 3d 65 7d 5f 75 70 67 72 61 64 65 44 62 28 65 29 7b Data Ascii: ,r),r}var R;R=d,d={...R,get:(e,t,s)=>_(e,t)\|\|R.get(e,t,s),has:(e,t)=>!!_(e,t)\|\|R.has(e,t)},s(550);const v="cache-entries",b=e=>{const t=new URL(e,location.href);return t.hash="",t.href};class x{constructor(e){this._db=null,this._cacheName=e}_upgradeDb(e){
2025-01-12 00:47:16 UTC	927	IN	Data Raw: 68 65 61 62 6c 65 52 65 73 70 6f 6e 73 65 50 6c 75 67 69 6e 28 7b 73 74 61 74 75 73 65 73 3a 5b 32 30 30 5d 7d 29 5d 7d 29 29 2c 28 30 2c 65 2e 72 65 67 69 73 74 65 72 52 6f 75 74 65 29 28 28 28 7b 72 65 71 75 65 73 74 3a 65 7d 29 3d 3e 22 73 74 79 6c 65 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 7c 7c 22 73 63 72 69 70 74 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 29 2c 6e 65 77 20 74 2e 53 74 61 6c 65 57 68 69 6c 65 52 65 76 61 6c 69 64 61 74 65 28 7b 63 61 63 68 65 4e 61 6d 65 3a 22 73 74 61 74 69 63 2d 72 65 73 6f 75 72 63 65 73 22 2c 70 6c 75 67 69 6e 73 3a 5b 6e 65 77 20 61 2e 43 61 63 68 65 61 62 6c 65 52 65 73 70 6f 6e 73 65 50 6c 75 67 69 6e 28 7b 73 74 61 74 75 73 65 73 3a 5b 32 30 30 5d 7d 29 5d 7d 29 29 2c 28 30 2c 65 2e 72 65 Data Ascii: heableResponsePlugin({statuses:[200]})]})),(0,e.registerRoute)((({request:e})=>"style"===e.destination\|\|"script"===e.destination),new t.StaleWhileRevalidate({cacheName:"static-resources",plugins:[new a.CacheableResponsePlugin({statuses:[200]})]})),(0,e.re

Timestamp	Bytes transferred	Direction	Data
2025-01-12 00:47:24 UTC	1402	OUT	GET /signals/config/282429905966327?v=2.9.179&r=stable&domain=app-metamask.godaddysites.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://app-metamask.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-12 00:47:25 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-SGpJCQFn' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-01-12 00:47:25 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-01-12 00:47:25 UTC	869	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2025-01-12 00:47:25 UTC	15515	IN	Data Raw: 4c 41 49 4d 2c 20 44 41 4d 41 47 45 53 20 4f 52 20 4f 54 48 45 52 20 4c 49 41 42 49 4c 49 54 59 2c 20 57 48 45 54 48 45 52 0a 2a 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 45 2c 20 41 52 49 53 49 4e 47 20 46 52 4f 4d 2c 20 4f 55 54 20 4f 46 20 4f 52 20 49 4e 0a 2a 20 43 4f 4e 4e 45 43 54 49 4f 4e 20 57 49 54 48 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 4f 52 20 54 48 45 20 55 53 45 20 4f 52 20 4f 54 48 45 52 20 44 45 41 4c 49 4e 47 53 20 49 4e 20 54 48 45 20 53 4f 46 54 57 41 52 45 2e 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: LAIM, DAMAGES OR OTHER LIABILITY, WHETHER* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.*/(function(a,b,c,d){var e={exports:{}};e.exports;(function()
2025-01-12 00:47:25 UTC	1500	IN	Data Raw: 69 6f 6e 20 67 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 Data Ascii: ion g(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function h(a,b){if(!a)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a
2025-01-12 00:47:25 UTC	14884	IN	Data Raw: 41 72 72 61 79 2e 66 72 6f 6d 28 63 2e 76 61 6c 75 65 73 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 61 3d 67 28 61 2c 62 29 3b 76 61 72 20 64 3d 22 22 3b 62 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6a 28 61 29 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 2e 6c 6f 63 61 6c 65 43 6f 6d 70 61 72 65 28 62 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 29 7d 29 3b 62 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 70 72 65 66 69 78 2c 65 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 65 62 70 5f 70 61 74 68 3b 61 3d 61 2e 70 61 72 61 6d 56 61 6c 75 65 21 3d 6e 75 6c 6c 3f 61 2e Data Ascii: Array.from(c.values())}function h(a,b){a=g(a,b);var d="";b=[].concat(j(a)).sort(function(a,b){return a.paramConfig.query.localeCompare(b.paramConfig.query)});b.forEach(function(a){var b=a.paramConfig.prefix,e=a.paramConfig.ebp_path;a=a.paramValue!=null?a.
