Edit tour

Windows Analysis Report
https://upholl-xlognusa.godaddysites.com/

Overview

General Information

Sample URL:	https://upholl-xlognusa.godaddysites.com/
Analysis ID:	1589690
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2876 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5876 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2388,i,8831387271404604795,17797704766542838400,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://upholl-xlognusa.godaddysites.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /events/v2?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ HTTP/1.1Host: events.mapbox.comConnection: keep-aliveContent-Length: 206sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://upholl-xlognusa.godaddysites.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://upholl-xlognusa.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://upholl-xlognusa.godaddysites.com/services	Avira URL Cloud: Label: phishing
Source: https://upholl-xlognusa.godaddysites.com/sw.js	Avira URL Cloud: Label: phishing
Source: https://upholl-xlognusa.godaddysites.com/manifest.webmanifest	Avira URL Cloud: Label: phishing

Source: https://upholl-xlognusa.godaddysites.com/contact-us	HTTP Parser: No favicon
Source: https://upholl-xlognusa.godaddysites.com/contact-us	HTTP Parser: No favicon
Source: https://upholl-xlognusa.godaddysites.com/contact-us	HTTP Parser: No favicon
Source: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base	HTTP Parser: No favicon

Source: https://upholl-xlognusa.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://upholl-xlognusa.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: upholl-xlognusa.godaddysites.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: isteam.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: api.ola.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: events.api.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: api.mapbox.com
Source: global traffic	DNS traffic detected: DNS query: contact.apps-api.instantpage.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: events.mapbox.com
Source: global traffic	DNS traffic detected: DNS query: www.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: img6.wsimg.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 00:14:58 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://upholl-xlognusa.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: truex-frame-options: SAMEORIGINx-xss-protection: 0x-content-type-options: nosniffx-permitted-cross-domain-policies: nonereferrer-policy: strict-origin-when-cross-originvary: Accept, Origincache-control: no-cachex-request-id: e97cc42ab573e704107720452376b192x-runtime: 0.003785Strict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 00:15:11 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://upholl-xlognusa.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: truex-frame-options: SAMEORIGINx-xss-protection: 0x-content-type-options: nosniffx-permitted-cross-domain-policies: nonereferrer-policy: strict-origin-when-cross-originvary: Accept, Origincache-control: no-cachex-request-id: 33daf01fc5048bcb74fdba73f83d429fx-runtime: 0.004991Strict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 00:15:36 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://upholl-xlognusa.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: truex-frame-options: SAMEORIGINx-xss-protection: 0x-content-type-options: nosniffx-permitted-cross-domain-policies: nonereferrer-policy: strict-origin-when-cross-originvary: Accept, Origincache-control: no-cachex-request-id: 9b63d608fb941db5c2e89861ef7392e1x-runtime: 0.008593Strict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 00:15:41 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://upholl-xlognusa.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: truex-frame-options: SAMEORIGINx-xss-protection: 0x-content-type-options: nosniffx-permitted-cross-domain-policies: nonereferrer-policy: strict-origin-when-cross-originvary: Accept, Origincache-control: no-cachex-request-id: cff1f24370b8caef5a41511590a4b0dbx-runtime: 0.004933Strict-Transport-Security: max-age=15724800; includeSubDomains

Source: chromecache_383.2.dr, chromecache_299.2.dr, chromecache_289.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr, chromecache_324.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_414.2.dr, chromecache_374.2.dr	String found in binary or memory: https://api.ola.$
Source: chromecache_414.2.dr, chromecache_374.2.dr	String found in binary or memory: https://cart-checkout.dev-secureserver.net
Source: chromecache_414.2.dr, chromecache_374.2.dr	String found in binary or memory: https://cart-checkout.secureserver.net
Source: chromecache_414.2.dr, chromecache_374.2.dr	String found in binary or memory: https://cart-checkout.test-secureserver.net
Source: chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_372.2.dr	String found in binary or memory: https://contact.apps-api.instantpage.secureserver.net
Source: chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_272.2.dr	String found in binary or memory: https://docs.mapbox.com/mapbox-gl-js/guides/install/#transpiling
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivoblack/v21/HTxqL289NzCGg4MzN6KJ7eW6CYKF_i7y.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivoblack/v21/HTxqL289NzCGg4MzN6KJ7eW6CYyF_g.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr, chromecache_324.2.dr	String found in binary or memory: https://github.com/JulietaUla/Montserrat)
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr, chromecache_324.2.dr	String found in binary or memory: https://github.com/Omnibus-Type/ArchivoBlack)
Source: chromecache_364.2.dr	String found in binary or memory: https://github.com/lancedikson/bowser
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/archivoblack/v21/HTxqL289NzCGg4MzN6KJ7eW6CYKF_i7y.woff2)
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/archivoblack/v21/HTxqL289NzCGg4MzN6KJ7eW6CYyF_g.woff2)
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_324.2.dr	String found in binary or memory: https://img1.wsimg.com/isteam/stock/3208
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr, chromecache_324.2.dr	String found in binary or memory: https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
Source: chromecache_388.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_372.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_372.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_388.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_395.2.dr	String found in binary or memory: https://upholl-xlognusa.godaddysites.com/
Source: chromecache_412.2.dr	String found in binary or memory: https://upholl-xlognusa.godaddysites.com/contact-us
Source: chromecache_277.2.dr	String found in binary or memory: https://upholl-xlognusa.godaddysites.com/gallery
Source: chromecache_324.2.dr	String found in binary or memory: https://upholl-xlognusa.godaddysites.com/services
Source: chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica
Source: chromecache_354.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=$
Source: chromecache_264.2.dr, chromecache_283.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__.
Source: chromecache_369.2.dr, chromecache_283.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__en.js
Source: chromecache_272.2.dr	String found in binary or memory: https://www.mapbox.com/legal/tos/).

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50165
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2388,i,8831387271404604795,17797704766542838400,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://upholl-xlognusa.godaddysites.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2388,i,8831387271404604795,17797704766542838400,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/js/bg/FsaNIYyPN76i0sL7d3myIoFfjMDAw8eHc9AJuLUrm7A.js	false		high
https://upholl-xlognusa.godaddysites.com/contact-us	true		unknown
https://api.mapbox.com/styles/v1/godaddy/ciovyeygh0029atm6zbntgxk2/sprite.json?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://api.mapbox.com/v4/mapbox.mapbox-terrain-v2,mapbox.mapbox-streets-v7/14/4240/6571.vector.pbf?sku=1017epKGjZLXv&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://api.mapbox.com/fonts/v1/godaddy/DIN%20Offc%20Pro%20Medium,Arial%20Unicode%20MS%20Regular/0-255.pbf?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://upholl-xlognusa.godaddysites.com/sw.js	true	Avira URL Cloud: phishing	unknown
https://api.mapbox.com/mapbox-gl-js/v2.6.1/mapbox-gl.js	false		high
https://api.mapbox.com/map-sessions/v1?sku=101cIn8ys3NW6&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://api.mapbox.com/v4/mapbox.mapbox-terrain-v2,mapbox.mapbox-streets-v7/14/4240/6570.vector.pbf?sku=1017epKGjZLXv&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://api.mapbox.com/v4/mapbox.mapbox-terrain-v2,mapbox.mapbox-streets-v7/14/4241/6570.vector.pbf?sku=1017epKGjZLXv&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://contact.apps-api.instantpage.secureserver.net/v3/recaptcha	false		high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_&co=aHR0cHM6Ly91cGhvbGwteGxvZ251c2EuZ29kYWRkeXNpdGVzLmNvbTo0NDM.&hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&size=invisible&cb=v193pn80sgkx	false		high
https://events.mapbox.com/events/v2?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://upholl-xlognusa.godaddysites.com/	true		unknown
https://api.mapbox.com/mapbox-gl-js/v2.6.1/mapbox-gl.css	false		high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS	false		high
https://upholl-xlognusa.godaddysites.com/gallery	true		unknown
https://api.mapbox.com/map-sessions/v1?sku=1017epKGjZLXv&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://api.ola.godaddy.com/accounts/0c168886-9047-4967-a6fb-bf378b5bbb8a/config?fields[]=cart	false		high
https://upholl-xlognusa.godaddysites.com/services	true	Avira URL Cloud: phishing	unknown
https://www.google.com/recaptcha/api.js?render=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_	false		high
https://api.mapbox.com/styles/v1/godaddy/ciovyeygh0029atm6zbntgxk2?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://api.mapbox.com/fonts/v1/godaddy/DIN%20Offc%20Pro%20Medium,Arial%20Unicode%20MS%20Regular/8192-8447.pbf?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://api.mapbox.com/v4/mapbox.mapbox-terrain-v2,mapbox.mapbox-streets-v7/14/4241/6571.vector.pbf?sku=1017epKGjZLXv&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://api.mapbox.com/fonts/v1/godaddy/DIN%20Offc%20Pro%20Bold,Arial%20Unicode%20MS%20Bold/0-255.pbf?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_&co=aHR0cHM6Ly91cGhvbGwteGxvZ251c2EuZ29kYWRkeXNpdGVzLmNvbTo0NDM.&hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&size=invisible&cb=pnhoosre10lj	false		high
https://api.mapbox.com/styles/v1/godaddy/ciovyeygh0029atm6zbntgxk2/sprite.png?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://upholl-xlognusa.godaddysites.com/manifest.webmanifest	true	Avira URL Cloud: phishing	unknown
https://api.mapbox.com/fonts/v1/godaddy/DIN%20Offc%20Pro%20Italic,Arial%20Unicode%20MS%20Regular/0-255.pbf?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base	false		high
https://api.mapbox.com/fonts/v1/godaddy/DIN%20Offc%20Pro%20Regular,Arial%20Unicode%20MS%20Regular/0-255.pbf?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high
https://api.mapbox.com/v4/mapbox.mapbox-terrain-v2,mapbox.mapbox-streets-v7.json?secure&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
18.197.103.231	isteam.wsimg.com	United States	16509	AMAZON-02US	false
142.250.185.228	unknown	United States	15169	GOOGLEUS	false
99.86.4.72	api.mapbox.com	United States	16509	AMAZON-02US	false
99.86.4.95	unknown	United States	16509	AMAZON-02US	false
45.40.130.49	proxy.k8s.pnc.phx.secureserver.net	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
198.71.248.123	proxy.k8s.pnc.iad.secureserver.net	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
52.17.210.72	events.mapbox.com	United States	16509	AMAZON-02US	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
13.248.243.5	upholl-xlognusa.godaddysites.com	United States	16509	AMAZON-02US	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source	Detection	Scanner	Label
https://api.ola.$	0%	Avira URL Cloud	safe
https://upholl-xlognusa.godaddysites.com/services	100%	Avira URL Cloud	phishing
https://upholl-xlognusa.godaddysites.com/sw.js	100%	Avira URL Cloud	phishing
https://cart-checkout.test-secureserver.net	0%	Avira URL Cloud	safe
https://cart-checkout.dev-secureserver.net	0%	Avira URL Cloud	safe
https://upholl-xlognusa.godaddysites.com/manifest.webmanifest	100%	Avira URL Cloud	phishing

