Edit tour

Windows Analysis Report
https://loggmaskemttaa.godaddysites.com/

Overview

General Information

Sample URL:	https://loggmaskemttaa.godaddysites.com/
Analysis ID:	1521302
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 560 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2352,i,4418151650000227051,1231046625292374263,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://loggmaskemttaa.godaddysites.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

HTTP traffic detected: POST /accounts HTTP/1.1Host: api.ola.godaddy.comConnection: keep-aliveContent-Length: 54sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-Type: application/json;charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://loggmaskemttaa.godaddysites.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://loggmaskemttaa.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Source: https://loggmaskemttaa.godaddysites.com/contact-us	HTTP Parser: No favicon
Source: https://loggmaskemttaa.godaddysites.com/contact-us	HTTP Parser: No favicon
Source: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base	HTTP Parser: No favicon

Source: https://loggmaskemttaa.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://loggmaskemttaa.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49784 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: loggmaskemttaa.godaddysites.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: isteam.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: api.ola.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: events.api.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: www.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: contact.apps-api.instantpage.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: api.mapbox.com
Source: global traffic	DNS traffic detected: DNS query: events.mapbox.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 28 Sep 2024 05:29:31 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://loggmaskemttaa.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: f0b135070796d580f5924490db92a2a8X-Runtime: 0.004246vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundLink: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossoriginCache-Control: max-age=30Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.comContent-Type: text/html;charset=utf-8Vary: Accept-EncodingServer: DPS/2.0.0+sha-227ca78X-Version: 227ca78X-SiteId: us-east-1Set-Cookie: dps_site_id=us-east-1; path=/; secureDate: Sat, 28 Sep 2024 05:29:35 GMTConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 28 Sep 2024 05:29:46 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://loggmaskemttaa.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: 0a0460d92ce493830f1e82c6b7df7a30X-Runtime: 0.003557vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 28 Sep 2024 05:29:55 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://loggmaskemttaa.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: 37fb5cdc14b3a5e991c59d0d4eb1da65X-Runtime: 0.005214vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 28 Sep 2024 05:29:58 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://loggmaskemttaa.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: 9c3d034cc2392d70f58aa9c2e0789ae4X-Runtime: 0.004731vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 28 Sep 2024 05:30:01 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://loggmaskemttaa.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: 19c84ca9ebf2647de7a589ec4f2d6cdeX-Runtime: 0.003733vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 28 Sep 2024 05:30:05 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://loggmaskemttaa.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: e9a84a01604d4e8f931caf152191c28cX-Runtime: 0.004756vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 28 Sep 2024 05:30:34 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://loggmaskemttaa.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: d17e85d008da58132a8ff681faa91332X-Runtime: 0.003744vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains

Source: chromecache_435.2.dr, chromecache_326.2.dr, chromecache_434.2.dr, chromecache_305.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_301.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_467.2.dr, chromecache_422.2.dr	String found in binary or memory: https://api.ola.$
Source: chromecache_467.2.dr, chromecache_422.2.dr	String found in binary or memory: https://cart-checkout.dev-secureserver.net
Source: chromecache_467.2.dr, chromecache_422.2.dr	String found in binary or memory: https://cart-checkout.secureserver.net
Source: chromecache_467.2.dr, chromecache_422.2.dr	String found in binary or memory: https://cart-checkout.test-secureserver.net
Source: chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_464.2.dr	String found in binary or memory: https://contact.apps-api.instantpage.secureserver.net
Source: chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_278.2.dr	String found in binary or memory: https://docs.mapbox.com/mapbox-gl-js/guides/install/#transpiling
Source: chromecache_427.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_427.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_427.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_427.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_427.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_257.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2)
Source: chromecache_257.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTPYgFE_.woff2)
Source: chromecache_257.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2)
Source: chromecache_257.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2)
Source: chromecache_457.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hJFQNcOM.woff2)
Source: chromecache_457.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hJVQNcOM.woff2)
Source: chromecache_457.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_301.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://github.com/JulietaUla/Montserrat)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_301.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://github.com/andrew-paglinawan/QuicksandFamily)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_301.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://github.com/clauseggers/Playfair-Display)
Source: chromecache_413.2.dr	String found in binary or memory: https://github.com/lancedikson/bowser
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTPYgFE_.woff2)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hJFQNcOM.woff2)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hJVQNcOM.woff2)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2)
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_301.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
Source: chromecache_286.2.dr	String found in binary or memory: https://loggmaskemttaa.godaddysites.com/
Source: chromecache_372.2.dr	String found in binary or memory: https://loggmaskemttaa.godaddysites.com/404
Source: chromecache_301.2.dr	String found in binary or memory: https://loggmaskemttaa.godaddysites.com/contact-us
Source: chromecache_304.2.dr	String found in binary or memory: https://loggmaskemttaa.godaddysites.com/our-company
Source: chromecache_274.2.dr	String found in binary or memory: https://loggmaskemttaa.godaddysites.com/projects
Source: chromecache_443.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_464.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_464.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_443.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_443.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_286.2.dr, chromecache_372.2.dr, chromecache_301.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica
Source: chromecache_401.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=$
Source: chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.
Source: chromecache_349.2.dr, chromecache_291.2.dr, chromecache_306.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Source: chromecache_278.2.dr	String found in binary or memory: https://www.mapbox.com/legal/tos/).