2025-01-12 00:47:25 UTC	1500	IN	Data Raw: 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 Data Ascii: on(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded
2025-01-12 00:47:26 UTC	14884	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 6f 28 61 2e 69 64 29 3f 7b 7d 3a 7b 69 61 62 3a 31 7d 7d 29 3b 67 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 21 6f 28 62 29 29 72 65 74 75 72 6e 3b 62 3d 61 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2b 22 5f 22 2b 44 61 74 65 2e 6e 6f 77 28 29 2b 22 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 62 3d 6c 28 62 29 3b 76 61 72 20 64 3d 63 2e 67 65 74 28 22 65 69 64 22 29 3b 69 66 28 64 21 3d 6e 75 6c 6c 26 26 64 21 3d 3d 22 22 7c 7c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 63 2e 61 70 70 65 6e 64 28 22 61 70 63 6d 5f 65 69 64 22 2c 22 31 22 29 3b 64 3d 22 70 63 6d 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 22 2b 62 3b 63 2e 61 70 70 65 6e 64 28 22 65 69 64 Data Ascii: function(a,b){return!o(a.id)?{}:{iab:1}});g.listen(function(b,c){if(!o(b))return;b=a.location.origin+"_"+Date.now()+"_"+Math.random();b=l(b);var d=c.get("eid");if(d!=null&&d!==""\|\|b==null)return;c.append("apcm_eid","1");d="pcm_plugin-set_"+b;c.append("eid
2025-01-12 00:47:26 UTC	1500	IN	Data Raw: 76 65 72 73 69 6f 6e 29 7d 63 61 74 63 68 28 61 29 7b 66 3d 21 30 2c 67 3d 61 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 65 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 66 29 74 68 72 6f 77 20 67 7d 7d 75 2e 73 65 74 28 71 2c 53 74 72 69 6e 67 28 62 29 29 3b 78 28 64 2c 75 2c 73 29 7d 29 5b 22 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6d 65 73 73 61 67 65 3d 22 5b 43 6c 69 65 6e 74 48 69 6e 74 20 45 72 72 6f 72 5d 22 2b 61 2e 6d 65 73 73 61 67 65 2c 6a 28 61 29 7d 29 3b 68 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 64 2e 67 65 74 50 69 78 65 6c 28 62 29 3b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 62 3d 64 2e 70 6c 75 67 69 Data Ascii: version)}catch(a){f=!0,g=a}finally{try{!e&&h["return"]&&h["return"]()}finally{if(f)throw g}}u.set(q,String(b));x(d,u,s)})["catch"](function(a){a.message="[ClientHint Error]"+a.message,j(a)});h.listen(function(b){b=d.getPixel(b);if(b==null)return;b=d.plugi
2025-01-12 00:47:26 UTC	14884	IN	Data Raw: 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 Data Ascii: led correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbe
2025-01-12 00:47:26 UTC	1491	IN	Data Raw: 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 29 2c 67 3d 21 30 2c 68 28 29 29 3a 73 2e 69 63 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 74 65 3d 3d 3d 22 63 6c 6f 73 65 64 22 26 26 28 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 72 65 65 7a 65 22 2c 68 29 2c 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 68 69 64 65 22 2c 68 29 29 7d 3b 73 2e 63 72 65 61 74 65 44 61 74 61 43 68 61 6e 6e 65 6c 28 22 66 6f 6f 22 29 7d 7d 63 61 74 63 68 28 61 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 22 6d 65 73 73 61 67 65 22 29 26 26 28 61 2e 6d 65 73 73 61 67 65 3d Data Ascii: w Date().getTime()),g=!0,h()):s.iceConnectionState==="closed"&&(a.removeEventListener("freeze",h),a.removeEventListener("pagehide",h))};s.createDataChannel("foo")}}catch(a){a instanceof Error&&Object.prototype.hasOwnProperty.call(a,"message")&&(a.message=

Timestamp	Bytes transferred	Direction	Data
2025-01-12 00:47:24 UTC	544	OUT	GET /assets/reamaze.js HTTP/1.1 Host: cdn.reamaze.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://app-metamask.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-12 00:47:24 UTC	317	IN	HTTP/1.1 200 OK Date: Sun, 12 Jan 2025 00:47:24 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-encoding last-modified: Thu, 09 Jan 2025 20:05:43 GMT etag: W/"3329b-62b4b80c1f3c0" CF-Cache-Status: HIT Age: 6395 Server: cloudflare CF-RAY: 900922941e3bf797-EWR