Name	Source	Malicious	Antivirus Detection	Reputation
https://img1.wsimg.com/isteam/stock/3208	chromecache_324.2.dr	false		high
https://img1.wsimg.com/gfonts/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	false		high
https://img1.wsimg.com/gfonts/s/archivoblack/v21/HTxqL289NzCGg4MzN6KJ7eW6CYyF_g.woff2)	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	false		high
https://cart-checkout.dev-secureserver.net	chromecache_414.2.dr, chromecache_374.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	false		high
https://cloud.google.com/contact	chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	false		high
https://www.mapbox.com/legal/tos/).	chromecache_272.2.dr	false		high
https://policies.google.com/terms	chromecache_372.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	false		high
https://img1.wsimg.com/gfonts/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	false		high
https://cart-checkout.secureserver.net	chromecache_414.2.dr, chromecache_374.2.dr	false		high
https://github.com/JulietaUla/Montserrat)	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr, chromecache_324.2.dr	false		high
https://docs.mapbox.com/mapbox-gl-js/guides/install/#transpiling	chromecache_272.2.dr	false		high
https://img1.wsimg.com/gfonts/s/archivoblack/v21/HTxqL289NzCGg4MzN6KJ7eW6CYKF_i7y.woff2)	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_264.2.dr, chromecache_283.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	false		high
https://cart-checkout.test-secureserver.net	chromecache_414.2.dr, chromecache_374.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_388.2.dr	false		high
http://jedwatson.github.io/classnames	chromecache_383.2.dr, chromecache_299.2.dr, chromecache_289.2.dr	false		high
https://contact.apps-api.instantpage.secureserver.net	chromecache_372.2.dr	false		high
https://api.ola.$	chromecache_414.2.dr, chromecache_374.2.dr	false	Avira URL Cloud: safe	unknown
https://img1.wsimg.com/gfonts/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	false		high
https://www.google.com/recaptcha/api.js?render=$	chromecache_354.2.dr	false		high
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr, chromecache_324.2.dr	false		high
https://github.com/lancedikson/bowser	chromecache_364.2.dr	false		high
https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	false		high
https://img1.wsimg.com/gfonts/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_388.2.dr	false		high
https://github.com/Omnibus-Type/ArchivoBlack)	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr, chromecache_324.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	false		high
https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr, chromecache_324.2.dr	false		high
https://policies.google.com/privacy	chromecache_372.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__.	chromecache_264.2.dr, chromecache_280.2.dr, chromecache_388.2.dr	false		high
http://scripts.sil.org/OFL	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr, chromecache_324.2.dr	false		high
https://img1.wsimg.com/gfonts/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)	chromecache_412.2.dr, chromecache_395.2.dr, chromecache_277.2.dr	false		high

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1589690
Start date and time:	2025-01-13 01:13:48 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://upholl-xlognusa.godaddysites.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@21/283@44/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://upholl-xlognusa.godaddysites.com/contact-us Browse: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base Browse: https://upholl-xlognusa.godaddysites.com/gallery Browse: https://upholl-xlognusa.godaddysites.com/services

Input	Output
URL: https://upholl-xlognusa.godaddysites.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://upholl-xlognusa.godaddysites.com
URL: https://upholl-xlognusa.godaddysites.com/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The script checks for the presence of certain browser features and, if they are not available, loads a polyfill script from a third-party domain. This is a common practice to ensure compatibility across different browsers and is not inherently malicious. However, the use of `document.write()` to inject the script is considered a legacy practice and could potentially cause issues in some cases." }
"IntersectionObserver"in window&&"Intl"in window&&"Locale"in window.Intl\|\|document.write(`\x3Cscript src="https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~locale.en-US">\x3C/script>`)
URL: https://www.gstatic.com/recaptcha/releases/RTbEo8_... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of a two-factor authentication (2FA) flow. It includes code comments indicating it is part of the Closure Library, which is a well-known and trusted JavaScript library. The code does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The script is primarily focused on rendering a 2FA UI and handling user input, which is a common and expected functionality. While it uses some legacy APIs like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script is likely a benign implementation of a security-related feature." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / Copyright 2005, 2007 Bob Ippolito. All Rights Reserved. Copyright The Closure Library Authors. SPDX-License-Identifier: MIT / / Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var K=function(){return[function(p,v,T,x,I,O,Y,m,R,L,D,Z,V,g){if((p-2&7)==(g=[6,1,34],p<<g[1]&4\|\|(O=v.vD,x=v.k_,m=v.ZW,Y=["Verify your email",'<div class="'," "],R=v.identifier,L=Y[g[1]]+l[g[0]](g[1],"rc-2fa-background")+Y[2]+l[g[0]](g[2],"rc-2fa-background-override")+'"><div class="'+l[g[0]](g[1],"rc-2fa-container")+Y[2]+l[g[0]](35,"rc-2fa-container-override")+'"><div class="'+l[g[0]](g[2],"rc-2fa-header")+Y[2]+l[g[0]](32,"rc-2fa-header-override")+'">',L=(x==="phone"?L+"Verify your phone":L+Y[0])+ ('</div><div class="'+l[g[0]](g[2],"rc-2fa-instructions")+Y[2]+l[g[0]](g[2],"rc-2fa-instructions-override")+'">'),x==="phone"?(T="<p>To make sure this is really you, we sent a verification code to your phone at "+F[44](11,R)+".</p><p>Enter the code below. It will expire in "+F[44](14,O)+" minutes.</p>",L+=T):(I="<p>To make sure this is really you, we sent a verification code to "+F[44](10,R)+".</p><p>Enter the code below. It will expire in "+F[44](8,O)+" minutes.</p>",F[44](11,R),F[44](8,O),L+=I), L+='</div><div class="'+l[g[0]](32,"rc-2fa-response-field")+Y[2]+l[g[0]](35,"rc-2fa-response-field-override")+Y[2]+(m?l[g[0]](33,"rc-2fa-response-field-error")+Y[2]+l[g[0]](2,"rc-2fa-response-field-error-override"):"")+'"></div><div class="'+l[g[0]](32,"rc-2fa-error-message")+Y[2]+l[g[0]](32,"rc-2fa-error-message-override")+'">',m&&(L+="Incorrect code."),L+='</div><div class="'+l[g[0]](2,"rc-2fa-submit-button-holder")+Y[2]+l[g[0]](33,"rc-2fa-submit-button-holder-override")+'"></div><div class="'+ l[g[0]](2,"rc-2fa-cancel-button-holder")+Y[2]+l[g[0]](2,"rc-2fa-cancel-button-holder-override")+'"></div></div></div>',V=vJ(L)),g[1])){for(m=[].concat(l[D=J[R=(O===void 0?0:O)%ZY.length,L=ZY.slice(),37](10),25](8,Y)),Z=x;Z<m.length;Z++)L[R]=((L[R]<<I^Math.pow(D.call(m[Z],x)-ZY[R],T))+(L[R]>>T))/ZY[R]\|x,R=(R+v)%ZY.length;V=Jm(L.reduce(function(S,e){return S^e},x))}return((p^22)&7)<4&&p-5>=-69&&(V=T<v?-1:T>v?1:0),V},function(p,v,T,x,I,O,Y,m,R,L,D,Z,V,g,S,e,Q,y){return((p^((((p^63)>>(y=[0,5,3],y[2])>= 1&&(p\|6)<10&&(V={timeout:1E4},m=V.document\|\|document,S=[0,"style",null],R=F[22](63,O).toString(),D=(new Ko(m)).createElement(v),Z={Yz:D,Oz:void 0},e=new g5(Z),Y=V.timeout!=S[2]?V.timeout:5E3,g=S[2],Y>S[y[0]]&&(g=window.setTimeout(function(A,U){K[F[U=[6,41,11],43](5,0,!0,D),A=new S0(1,"Timeout reached for loading script "+R),14](U[0],T,e),J[U[1]](U[2],!0,T,e,A)},Y),Z.Oz=g),D.onload=D.onreadystatechange=function(A){(A=["readyState",null,"complete"],D[A[0]]&&D[A[0]]!="loaded"&&D[A[0]]!=A[2])\|\|(F[43](21, 0,V.u_\|\|T,D,g),e.V3(A[1]))},D.onerror=function(A,U){A=new (F[43](13,(U=["Error while loading script ",!0,10],0),U[1],D,g),S0)(0,U[0]+R),K[14](7,T,e),J[41](U[2],U[1],T,e,A)},L=V.attributes\|\|{},a0(L,{type:"text/javascript",charset:"UTF-8"}),J[40](32,S[1],x,D,L),J[44](4,I,"",S[2],"nonce",O,D),F[25](16,"HEAD",S[y[0]],m).appendChild(D),Q=e),p)&90)==p&&(O=[12,8855,8067],m=new e0,L=a[7](4,4874)(27,7,O[y[0]],37,1),R=B[y[1]](64,Am.get(),NN,9),J[41](4,function(A,U,f,N,t,G,H,k,n,W,w){return a[7](3,8846)(A.name+ A.id+((f=(w=[8192,"lastChild",2],[1,null,2]),A).getAttribute(L[4]())\|\|""),L[0](),"i")&&(H=a[7](1,7853)(a[7](1,4728)(A).replace(/\s/g,"")),H()&&H().length>4)?(W=H().length,B[16](57,w[0],f[w[2]],m,P[22].bind(null,1),W,F[30].bind(null,20)),R&&P[8](54,R,f[w[2]])&&(G=P[8](30,R,f[w[2]]),t=H().substr(0,HJ[f[0]])+H().substr(H().length-HJ[0]),U=F[10](49).call(parseFloat(G+t)+G,30),F[40](6,m,U,5),n=((k=A.parentElement)==f[1]?0:(N=k[w[1]])==f[1]?0:N.src)?A.parentElement[w[1]].className:"",F[40](22,m,n,7)),!0): !1},K[12](16,"INPUT")),Y=a[7](4,5833)(x(a[47](1),44).slice(y[0],5E4)),I=a[7](2,1933)(a[7](2,O[1
URL: https://upholl-xlognusa.godaddysites.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://upholl-xlognusa.godaddysites.com/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://upholl-xlognusa.godaddysites.com/contact-us Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "GET DIRECTIONS", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://upholl-xlognusa.godaddysites.com/contact-us Model: Joe Sandbox AI	{ "brands": [ "Smiths & Co" ] }
	{ "brands": [ "Smiths & Co" ] }
URL: https://upholl-xlognusa.godaddysites.com/contact-us Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "GET A QUOTE", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://upholl-xlognusa.godaddysites.com/contact-us Model: Joe Sandbox AI	{ "brands": [ "Smiths & Co" ] }
	{ "brands": [ "Smiths & Co" ] }
URL: https://upholl-xlognusa.godaddysites.com/contact-us Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "GET A QUOTE", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://upholl-xlognusa.godaddysites.com/contact-us Model: Joe Sandbox AI	{ "brands": [ "Smiths & Co" ] }
	{ "brands": [ "Smiths & Co" ] }
URL: https://upholl-xlognusa.godaddysites.com/contact-us Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "GET A QUOTE", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://upholl-xlognusa.godaddysites.com/contact-us Model: Joe Sandbox AI	{ "brands": [ "GoDaddy" ] }
	{ "brands": [ "GoDaddy" ] }
URL: https://upholl-xlognusa.godaddysites.com/contact-us Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Contact us for a free quote!", "prominent_button_name": "GET DIRECTIONS", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://upholl-xlognusa.godaddysites.com/contact-us Model: Joe Sandbox AI	{ "brands": [ "GoDaddy" ] }
	{ "brands": [ "GoDaddy" ] }
URL: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Jan 12 23:14:42 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.972115054166722
Encrypted:	false
SSDEEP:	48:8KdqTWynH8idAKZdA19ehwiZUklqehLy+3:8Xvq8y
MD5:	1A83F97EB5E875BDBEB876BC10D68A31
SHA1:	3EC5D9BB281BFC6314BF3299FE0A3FA00C538099
SHA-256:	7A4A027910D2B2233F3449FBCA3EFDFB717D1A8720ABDEE32BE9EB1B12457B3E
SHA-512:	50C636588ED8F7FE9F770B3874E73F9CE8371BAEFFB5D715E12923C70172CC8CBCF957D06F77AC851C1D202FF7047FBCEB23C058BB16BA00C19433C7702E9B7B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....W.$Pe..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I-Z......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V-Z......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V-Z......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V-Z............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V-Z.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............4.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 01:14:40.481046915 CET	53	56132	1.1.1.1	192.168.2.5
Jan 13, 2025 01:14:40.648315907 CET	53	62339	1.1.1.1	192.168.2.5
Jan 13, 2025 01:14:41.830646038 CET	53	63323	1.1.1.1	192.168.2.5
Jan 13, 2025 01:14:44.770867109 CET	55270	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:44.771503925 CET	55936	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:44.777839899 CET	53	55270	1.1.1.1	192.168.2.5
Jan 13, 2025 01:14:44.778462887 CET	53	55936	1.1.1.1	192.168.2.5
Jan 13, 2025 01:14:46.565320969 CET	65498	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:46.565953970 CET	60488	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:46.574397087 CET	53	60488	1.1.1.1	192.168.2.5
Jan 13, 2025 01:14:46.574599028 CET	53	65498	1.1.1.1	192.168.2.5
Jan 13, 2025 01:14:48.730709076 CET	49577	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:48.730864048 CET	64963	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:48.734956026 CET	53	64688	1.1.1.1	192.168.2.5
Jan 13, 2025 01:14:48.759238958 CET	63784	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:48.759618998 CET	64902	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:48.767302036 CET	53	64902	1.1.1.1	192.168.2.5
Jan 13, 2025 01:14:48.768888950 CET	53	63784	1.1.1.1	192.168.2.5
Jan 13, 2025 01:14:50.372407913 CET	54729	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:50.372407913 CET	60061	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:57.519946098 CET	59118	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:57.520889044 CET	61054	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:57.522265911 CET	56619	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:57.523173094 CET	53926	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:57.530559063 CET	53	59118	1.1.1.1	192.168.2.5
Jan 13, 2025 01:14:57.533371925 CET	53	61054	1.1.1.1	192.168.2.5
Jan 13, 2025 01:14:57.760188103 CET	64555	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:57.763005972 CET	50438	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:14:59.220009089 CET	53	59345	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:00.561119080 CET	49817	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:00.561532021 CET	53163	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:09.283139944 CET	53	65234	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:13.182527065 CET	59236	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:13.182864904 CET	65052	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:13.183485985 CET	51520	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:13.183753967 CET	60337	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:13.189407110 CET	53	65052	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:13.189870119 CET	53	59236	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:13.193440914 CET	53	60337	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:13.193496943 CET	53	51520	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:14.040548086 CET	63189	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:14.040916920 CET	53736	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:14.042934895 CET	58002	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:14.043129921 CET	59953	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:14.047164917 CET	53	63189	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:14.047863007 CET	53	53736	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:14.052669048 CET	53	58002	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:14.053152084 CET	53	59953	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:15.011647940 CET	53	64748	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:16.731131077 CET	61132	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:16.731404066 CET	52384	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:16.738045931 CET	53	52384	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:16.738496065 CET	53	61132	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:18.162801027 CET	53	55616	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:18.293881893 CET	53	64377	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:18.314760923 CET	52428	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:18.315103054 CET	64559	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:18.321803093 CET	53	64559	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:18.331759930 CET	53	52428	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:19.396178961 CET	57470	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:19.396708965 CET	50879	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:19.421801090 CET	53	50879	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:19.427120924 CET	53	57470	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:20.486771107 CET	53	51575	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:22.887063026 CET	62970	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:22.887264013 CET	63813	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:22.899722099 CET	53	62970	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:22.899734020 CET	53	63813	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:27.982429028 CET	55888	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:27.982927084 CET	61965	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:29.267023087 CET	62036	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:29.267180920 CET	52712	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:30.278918982 CET	62328	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:30.279067993 CET	57026	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:40.304277897 CET	53	62962	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:41.324605942 CET	53	64271	1.1.1.1	192.168.2.5
Jan 13, 2025 01:15:58.498366117 CET	49928	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:58.498626947 CET	61790	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:58.504477978 CET	63705	53	192.168.2.5	1.1.1.1
Jan 13, 2025 01:15:58.504847050 CET	54902	53	192.168.2.5	1.1.1.1