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2352,i,4418151650000227051,1231046625292374263,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://loggmaskemttaa.godaddysites.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 --field-trial-handle=2352,i,4418151650000227051,1231046625292374263,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
13.224.189.108	unknown	United States	16509	AMAZON-02US	false
35.157.66.55	isteam.wsimg.com	United States	16509	AMAZON-02US	false
45.40.130.49	proxy.k8s.pnc.phx.secureserver.net	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
198.71.248.123	proxy.k8s.pnc.iad.secureserver.net	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
3.121.64.201	unknown	United States	16509	AMAZON-02US	false
13.248.243.5	loggmaskemttaa.godaddysites.com	United States	16509	AMAZON-02US	false
13.224.189.49	api.mapbox.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
172.217.16.132	unknown	United States	15169	GOOGLEUS	false
52.19.91.138	events.mapbox.com	United States	16509	AMAZON-02US	false

IP
192.168.2.7
192.168.2.4
192.168.2.5

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521302
Start date and time:	2024-09-28 07:28:25 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://loggmaskemttaa.godaddysites.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@22/359@46/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://loggmaskemttaa.godaddysites.com/projects Browse: https://loggmaskemttaa.godaddysites.com/contact-us Browse: https://loggmaskemttaa.godaddysites.com/our-company Browse: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base Browse: https://loggmaskemttaa.godaddysites.com/our-company#7f82f342-587f-4cb1-b21c-9272803183b5