2025-01-12 00:47:24 UTC	1052	IN	Data Raw: 37 65 36 31 0d 0a 66 75 6e 63 74 69 6f 6e 20 6f 75 69 62 6f 75 6e 63 65 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 3f 74 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 61 29 2c 66 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 65 2e 63 6c 69 65 6e 74 59 3e 6c 7c 7c 28 68 3d 73 65 74 54 69 6d 65 6f 75 74 28 6f 2c 75 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 68 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 29 2c 68 3d 6e 75 6c 6c 29 7d 66 75 6e Data Ascii: 7e61function ouibounce(e,t){"use strict";function n(e,t){return void 0===e?t:e}function r(){f.addEventListener("mouseleave",a),f.addEventListener("mouseenter",i)}function a(e){e.clientY>l\|\|(h=setTimeout(o,u))}function i(){h&&(clearTimeout(h),h=null)}fun
2025-01-12 00:47:24 UTC	1369	IN	Data Raw: 61 72 6b 65 64 2e 52 65 6e 64 65 72 65 72 3b 74 3f 72 3d 21 28 6e 3d 7b 65 6c 65 6d 65 6e 74 73 3a 5b 22 73 70 61 6e 22 5d 2c 61 74 74 72 69 62 75 74 65 73 3a 7b 73 70 61 6e 3a 5b 22 63 6c 61 73 73 22 5d 7d 7d 29 3a 28 6e 3d 7b 65 6c 65 6d 65 6e 74 73 3a 5b 5d 7d 2c 72 3d 21 30 29 3b 76 61 72 20 69 3d 6e 65 77 20 53 61 6e 69 74 69 7a 65 28 6e 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6f 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6d 61 72 6b 65 64 28 65 2c 7b 73 61 6e 69 74 69 7a 65 3a 72 2c 67 66 6d 3a 21 30 2c 72 65 6e 64 65 72 65 72 3a 61 2c 73 69 6c 65 6e 74 3a 21 30 7d 29 3b 76 61 72 20 73 3d 69 2e 63 6c 65 61 6e 5f 6e 6f 64 65 28 6f 29 2c 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d Data Ascii: arked.Renderer;t?r=!(n={elements:["span"],attributes:{span:["class"]}}):(n={elements:[]},r=!0);var i=new Sanitize(n),o=document.createElement("div");o.innerHTML=marked(e,{sanitize:r,gfm:!0,renderer:a,silent:!0});var s=i.clean_node(o),p=document.createElem
2025-01-12 00:47:24 UTC	1369	IN	Data Raw: 30 29 3b 6e 26 26 39 3c 28 69 2a 3d 32 29 26 26 28 69 2d 3d 39 29 2c 74 2b 3d 69 2c 6e 3d 21 6e 7d 72 65 74 75 72 6e 20 74 25 31 30 3d 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6c 6f 72 46 72 6f 6d 47 64 43 6f 6c 6f 72 50 61 63 6b 28 65 29 7b 72 65 74 75 72 6e 20 63 6f 6c 6f 72 50 61 63 6b 43 6f 6e 66 69 67 3d 7b 22 30 30 30 22 3a 22 23 66 66 64 37 30 30 22 2c 22 30 30 31 22 3a 22 23 66 35 62 35 30 30 22 2c 22 30 30 32 22 3a 22 23 66 66 39 63 30 30 22 2c 22 30 30 33 22 3a 22 23 65 65 36 36 31 62 22 2c 22 30 30 34 22 3a 22 23 63 38 34 38 33 35 22 2c 22 30 30 35 22 3a 22 23 64 32 32 66 32 35 22 2c 22 30 30 36 22 3a 22 23 61 30 32 36 32 66 22 2c 22 30 30 37 22 3a 22 23 66 32 36 31 39 33 22 2c 22 30 30 38 22 3a 22 23 64 61 32 32 35 65 22 2c 22 30 30 Data Ascii: 0);n&&9<(i*=2)&&(i-=9),t+=i,n=!n}return t%10==0}function getColorFromGdColorPack(e){return colorPackConfig={"000":"#ffd700","001":"#f5b500","002":"#ff9c00","003":"#ee661b","004":"#c84835","005":"#d22f25","006":"#a0262f","007":"#f26193","008":"#da225e","00
2025-01-12 00:47:24 UTC	1369	IN	Data Raw: 74 75 72 6e 20 52 65 61 63 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 2c 5f 65 78 74 65 6e 64 73 28 7b 73 65 74 54 69 6d 65 6f 75 74 3a 54 69 6d 65 72 4d 69 78 69 6e 2e 73 65 74 54 69 6d 65 6f 75 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 3a 54 69 6d 65 72 4d 69 78 69 6e 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 3a 54 69 6d 65 72 4d 69 78 69 6e 2e 73 65 74 49 6e 74 65 72 76 61 6c 2e 62 69 6e 64 28 74 68 69 73 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 3a 54 69 6d 65 72 4d 69 78 69 6e 2e 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 2e 62 69 6e 64 28 74 68 69 73 29 2c 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 54 69 6d 65 72 4d 69 78 69 6e 2e 73 65 74 49 6d 6d Data Ascii: turn React.createElement(a,_extends({setTimeout:TimerMixin.setTimeout.bind(this),clearTimeout:TimerMixin.clearTimeout.bind(this),setInterval:TimerMixin.setInterval.bind(this),clearInterval:TimerMixin.clearInterval.bind(this),setImmediate:TimerMixin.setImm