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:14:47 UTC	675	OUT	GET / HTTP/1.1 Host: upholl-xlognusa.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:14:48 UTC	1309	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/archivoblack/v21/HTxqL289NzCGg4MzN6KJ7eW6CYyF_g.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-fcac51d X-Version: fcac51d X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 250250d47a1ce06766ab14dd8970708f Date: Mon, 13 Jan 2025 00:14:47 GMT Connection: close Transfer-Encoding: chunked
2025-01-13 00:14:48 UTC	15075	IN	Data Raw: 64 36 36 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 30 63 31 36 38 38 38 36 2d 39 30 34 37 2d 34 39 36 37 2d 61 36 66 62 2d 62 66 33 37 38 62 35 62 62 62 38 61 2f 66 61 76 69 63 6f 6e 2f 65 39 32 39 37 39 30 35 2d 37 35 66 64 2d 34 63 36 37 2d 39 30 37 32 2d 64 62 30 64 33 37 36 35 31 38 34 37 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 36 2c 68 3a 31 36 2c 6d 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f Data Ascii: d666<!DOCTYPE html><html lang="en-US"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/0c168886-9047-4967-a6fb-bf378b5bbb8a/favicon/e9297905-75fd-4c67-9072-db0d37651847.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com/
2025-01-13 00:14:48 UTC	16384	IN	Data Raw: 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 2d 0a 2a 2f 0a 0a 2f 2a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 31 20 62 79 20 74 79 50 6f 6c 61 6e 64 20 4c 75 6b 61 73 7a 20 44 7a 69 65 64 7a 69 63 20 28 74 65 61 6d 40 6c 61 74 6f 66 6f 6e 74 73 2e 63 6f 6d 29 20 77 69 74 68 20 52 65 73 65 72 76 65 64 20 46 6f 6e 74 20 4e 61 6d 65 20 22 4c 61 74 6f 22 2e 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 53 49 4c 20 4f 70 65 6e 20 46 6f 6e 74 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 31 2e 31 2e 0a 0a 54 68 69 73 20 46 6f 6e 74 20 53 6f 66 74 77 61 72 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 53 Data Ascii: -//Copyright (c) 2010-2011 by tyPoland Lukasz Dziedzic (team@latofonts.com) with Reserved Font Name "Lato". Licensed under the SIL Open Font License, Version 1.1.This Font Software is licensed under the S
2025-01-13 00:14:48 UTC	16384	IN	Data Raw: 68 3a 20 31 30 32 34 70 78 29 7b 2e 78 20 2e 63 31 2d 75 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 69 6e 76 65 72 74 28 2e 32 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 7b 2e 78 20 2e 63 31 2d 31 36 7b 77 69 64 74 68 3a 39 38 34 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 7b 2e 78 20 2e 63 31 2d 31 63 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 7b 2e 78 20 2e 63 31 2d 31 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 7b 2e 78 20 2e 63 31 2d 31 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f Data Ascii: h: 1024px){.x .c1-u:hover{filter:invert(.2)}}@media (min-width: 1024px){.x .c1-16{width:984px}}@media (min-width: 1024px){.x .c1-1c{padding-top:3px}}@media (min-width: 1024px){.x .c1-1d{padding-right:3px}}@media (min-width: 1024px){.x .c1-1e{padding-botto
2025-01-13 00:14:48 UTC	7056	IN	Data Raw: 2d 35 6e 20 63 31 2d 35 6f 20 63 31 2d 35 70 20 63 31 2d 35 71 20 63 31 2d 35 72 20 63 31 2d 35 73 20 63 31 2d 35 74 20 63 31 2d 35 75 20 63 31 2d 35 76 20 63 31 2d 35 77 20 63 31 2d 35 78 20 63 31 2d 35 79 20 63 31 2d 35 7a 20 63 31 2d 36 30 20 63 31 2d 64 20 63 31 2d 36 31 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 43 6f 6e 74 61 69 6e 65 72 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 78 20 63 31 2d 79 20 63 31 2d 7a 20 63 31 2d 31 30 20 63 31 2d 31 31 20 63 31 2d 70 20 63 31 2d 31 6f 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 36 32 20 63 31 2d 31 35 20 63 31 2d 64 20 63 31 2d 31 36 20 63 31 2d 65 20 63 31 2d 31 37 20 63 31 Data Ascii: -5n c1-5o c1-5p c1-5q c1-5r c1-5s c1-5t c1-5u c1-5v c1-5w c1-5x c1-5y c1-5z c1-60 c1-d c1-61 c1-e c1-f c1-g"></div><div data-ux="Container" class="x-el x-el-div c1-1 c1-2 c1-x c1-y c1-z c1-10 c1-11 c1-p c1-1o c1-b c1-c c1-62 c1-15 c1-d c1-16 c1-e c1-17 c1