Source	Detection	Scanner	Label
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
http://scripts.sil.org/OFL	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
api.mapbox.com	13.224.189.49	true	false	unknown
events.mapbox.com	52.19.91.138	true	false	unknown
loggmaskemttaa.godaddysites.com	13.248.243.5	true	false	unknown
proxy.k8s.pnc.phx.secureserver.net	45.40.130.49	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
isteam.wsimg.com	35.157.66.55	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
proxy.k8s.pnc.iad.secureserver.net	198.71.248.123	true	false	unknown
img1.wsimg.com	unknown	unknown	false	unknown
csp.secureserver.net	unknown	unknown	false	unknown
events.api.secureserver.net	unknown	unknown	false	unknown
www.godaddy.com	unknown	unknown	false	unknown
api.ola.godaddy.com	unknown	unknown	false	unknown
contact.apps-api.instantpage.secureserver.net	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://www.google.com/js/bg/dubcxWuhhbqw8uaLSFFGvELnk5WmffD3wjoYeQZ33gk.js	false	unknown
https://api.mapbox.com/v4/mapbox.mapbox-terrain-v2,mapbox.mapbox-streets-v7/14/4190/6097.vector.pbf?sku=101ca5m8ouiZP&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	unknown
https://api.mapbox.com/styles/v1/godaddy/ciovyeygh0029atm6zbntgxk2/sprite.json?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	unknown
https://api.mapbox.com/fonts/v1/godaddy/DIN%20Offc%20Pro%20Medium,Arial%20Unicode%20MS%20Regular/0-255.pbf?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	unknown
https://loggmaskemttaa.godaddysites.com/our-company	true	unknown
https://loggmaskemttaa.godaddysites.com/manifest.webmanifest	true	unknown
https://api.ola.godaddy.com/v2/accounts/a6fcc29c-f937-40b9-92a2-3a60e79157ca/categories	false	unknown
https://api.mapbox.com/mapbox-gl-js/v2.6.1/mapbox-gl.js	false	unknown
https://contact.apps-api.instantpage.secureserver.net/v3/recaptcha	false	unknown
https://api.mapbox.com/v4/mapbox.mapbox-terrain-v2,mapbox.mapbox-streets-v7/14/4191/6097.vector.pbf?sku=101ca5m8ouiZP&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	unknown
https://events.mapbox.com/events/v2?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	unknown
https://api.mapbox.com/mapbox-gl-js/v2.6.1/mapbox-gl.css	false	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_&co=aHR0cHM6Ly9sb2dnbWFza2VtdHRhYS5nb2RhZGR5c2l0ZXMuY29tOjQ0Mw..&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=invisible&cb=h3sirt3id3vk	false	unknown
https://api.ola.godaddy.com/accounts/a6fcc29c-f937-40b9-92a2-3a60e79157ca/config	false	unknown
https://loggmaskemttaa.godaddysites.com/contact-us	true	unknown
https://loggmaskemttaa.godaddysites.com/favicon.ico	true	unknown
https://www.google.com/recaptcha/api.js?render=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_	false	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY	false	unknown
https://api.mapbox.com/styles/v1/godaddy/ciovyeygh0029atm6zbntgxk2?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	unknown
https://api.mapbox.com/v4/mapbox.mapbox-terrain-v2,mapbox.mapbox-streets-v7/14/4191/6096.vector.pbf?sku=101ca5m8ouiZP&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	unknown
https://api.mapbox.com/fonts/v1/godaddy/DIN%20Offc%20Pro%20Bold,Arial%20Unicode%20MS%20Bold/0-255.pbf?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	unknown
https://api.mapbox.com/styles/v1/godaddy/ciovyeygh0029atm6zbntgxk2/sprite.png?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	unknown
https://loggmaskemttaa.godaddysites.com/	true	unknown
https://api.mapbox.com/v4/mapbox.mapbox-terrain-v2,mapbox.mapbox-streets-v7/14/4190/6096.vector.pbf?sku=101ca5m8ouiZP&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base	false	unknown
https://api.ola.godaddy.com/accounts	false	unknown
https://api.mapbox.com/fonts/v1/godaddy/DIN%20Offc%20Pro%20Regular,Arial%20Unicode%20MS%20Regular/0-255.pbf?access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	unknown
https://api.mapbox.com/v4/mapbox.mapbox-terrain-v2,mapbox.mapbox-streets-v7.json?secure&access_token=pk.eyJ1IjoiZ29kYWRkeSIsImEiOiJjaWc5b20wcjcwczAydGFsdGxvamdvYnV0In0.JK9HuO6nAzc8BnMv6W7NBQ	false	unknown
https://loggmaskemttaa.godaddysites.com/our-company#7f82f342-587f-4cb1-b21c-9272803183b5	true	unknown
https://api.ola.godaddy.com/accounts/a6fcc29c-f937-40b9-92a2-3a60e79157ca/config?fields[]=cart	false	unknown
https://loggmaskemttaa.godaddysites.com/projects	true	unknown
https://loggmaskemttaa.godaddysites.com/sw.js	true	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	false	URL Reputation: safe	unknown
https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://cart-checkout.dev-secureserver.net	chromecache_467.2.dr, chromecache_422.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/contact	chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	false	URL Reputation: safe	unknown
https://www.mapbox.com/legal/tos/).	chromecache_278.2.dr	false		unknown
https://policies.google.com/terms	chromecache_464.2.dr	false	URL Reputation: safe	unknown
https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	false	URL Reputation: safe	unknown
https://cart-checkout.secureserver.net	chromecache_467.2.dr, chromecache_422.2.dr	false		unknown
https://github.com/JulietaUla/Montserrat)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_301.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://docs.mapbox.com/mapbox-gl-js/guides/install/#transpiling	chromecache_278.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://www.google.com/recaptcha/api2/	chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr, chromecache_291.2.dr	false		unknown
https://cart-checkout.test-secureserver.net	chromecache_467.2.dr, chromecache_422.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_443.2.dr	false	URL Reputation: safe	unknown
http://jedwatson.github.io/classnames	chromecache_435.2.dr, chromecache_326.2.dr, chromecache_434.2.dr, chromecache_305.2.dr	false	URL Reputation: safe	unknown
https://github.com/clauseggers/Playfair-Display)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_301.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	false	URL Reputation: safe	unknown
https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTPYgFE_.woff2)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://contact.apps-api.instantpage.secureserver.net	chromecache_464.2.dr	false		unknown
https://api.ola.$	chromecache_467.2.dr, chromecache_422.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hJFQNcOM.woff2)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	false	URL Reputation: safe	unknown
https://recaptcha.net	chromecache_443.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api.js?render=$	chromecache_401.2.dr	false		unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_301.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://github.com/lancedikson/bowser	chromecache_413.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_443.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_284.2.dr, chromecache_369.2.dr, chromecache_443.2.dr	false	URL Reputation: safe	unknown
https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hJVQNcOM.woff2)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_301.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://github.com/andrew-paglinawan/QuicksandFamily)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_301.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://policies.google.com/privacy	chromecache_464.2.dr	false	URL Reputation: safe	unknown
http://scripts.sil.org/OFL	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_301.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false	URL Reputation: safe	unknown
https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)	chromecache_286.2.dr, chromecache_372.2.dr, chromecache_274.2.dr, chromecache_304.2.dr	false		unknown
https://loggmaskemttaa.godaddysites.com/404	chromecache_372.2.dr	true		unknown