2025-01-12 00:47:24 UTC	1369	IN	Data Raw: 63 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 28 65 2c 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 30 3c 3d 74 2e 69 6e 64 65 78 4f 66 28 72 29 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 72 29 26 26 28 6e 5b 72 5d 3d 65 5b 72 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 4a 53 4f 4e 3b 77 69 6e 64 6f 77 2e 5f 6f 72 69 67 69 6e 61 6c 5f 65 78 70 6f 72 74 3d 77 69 6e 64 6f 77 5b 22 65 78 70 6f 72 74 22 5d 2c 77 69 6e 64 6f 77 2e 5f 6f 72 69 67 69 6e 61 6c 5f 65 78 70 6f 72 74 73 3d 77 69 6e 64 6f 77 2e 65 78 70 6f 72 74 73 2c 77 69 6e 64 6f 77 2e 5f 6f 72 69 67 69 6e 61 6c 5f 72 65 71 75 69 72 65 3d 77 69 6e 64 6f 77 2e 72 65 71 Data Ascii: ctWithoutProperties(e,t){var n={};for(var r in e)0<=t.indexOf(r)\|\|Object.prototype.hasOwnProperty.call(e,r)&&(n[r]=e[r]);return n}var JSON;window._original_export=window["export"],window._original_exports=window.exports,window._original_require=window.req
2025-01-12 00:47:24 UTC	1369	IN	Data Raw: 69 3b 6e 2b 3d 31 29 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 65 70 5b 6e 5d 26 26 28 61 3d 73 74 72 28 72 3d 72 65 70 5b 6e 5d 2c 70 29 29 26 26 6f 2e 70 75 73 68 28 71 75 6f 74 65 28 72 29 2b 28 67 61 70 3f 22 3a 20 22 3a 22 3a 22 29 2b 61 29 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 70 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 70 2c 72 29 26 26 28 61 3d 73 74 72 28 72 2c 70 29 29 26 26 6f 2e 70 75 73 68 28 71 75 6f 74 65 28 72 29 2b 28 67 61 70 3f 22 3a 20 22 3a 22 3a 22 29 2b 61 29 3b 72 65 74 75 72 6e 20 61 3d 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 3f 22 7b 7d 22 3a 67 61 70 3f 22 7b 5c 6e 22 2b 67 61 70 2b 6f 2e 6a 6f 69 6e 28 22 2c 5c 6e 22 2b 67 61 70 29 2b 22 5c Data Ascii: i;n+=1)"string"==typeof rep[n]&&(a=str(r=rep[n],p))&&o.push(quote(r)+(gap?": ":":")+a);else for(r in p)Object.prototype.hasOwnProperty.call(p,r)&&(a=str(r,p))&&o.push(quote(r)+(gap?": ":":")+a);return a=0===o.length?"{}":gap?"{\n"+gap+o.join(",\n"+gap)+"\
2025-01-12 00:47:24 UTC	1369	IN	Data Raw: 4f 4e 2e 70 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 65 78 74 2c 72 65 76 69 76 65 72 29 7b 66 75 6e 63 74 69 6f 6e 20 77 61 6c 6b 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 61 3d 65 5b 74 5d 3b 69 66 28 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 29 66 6f 72 28 6e 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 6e 29 26 26 28 28 72 3d 77 61 6c 6b 28 61 2c 6e 29 29 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 5b 6e 5d 3d 72 3a 64 65 6c 65 74 65 20 61 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 72 65 76 69 76 65 72 2e 63 61 6c 6c 28 65 2c 74 2c 61 29 7d 76 61 72 20 6a 3b 69 66 28 74 65 78 74 3d 53 74 72 69 6e 67 28 74 65 78 74 29 2c 63 78 2e 6c 61 73 74 49 6e Data Ascii: ON.parse=function(text,reviver){function walk(e,t){var n,r,a=e[t];if(a&&"object"==typeof a)for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&((r=walk(a,n))!==undefined?a[n]=r:delete a[n]);return reviver.call(e,t,a)}var j;if(text=String(text),cx.lastIn
2025-01-12 00:47:24 UTC	1369	IN	Data Raw: 75 72 6e 2d 31 3c 68 65 2e 69 6e 41 72 72 61 79 28 65 2c 6e 29 21 3d 3d 72 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 66 6f 72 28 3b 28 65 3d 65 5b 74 5d 29 26 26 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 65 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 7a 65 29 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 5b 74 5d 3d 21 30 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 72 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 69 29 2c 45 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: urn-1<he.inArray(e,n)!==r})}function n(e,t){for(;(e=e[t])&&1!==e.nodeType;);return e}function c(e){var n={};return he.each(e.match(ze)\|\|[],function(e,t){n[t]=!0}),n}function a(){re.addEventListener?(re.removeEventListener("DOMContentLoaded",i),E.removeEve
