Windows Analysis Report
https://met-aa-mass-klog-in.godaddysites.com/

Overview

General Information

Sample URL:	https://met-aa-mass-klog-in.godaddysites.com/
Analysis ID:	1521164
Infos:

Detection

HTMLPhisher

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish64

Detected non-DNS traffic on DNS port

HTML title does not match URL

Classification

Signatures

Phishing

Yara detected HtmlPhish64

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

HTML title does not match URL

Source: https://met-aa-mass-klog-in.godaddysites.com/

HTTP Parser: Title: Metaask Login | Metmask does not match URL

Source: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base

HTTP Parser: No favicon

Source: https://met-aa-mass-klog-in.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://met-aa-mass-klog-in.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49766 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic

TCP traffic: 192.168.2.4:60906 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: met-aa-mass-klog-in.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: met-aa-mass-klog-in.godaddysites.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://met-aa-mass-klog-in.godaddysites.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=f30e8a6a-249e-4b95-aca7-2880c7c5018f; _tccl_visit=f30e8a6a-249e-4b95-aca7-2880c7c5018f; _scc_session=pc=1&C_TOUCH=2024-09-28T03:19:12.177Z
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: met-aa-mass-klog-in.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://met-aa-mass-klog-in.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: met-aa-mass-klog-in.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://met-aa-mass-klog-in.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=f30e8a6a-249e-4b95-aca7-2880c7c5018f; _tccl_visit=f30e8a6a-249e-4b95-aca7-2880c7c5018f; _scc_session=pc=1&C_TOUCH=2024-09-28T03:19:12.177Z

Source: global traffic	DNS traffic detected: DNS query: met-aa-mass-klog-in.godaddysites.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: isteam.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: events.api.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: www.godaddy.com

Source: chromecache_161.2.dr, chromecache_205.2.dr, chromecache_165.2.dr, chromecache_204.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_210.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR74z9ShvucWzsMKyDmafctaNY.woff2)
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR84z9ShvucWzsMKyhdTOI.woff2)
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/isteam/stock/107927
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
Source: chromecache_210.2.dr	String found in binary or memory: https://met-aa-mass-klog-in.godaddysites.com/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60913
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49766 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@22/125@18/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1996,i,17863230781198281869,14497352886875192849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://met-aa-mass-klog-in.godaddysites.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1996,i,17863230781198281869,14497352886875192849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
13.248.243.5	met-aa-mass-klog-in.godaddysites.com	United States	16509	AMAZON-02US	false
35.157.66.55	isteam.wsimg.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4
192.168.2.6

Contacted Domains

Name	IP	Active
www.google.com	142.250.184.196	true
met-aa-mass-klog-in.godaddysites.com	13.248.243.5	true
isteam.wsimg.com	35.157.66.55	true
fp2e7a.wpc.phicdn.net	192.229.221.95	true
img1.wsimg.com	unknown	unknown
csp.secureserver.net	unknown	unknown
events.api.secureserver.net	unknown	unknown
www.godaddy.com	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
https://met-aa-mass-klog-in.godaddysites.com/manifest.webmanifest	false	unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base	false	unknown
https://met-aa-mass-klog-in.godaddysites.com/sw.js	false	unknown
https://met-aa-mass-klog-in.godaddysites.com/	false	unknown