Input	Output
URL: https://loggmaskemttaa.godaddysites.com/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"ACCEPT", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://loggmaskemttaa.godaddysites.com/contact-us Model: jbxai	{ "brand":["LOGGMASKEMTTAA"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"ACCEPT", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://loggmaskemttaa.godaddysites.com/projects Model: jbxai	{ "brand":["LOGGMASKEMTTAA"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"CONTACT US", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://loggmaskemttaa.godaddysites.com/our-company Model: jbxai	{ "brand":["LOGGMASKEMTTAA"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"CONTACT US", "text_input_field_labels":["George, Founder/CEO", "Peter, President", "Beth, CMO"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://loggmaskemttaa.godaddysites.com/our-company#7f82f342-587f-4cb1-b21c-9272803183b5 Model: jbxai	{ "brand":["Loggmaskemt TAA"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"ACCEPT", "text_input_field_labels":["This website uses cookies."], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base Model: jbxai	{ "brand":["Godaddy"], "contains_trigger_text":true, "trigger_text":"http://www.godaddy.com/websites/website-builder?", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4746
Entropy (8bit):	5.43263936709525
Encrypted:	false
SSDEEP:	96:JIOEaN2om6FZOjOEaN2vEOEaN2bjVc+uHOEaN2fNJIOpaN2om6FZOjOpaN2vEOpa:JHN2om/UN2vrN2brVN2zqN2om/dN2vOD
MD5:	8F7193B1D6CB79157DAC8C78C0CA278F
SHA1:	DF34BAC1DBBDBD9BC2AB6DD0EDF812FBC1F836D7
SHA-256:	2CBC26AD577AF00FE4EBB6A7FD07B781DE12DE1C6A6DB843651B6B061EDBC8DE
SHA-512:	BD863F4C3E1FB61ECA2DE480E2391CD9C0EA1FBBD457CF40C28FD0C75DB77136F1D42A6230A92DF7C8DE56144B64BC8E7DB541F4F83AD0791D065E693B0D9776
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Playfair+Display:400,700,900&display=swap"
Preview:	/* cyrillic /.@font-face {. font-family: 'Playfair Display';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Playfair Display';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTPYgFE_.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-family: 'Playfair Display';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2) format('woff2');. unicode