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:14:57 UTC	670	OUT	GET /sw.js HTTP/1.1 Host: upholl-xlognusa.godaddysites.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://upholl-xlognusa.godaddysites.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=6c5e1f65-c686-4e90-a5d0-ece23b1d66fe; _tccl_visit=6c5e1f65-c686-4e90-a5d0-ece23b1d66fe; _scc_session=pc=1&C_TOUCH=2025-01-13T00:14:52.023Z
2025-01-13 00:14:57 UTC	736	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: application/javascript Vary: Accept-Encoding Server: DPS/2.0.0+sha-fcac51d X-Version: fcac51d X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 745506bcc61d06b71c8bb43bcdc17124 Date: Mon, 13 Jan 2025 00:14:57 GMT Connection: close Transfer-Encoding: chunked
2025-01-13 00:14:57 UTC	15648	IN	Data Raw: 38 30 65 33 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 38 39 35 3a 28 29 3d 3e 7b 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 63 61 63 68 65 61 62 6c 65 2d 72 65 73 70 6f 6e 73 65 3a 36 2e 34 2e 31 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 32 35 39 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 42 3a 28 29 3d 3e 61 7d 29 2c 73 28 39 31 33 29 3b 63 6c 61 73 73 20 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 65 2c 74 29 3d 3e 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 65 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 74 7d 29 29 7d 7d 7d 2c 31 32 35 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 56 3a Data Ascii: 80e3(()=>{"use strict";var e={895:()=>{try{self["workbox:cacheable-response:6.4.1"]&&_()}catch(e){}},259:(e,t,s)=>{s.d(t,{B:()=>a}),s(913);class a{constructor(){this.promise=new Promise(((e,t)=>{this.resolve=e,this.reject=t}))}}},125:(e,t,s)=>{s.d(t,{V:
2025-01-13 00:14:57 UTC	16384	IN	Data Raw: 2c 72 29 2c 72 7d 76 61 72 20 52 3b 52 3d 64 2c 64 3d 7b 2e 2e 2e 52 2c 67 65 74 3a 28 65 2c 74 2c 73 29 3d 3e 5f 28 65 2c 74 29 7c 7c 52 2e 67 65 74 28 65 2c 74 2c 73 29 2c 68 61 73 3a 28 65 2c 74 29 3d 3e 21 21 5f 28 65 2c 74 29 7c 7c 52 2e 68 61 73 28 65 2c 74 29 7d 2c 73 28 35 35 30 29 3b 63 6f 6e 73 74 20 76 3d 22 63 61 63 68 65 2d 65 6e 74 72 69 65 73 22 2c 62 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 55 52 4c 28 65 2c 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 68 61 73 68 3d 22 22 2c 74 2e 68 72 65 66 7d 3b 63 6c 61 73 73 20 78 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 5f 64 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 61 63 68 65 4e 61 6d 65 3d 65 7d 5f 75 70 67 72 61 64 65 44 62 28 65 29 7b Data Ascii: ,r),r}var R;R=d,d={...R,get:(e,t,s)=>_(e,t)\|\|R.get(e,t,s),has:(e,t)=>!!_(e,t)\|\|R.has(e,t)},s(550);const v="cache-entries",b=e=>{const t=new URL(e,location.href);return t.hash="",t.href};class x{constructor(e){this._db=null,this._cacheName=e}_upgradeDb(e){
2025-01-13 00:14:57 UTC	976	IN	Data Raw: 72 73 74 28 7b 63 61 63 68 65 4e 61 6d 65 3a 22 6e 65 74 77 6f 72 6b 2d 66 69 72 73 74 22 2c 70 6c 75 67 69 6e 73 3a 5b 6e 65 77 20 61 2e 43 61 63 68 65 61 62 6c 65 52 65 73 70 6f 6e 73 65 50 6c 75 67 69 6e 28 7b 73 74 61 74 75 73 65 73 3a 5b 32 30 30 5d 7d 29 5d 7d 29 29 2c 28 30 2c 65 2e 72 65 67 69 73 74 65 72 52 6f 75 74 65 29 28 28 28 7b 72 65 71 75 65 73 74 3a 65 7d 29 3d 3e 22 73 74 79 6c 65 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 7c 7c 22 73 63 72 69 70 74 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 29 2c 6e 65 77 20 74 2e 53 74 61 6c 65 57 68 69 6c 65 52 65 76 61 6c 69 64 61 74 65 28 7b 63 61 63 68 65 4e 61 6d 65 3a 22 73 74 61 74 69 63 2d 72 65 73 6f 75 72 63 65 73 22 2c 70 6c 75 67 69 6e 73 3a 5b 6e 65 77 20 61 2e 43 61 63 68 Data Ascii: rst({cacheName:"network-first",plugins:[new a.CacheableResponsePlugin({statuses:[200]})]})),(0,e.registerRoute)((({request:e})=>"style"===e.destination\|\|"script"===e.destination),new t.StaleWhileRevalidate({cacheName:"static-resources",plugins:[new a.Cach

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:14:58 UTC	647	OUT	GET /accounts/0c168886-9047-4967-a6fb-bf378b5bbb8a/config?fields[]=cart HTTP/1.1 Host: api.ola.godaddy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://upholl-xlognusa.godaddysites.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://upholl-xlognusa.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:14:58 UTC	753	IN	HTTP/1.1 404 Not Found Date: Mon, 13 Jan 2025 00:14:58 GMT Content-Type: application/json; charset=utf-8 Content-Length: 29 Connection: close access-control-allow-origin: https://upholl-xlognusa.godaddysites.com access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD access-control-expose-headers: access-control-max-age: 7200 access-control-allow-credentials: true x-frame-options: SAMEORIGIN x-xss-protection: 0 x-content-type-options: nosniff x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin vary: Accept, Origin cache-control: no-cache x-request-id: e97cc42ab573e704107720452376b192 x-runtime: 0.003785 Strict-Transport-Security: max-age=15724800; includeSubDomains
2025-01-13 00:14:58 UTC	29	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 41 63 63 6f 75 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 7d Data Ascii: {"error":"Account not found"}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://upholl-xlognusa.godaddysites.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Windows Analysis Report
https://upholl-xlognusa.godaddysites.com/

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:15:00 UTC	656	OUT	GET /services HTTP/1.1 Host: upholl-xlognusa.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://upholl-xlognusa.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=6c5e1f65-c686-4e90-a5d0-ece23b1d66fe; _tccl_visit=6c5e1f65-c686-4e90-a5d0-ece23b1d66fe; _scc_session=pc=1&C_TOUCH=2025-01-13T00:14:52.023Z
2025-01-13 00:15:00 UTC	918	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js>; rel=preload; as=script; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin,<https://api.ola.godaddy.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-fcac51d X-Version: fcac51d X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 027165e2726f1f6f4486c880b3b94c74 Date: Mon, 13 Jan 2025 00:15:00 GMT Connection: close Transfer-Encoding: chunked
2025-01-13 00:15:00 UTC	15466	IN	Data Raw: 66 32 62 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 30 63 31 36 38 38 38 36 2d 39 30 34 37 2d 34 39 36 37 2d 61 36 66 62 2d 62 66 33 37 38 62 35 62 62 62 38 61 2f 66 61 76 69 63 6f 6e 2f 65 39 32 39 37 39 30 35 2d 37 35 66 64 2d 34 63 36 37 2d 39 30 37 32 2d 64 62 30 64 33 37 36 35 31 38 34 37 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 36 2c 68 3a 31 36 2c 6d 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f Data Ascii: f2bc<!DOCTYPE html><html lang="en-US"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/0c168886-9047-4967-a6fb-bf378b5bbb8a/favicon/e9297905-75fd-4c67-9072-db0d37651847.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com/
2025-01-13 00:15:00 UTC	16384	IN	Data Raw: 7a 20 3e 20 70 20 3e 20 75 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 78 20 2e 63 31 2d 37 30 20 3e 20 70 20 3e 20 75 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 33 65 6d 7d 2e 78 20 2e 63 31 2d 37 31 20 3e 20 70 20 3e 20 75 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 70 78 7d 2e 78 20 2e 63 31 2d 37 32 20 3e 20 70 20 3e 20 75 6c 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 2e 78 20 2e 63 31 2d 37 33 20 3e 20 70 20 3e 20 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 7d 2e 78 20 2e 63 31 2d 37 34 20 3e 20 70 20 3e 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 61 75 74 6f 7d 2e 78 20 2e 63 31 2d 37 35 20 3e 20 75 6c 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 78 20 2e 63 31 2d 37 36 20 3e 20 75 6c 7b Data Ascii: z > p > ul{display:block}.x .c1-70 > p > ul{padding-left:1.3em}.x .c1-71 > p > ul{margin-left:16px}.x .c1-72 > p > ul{margin-right:16px}.x .c1-73 > p > ul{margin-top:auto}.x .c1-74 > p > ul{margin-bottom:auto}.x .c1-75 > ul{text-align:left}.x .c1-76 > ul{
2025-01-13 00:15:00 UTC	16384	IN	Data Raw: 2d 33 64 20 63 31 2d 33 65 20 63 31 2d 33 66 20 63 31 2d 33 67 20 63 31 2d 33 68 20 63 31 2d 33 69 20 63 31 2d 33 6a 20 63 31 2d 33 6b 20 63 31 2d 31 31 20 63 31 2d 33 6c 20 63 31 2d 31 32 20 63 31 2d 33 6d 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 33 6e 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 42 6c 6f 63 6b 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 7a 20 63 31 2d 31 30 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 20 77 69 64 74 68 3d 22 34 30 Data Ascii: -3d c1-3e c1-3f c1-3g c1-3h c1-3i c1-3j c1-3k c1-11 c1-3l c1-12 c1-3m c1-b c1-c c1-d c1-3n c1-e c1-f c1-g"><div data-ux="Block" class="x-el x-el-div c1-1 c1-2 c1-z c1-10 c1-b c1-c c1-d c1-e c1-f c1-g"><svg viewBox="0 0 24 24" fill="currentColor" width="40
2025-01-13 00:15:00 UTC	13919	IN	Data Raw: 75 65 2f 71 74 3d 71 3a 31 2f 6c 6c 3d 6e 3a 74 72 75 65 20 31 30 32 34 77 2c 20 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 73 74 61 74 69 63 2f 74 72 61 6e 73 70 61 72 65 6e 74 5f 70 6c 61 63 65 68 6f 6c 64 65 72 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 36 30 30 2c 68 3a 33 30 30 2c 63 67 3a 74 72 75 65 2c 6d 2c 69 3a 74 72 75 65 2f 71 74 3d 71 3a 31 2f 6c 6c 3d 6e 3a 74 72 75 65 20 31 32 38 30 77 2c 20 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 73 74 61 74 69 63 2f 74 72 61 6e 73 70 61 72 65 6e 74 5f 70 6c 61 63 65 68 6f 6c 64 65 72 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 36 30 30 2c 68 3a 33 30 30 2c 63 67 3a 74 72 75 65 2c 6d 2c 69 3a 74 72 75 65 2f 71 74 3d 71 3a 31 2f 6c 6c 3d 6e 3a Data Ascii: ue/qt=q:1/ll=n:true 1024w, //img1.wsimg.com/isteam/ip/static/transparent_placeholder.png/:/rs=w:600,h:300,cg:true,m,i:true/qt=q:1/ll=n:true 1280w, //img1.wsimg.com/isteam/ip/static/transparent_placeholder.png/:/rs=w:600,h:300,cg:true,m,i:true/qt=q:1/ll=n:

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:15:00 UTC	568	OUT	GET /manifest.webmanifest HTTP/1.1 Host: upholl-xlognusa.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://upholl-xlognusa.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:15:00 UTC	739	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: application/manifest+json Vary: Accept-Encoding Server: DPS/2.0.0+sha-fcac51d X-Version: fcac51d X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 026957596034b9dc12c79bb766f974ba Date: Mon, 13 Jan 2025 00:15:00 GMT Connection: close Transfer-Encoding: chunked
2025-01-13 00:15:00 UTC	543	IN	Data Raw: 32 31 33 0d 0a 7b 22 73 63 6f 70 65 22 3a 22 2f 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 22 31 39 32 78 31 39 32 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 73 72 63 22 3a 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 30 63 31 36 38 38 38 36 2d 39 30 34 37 2d 34 39 36 37 2d 61 36 66 62 2d 62 66 33 37 38 62 35 62 62 62 38 61 2f 66 61 76 69 63 6f 6e 2f 65 39 32 39 37 39 30 35 2d 37 35 66 64 2d 34 63 36 37 2d 39 30 37 32 2d 64 62 30 64 33 37 36 35 31 38 34 37 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 39 32 2c 68 3a 31 39 32 2c 6d 22 7d 2c 7b 22 73 69 7a 65 73 22 3a 22 Data Ascii: 213{"scope":"/","start_url":"/","display":"standalone","icons":[{"sizes":"192x192","type":"image/png","src":"//img1.wsimg.com/isteam/ip/0c168886-9047-4967-a6fb-bf378b5bbb8a/favicon/e9297905-75fd-4c67-9072-db0d37651847.png/:/rs=w:192,h:192,m"},{"sizes":"

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:15:00 UTC	655	OUT	GET /gallery HTTP/1.1 Host: upholl-xlognusa.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://upholl-xlognusa.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=6c5e1f65-c686-4e90-a5d0-ece23b1d66fe; _tccl_visit=6c5e1f65-c686-4e90-a5d0-ece23b1d66fe; _scc_session=pc=1&C_TOUCH=2025-01-13T00:14:52.023Z
2025-01-13 00:15:01 UTC	1309	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/archivoblack/v21/HTxqL289NzCGg4MzN6KJ7eW6CYyF_g.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-fcac51d X-Version: fcac51d X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 359cfbcca7bb2e99a6c6bd93c4a85da1 Date: Mon, 13 Jan 2025 00:15:00 GMT Connection: close Transfer-Encoding: chunked
2025-01-13 00:15:01 UTC	15075	IN	Data Raw: 31 30 30 66 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 30 63 31 36 38 38 38 36 2d 39 30 34 37 2d 34 39 36 37 2d 61 36 66 62 2d 62 66 33 37 38 62 35 62 62 62 38 61 2f 66 61 76 69 63 6f 6e 2f 65 39 32 39 37 39 30 35 2d 37 35 66 64 2d 34 63 36 37 2d 39 30 37 32 2d 64 62 30 64 33 37 36 35 31 38 34 37 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 36 2c 68 3a 31 36 2c 6d 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d Data Ascii: 100f1<!DOCTYPE html><html lang="en-US"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/0c168886-9047-4967-a6fb-bf378b5bbb8a/favicon/e9297905-75fd-4c67-9072-db0d37651847.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com
2025-01-13 00:15:01 UTC	16384	IN	Data Raw: 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 2d 0a 2a 2f 0a 0a 2f 2a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 31 20 62 79 20 74 79 50 6f 6c 61 6e 64 20 4c 75 6b 61 73 7a 20 44 7a 69 65 64 7a 69 63 20 28 74 65 61 6d 40 6c 61 74 6f 66 6f 6e 74 73 2e 63 6f 6d 29 20 77 69 74 68 20 52 65 73 65 72 76 65 64 20 46 6f 6e 74 20 4e 61 6d 65 20 22 4c 61 74 6f 22 2e 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 53 49 4c 20 4f 70 65 6e 20 46 6f 6e 74 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 31 2e 31 2e 0a 0a 54 68 69 73 20 46 6f 6e 74 20 53 6f 66 74 77 61 72 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e Data Ascii: -//Copyright (c) 2010-2011 by tyPoland Lukasz Dziedzic (team@latofonts.com) with Reserved Font Name "Lato". Licensed under the SIL Open Font License, Version 1.1.This Font Software is licensed un
2025-01-13 00:15:01 UTC	16384	IN	Data Raw: 73 70 61 72 65 6e 74 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 31 65 6d 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 36 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 36 70 78 3b 0a 7d 0a 2e 63 61 72 6f 75 73 65 6c 20 2e 63 61 72 6f 75 73 65 6c 2d 64 6f 74 73 20 62 75 74 74 6f 6e 2e 73 65 6c 65 63 74 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0a 7d 0a 2e 63 61 72 6f 75 73 65 6c 20 2e 63 61 72 6f 75 73 65 6c 2d 64 6f 74 73 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 63 61 72 6f 75 73 65 6c 20 2e 63 61 72 6f Data Ascii: sparent; font-size: 1.1em; cursor: pointer; color: #CCC; padding-left: 6px; padding-right: 6px;}.carousel .carousel-dots button.selected { color: black;}.carousel .carousel-dots button:focus { outline: none;}[dir="rtl"] .carousel .caro
2025-01-13 00:15:01 UTC	16384	IN	Data Raw: 77 3a 31 30 30 25 32 35 2c 68 3a 37 34 2e 39 25 32 35 2f 72 73 3d 77 3a 31 32 30 39 2c 68 3a 36 30 35 2c 63 67 3a 74 72 75 65 20 33 78 22 2f 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 35 31 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 22 20 73 72 63 53 65 74 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 73 74 6f 63 6b 2f 34 37 33 32 38 2f 3a 2f 63 72 3d 74 3a 32 35 2e 31 25 32 35 2c 6c 3a 30 25 32 35 2c 77 3a 31 30 30 25 32 35 2c 68 3a 37 34 2e 39 25 32 35 2f 72 73 3d 77 3a 37 31 39 2c 68 3a 33 36 30 2c 63 67 3a 74 72 75 65 2c 20 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 73 74 6f 63 6b 2f 34 37 33 32 38 2f 3a 2f 63 72 Data Ascii: w:100%25,h:74.9%25/rs=w:1209,h:605,cg:true 3x"/><source media="(min-width: 451px) and (max-width: 767px)" srcSet="//img1.wsimg.com/isteam/stock/47328/:/cr=t:25.1%25,l:0%25,w:100%25,h:74.9%25/rs=w:719,h:360,cg:true, //img1.wsimg.com/isteam/stock/47328/:/cr
2025-01-13 00:15:01 UTC	1564	IN	Data Raw: 3d 22 70 72 69 6d 61 72 79 22 20 64 61 74 61 2d 75 78 3d 22 42 75 74 74 6f 6e 50 72 69 6d 61 72 79 22 20 68 72 65 66 3d 22 22 20 64 61 74 61 2d 61 69 64 3d 22 46 4f 4f 54 45 52 5f 43 4f 4f 4b 49 45 5f 43 4c 4f 53 45 5f 52 45 4e 44 45 52 45 44 22 20 69 64 3d 22 31 64 62 61 65 64 66 34 2d 33 66 36 37 2d 34 62 64 64 2d 62 37 33 34 2d 39 30 66 39 34 61 34 61 62 38 63 36 2d 61 63 63 65 70 74 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 42 75 74 74 6f 6e 41 6c 70 68 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 61 20 63 31 2d 31 20 63 31 2d 35 68 20 63 31 2d 31 32 20 63 31 2d 33 6d 20 63 31 2d 31 34 20 63 31 2d 77 20 63 31 2d 38 69 20 63 31 2d 39 61 20 63 31 2d 39 62 20 63 31 2d 39 63 20 63 31 2d 36 33 20 63 31 2d 39 64 20 63 31 2d 31 Data Ascii: ="primary" data-ux="ButtonPrimary" href="" data-aid="FOOTER_COOKIE_CLOSE_RENDERED" id="1dbaedf4-3f67-4bdd-b734-90f94a4ab8c6-accept" data-typography="ButtonAlpha" class="x-el x-el-a c1-1 c1-5h c1-12 c1-3m c1-14 c1-w c1-8i c1-9a c1-9b c1-9c c1-63 c1-9d c1-1