2025-01-12 00:47:24 UTC	1369	IN	Data Raw: 69 3f 68 65 2e 63 61 63 68 65 3a 65 2c 73 3d 69 3f 65 5b 68 65 2e 65 78 70 61 6e 64 6f 5d 3a 68 65 2e 65 78 70 61 6e 64 6f 3b 69 66 28 6f 5b 73 5d 29 7b 69 66 28 74 26 26 28 72 3d 6e 3f 6f 5b 73 5d 3a 6f 5b 73 5d 2e 64 61 74 61 29 29 7b 61 3d 28 74 3d 68 65 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 63 6f 6e 63 61 74 28 68 65 2e 6d 61 70 28 74 2c 68 65 2e 63 61 6d 65 6c 43 61 73 65 29 29 3a 74 20 69 6e 20 72 3f 5b 74 5d 3a 28 74 3d 68 65 2e 63 61 6d 65 6c 43 61 73 65 28 74 29 29 69 6e 20 72 3f 5b 74 5d 3a 74 2e 73 70 6c 69 74 28 22 20 22 29 29 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 61 2d 2d 3b 29 64 65 6c 65 74 65 20 72 5b 74 5b 61 5d 5d 3b 69 66 28 6e 3f 21 6c 28 72 29 3a 21 68 65 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 72 29 29 72 65 74 75 72 6e 7d Data Ascii: i?he.cache:e,s=i?e[he.expando]:he.expando;if(o[s]){if(t&&(r=n?o[s]:o[s].data)){a=(t=he.isArray(t)?t.concat(he.map(t,he.camelCase)):t in r?[t]:(t=he.camelCase(t))in r?[t]:t.split(" ")).length;for(;a--;)delete r[t[a]];if(n?!l(r):!he.isEmptyObject(r))return}
2025-01-12 00:47:24 UTC	1369	IN	Data Raw: 29 26 26 28 65 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 65 2e 63 68 65 63 6b 65 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 2c 6e 2c 72 2c 61 29 7b 66 6f 72 28 76 61 72 20 69 2c 6f 2c 73 2c 70 2c 6c 2c 63 2c 75 2c 64 3d 65 2e 6c 65 6e 67 74 68 2c 68 3d 67 28 74 29 2c 66 3d 5b 5d 2c 6d 3d 30 3b 6d 3c 64 3b 6d 2b 2b 29 69 66 28 28 6f 3d 65 5b 6d 5d 29 7c 7c 30 3d 3d 3d 6f 29 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 68 65 2e 74 79 70 65 28 6f 29 29 68 65 2e 6d 65 72 67 65 28 66 2c 6f 2e 6e 6f 64 65 54 79 70 65 3f 5b 6f 5d 3a 6f 29 3b 65 6c 73 65 20 69 66 28 59 65 2e 74 65 73 74 28 6f 29 29 7b 66 6f 72 28 70 3d 70 7c 7c 68 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 3d 28 48 Data Ascii: )&&(e.defaultChecked=e.checked)}function m(e,t,n,r,a){for(var i,o,s,p,l,c,u,d=e.length,h=g(t),f=[],m=0;m<d;m++)if((o=e[m])\|\|0===o)if("object"===he.type(o))he.merge(f,o.nodeType?[o]:o);else if(Ye.test(o)){for(p=p\|\|h.appendChild(t.createElement("div")),l=(H

Timestamp	Bytes transferred	Direction	Data
2025-01-12 00:47:25 UTC	978	OUT	GET /m/api/reamaze/v2/customers/auth?brand=0e937390-542d-4cdf-8da5-816f67420c2f HTTP/1.1 Host: app-metamask.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://app-metamask.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=207d5967-e50e-4f84-9ba1-5e6ba3c996e0; _tccl_visit=207d5967-e50e-4f84-9ba1-5e6ba3c996e0; _scc_session=pc=1&C_TOUCH=2025-01-12T00:47:10.846Z; _ga_BF2FDR6KMM=GS1.1.1736642842.1.0.1736642842.0.0.0; _ga=GA1.1.1181841436.1736642843; cookie_warning_dismissed=true; cookie_terms_accepted=true
2025-01-12 00:47:25 UTC	631	IN	HTTP/1.1 200 OK date: Sun, 12 Jan 2025 00:47:25 GMT content-type: application/json; charset=utf-8 cache-control: max-age=0, private, must-revalidate content-security-policy: default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: cid:; connect-src https: wss:; worker-src 'self' blob: ; child-src 'self' https: blob: ; etag: W/"44136fa355b3678a1146ad16f7e8649e" Vary: Accept-Encoding Server: DPS/2.0.0+sha-fcac51d X-Version: fcac51d X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure Connection: close Transfer-Encoding: chunked
2025-01-12 00:47:25 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Timestamp	Bytes transferred	Direction	Data