ID:	1521164
Product:	CloudBasic
Start time:	05:18:11
Start date:	28.09.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 143	RIFF (little-endian) data, Web/P image, VP8 encoding, 1535x1021, Scaling: [none]x[none], YUV color, decoders should clamp	C0D1D98CE1B1E0C0E1C50CFE76FF1A56	A9E95951EDFE680AFB5E0999128764B6E303A8D4	93671E51E52BB9082D8DE84B1CE771AE676E2E968B99F77EDB583FE73F284614
Chrome Cache Entry: 144	ASCII text, with very long lines (2368)	ABFD2ADA44521989F7C040FC3EAEF6C9	D682B5CAAD4C1C839262A6D03CAFB95E0AF64A21	3F2536BBC0A15193347F2D6DD1F4E8BEFE2E221DF5C4FF99FDA6BD18C428C857
Chrome Cache Entry: 145	ASCII text, with very long lines (1352)	5CC6B93D41889C0A55C6C4FCD2D89713	51A59C1DAE337817C4EBAC39FBE61C232705A893	8671CFDFA128168DB2136D7C17F55BA98DDBA221CDD1ACBBE559D4969280FD51
Chrome Cache Entry: 146	ASCII text, with very long lines (905)	62A914B2C847D4D02B76164D7A2A54C6	20D9F49A90A51FA6C8420640610DF77F7A96D919	B08C2864EC27736C507B1CA4B3A225A19147841B861CD8494DAF95FA370FE639
Chrome Cache Entry: 147	ASCII text, with very long lines (1352)	5CC6B93D41889C0A55C6C4FCD2D89713	51A59C1DAE337817C4EBAC39FBE61C232705A893	8671CFDFA128168DB2136D7C17F55BA98DDBA221CDD1ACBBE559D4969280FD51
Chrome Cache Entry: 148	Web Open Font Format (Version 2), TrueType, length 11644, version 1.0	734A5B0ADBD95DBAE76BD14E82758144	FD6C0BFDF7F7AAE7B6169BE7DBDFEBB416208106	EE7EF1D38007C4773D1E000177123FB440383C0D0187FD7D2D6978A0ED0F8976
Chrome Cache Entry: 149	ASCII text, with very long lines (1875)	42A956F14F8E89C314FA201AB5FC9388	67651220687C3869FD6FAB960AE4B3CA53776E2F	A9D6036466352258F71ADF94E2EB6DA8F9BEEE5FCBC73351180D1C8331D53949
Chrome Cache Entry: 150	ASCII text, with very long lines (65536), with no line terminators	55BAF821A59FAD53AA754C85AE19D0EA	B1662F5F5B119836E5E9C91C5E4A448BCD6CCC6D	D26724E378F16CC4135849CCABF5A1BA738C3F4BA952950ACB34E73F24869E83
Chrome Cache Entry: 151	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 99x88, components 3	24389A8E36B73F962BA9037CF1A36F0B	832D8A1A7DAF012AF13C12E3CD1CF55651EECC25	FC7D4FC60E843C92F29C257C69ED2B41E53F5182BFE8C5AD2B5E8064088F7501
Chrome Cache Entry: 152	HTML document, ASCII text	9096227552A13300434E641355ABC2E4	780E4C7AE33BD33E675529B307F430C1121920E0	3F2F5D1E3AA2035B8EBCC9CC4906768D63F34C142DC7D60F82B90D393E509ED6
Chrome Cache Entry: 153	Web Open Font Format (Version 2), TrueType, length 23040, version 1.0	DE69CF9E514DF447D1B0BB16F49D2457	2AC78601179C3A63BA3F3F3081556B12DDCAF655	C447DD7677B419DB7B21DBDFC6277C7816A913FFDA76FD2E52702DF538DE0E49
Chrome Cache Entry: 154	ASCII text, with very long lines (23126)	3D092EF4ABA019B14F01C40747E40554	1C26145272FCF4CA91AF501288CCE84B1BFFD38B	B4C48B77BBE6BBACF7D16BDAA81F5509FB8EA0FBFDDFBF2D12307F7A88518846