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2024 07:29:21.853280067 CEST	53	49252	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:21.903178930 CEST	53	57220	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:23.007184982 CEST	53	58595	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:23.031511068 CEST	57934	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:23.031785965 CEST	59888	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:23.039829016 CEST	53	57934	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:23.040908098 CEST	53	59888	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:23.743438959 CEST	64881	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:23.743530035 CEST	55876	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:23.744283915 CEST	53	51867	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:23.750674963 CEST	54254	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:23.750950098 CEST	50599	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:23.759171009 CEST	53	50599	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:23.771919966 CEST	53	54254	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:23.987473011 CEST	50397	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:23.987651110 CEST	49777	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:24.060971975 CEST	53	49777	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:24.061002016 CEST	53	50397	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:25.469042063 CEST	56592	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:25.469238043 CEST	55425	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:31.306605101 CEST	51156	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:31.306801081 CEST	58924	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:31.317042112 CEST	53	51156	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:31.319267988 CEST	53	58924	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:34.612155914 CEST	61317	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:34.612754107 CEST	53984	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:34.788289070 CEST	55777	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:34.788597107 CEST	57668	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:36.811300993 CEST	60297	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:36.811537981 CEST	61713	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:29:38.848839045 CEST	138	138	192.168.2.4	192.168.2.255
Sep 28, 2024 07:29:40.604156971 CEST	53	62276	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:45.759668112 CEST	53	57741	1.1.1.1	192.168.2.4
Sep 28, 2024 07:29:59.784754992 CEST	53	61904	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:05.796984911 CEST	50076	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:05.803730011 CEST	61786	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:10.977174997 CEST	57697	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:10.977174997 CEST	50490	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:10.985229015 CEST	54064	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:10.985502005 CEST	54969	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:10.987050056 CEST	53	57697	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:10.987174988 CEST	53	50490	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:10.991718054 CEST	53	54064	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:10.991966009 CEST	53	54969	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:11.785759926 CEST	58716	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:11.786015034 CEST	56279	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:11.787708998 CEST	65501	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:11.787878036 CEST	63171	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:11.796133995 CEST	53	65501	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:11.796461105 CEST	53	63171	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:11.797676086 CEST	53	56279	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:11.797686100 CEST	53	58716	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:14.702940941 CEST	51244	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:14.703176975 CEST	61785	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:14.709667921 CEST	53	51244	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:14.710078001 CEST	53	61785	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:15.776281118 CEST	54536	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:15.776602983 CEST	64383	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:15.783390999 CEST	53	54536	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:15.784363985 CEST	53	64383	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:16.887142897 CEST	57661	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:16.888282061 CEST	53292	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:16.894753933 CEST	53	57661	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:16.895317078 CEST	53	53292	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:19.875837088 CEST	51012	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:19.876007080 CEST	61302	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:19.882687092 CEST	53	61302	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:19.882781982 CEST	53	51012	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:21.574999094 