2025-01-12 00:47:26 UTC	624	OUT	GET /data/brands/0e937390-542d-4cdf-8da5-816f67420c2f/ping HTTP/1.1 Host: cdn.reamaze.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://app-metamask.godaddysites.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://app-metamask.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-12 00:47:26 UTC	895	IN	HTTP/1.1 200 OK Date: Sun, 12 Jan 2025 00:47:26 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=300, public, must-revalidate vary: Accept,Accept-Encoding access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubDomains access-control-max-age: 1728000 x-request-id: 5bf175ee-1b0f-498e-8370-55429149e641 access-control-allow-methods: POST, GET, OPTIONS, PUT x-runtime: 0.053211 x-content-type-options: nosniff content-security-policy: default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: cid:; connect-src https: wss:; worker-src 'self' blob: ; child-src 'self' https: blob: ; etag: W/"fc3cc3e1711d2080b6dbaca8257aa178" status: 200 OK CF-Cache-Status: MISS Server: cloudflare CF-RAY: 9009229eaa6a18ee-EWR
2025-01-12 00:47:26 UTC	474	IN	Data Raw: 33 30 34 36 0d 0a 7b 22 6e 61 6d 65 22 3a 22 61 70 70 2d 6d 65 74 61 6d 61 73 6b 22 2c 22 70 72 65 66 65 72 65 6e 63 65 73 22 3a 7b 22 6b 62 5f 6d 65 74 61 5f 72 65 64 75 63 65 5f 73 65 6f 22 3a 66 61 6c 73 65 2c 22 6b 62 5f 68 65 61 64 65 72 5f 62 67 5f 63 6f 6c 6f 72 22 3a 22 23 31 30 61 32 63 35 22 2c 22 6b 62 5f 68 65 61 64 65 72 5f 66 6f 6e 74 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 6b 62 5f 68 65 61 64 65 72 5f 75 72 6c 22 3a 22 2f 22 2c 22 6b 62 5f 68 65 61 64 65 72 5f 73 68 6f 77 5f 62 72 61 6e 64 5f 6c 6f 67 6f 22 3a 66 61 6c 73 65 2c 22 6b 62 5f 68 65 61 64 65 72 5f 6c 6f 67 6f 5f 75 72 6c 22 3a 22 22 2c 22 6b 62 5f 6c 61 6e 67 22 3a 22 22 2c 22 6b 62 5f 68 65 72 6f 5f 62 67 5f 63 6f 6c 6f 72 22 3a 22 23 31 30 61 32 63 35 22 2c Data Ascii: 3046{"name":"app-metamask","preferences":{"kb_meta_reduce_seo":false,"kb_header_bg_color":"#10a2c5","kb_header_font_color":"#ffffff","kb_header_url":"/","kb_header_show_brand_logo":false,"kb_header_logo_url":"","kb_lang":"","kb_hero_bg_color":"#10a2c5",
2025-01-12 00:47:26 UTC	1369	IN	Data Raw: 35 35 35 35 35 35 22 2c 22 6b 62 5f 74 69 74 6c 65 5f 6c 69 67 68 74 5f 63 6f 6c 6f 72 22 3a 22 23 46 42 46 42 46 42 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 6d 65 74 61 5f 68 74 6d 6c 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 68 65 61 64 65 72 5f 68 74 6d 6c 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 66 6f 6f 74 65 72 5f 68 74 6d 6c 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 63 73 73 5f 73 74 79 6c 65 73 68 65 65 74 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 67 6f 6f 67 6c 65 5f 61 6e 61 6c 79 74 69 63 73 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 67 61 34 5f 75 6e 69 76 65 72 73 61 6c 22 3a 22 22 2c 22 6b 62 5f 61 6c 6c 6f 77 5f 66 65 65 64 62 61 63 6b 22 3a 66 61 6c 73 65 2c 22 6b 62 5f 65 6d 62 65 64 5f 75 72 6c 22 3a 22 22 2c Data Ascii: 555555","kb_title_light_color":"#FBFBFB","kb_custom_meta_html":"","kb_custom_header_html":"","kb_custom_footer_html":"","kb_custom_css_stylesheet":"","kb_custom_google_analytics":"","kb_custom_ga4_universal":"","kb_allow_feedback":false,"kb_embed_url":"",
2025-01-12 00:47:26 UTC	1369	IN	Data Raw: 74 65 67 6f 72 69 7a 65 64 5f 74 6f 70 69 63 22 3a 22 4d 69 73 63 65 6c 6c 61 6e 65 6f 75 73 22 2c 22 74 72 61 6e 73 5f 61 72 74 69 63 6c 65 5f 68 65 6c 70 66 75 6c 22 3a 22 57 61 73 20 74 68 69 73 20 61 72 74 69 63 6c 65 20 68 65 6c 70 66 75 6c 3f 22 2c 22 74 72 61 6e 73 5f 61 72 74 69 63 6c 65 5f 64 6f 77 6e 6c 6f 61 64 73 22 3a 22 44 6f 77 6e 6c 6f 61 64 73 22 2c 22 74 72 61 6e 73 5f 63 6f 6e 74 61 63 74 5f 75 73 5f 68 65 61 64 65 72 22 3a 22 43 6f 6e 74 61 63 74 20 55 73 22 2c 22 74 72 61 6e 73 5f 63 6f 6e 74 61 63 74 5f 75 73 5f 70 72 6f 6d 70 74 22 3a 22 43 6f 6e 74 61 63 74 20 55 73 20 44 69 72 65 63 74 6c 79 22 2c 22 74 72 61 6e 73 5f 63 6f 6e 74 61 63 74 5f 75 73 5f 6e 65 77 5f 6d 65 73 73 61 67 65 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 3a 22 Data Ascii: tegorized_topic":"Miscellaneous","trans_article_helpful":"Was this article helpful?","trans_article_downloads":"Downloads","trans_contact_us_header":"Contact Us","trans_contact_us_prompt":"Contact Us Directly","trans_contact_us_new_message_confirmation":"