Chrome Cache Entry: 155	ASCII text, with very long lines (21556)	1C56940A864F144FAE2EB40EE952CB94	EBFC754CE962A1F9025853F2995B3987F0383D87	3C37A4AA3CF6AAAE6921A4B750C0E4F81FD338D6878BE90B0FAF2F921039CB23
Chrome Cache Entry: 156	ASCII text, with very long lines (51853)	A8E1D3D56157F21917E1385AD3681213	1F9199C0C9E47B87EA162F8B67E6921F2E6318BB	54DC8B6610EC335C93A01783DD346C81843C59E254604C03C3A05904E12168E5
Chrome Cache Entry: 157	RIFF (little-endian) data, Web/P image	41741F190ECEBBA886890C3100C48E08	01A25272D3FCFFF29C073B75BDED13850F2B7A28	795AD9FD4C12E74A5696B6D955BD518BA65EBF30C74657A38EA874EFDBE93E36
Chrome Cache Entry: 158	ASCII text	ACD4F2B6117E5054FC9BF848AE8121CA	AE4D5F41D854BA8D99A4A1EC6EE6D6C3C0A859B8	66774F89FCFA5674BE9AEF60E3FE3CB81E4DD88246BDE4E5392DF8B99FEFD4DB
Chrome Cache Entry: 159	RIFF (little-endian) data, Web/P image	4BA7E4CD4E8240B13F2FBAA46D839086	5F5D7FE9D036B2773E686A8BA6EE6080B1358CFA	D45BBD2F58CB3178433D9B4A002CF4BC445F26E5E2413D7457339CC45E40C6CA
Chrome Cache Entry: 160	RIFF (little-endian) data, Web/P image	E2E0BF68FD72B948CCD67520A217574C	4D7A20ABFF6AD8E48C0A384BC2BE9A9636076DB8	073C1532772824259BABAFDC6E1AF61DCFD354D8D0DAF5B66329D5B28FA7B385
Chrome Cache Entry: 161	Unicode text, UTF-8 text, with very long lines (63425)	D8A1FE8B9FD01233B8A030EA79C21DF0	1B2B4474F72FCEE56977101E7C85A8201F730903	91DEC32BF6596B875CDEB8C7BFFC8B5029A870657D3D7C790E8939F17E24DC20
Chrome Cache Entry: 162	ASCII text, with very long lines (1211)	CB9BFA0FBDD957FBE7F4841B70341DB2	9CAD12A3580D3E4D340CB867E88B687C75564C5A	513864FD4EBD1926F3E1E78B436A90C2BC3A5D16835B50415E7B318D7DEEC2A2
Chrome Cache Entry: 163	ASCII text, with very long lines (3283)	1E4C3172663AD2ACC0CEC9723E93D39F	1610B980BB81B4A4330399C81A4B23A78A70C42B	F23EC23F7792FF56FB516E06280BED56D3A80D1CFD8D48F22C2B1F93CA69F0D5
Chrome Cache Entry: 164	Web Open Font Format (Version 2), TrueType, length 11728, version 1.0	B2845477C209263ADB2F8D6059491758	76C6F1F64027566CB5CBF88BC642B708D34D1302	8F40676C64A72CB5D80952071B7A2F371650D7B2BB787EA01D8C5BC88EF734C7
Chrome Cache Entry: 165	Unicode text, UTF-8 text, with very long lines (20947)	753CB19EE1A756E46FAA0F118B1B4E01	248885E3BFE7E71989BA9FFFB33B6EFF18166FEC	ED9FFA2FBA5ECC75AF2F99E6EBADD5B927086F258037C2A848E94449CC579991
Chrome Cache Entry: 166	ASCII text	8F12765EB30FBDCFCDC116D13F7FC272	506E45B7D3930756EACCE0DAD449A3C8CDB3EAC6	265995EB76326E95613750F6F6570B850F5C22280D262DE9B9632A16CEB98B9B
Chrome Cache Entry: 167	ASCII text, with very long lines (65536), with no line terminators	6A7950CC31489069917BF817B62B2BFE	44AAB6E9B8FDBAA23EA297CE69E26422277907C0	1B4DACB0DAFDA81D48EE0890EA113B3B8275BF2D16D5325F971F16EB75F7218A