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:15:01 UTC	658	OUT	GET /contact-us HTTP/1.1 Host: upholl-xlognusa.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://upholl-xlognusa.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=6c5e1f65-c686-4e90-a5d0-ece23b1d66fe; _tccl_visit=6c5e1f65-c686-4e90-a5d0-ece23b1d66fe; _scc_session=pc=1&C_TOUCH=2025-01-13T00:14:52.023Z
2025-01-13 00:15:01 UTC	1309	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/archivoblack/v21/HTxqL289NzCGg4MzN6KJ7eW6CYyF_g.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-fcac51d X-Version: fcac51d X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 5fd6e1d8f8c2d3f178af51c1fcd65f7c Date: Mon, 13 Jan 2025 00:15:01 GMT Connection: close Transfer-Encoding: chunked
2025-01-13 00:15:01 UTC	15075	IN	Data Raw: 66 66 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 30 63 31 36 38 38 38 36 2d 39 30 34 37 2d 34 39 36 37 2d 61 36 66 62 2d 62 66 33 37 38 62 35 62 62 62 38 61 2f 66 61 76 69 63 6f 6e 2f 65 39 32 39 37 39 30 35 2d 37 35 66 64 2d 34 63 36 37 2d 39 30 37 32 2d 64 62 30 64 33 37 36 35 31 38 34 37 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 36 2c 68 3a 31 36 2c 6d 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f Data Ascii: ffe1<!DOCTYPE html><html lang="en-US"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/0c168886-9047-4967-a6fb-bf378b5bbb8a/favicon/e9297905-75fd-4c67-9072-db0d37651847.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com/
2025-01-13 00:15:02 UTC	16384	IN	Data Raw: e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 e2 80 94 2d 0a 2a 2f 0a 0a 2f 2a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 31 20 62 79 20 74 79 50 6f 6c 61 6e 64 20 4c 75 6b 61 73 7a 20 44 7a 69 65 64 7a 69 63 20 28 74 65 61 6d 40 6c 61 74 6f 66 6f 6e 74 73 2e 63 6f 6d 29 20 77 69 74 68 20 52 65 73 65 72 76 65 64 20 46 6f 6e 74 20 4e 61 6d 65 20 22 4c 61 74 6f 22 2e 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 53 49 4c 20 4f 70 65 6e 20 46 6f 6e 74 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 31 2e 31 2e 0a 0a 54 68 69 73 20 46 6f 6e 74 20 53 6f 66 74 77 61 72 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 Data Ascii: -//Copyright (c) 2010-2011 by tyPoland Lukasz Dziedzic (team@latofonts.com) with Reserved Font Name "Lato". Licensed under the SIL Open Font License, Version 1.1.This Font Software is licensed
2025-01-13 00:15:02 UTC	16384	IN	Data Raw: 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 29 7b 2e 78 20 2e 63 31 2d 34 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 29 7b 2e 78 20 2e 63 31 2d 35 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 29 7b 2e 78 20 2e 63 31 2d 35 66 20 3e 20 64 69 76 7b 6d 61 78 2d 77 69 64 74 68 3a 31 31 36 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 29 7b 2e 78 20 2e 63 31 2d 36 62 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 39 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 29 7b 2e 78 20 2e 63 31 2d 39 74 7b 66 6f 6e 74 Data Ascii: (min-width: 1280px){.x .c1-43{font-size:32px}}@media (min-width: 1280px){.x .c1-55{font-size:22px}}@media (min-width: 1280px){.x .c1-5f > div{max-width:1160px}}@media (min-width: 1280px){.x .c1-6b{font-size:19px}}@media (min-width: 1280px){.x .c1-9t{font
2025-01-13 00:15:02 UTC	16384	IN	Data Raw: 20 61 20 6c 69 6e 65 21 3c 2f 68 34 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 43 6f 6e 74 65 6e 74 54 65 78 74 22 20 64 61 74 61 2d 61 69 64 3d 22 43 4f 4e 54 41 43 54 5f 49 4e 54 52 4f 5f 44 45 53 43 5f 52 45 4e 44 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 42 6f 64 79 41 6c 70 68 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 6c 20 63 31 2d 31 6d 20 63 31 2d 32 35 20 63 31 2d 31 6f 20 63 31 2d 36 69 20 63 31 2d 31 71 20 63 31 2d 31 72 20 63 31 2d 31 73 20 63 31 2d 32 36 20 63 31 2d 31 75 20 63 31 2d 31 76 20 63 31 2d 31 77 20 63 31 2d 36 6a 20 63 31 2d 36 6b 20 63 31 2d 36 6c 20 63 31 2d 36 6d 20 63 31 2d 36 6e 20 63 31 2d 36 6f 20 63 31 2d 36 70 20 63 31 2d 36 71 20 63 31 2d 36 72 20 63 31 2d 36 Data Ascii: a line!</h4><div data-ux="ContentText" data-aid="CONTACT_INTRO_DESC_REND" data-typography="BodyAlpha" class="x-el c1-1 c1-2 c1-1l c1-1m c1-25 c1-1o c1-6i c1-1q c1-1r c1-1s c1-26 c1-1u c1-1v c1-1w c1-6j c1-6k c1-6l c1-6m c1-6n c1-6o c1-6p c1-6q c1-6r c1-6
2025-01-13 00:15:02 UTC	1291	IN	Data Raw: 63 31 2d 31 6c 20 63 31 2d 70 20 63 31 2d 31 31 20 63 31 2d 34 20 63 31 2d 61 64 20 63 31 2d 61 65 20 63 31 2d 6d 20 63 31 2d 6e 20 63 31 2d 61 66 20 63 31 2d 37 75 20 63 31 2d 37 76 20 63 31 2d 62 68 20 63 31 2d 37 77 20 63 31 2d 37 78 20 63 31 2d 37 79 20 63 31 2d 37 6a 20 63 31 2d 37 7a 20 63 31 2d 36 36 20 63 31 2d 31 79 20 63 31 2d 38 30 20 63 31 2d 61 67 20 63 31 2d 62 70 20 63 31 2d 62 71 20 63 31 2d 62 72 20 63 31 2d 62 73 20 63 31 2d 38 34 20 63 31 2d 61 6b 20 63 31 2d 61 6c 20 63 31 2d 61 6d 20 63 31 2d 61 6e 22 20 64 61 74 61 2d 74 63 63 6c 3d 22 75 78 32 2e 43 4f 4f 4b 49 45 5f 42 41 4e 4e 45 52 2e 63 6f 6f 6b 69 65 31 2e 47 72 6f 75 70 2e 44 65 66 61 75 6c 74 2e 42 75 74 74 6f 6e 2e 50 72 69 6d 61 72 79 2e 38 37 37 32 33 2e 63 6c 69 63 6b 2c Data Ascii: c1-1l c1-p c1-11 c1-4 c1-ad c1-ae c1-m c1-n c1-af c1-7u c1-7v c1-bh c1-7w c1-7x c1-7y c1-7j c1-7z c1-66 c1-1y c1-80 c1-ag c1-bp c1-bq c1-br c1-bs c1-84 c1-ak c1-al c1-am c1-an" data-tccl="ux2.COOKIE_BANNER.cookie1.Group.Default.Button.Primary.87723.click,

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:15:11 UTC	647	OUT	GET /accounts/0c168886-9047-4967-a6fb-bf378b5bbb8a/config?fields[]=cart HTTP/1.1 Host: api.ola.godaddy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://upholl-xlognusa.godaddysites.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://upholl-xlognusa.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:15:11 UTC	753	IN	HTTP/1.1 404 Not Found Date: Mon, 13 Jan 2025 00:15:11 GMT Content-Type: application/json; charset=utf-8 Content-Length: 29 Connection: close access-control-allow-origin: https://upholl-xlognusa.godaddysites.com access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD access-control-expose-headers: access-control-max-age: 7200 access-control-allow-credentials: true x-frame-options: SAMEORIGIN x-xss-protection: 0 x-content-type-options: nosniff x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin vary: Accept, Origin cache-control: no-cache x-request-id: 33daf01fc5048bcb74fdba73f83d429f x-runtime: 0.004991 Strict-Transport-Security: max-age=15724800; includeSubDomains
2025-01-13 00:15:11 UTC	29	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 41 63 63 6f 75 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 7d Data Ascii: {"error":"Account not found"}

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:15:13 UTC	619	OUT	GET /v3/recaptcha HTTP/1.1 Host: contact.apps-api.instantpage.secureserver.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://upholl-xlognusa.godaddysites.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://upholl-xlognusa.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:15:14 UTC	300	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 00:15:13 GMT Content-Type: application/json; charset=utf-8 Content-Length: 54 Connection: close x-powered-by: Slay Access-Control-Allow-Origin: * ETag: W/"36-/JybxMl8Y5PwwWjo7fmcJSDGXLQ" Strict-Transport-Security: max-age=15724800; includeSubDomains
2025-01-13 00:15:14 UTC	54	IN	Data Raw: 7b 22 73 69 74 65 4b 65 79 22 3a 22 36 4c 66 6a 73 70 67 55 41 41 41 41 41 42 73 62 6a 47 39 69 64 36 71 58 51 4b 5a 6b 71 62 36 5f 48 70 63 65 36 75 69 5f 22 7d Data Ascii: {"siteKey":"6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_"}