2025-01-12 00:47:26 UTC	1369	IN	Data Raw: 63 6f 72 64 73 2e 22 2c 22 74 72 61 6e 73 5f 63 68 61 74 5f 73 74 61 66 66 5f 62 75 73 79 22 3a 22 57 65 20 61 70 6f 6c 6f 67 69 7a 65 20 66 6f 72 20 74 68 65 20 77 61 69 74 2c 20 77 65 20 6d 61 79 20 62 65 20 62 75 73 79 20 77 69 74 68 20 6f 74 68 65 72 20 63 75 73 74 6f 6d 65 72 73 20 72 69 67 68 74 20 6e 6f 77 2e 22 2c 22 74 72 61 6e 73 5f 63 68 61 74 5f 73 74 61 66 66 5f 62 75 73 79 5f 66 6f 6c 6c 6f 77 5f 75 70 22 3a 22 49 66 20 79 6f 75 27 76 65 20 65 6e 74 65 72 65 64 20 79 6f 75 72 20 63 6f 6e 74 61 63 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 77 65 27 6c 6c 20 66 6f 6c 6c 6f 77 20 75 70 20 77 69 74 68 20 79 6f 75 20 69 66 20 79 6f 75 20 67 6f 20 6f 66 66 6c 69 6e 65 2e 22 2c 22 74 72 61 6e 73 5f 63 68 61 74 5f 61 6c 6c 5f 73 74 61 66 66 5f 61 Data Ascii: cords.","trans_chat_staff_busy":"We apologize for the wait, we may be busy with other customers right now.","trans_chat_staff_busy_follow_up":"If you've entered your contact information, we'll follow up with you if you go offline.","trans_chat_all_staff_a
2025-01-12 00:47:26 UTC	1369	IN	Data Raw: 73 74 61 66 66 20 72 65 73 70 6f 6e 73 65 20 62 65 6c 6f 77 2e 22 2c 22 74 72 61 6e 73 5f 64 69 73 63 75 73 73 69 6f 6e 5f 6c 6f 67 69 6e 5f 70 72 6f 6d 70 74 22 3a 22 50 6c 65 61 73 65 20 6c 6f 67 20 69 6e 20 74 6f 20 72 65 70 6c 79 2e 22 2c 22 74 72 61 6e 73 5f 64 69 73 63 75 73 73 69 6f 6e 5f 63 6f 6d 6d 65 6e 74 5f 63 6f 75 6e 74 22 3a 22 7b 25 20 69 66 20 63 6f 75 6e 74 20 5c 75 30 30 33 65 20 30 20 25 7d 7b 7b 20 63 6f 75 6e 74 20 7c 20 70 6c 75 72 61 6c 69 7a 65 3a 20 27 64 69 73 63 75 73 73 69 6f 6e 20 63 6f 6d 6d 65 6e 74 27 7d 7d 7b 25 20 65 6c 73 65 20 25 7d 4e 6f 20 52 65 70 6c 69 65 73 20 53 6f 20 46 61 72 7b 25 20 65 6e 64 69 66 20 25 7d 22 2c 22 74 72 61 6e 73 5f 73 75 62 6a 65 63 74 22 3a 22 53 75 62 6a 65 63 74 22 2c 22 74 72 61 6e 73 5f Data Ascii: staff response below.","trans_discussion_login_prompt":"Please log in to reply.","trans_discussion_comment_count":"{% if count \u003e 0 %}{{ count \| pluralize: 'discussion comment'}}{% else %}No Replies So Far{% endif %}","trans_subject":"Subject","trans_
2025-01-12 00:47:26 UTC	1369	IN	Data Raw: 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 79 6f 75 20 74 6f 20 70 72 6f 63 65 65 64 3a 22 2c 22 74 72 61 6e 73 5f 70 6f 70 75 70 5f 6e 65 77 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 70 72 6f 6d 70 74 22 3a 22 53 65 6e 64 20 61 20 4d 65 73 73 61 67 65 22 2c 22 74 72 61 6e 73 5f 70 6f 70 75 70 5f 6e 65 77 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 6f 6f 6f 5f 70 72 6f 6d 70 74 22 3a 22 4c 65 61 76 65 20 41 20 4d 65 73 73 61 67 65 22 2c 22 74 72 61 6e 73 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 65 6e 64 65 64 22 3a 22 54 68 69 73 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 68 61 73 20 65 6e 64 65 64 2e 20 50 6c 65 61 73 65 20 73 74 61 72 74 20 61 20 6e 65 77 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 62 65 6c 6f 77 2e 22 2c 22 74 72 61 6e 73 5f 67 Data Ascii: information from you to proceed:","trans_popup_new_conversation_prompt":"Send a Message","trans_popup_new_conversation_ooo_prompt":"Leave A Message","trans_conversation_ended":"This conversation has ended. Please start a new conversation below.","trans_g