Chrome Cache Entry: 168	ASCII text, with very long lines (905)	62A914B2C847D4D02B76164D7A2A54C6	20D9F49A90A51FA6C8420640610DF77F7A96D919	B08C2864EC27736C507B1CA4B3A225A19147841B861CD8494DAF95FA370FE639
Chrome Cache Entry: 169	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1535x1021, components 3	9136B98B23F9699551E487D3E4A783AC	C8D723ED969C52F2590517C2BCC3C589D1D823E7	F0BAC715E3178D69E243AE17CA82F0A3EA0C0FF4F0E4AFB7417E0AD675F1F477
Chrome Cache Entry: 170	ASCII text, with very long lines (383)	21AD22788E6CAA18A4E9E57F7372B108	50EBDD2452193BEAB7D1899F788FBBF32D90DD55	0FE26F07B9E5D49590F55D31CBC381CA9337850F89B09940E3B384FCD6D26464
Chrome Cache Entry: 171	ASCII text, with very long lines (13834)	C7B1DBB0EEF8600D5F57536998855E4D	03908243C34D5A373ACBA694EB16E30F088B4F7D	53DA7DD341F1EF0C484A7B56A17D86669287DA5D082AAA8A0AF04FD3816B6631
Chrome Cache Entry: 172	ASCII text	DAA79AD7558674F6A12D962ABF47F2F6	03EEA0EBEBD11EC14CFA5A651EB0ACA2604829A7	604281887CD770ED21601933E9636A7A9C8A57A30D7D796AE7D760EEF64D5089
Chrome Cache Entry: 173	ASCII text, with very long lines (32974), with no line terminators	F3B90464A4B0C8F7005E960B8C4C1C90	FC0715FF298495D44E6B9F2537C003E8F50E476C	262BBAAEFFC4F7915476CE13DCE389A447D18008C1995C435B8292D6AD667009
Chrome Cache Entry: 174	JSON data	77DBF2CC48C0ABEFEF7ADCBBDB29B525	88572A51ED8ACA2B08AEFF7F0C4A4097A74A660A	AD9C56FF25342095CC0BD3ADC902D0C73E0E947FCA580EA735C564F9C671F451
Chrome Cache Entry: 175	ASCII text, with very long lines (383)	21AD22788E6CAA18A4E9E57F7372B108	50EBDD2452193BEAB7D1899F788FBBF32D90DD55	0FE26F07B9E5D49590F55D31CBC381CA9337850F89B09940E3B384FCD6D26464
Chrome Cache Entry: 176	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 177	ASCII text	DAA79AD7558674F6A12D962ABF47F2F6	03EEA0EBEBD11EC14CFA5A651EB0ACA2604829A7	604281887CD770ED21601933E9636A7A9C8A57A30D7D796AE7D760EEF64D5089
Chrome Cache Entry: 178	ASCII text, with very long lines (516)	0D42FFB998A9CF7C25824CF365C7D0C9	7A95B87AC3B0C813F195EA46EFB9E792023EAFBE	3418AA0FB5D19C3909DD89CCF081C9B59EBAD2A0334EED58373ED395D228487A
Chrome Cache Entry: 179	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 180	ASCII text, with very long lines (28371)	5A6B85B96D4E9E8689ADB86DC02D0E1E	F46815FB37D1C7B46A793AF2D3CB7738D64BA489	E20B2774BF751096D5825C113CAEE3CFAF84C5209CB16FA5FA9761CF3707936C
Chrome Cache Entry: 181	RIFF (little-endian) data, Web/P image	01A1DB03B75069ED57227AF8C08CA40C	C9BD27398E9914A7581F18E5ABBE491641886E3A	C8EBC61D1A19199EDF15F9D82BC85FDA7A2EF00EF185C4355D3AED38924CF7D3
Chrome Cache Entry: 182	ASCII text	8578A331AD09BB2EF6359FEC3916BEFC	38B68F5C02CBDB6E29C50F8858710E0392B0B8D6	3D7E7552E3801941A408C504AA732223FE2BED5D12E248680847D772182CB639