CEST	53	57118	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:22.905694008 CEST	53	57064	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:32.166311979 CEST	58250	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:32.166798115 CEST	64456	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:32.174530983 CEST	53	49599	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:32.804550886 CEST	58111	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:32.804698944 CEST	61610	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:32.813709974 CEST	53	58111	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:32.816179037 CEST	53	61610	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:33.372051954 CEST	54626	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:33.372765064 CEST	60924	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:33.385809898 CEST	53	54626	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:33.386691093 CEST	53	60924	1.1.1.1	192.168.2.4
Sep 28, 2024 07:30:35.224791050 CEST	63745	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:35.225095987 CEST	62886	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:35.438321114 CEST	63195	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:35.438936949 CEST	58801	53	192.168.2.4	1.1.1.1
Sep 28, 2024 07:30:49.488492966 CEST	53	50436	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
2024-09-28 05:29:23 UTC	674	OUT	GET / HTTP/1.1 Host: loggmaskemttaa.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 05:29:23 UTC	1147	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: d81dbb970e54f9c70a980bf1463251e3 Date: Sat, 28 Sep 2024 05:29:23 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 05:29:23 UTC	15237	IN	Data Raw: 31 32 34 61 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 4d 65 74 f0 9d 96 86 6d 61 73 6b 20 7c 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e Data Ascii: 124aa<!DOCTYPE html><html lang="en-US"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>Metmask \| Login</title><meta name="description" con
2024-09-28 05:29:23 UTC	16384	IN	Data Raw: 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 Data Ascii: pe=radio]{box-sizing:border-box;padding:0}.x-el-input[type=number]::-webkit-inner-spin-button,.x-el-input[type=number]::-webkit-outer-spin-button{height:auto}.x-el-input[type=search]{-webkit-appearance:textfield;box-sizing:content-box}.x-el-input[type=sea
2024-09-28 05:29:23 UTC	16384	IN	Data Raw: 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 32 38 38 64 70 69 29 7b 2e 78 20 2e 63 31 2d 37 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 20 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 20 31 30 30 25 29 2c 20 75 72 6c 28 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 31 61 65 61 35 34 30 66 2d 30 37 30 34 2d 34 30 66 35 2d 62 62 37 35 2d 64 66 66 65 37 65 64 38 35 34 38 61 2f 64 61 6e 65 2d 64 65 61 6e 65 72 2d 35 34 31 37 38 35 2d 75 6e 73 70 6c 61 73 68 2e 6a 70 67 2f 3a 2f 72 73 3d 77 3a 34 36 30 35 2c 6d 22 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 Data Ascii: n-resolution: 288dpi){.x .c1-7o{background-image:linear-gradient(to bottom, rgba(0, 0, 0, 0) 0%, rgba(0, 0, 0, 0) 100%), url("//img1.wsimg.com/isteam/ip/1aea540f-0704-40f5-bb75-dffe7ed8548a/dane-deaner-541785-unsplash.jpg/:/rs=w:4605,m")}}@media (min-widt
2024-09-28 05:29:24 UTC	16384	IN	Data Raw: 66 2d 61 35 31 34 32 62 38 35 33 31 66 64 22 20 64 61 74 61 2d 65 64 69 74 2d 69 6e 74 65 72 61 63 74 69 76 65 3d 22 74 72 75 65 22 20 68 72 65 66 3d 22 2f 63 6f 6e 74 61 63 74 2d 75 73 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 4e 61 76 41 6c 70 68 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 61 20 63 31 2d 33 6f 20 63 31 2d 32 33 20 63 31 2d 31 70 20 63 31 2d 31 71 20 63 31 2d 31 72 20 63 31 2d 33 70 20 63 31 2d 31 74 20 63 31 2d 34 32 20 63 31 2d 34 33 20 63 31 2d 34 34 20 63 31 2d 34 35 20 63 31 2d 34 36 20 63 31 2d 34 37 20 63 31 2d 34 38 20 63 31 2d 34 39 20 63 31 2d 62 20 63 31 2d 32 63 20 63 31 2d 33 72 20 63 31 2d 33 73 20 63 31 2d 33 77 20 63 31 2d 33 78 20 63 31 2d 33 79 20 63 31 2d 33 7a 20 63 31 2d 34 30 20 63 31 Data Ascii: f-a5142b8531fd" data-edit-interactive="true" href="/contact-us" data-typography="NavAlpha" class="x-el x-el-a c1-3o c1-23 c1-1p c1-1q c1-1r c1-3p c1-1t c1-42 c1-43 c1-44 c1-45 c1-46 c1-47 c1-48 c1-49 c1-b c1-2c c1-3r c1-3s c1-3w c1-3x c1-3y c1-3z c1-40 c1
2024-09-28 05:29:24 UTC	10547	IN	Data Raw: 65 6c 2d 73 6c 69 64 65 20 63 61 72 6f 75 73 65 6c 2d 73 6c 69 64 65 2d 6c 6f 61 64 69 6e 67 22 3e 3c 2f 6c 69 3e 3c 6c 69 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 68 65 69 67 68 74 3a 36 30 30 70 78 3b 77 69 64 74 68 3a 69 6e 68 65 72 69 74 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 30 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 6d 69 6e 2d 77 69 64 74 68 3a 69 6e 68 65 72 69 74 3b 6f 70 61 63 69 74 79 3a 30 2e 33 22 20 64 61 74 61 2d 69 6e 64 65 78 3d 22 34 22 20 63 6c 61 73 73 3d 22 63 61 72 6f 75 73 65 6c 2d 73 6c 69 64 65 20 63 61 72 6f 75 73 65 6c 2d 73 6c 69 64 65 2d 6c 6f 61 64 69 6e 67 22 3e 3c 2f 6c 69 3e 3c 6c 69 20 73 74 79 6c 65 3d 22 6d 61 Data Ascii: el-slide carousel-slide-loading"></li><li style="margin-left:5px;height:600px;width:inherit;overflow-y:hidden;min-height:600px;overflow-x:hidden;min-width:inherit;opacity:0.3" data-index="4" class="carousel-slide carousel-slide-loading"></li><li style="ma