2025-01-12 00:47:26 UTC	1369	IN	Data Raw: 6e 67 65 72 20 77 61 6e 74 20 74 68 65 73 65 20 65 6d 61 69 6c 73 3f 22 2c 22 74 72 61 6e 73 5f 75 6e 73 75 62 73 63 72 69 62 65 5f 74 69 74 6c 65 22 3a 22 55 6e 73 75 62 73 63 72 69 62 65 22 2c 22 74 72 61 6e 73 5f 75 6e 73 75 62 73 63 72 69 62 65 5f 6d 65 73 73 61 67 65 22 3a 22 59 6f 75 20 68 61 76 65 20 62 65 65 6e 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 75 6e 73 75 62 73 63 72 69 62 65 64 20 66 72 6f 6d 20 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 72 65 61 63 68 6f 75 74 73 2e 22 2c 22 74 72 61 6e 73 5f 68 75 62 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 5f 68 65 61 64 65 72 22 3a 22 52 65 63 65 6e 74 20 43 6f 6e 76 65 72 73 61 74 69 6f 6e 73 22 2c 22 74 72 61 6e 73 5f 68 75 62 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 5f 62 75 74 74 6f 6e 5f 74 65 78 Data Ascii: nger want these emails?","trans_unsubscribe_title":"Unsubscribe","trans_unsubscribe_message":"You have been successfully unsubscribed from our personal reachouts.","trans_hub_conversations_header":"Recent Conversations","trans_hub_conversations_button_tex
2025-01-12 00:47:26 UTC	1369	IN	Data Raw: 6f 6e 5f 62 61 63 6b 22 3a 22 42 61 63 6b 22 2c 22 74 72 61 6e 73 5f 6e 61 76 69 67 61 74 69 6f 6e 5f 68 6f 6d 65 22 3a 22 48 6f 6d 65 22 2c 22 74 72 61 6e 73 5f 61 72 69 61 5f 73 65 61 72 63 68 5f 72 65 73 75 6c 74 73 22 3a 22 53 65 61 72 63 68 20 52 65 73 75 6c 74 73 22 2c 22 74 72 61 6e 73 5f 61 72 69 61 5f 63 6c 6f 73 65 5f 73 68 6f 75 74 62 6f 78 22 3a 22 43 6c 6f 73 65 20 53 68 6f 75 74 62 6f 78 22 2c 22 74 72 61 6e 73 5f 68 65 6c 6c 6f 5f 62 6f 74 5f 72 65 73 70 6f 6e 73 65 5f 74 65 78 74 22 3a 22 48 69 21 20 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 20 61 6e 64 20 64 6f 6e 27 74 20 6c 65 61 76 65 20 6f 75 74 20 61 6e 79 20 64 65 74 61 69 6c 73 2e 20 54 68 69 73 20 77 69 6c 6c 20 68 65 6c 70 20 67 65 74 20 79 6f Data Ascii: on_back":"Back","trans_navigation_home":"Home","trans_aria_search_results":"Search Results","trans_aria_close_shoutbox":"Close Shoutbox","trans_hello_bot_response_text":"Hi! Please enter your question and don't leave out any details. This will help get yo
2025-01-12 00:47:26 UTC	1369	IN	Data Raw: 75 65 73 74 69 6f 6e 73 20 68 65 72 65 20 69 66 20 79 6f 75 20 68 61 76 65 20 74 68 65 6d 2e 22 2c 22 74 72 61 6e 73 5f 62 6f 74 5f 72 65 6d 69 6e 64 5f 74 65 78 74 22 3a 22 57 65 20 68 61 76 65 6e e2 80 99 74 20 68 65 61 72 64 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 61 20 77 68 69 6c 65 2e 20 44 6f 20 79 6f 75 20 68 61 76 65 20 61 6e 79 20 71 75 65 73 74 69 6f 6e 73 3f 20 50 6c 65 61 73 65 20 6c 65 74 20 75 73 20 6b 6e 6f 77 20 69 66 20 79 6f 75 e2 80 99 64 20 6c 69 6b 65 20 74 6f 20 74 61 6c 6b 20 74 6f 20 61 20 68 75 6d 61 6e 20 69 6e 73 74 65 61 64 2e 22 2c 22 74 72 61 6e 73 5f 62 6f 74 5f 72 65 73 6f 6c 76 65 64 5f 74 65 78 74 22 3a 22 54 68 61 6e 6b 20 79 6f 75 2e 20 54 68 69 73 20 63 68 61 74 20 69 73 20 6e 6f 77 20 65 6e 64 65 64 2e 22 2c 22 74 72 Data Ascii: uestions here if you have them.","trans_bot_remind_text":"We havent heard from you in a while. Do you have any questions? Please let us know if youd like to talk to a human instead.","trans_bot_resolved_text":"Thank you. This chat is now ended.","tr
2025-01-12 00:47:26 UTC	940	IN	Data Raw: 22 74 72 61 6e 73 5f 73 79 73 74 65 6d 5f 75 6e 64 65 72 5f 6d 61 69 6e 74 65 6e 61 6e 63 65 22 3a 22 55 6e 64 65 72 20 4d 61 69 6e 74 65 6e 61 6e 63 65 22 2c 22 74 72 61 6e 73 5f 73 79 73 74 65 6d 5f 70 6c 61 6e 6e 65 64 22 3a 22 50 6c 61 6e 6e 65 64 22 2c 22 74 72 61 6e 73 5f 76 69 64 65 6f 5f 70 72 6f 6d 70 74 5f 74 65 78 74 22 3a 22 57 65 27 64 20 6c 69 6b 65 20 74 6f 20 73 74 61 72 74 20 61 20 76 69 64 65 6f 20 63 61 6c 6c 20 77 69 74 68 20 79 6f 75 21 22 2c 22 74 72 61 6e 73 5f 76 69 64 65 6f 5f 61 6e 73 77 65 72 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 41 6e 73 77 65 72 22 2c 22 74 72 61 6e 73 5f 76 69 64 65 6f 5f 64 65 63 6c 69 6e 65 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 44 65 63 6c 69 6e 65 22 7d 2c 22 69 6e 4f 66 66 69 63 65 22 3a 74 Data Ascii: "trans_system_under_maintenance":"Under Maintenance","trans_system_planned":"Planned","trans_video_prompt_text":"We'd like to start a video call with you!","trans_video_answer_button_text":"Answer","trans_video_decline_button_text":"Decline"},"inOffice":t