Chrome Cache Entry: 183	RIFF (little-endian) data, Web/P image	9639421C88C869682FCD0F6E2CED9E8C	E9DF9AD8D3B5E501E21F7C25D4806E5C5418E0D6	CF29C206707EEE5BE29405DF14018ECB8415048D6B02BB1B8D5FE45742CBC6E2
Chrome Cache Entry: 184	ASCII text, with very long lines (8076)	D0BF5E9E6E778CE2D940F214EC04700C	2ECB604E1F2E8CA95A0413DB58C153B9AA710A29	1B7F2E117669F2643EA895B6BEDB818796AF009F19A6FC1F8B8A1DC9C30B6D9B
Chrome Cache Entry: 185	ASCII text, with very long lines (65536), with no line terminators	55BAF821A59FAD53AA754C85AE19D0EA	B1662F5F5B119836E5E9C91C5E4A448BCD6CCC6D	D26724E378F16CC4135849CCABF5A1BA738C3F4BA952950ACB34E73F24869E83
Chrome Cache Entry: 186	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 36x32, components 3	E0FBD748A9BAA3E378126E08C1C0CB3A	6F0048805FE72B5BD4D6A2F03EB5FC4D51F76AB1	79571F643B6665CABF0481B211EAFDDD9DCCAF1EB30DCC2BE92615F990557560
Chrome Cache Entry: 187	ASCII text, with very long lines (330)	C86B7F8224FA45FB1682AC94D8F75AC6	9561F67AAE74B14702DB79C22F9C7F9E6F3B3239	010083B88E95F18CEFDB90796ACCE02073E91FC8DFEFB27A7F5F3F75529E4906
Chrome Cache Entry: 188	PNG image data, 365 x 365, 8-bit colormap, non-interlaced	6BB8052BC7F2C0D9300F0E0193179E4B	BA6EFD84345FF91C8D84E51523F896B58417AD14	FF6F74E26052855FCD1116EB2BF61829F7400511CAD592C18C61F62C4CF72888
Chrome Cache Entry: 189	ASCII text	8578A331AD09BB2EF6359FEC3916BEFC	38B68F5C02CBDB6E29C50F8858710E0392B0B8D6	3D7E7552E3801941A408C504AA732223FE2BED5D12E248680847D772182CB639
Chrome Cache Entry: 190	ASCII text, with very long lines (3283)	1E4C3172663AD2ACC0CEC9723E93D39F	1610B980BB81B4A4330399C81A4B23A78A70C42B	F23EC23F7792FF56FB516E06280BED56D3A80D1CFD8D48F22C2B1F93CA69F0D5
Chrome Cache Entry: 191	ASCII text, with very long lines (3043)	852CBC5322260E00B44F2C682F88B2C7	BCAF229E6134F43EB5F974C9891E4D16FAF1D344	BAE437DBEFE58377D88C9D579DB7C59F4202F3FBF88866D0005FB375BE6B2CD7
Chrome Cache Entry: 192	ASCII text, with very long lines (21556)	1C56940A864F144FAE2EB40EE952CB94	EBFC754CE962A1F9025853F2995B3987F0383D87	3C37A4AA3CF6AAAE6921A4B750C0E4F81FD338D6878BE90B0FAF2F921039CB23
Chrome Cache Entry: 193	ASCII text, with very long lines (330)	C86B7F8224FA45FB1682AC94D8F75AC6	9561F67AAE74B14702DB79C22F9C7F9E6F3B3239	010083B88E95F18CEFDB90796ACCE02073E91FC8DFEFB27A7F5F3F75529E4906
Chrome Cache Entry: 194	ASCII text, with very long lines (516)	0D42FFB998A9CF7C25824CF365C7D0C9	7A95B87AC3B0C813F195EA46EFB9E792023EAFBE	3418AA0FB5D19C3909DD89CCF081C9B59EBAD2A0334EED58373ED395D228487A
Chrome Cache Entry: 195	ASCII text, with very long lines (2368)	ABFD2ADA44521989F7C040FC3EAEF6C9	D682B5CAAD4C1C839262A6D03CAFB95E0AF64A21	3F2536BBC0A15193347F2D6DD1F4E8BEFE2E221DF5C4FF99FDA6BD18C428C857