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:15:13 UTC	608	OUT	GET /mapbox-gl-js/v2.6.1/mapbox-gl.js HTTP/1.1 Host: api.mapbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Origin: https://upholl-xlognusa.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://upholl-xlognusa.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:15:14 UTC	647	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 891730 Connection: close Date: Mon, 30 Dec 2024 02:59:59 GMT X-Powered-By: Express Access-Control-Allow-Origin: * ETag: "d4073478ae47eea5ac3ddaa7a1e4465f" Last-Modified: Fri Nov 19 2021 00:01:14 GMT+0000 (Coordinated Universal Time) Cache-Control: max-age=31536000 Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 04599a8a3c6eb66f23e5ae02d1ec4cf2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: cfhIpyMwhCV2dzpzTIevoBLfpG2oobhzHFedWFbHHR1p1PKAq9pzIQ== Age: 1199715
2025-01-13 00:15:14 UTC	16384	IN	Data Raw: 2f 2a 20 4d 61 70 62 6f 78 20 47 4c 20 4a 53 20 69 73 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 32 30 20 4d 61 70 62 6f 78 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 4d 61 70 62 6f 78 20 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 20 28 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 70 62 6f 78 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 74 6f 73 2f 29 2e 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 20 3a 0a 74 79 70 65 6f Data Ascii: /* Mapbox GL JS is Copyright 2020 Mapbox and subject to the Mapbox Terms of Service ((https://www.mapbox.com/legal/tos/). */(function (global, factory) {typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :typeo
2025-01-13 00:15:14 UTC	16384	IN	Data Raw: 20 30 2c 21 30 29 7d 76 61 72 20 72 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 63 6f 6e 73 74 20 72 3d 6e 65 77 20 61 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 72 2e 6f 70 65 6e 28 74 2e 6d 65 74 68 6f 64 7c 7c 22 47 45 54 22 2c 74 2e 75 72 6c 2c 21 30 29 2c 22 61 72 72 61 79 42 75 66 66 65 72 22 3d 3d 3d 74 2e 74 79 70 65 26 26 28 72 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 22 61 72 72 61 79 62 75 66 66 65 72 22 29 3b 66 6f 72 28 63 6f 6e 73 74 20 65 20 69 6e 20 74 2e 68 65 61 64 65 72 73 29 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 65 2c 74 2e 68 65 61 64 65 72 73 5b 65 5d 29 3b 72 65 74 75 72 6e 20 22 6a 73 6f 6e 22 3d 3d 3d 74 2e 74 79 70 65 26 26 28 72 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 22 74 65 78 Data Ascii: 0,!0)}var r;return function(t,e){const r=new a.XMLHttpRequest;r.open(t.method\|\|"GET",t.url,!0),"arrayBuffer"===t.type&&(r.responseType="arraybuffer");for(const e in t.headers)r.setRequestHeader(e,t.headers[e]);return "json"===t.type&&(r.responseType="tex
2025-01-13 00:15:14 UTC	16384	IN	Data Raw: 70 72 6f 70 65 72 74 79 2d 74 79 70 65 22 3a 22 64 61 74 61 2d 63 6f 6e 73 74 61 6e 74 22 7d 2c 22 74 65 78 74 2d 61 6e 63 68 6f 72 22 3a 7b 22 74 79 70 65 22 3a 22 65 6e 75 6d 22 2c 22 76 61 6c 75 65 73 22 3a 7b 22 63 65 6e 74 65 72 22 3a 7b 7d 2c 22 6c 65 66 74 22 3a 7b 7d 2c 22 72 69 67 68 74 22 3a 7b 7d 2c 22 74 6f 70 22 3a 7b 7d 2c 22 62 6f 74 74 6f 6d 22 3a 7b 7d 2c 22 74 6f 70 2d 6c 65 66 74 22 3a 7b 7d 2c 22 74 6f 70 2d 72 69 67 68 74 22 3a 7b 7d 2c 22 62 6f 74 74 6f 6d 2d 6c 65 66 74 22 3a 7b 7d 2c 22 62 6f 74 74 6f 6d 2d 72 69 67 68 74 22 3a 7b 7d 7d 2c 22 64 65 66 61 75 6c 74 22 3a 22 63 65 6e 74 65 72 22 2c 22 72 65 71 75 69 72 65 73 22 3a 5b 22 74 65 78 74 2d 66 69 65 6c 64 22 2c 7b 22 21 22 3a 22 74 65 78 74 2d 76 61 72 69 61 62 6c 65 2d 61 Data Ascii: property-type":"data-constant"},"text-anchor":{"type":"enum","values":{"center":{},"left":{},"right":{},"top":{},"bottom":{},"top-left":{},"top-right":{},"bottom-left":{},"bottom-right":{}},"default":"center","requires":["text-field",{"!":"text-variable-a
2025-01-13 00:15:14 UTC	15108	IN	Data Raw: 5d 7d 2c 22 70 72 6f 70 65 72 74 79 2d 74 79 70 65 22 3a 22 64 61 74 61 2d 64 72 69 76 65 6e 22 7d 2c 22 69 63 6f 6e 2d 68 61 6c 6f 2d 62 6c 75 72 22 3a 7b 22 74 79 70 65 22 3a 22 6e 75 6d 62 65 72 22 2c 22 64 65 66 61 75 6c 74 22 3a 30 2c 22 6d 69 6e 69 6d 75 6d 22 3a 30 2c 22 74 72 61 6e 73 69 74 69 6f 6e 22 3a 74 72 75 65 2c 22 75 6e 69 74 73 22 3a 22 70 69 78 65 6c 73 22 2c 22 72 65 71 75 69 72 65 73 22 3a 5b 22 69 63 6f 6e 2d 69 6d 61 67 65 22 5d 2c 22 65 78 70 72 65 73 73 69 6f 6e 22 3a 7b 22 69 6e 74 65 72 70 6f 6c 61 74 65 64 22 3a 74 72 75 65 2c 22 70 61 72 61 6d 65 74 65 72 73 22 3a 5b 22 7a 6f 6f 6d 22 2c 22 66 65 61 74 75 72 65 22 2c 22 66 65 61 74 75 72 65 2d 73 74 61 74 65 22 5d 7d 2c 22 70 72 6f 70 65 72 74 79 2d 74 79 70 65 22 3a 22 64 61 Data Ascii: ]},"property-type":"data-driven"},"icon-halo-blur":{"type":"number","default":0,"minimum":0,"transition":true,"units":"pixels","requires":["icon-image"],"expression":{"interpolated":true,"parameters":["zoom","feature","feature-state"]},"property-type":"da
2025-01-13 00:15:14 UTC	16384	IN	Data Raw: 6f 6c 6f 72 28 74 29 3b 72 65 74 75 72 6e 20 65 3f 6e 65 77 20 68 65 28 65 5b 30 5d 2f 32 35 35 2a 65 5b 33 5d 2c 65 5b 31 5d 2f 32 35 35 2a 65 5b 33 5d 2c 65 5b 32 5d 2f 32 35 35 2a 65 5b 33 5d 2c 65 5b 33 5d 29 3a 76 6f 69 64 20 30 7d 74 6f 53 74 72 69 6e 67 28 29 7b 63 6f 6e 73 74 5b 74 2c 65 2c 72 2c 6e 5d 3d 74 68 69 73 2e 74 6f 41 72 72 61 79 28 29 3b 72 65 74 75 72 6e 20 60 72 67 62 61 28 24 7b 4d 61 74 68 2e 72 6f 75 6e 64 28 74 29 7d 2c 24 7b 4d 61 74 68 2e 72 6f 75 6e 64 28 65 29 7d 2c 24 7b 4d 61 74 68 2e 72 6f 75 6e 64 28 72 29 7d 2c 24 7b 6e 7d 29 60 7d 74 6f 41 72 72 61 79 28 29 7b 63 6f 6e 73 74 7b 72 3a 74 2c 67 3a 65 2c 62 3a 72 2c 61 3a 6e 7d 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 6e 3f 5b 30 2c 30 2c 30 2c 30 5d 3a 5b 32 35 Data Ascii: olor(t);return e?new he(e[0]/255e[3],e[1]/255e[3],e[2]/255*e[3],e[3]):void 0}toString(){const[t,e,r,n]=this.toArray();return `rgba(${Math.round(t)},${Math.round(e)},${Math.round(r)},${n})`}toArray(){const{r:t,g:e,b:r,a:n}=this;return 0===n?[0,0,0,0]:[25
2025-01-13 00:15:14 UTC	16384	IN	Data Raw: 79 70 65 29 7b 63 6f 6e 73 74 20 73 3d 71 65 28 65 2e 63 6f 6f 72 64 69 6e 61 74 65 73 2c 6e 2c 69 29 2c 61 3d 58 65 28 74 2e 67 65 6f 6d 65 74 72 79 28 29 2c 72 2c 6e 2c 69 29 3b 69 66 28 21 50 65 28 72 2c 6e 29 29 72 65 74 75 72 6e 20 21 31 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 61 29 69 66 28 21 4f 65 28 74 2c 73 29 29 72 65 74 75 72 6e 20 21 31 7d 69 66 28 22 4d 75 6c 74 69 50 6f 6c 79 67 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 29 7b 63 6f 6e 73 74 20 73 3d 4e 65 28 65 2e 63 6f 6f 72 64 69 6e 61 74 65 73 2c 6e 2c 69 29 2c 61 3d 58 65 28 74 2e 67 65 6f 6d 65 74 72 79 28 29 2c 72 2c 6e 2c 69 29 3b 69 66 28 21 50 65 28 72 2c 6e 29 29 72 65 74 75 72 6e 20 21 31 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 61 29 69 66 28 21 6a 65 28 74 2c 73 29 29 Data Ascii: ype){const s=qe(e.coordinates,n,i),a=Xe(t.geometry(),r,n,i);if(!Pe(r,n))return !1;for(const t of a)if(!Oe(t,s))return !1}if("MultiPolygon"===e.type){const s=Ne(e.coordinates,n,i),a=Xe(t.geometry(),r,n,i);if(!Pe(r,n))return !1;for(const t of a)if(!je(t,s))
2025-01-13 00:15:14 UTC	16384	IN	Data Raw: 75 72 6e 20 75 2e 65 72 72 6f 72 28 22 42 72 61 6e 63 68 20 6c 61 62 65 6c 73 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 2e 22 29 3b 69 5b 53 74 72 69 6e 67 28 74 29 5d 3d 73 2e 6c 65 6e 67 74 68 3b 7d 63 6f 6e 73 74 20 63 3d 65 2e 70 61 72 73 65 28 6c 2c 61 2c 6e 29 3b 69 66 28 21 63 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6e 3d 6e 7c 7c 63 2e 74 79 70 65 2c 73 2e 70 75 73 68 28 63 29 3b 7d 63 6f 6e 73 74 20 61 3d 65 2e 70 61 72 73 65 28 74 5b 31 5d 2c 31 2c 51 74 29 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6f 3d 65 2e 70 61 72 73 65 28 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 2c 74 2e 6c 65 6e 67 74 68 2d 31 2c 6e 29 3b 72 65 74 75 72 6e 20 6f 3f 22 76 61 6c 75 65 22 21 3d 3d 61 2e 74 79 70 65 2e 6b 69 6e 64 26 26 65 2e Data Ascii: urn u.error("Branch labels must be unique.");i[String(t)]=s.length;}const c=e.parse(l,a,n);if(!c)return null;n=n\|\|c.type,s.push(c);}const a=e.parse(t[1],1,Qt);if(!a)return null;const o=e.parse(t[t.length-1],t.length-1,n);return o?"value"!==a.type.kind&&e.
2025-01-13 00:15:14 UTC	15108	IN	Data Raw: 48 74 29 2c 28 74 2c 65 29 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 72 20 6f 66 20 65 29 69 66 28 21 72 2e 65 76 61 6c 75 61 74 65 28 74 29 29 72 65 74 75 72 6e 20 21 31 3b 72 65 74 75 72 6e 20 21 30 7d 5d 5d 7d 2c 61 6e 79 3a 7b 74 79 70 65 3a 48 74 2c 6f 76 65 72 6c 6f 61 64 73 3a 5b 5b 5b 48 74 2c 48 74 5d 2c 28 74 2c 5b 65 2c 72 5d 29 3d 3e 65 2e 65 76 61 6c 75 61 74 65 28 74 29 7c 7c 72 2e 65 76 61 6c 75 61 74 65 28 74 29 5d 2c 5b 58 72 28 48 74 29 2c 28 74 2c 65 29 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 72 20 6f 66 20 65 29 69 66 28 72 2e 65 76 61 6c 75 61 74 65 28 74 29 29 72 65 74 75 72 6e 20 21 30 3b 72 65 74 75 72 6e 20 21 31 7d 5d 5d 7d 2c 22 21 22 3a 5b 48 74 2c 5b 48 74 5d 2c 28 74 2c 5b 65 5d 29 3d 3e 21 65 2e 65 76 61 6c 75 61 74 65 28 74 29 Data Ascii: Ht),(t,e)=>{for(const r of e)if(!r.evaluate(t))return !1;return !0}]]},any:{type:Ht,overloads:[[[Ht,Ht],(t,[e,r])=>e.evaluate(t)\|\|r.evaluate(t)],[Xr(Ht),(t,e)=>{for(const r of e)if(r.evaluate(t))return !0;return !1}]]},"!":[Ht,[Ht],(t,[e])=>!e.evaluate(t)
2025-01-13 00:15:14 UTC	16384	IN	Data Raw: 74 68 29 72 65 74 75 72 6e 20 21 31 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 24 74 79 70 65 22 3a 72 65 74 75 72 6e 20 5b 22 66 69 6c 74 65 72 2d 74 79 70 65 2d 69 6e 22 2c 5b 22 6c 69 74 65 72 61 6c 22 2c 65 5d 5d 3b 63 61 73 65 22 24 69 64 22 3a 72 65 74 75 72 6e 20 5b 22 66 69 6c 74 65 72 2d 69 64 2d 69 6e 22 2c 5b 22 6c 69 74 65 72 61 6c 22 2c 65 5d 5d 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 32 30 30 26 26 21 65 2e 73 6f 6d 65 28 28 74 3d 3e 74 79 70 65 6f 66 20 74 21 3d 74 79 70 65 6f 66 20 65 5b 30 5d 29 29 3f 5b 22 66 69 6c 74 65 72 2d 69 6e 2d 6c 61 72 67 65 22 2c 74 2c 5b 22 6c 69 74 65 72 61 6c 22 2c 65 2e 73 6f 72 74 28 43 6e 29 5d 5d 3a 5b 22 66 69 6c 74 65 72 2d 69 6e 2d 73 6d 61 6c 6c 22 2c 74 2c 5b Data Ascii: th)return !1;switch(t){case"$type":return ["filter-type-in",["literal",e]];case"$id":return ["filter-id-in",["literal",e]];default:return e.length>200&&!e.some((t=>typeof t!=typeof e[0]))?["filter-in-large",t,["literal",e.sort(Cn)]]:["filter-in-small",t,[
2025-01-13 00:15:14 UTC	16384	IN	Data Raw: 35 31 2c 53 69 3d 74 3d 3e 74 3e 3d 31 32 33 35 32 26 26 74 3c 3d 31 32 34 34 37 2c 49 69 3d 74 3d 3e 74 3e 3d 31 32 34 34 38 26 26 74 3c 3d 31 32 35 34 33 2c 7a 69 3d 74 3d 3e 74 3e 3d 31 32 35 34 34 26 26 74 3c 3d 31 32 35 39 31 2c 54 69 3d 74 3d 3e 74 3e 3d 31 32 37 30 34 26 26 74 3c 3d 31 32 37 33 35 2c 4d 69 3d 74 3d 3e 74 3e 3d 31 32 37 33 36 26 26 74 3c 3d 31 32 37 38 33 2c 43 69 3d 74 3d 3e 74 3e 3d 31 32 37 38 34 26 26 74 3c 3d 31 32 37 39 39 2c 42 69 3d 74 3d 3e 74 3e 3d 31 32 38 30 30 26 26 74 3c 3d 31 33 30 35 35 2c 45 69 3d 74 3d 3e 74 3e 3d 31 33 30 35 36 26 26 74 3c 3d 31 33 33 31 31 2c 44 69 3d 74 3d 3e 74 3e 3d 31 33 33 31 32 26 26 74 3c 3d 31 39 39 30 33 2c 50 69 3d 74 3d 3e 74 3e 3d 31 39 39 36 38 26 26 74 3c 3d 34 30 39 35 39 2c 56 69 Data Ascii: 51,Si=t=>t>=12352&&t<=12447,Ii=t=>t>=12448&&t<=12543,zi=t=>t>=12544&&t<=12591,Ti=t=>t>=12704&&t<=12735,Mi=t=>t>=12736&&t<=12783,Ci=t=>t>=12784&&t<=12799,Bi=t=>t>=12800&&t<=13055,Ei=t=>t>=13056&&t<=13311,Di=t=>t>=13312&&t<=19903,Pi=t=>t>=19968&&t<=40959,Vi