Timestamp	Bytes transferred	Direction	Data
2024-09-28 05:29:27 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 05:29:28 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=213334 Date: Sat, 28 Sep 2024 05:29:28 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-28 05:29:29 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 05:29:29 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=213363 Date: Sat, 28 Sep 2024 05:29:29 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-28 05:29:29 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://loggmaskemttaa.godaddysites.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Windows Analysis Report
https://loggmaskemttaa.godaddysites.com/

Timestamp	Bytes transferred	Direction	Data
2024-09-28 05:29:31 UTC	645	OUT	GET /accounts/a6fcc29c-f937-40b9-92a2-3a60e79157ca/config?fields[]=cart HTTP/1.1 Host: api.ola.godaddy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://loggmaskemttaa.godaddysites.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://loggmaskemttaa.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 05:29:31 UTC	752	IN	HTTP/1.1 404 Not Found Date: Sat, 28 Sep 2024 05:29:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 29 Connection: close access-control-allow-origin: https://loggmaskemttaa.godaddysites.com access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD access-control-expose-headers: access-control-max-age: 7200 access-control-allow-credentials: true X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache X-Request-Id: f0b135070796d580f5924490db92a2a8 X-Runtime: 0.004246 vary: Accept, Origin Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-09-28 05:29:31 UTC	29	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 41 63 63 6f 75 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 7d Data Ascii: {"error":"Account not found"}

Timestamp	Bytes transferred	Direction	Data
2024-09-28 05:29:34 UTC	668	OUT	GET /sw.js HTTP/1.1 Host: loggmaskemttaa.godaddysites.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://loggmaskemttaa.godaddysites.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=09367c44-307b-47b2-aa88-eb5ecfb7601f; _tccl_visit=09367c44-307b-47b2-aa88-eb5ecfb7601f; _scc_session=pc=1&C_TOUCH=2024-09-28T05:29:26.670Z
2024-09-28 05:29:34 UTC	663	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: application/javascript Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: c53d6a9d7a79e12a685e1c7056750848 Date: Sat, 28 Sep 2024 05:29:34 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 05:29:34 UTC	15721	IN	Data Raw: 38 30 65 33 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 38 39 35 3a 28 29 3d 3e 7b 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 63 61 63 68 65 61 62 6c 65 2d 72 65 73 70 6f 6e 73 65 3a 36 2e 34 2e 31 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 32 35 39 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 42 3a 28 29 3d 3e 61 7d 29 2c 73 28 39 31 33 29 3b 63 6c 61 73 73 20 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 65 2c 74 29 3d 3e 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 65 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 74 7d 29 29 7d 7d 7d 2c 31 32 35 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 56 3a Data Ascii: 80e3(()=>{"use strict";var e={895:()=>{try{self["workbox:cacheable-response:6.4.1"]&&_()}catch(e){}},259:(e,t,s)=>{s.d(t,{B:()=>a}),s(913);class a{constructor(){this.promise=new Promise(((e,t)=>{this.resolve=e,this.reject=t}))}}},125:(e,t,s)=>{s.d(t,{V:
2024-09-28 05:29:34 UTC	16384	IN	Data Raw: 65 2c 74 29 7c 7c 52 2e 68 61 73 28 65 2c 74 29 7d 2c 73 28 35 35 30 29 3b 63 6f 6e 73 74 20 76 3d 22 63 61 63 68 65 2d 65 6e 74 72 69 65 73 22 2c 62 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 55 52 4c 28 65 2c 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 68 61 73 68 3d 22 22 2c 74 2e 68 72 65 66 7d 3b 63 6c 61 73 73 20 78 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 5f 64 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 61 63 68 65 4e 61 6d 65 3d 65 7d 5f 75 70 67 72 61 64 65 44 62 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 53 74 6f 72 65 28 76 2c 7b 6b 65 79 50 61 74 68 3a 22 69 64 22 7d 29 3b 74 2e 63 72 65 61 74 65 49 6e 64 65 78 28 22 63 61 63 68 65 4e 61 6d 65 22 2c 22 Data Ascii: e,t)\|\|R.has(e,t)},s(550);const v="cache-entries",b=e=>{const t=new URL(e,location.href);return t.hash="",t.href};class x{constructor(e){this._db=null,this._cacheName=e}_upgradeDb(e){const t=e.createObjectStore(v,{keyPath:"id"});t.createIndex("cacheName","
2024-09-28 05:29:34 UTC	903	IN	Data Raw: 61 74 75 73 65 73 3a 5b 32 30 30 5d 7d 29 5d 7d 29 29 2c 28 30 2c 65 2e 72 65 67 69 73 74 65 72 52 6f 75 74 65 29 28 28 28 7b 72 65 71 75 65 73 74 3a 65 7d 29 3d 3e 22 73 74 79 6c 65 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 7c 7c 22 73 63 72 69 70 74 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 29 2c 6e 65 77 20 74 2e 53 74 61 6c 65 57 68 69 6c 65 52 65 76 61 6c 69 64 61 74 65 28 7b 63 61 63 68 65 4e 61 6d 65 3a 22 73 74 61 74 69 63 2d 72 65 73 6f 75 72 63 65 73 22 2c 70 6c 75 67 69 6e 73 3a 5b 6e 65 77 20 61 2e 43 61 63 68 65 61 62 6c 65 52 65 73 70 6f 6e 73 65 50 6c 75 67 69 6e 28 7b 73 74 61 74 75 73 65 73 3a 5b 32 30 30 5d 7d 29 5d 7d 29 29 2c 28 30 2c 65 2e 72 65 67 69 73 74 65 72 52 6f 75 74 65 29 28 28 28 7b 75 72 6c 3a 65 7d 29 3d Data Ascii: atuses:[200]})]})),(0,e.registerRoute)((({request:e})=>"style"===e.destination\|\|"script"===e.destination),new t.StaleWhileRevalidate({cacheName:"static-resources",plugins:[new a.CacheableResponsePlugin({statuses:[200]})]})),(0,e.registerRoute)((({url:e})=