Chrome Cache Entry: 196	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 197	ASCII text, with very long lines (1875)	42A956F14F8E89C314FA201AB5FC9388	67651220687C3869FD6FAB960AE4B3CA53776E2F	A9D6036466352258F71ADF94E2EB6DA8F9BEEE5FCBC73351180D1C8331D53949
Chrome Cache Entry: 198	ASCII text, with very long lines (3043)	852CBC5322260E00B44F2C682F88B2C7	BCAF229E6134F43EB5F974C9891E4D16FAF1D344	BAE437DBEFE58377D88C9D579DB7C59F4202F3FBF88866D0005FB375BE6B2CD7
Chrome Cache Entry: 199	ASCII text	8F12765EB30FBDCFCDC116D13F7FC272	506E45B7D3930756EACCE0DAD449A3C8CDB3EAC6	265995EB76326E95613750F6F6570B850F5C22280D262DE9B9632A16CEB98B9B
Chrome Cache Entry: 200	ASCII text, with very long lines (1211)	CB9BFA0FBDD957FBE7F4841B70341DB2	9CAD12A3580D3E4D340CB867E88B687C75564C5A	513864FD4EBD1926F3E1E78B436A90C2BC3A5D16835B50415E7B318D7DEEC2A2
Chrome Cache Entry: 201	ASCII text, with very long lines (829)	9219CF782ED219BD3929A51E99503BC2	6AAC399854EC0405949566FAFDCA8C121F0CDA58	89388608D7BCECED5AD74231681FFCE822AD580ACB9FD7E492970176E3E38347
Chrome Cache Entry: 202	ASCII text, with very long lines (23126)	3D092EF4ABA019B14F01C40747E40554	1C26145272FCF4CA91AF501288CCE84B1BFFD38B	B4C48B77BBE6BBACF7D16BDAA81F5509FB8EA0FBFDDFBF2D12307F7A88518846
Chrome Cache Entry: 203	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 204	Unicode text, UTF-8 text, with very long lines (63425)	D8A1FE8B9FD01233B8A030EA79C21DF0	1B2B4474F72FCEE56977101E7C85A8201F730903	91DEC32BF6596B875CDEB8C7BFFC8B5029A870657D3D7C790E8939F17E24DC20
Chrome Cache Entry: 205	Unicode text, UTF-8 text, with very long lines (20947)	753CB19EE1A756E46FAA0F118B1B4E01	248885E3BFE7E71989BA9FFFB33B6EFF18166FEC	ED9FFA2FBA5ECC75AF2F99E6EBADD5B927086F258037C2A848E94449CC579991
Chrome Cache Entry: 206	ASCII text, with very long lines (28371)	5A6B85B96D4E9E8689ADB86DC02D0E1E	F46815FB37D1C7B46A793AF2D3CB7738D64BA489	E20B2774BF751096D5825C113CAEE3CFAF84C5209CB16FA5FA9761CF3707936C
Chrome Cache Entry: 207	Web Open Font Format (Version 2), TrueType, length 23580, version 1.0	E1B3B5908C9CF23DFB2B9C52B9A023AB	FCD4136085F2A03481D9958CC6793A5ED98E714C	918B7DC3E2E2D015C16CE08B57BCB64D2253BAFC1707658F361E72865498E537
Chrome Cache Entry: 208	ASCII text, with very long lines (522)	FADB3719FFA2A9E96CDC64FFEA0220FA	B9B00833E59E99ECE036B518D8429AF5EFEC1163	E8A5463FF98210D3017DEEE55D5A287AD01AAA11DBE7DEB7D07F7D15D7F609F2
Chrome Cache Entry: 209	ASCII text, with very long lines (13834)	C7B1DBB0EEF8600D5F57536998855E4D	03908243C34D5A373ACBA694EB16E30F088B4F7D	53DA7DD341F1EF0C484A7B56A17D86669287DA5D082AAA8A0AF04FD3816B6631
Chrome Cache Entry: 210	HTML document, Unicode text, UTF-8 text, with very long lines (32477)	CC07EDF22FFB3C60F9BBC57D779BCF40	380C91D29CBD8DD50FBCF84452E5409DD8CA253E	B3FE25D3AA2D04A1DE3C9B920671E0D4648474D316701DBC15CF3299BCC33548