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:15:14 UTC	690	OUT	GET /recaptcha/api.js?render=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://upholl-xlognusa.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:15:14 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 13 Jan 2025 00:15:14 GMT Date: Mon, 13 Jan 2025 00:15:14 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-13 00:15:14 UTC	641	IN	Data Raw: 35 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2025-01-13 00:15:14 UTC	834	IN	Data Raw: 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 Data Ascii: YffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecati
2025-01-13 00:15:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:15:15 UTC	724	OUT	GET /sw.js HTTP/1.1 Host: upholl-xlognusa.godaddysites.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://upholl-xlognusa.godaddysites.com/sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=6c5e1f65-c686-4e90-a5d0-ece23b1d66fe; _tccl_visit=6c5e1f65-c686-4e90-a5d0-ece23b1d66fe; _scc_session=pc=2&C_TOUCH=2025-01-13T00:15:08.514Z If-None-Match: 745506bcc61d06b71c8bb43bcdc17124
2025-01-13 00:15:15 UTC	271	IN	HTTP/1.1 304 Not Modified Vary: Accept-Encoding Server: DPS/2.0.0+sha-fcac51d X-Version: fcac51d X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 745506bcc61d06b71c8bb43bcdc17124 Date: Mon, 13 Jan 2025 00:15:15 GMT Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:15:15 UTC	577	OUT	GET /mapbox-gl-js/v2.6.1/mapbox-gl.css HTTP/1.1 Host: api.mapbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/css,/;q=0.1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://upholl-xlognusa.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:15:15 UTC	633	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 36619 Connection: close Date: Thu, 05 Sep 2024 08:21:24 GMT X-Powered-By: Express Access-Control-Allow-Origin: * ETag: "7c190b0f4a05ad3f59a76bc4880ab6dd" Last-Modified: Fri Nov 19 2021 00:01:18 GMT+0000 (Coordinated Universal Time) Cache-Control: max-age=31536000 Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 94faae20b0f122c4555025f52a2fd744.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 4NKadbXYGggXYn-cPNTW7BV5ifu4j_a_ufKOcF9fP0RIVNY1_jYhng== Age: 11202831
2025-01-13 00:15:15 UTC	15751	IN	Data Raw: 2e 6d 61 70 62 6f 78 67 6c 2d 6d 61 70 7b 66 6f 6e 74 3a 31 32 70 78 2f 32 30 70 78 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 7d 2e 6d 61 70 62 6f 78 67 6c 2d 63 61 6e 76 61 73 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 7d 2e 6d 61 70 62 6f 78 67 6c 2d 6d 61 70 3a 2d 77 65 62 6b 69 74 2d 66 75 6c 6c 2d 73 63 72 65 65 6e 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 6d 61 Data Ascii: .mapboxgl-map{font:12px/20px Helvetica Neue,Arial,Helvetica,sans-serif;overflow:hidden;position:relative;-webkit-tap-highlight-color:rgba(0,0,0,0)}.mapboxgl-canvas{position:absolute;left:0;top:0}.mapboxgl-map:-webkit-full-screen{width:100%;height:100%}.ma
2025-01-13 00:15:15 UTC	16384	IN	Data Raw: 45 20 25 33 43 70 61 74 68 20 64 3d 27 4d 31 30 20 34 43 39 20 34 20 39 20 35 20 39 20 35 76 2e 31 41 35 20 35 20 30 20 30 20 30 20 35 2e 31 20 39 48 35 73 2d 31 20 30 2d 31 20 31 20 31 20 31 20 31 20 31 68 2e 31 41 35 20 35 20 30 20 30 20 30 20 39 20 31 34 2e 39 76 2e 31 73 30 20 31 20 31 20 31 20 31 2d 31 20 31 2d 31 76 2d 2e 31 61 35 20 35 20 30 20 30 20 30 20 33 2e 39 2d 33 2e 39 68 2e 31 73 31 20 30 20 31 2d 31 2d 31 2d 31 2d 31 2d 31 68 2d 2e 31 41 35 20 35 20 30 20 30 20 30 20 31 31 20 35 2e 31 56 35 73 30 2d 31 2d 31 2d 31 7a 6d 30 20 32 2e 35 61 33 2e 35 20 33 2e 35 20 30 20 31 20 31 20 30 20 37 20 33 2e 35 20 33 2e 35 20 30 20 31 20 31 20 30 2d 37 7a 27 2f 25 33 45 20 25 33 43 63 69 72 63 6c 65 20 69 64 3d 27 64 6f 74 27 20 63 78 3d 27 31 30 27 Data Ascii: E %3Cpath d='M10 4C9 4 9 5 9 5v.1A5 5 0 0 0 5.1 9H5s-1 0-1 1 1 1 1 1h.1A5 5 0 0 0 9 14.9v.1s0 1 1 1 1-1 1-1v-.1a5 5 0 0 0 3.9-3.9h.1s1 0 1-1-1-1-1-1h-.1A5 5 0 0 0 11 5.1V5s0-1-1-1zm0 2.5a3.5 3.5 0 1 1 0 7 3.5 3.5 0 1 1 0-7z'/%3E %3Ccircle id='dot' cx='10'
2025-01-13 00:15:15 UTC	4484	IN	Data Raw: 31 30 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 6d 61 70 62 6f 78 67 6c 2d 70 6f 70 75 70 2d 61 6e 63 68 6f 72 2d 74 6f 70 20 2e 6d 61 70 62 6f 78 67 6c 2d 70 6f 70 75 70 2d 74 69 70 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6d 61 70 62 6f 78 67 6c 2d 70 6f 70 75 70 2d 61 6e 63 68 6f 72 2d 74 6f 70 2d 6c 65 66 74 20 2e 6d 61 70 62 6f 78 67 6c 2d 70 6f 70 75 70 2d 74 69 70 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f Data Ascii: 10px solid transparent;z-index:1}.mapboxgl-popup-anchor-top .mapboxgl-popup-tip{align-self:center;border-top:none;border-bottom-color:#fff}.mapboxgl-popup-anchor-top-left .mapboxgl-popup-tip{align-self:flex-start;border-top:none;border-left:none;border-bo