Chrome Cache Entry: 211	ASCII text, with no line terminators	978034923C1E389394ECC1ED10496A34	E691FBCE6762010186A080F6E8473EDF4128FCE8	9DF22DBD875B7A2FDBB70A0B2E6778C9E7681398CA6022D383BE1AC2B84086C2
Chrome Cache Entry: 212	ASCII text, with very long lines (1824)	EDC15AD5DAAC3CFA744BFFDB1E0174BE	E314A5CA702D0E77B2C2C023ADDADE266EA223B2	3B54AEACFDA01BE53800632989A82F6F5A7F92E927159A37A4324B38D3DFFEF8
Chrome Cache Entry: 213	ASCII text, with very long lines (829)	9219CF782ED219BD3929A51E99503BC2	6AAC399854EC0405949566FAFDCA8C121F0CDA58	89388608D7BCECED5AD74231681FFCE822AD580ACB9FD7E492970176E3E38347
Chrome Cache Entry: 214	ASCII text, with very long lines (65536), with no line terminators	6A7950CC31489069917BF817B62B2BFE	44AAB6E9B8FDBAA23EA297CE69E26422277907C0	1B4DACB0DAFDA81D48EE0890EA113B3B8275BF2D16D5325F971F16EB75F7218A
Chrome Cache Entry: 215	ASCII text, with very long lines (522)	FADB3719FFA2A9E96CDC64FFEA0220FA	B9B00833E59E99ECE036B518D8429AF5EFEC1163	E8A5463FF98210D3017DEEE55D5A287AD01AAA11DBE7DEB7D07F7D15D7F609F2
Chrome Cache Entry: 216	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 18x16, components 3	E1944615D398BEF2F757F144963A2D1D	263F3B23CF498F5D532BAE56D292D7A69E70B721	234849ABAADC3C8E593CA1C9FC92D28F5522CEEE95AE7D17724D282D7452545C
Chrome Cache Entry: 217	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 218	ASCII text, with very long lines (51853)	A8E1D3D56157F21917E1385AD3681213	1F9199C0C9E47B87EA162F8B67E6921F2E6318BB	54DC8B6610EC335C93A01783DD346C81843C59E254604C03C3A05904E12168E5
Chrome Cache Entry: 219	ASCII text	ACD4F2B6117E5054FC9BF848AE8121CA	AE4D5F41D854BA8D99A4A1EC6EE6D6C3C0A859B8	66774F89FCFA5674BE9AEF60E3FE3CB81E4DD88246BDE4E5392DF8B99FEFD4DB
Chrome Cache Entry: 220	ASCII text, with very long lines (8076)	D0BF5E9E6E778CE2D940F214EC04700C	2ECB604E1F2E8CA95A0413DB58C153B9AA710A29	1B7F2E117669F2643EA895B6BEDB818796AF009F19A6FC1F8B8A1DC9C30B6D9B
Chrome Cache Entry: 221	ASCII text, with very long lines (1824)	EDC15AD5DAAC3CFA744BFFDB1E0174BE	E314A5CA702D0E77B2C2C023ADDADE266EA223B2	3B54AEACFDA01BE53800632989A82F6F5A7F92E927159A37A4324B38D3DFFEF8
Chrome Cache Entry: 222	PNG image data, 600 x 300, 8-bit colormap, non-interlaced	49F3298C8BDDE7154851E88DBE74AECD	07795FAAA963D998FDCA0A1D75FC0215F27246AA	34796F99349812C6C9105940ADFEFBF3C2585EB1D584C6A1AD862AEAB1D1A99E

Windows Analysis Report
https://met-aa-mass-klog-in.godaddysites.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://met-aa-mass-klog-in.godaddysites.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://met-aa-mass-klog-in.godaddysites.com/