Timestamp	Bytes transferred	Direction	Data
2024-09-28 05:29:35 UTC	566	OUT	GET /manifest.webmanifest HTTP/1.1 Host: loggmaskemttaa.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://loggmaskemttaa.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 05:29:35 UTC	666	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: application/manifest+json Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 00ebefcd69dec1196fbbfb6aa325bd10 Date: Sat, 28 Sep 2024 05:29:35 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 05:29:35 UTC	431	IN	Data Raw: 31 61 33 0d 0a 7b 22 73 63 6f 70 65 22 3a 22 2f 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 22 31 39 32 78 31 39 32 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 73 72 63 22 3a 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 73 74 61 74 69 63 2f 70 77 61 2d 61 70 70 2f 6c 6f 67 6f 2d 64 65 66 61 75 6c 74 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 39 32 2c 68 3a 31 39 32 2c 6d 22 7d 2c 7b 22 73 69 7a 65 73 22 3a 22 35 31 32 78 35 31 32 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 73 72 63 22 3a 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 Data Ascii: 1a3{"scope":"/","start_url":"/","display":"standalone","icons":[{"sizes":"192x192","type":"image/png","src":"//img1.wsimg.com/isteam/ip/static/pwa-app/logo-default.png/:/rs=w:192,h:192,m"},{"sizes":"512x512","type":"image/png","src":"//img1.wsimg.com/is

Timestamp	Bytes transferred	Direction	Data
2024-09-28 05:29:35 UTC	803	OUT	GET /favicon.ico HTTP/1.1 Host: loggmaskemttaa.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://loggmaskemttaa.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=09367c44-307b-47b2-aa88-eb5ecfb7601f; _tccl_visit=09367c44-307b-47b2-aa88-eb5ecfb7601f; _scc_session=pc=1&C_TOUCH=2024-09-28T05:29:26.670Z
2024-09-28 05:29:35 UTC	1114	IN	HTTP/1.1 404 Not Found Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure Date: Sat, 28 Sep 2024 05:29:35 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 05:29:35 UTC	15270	IN	Data Raw: 65 32 34 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 6c 6f 67 67 6d 61 73 6b 65 6d 74 74 61 61 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 6f 67 67 6d Data Ascii: e245<!DOCTYPE html><html lang="en-US"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>loggmaskemttaa</title><meta name="author" content="loggm
2024-09-28 05:29:35 UTC	16384	IN	Data Raw: 2c 2e 78 2d 65 6c 2d 74 68 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 78 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 2e 78 2d 65 6c 2d 68 72 7b 62 6f 72 64 65 72 3a 30 7d 2e 78 2d 65 6c 2d 66 69 65 6c 64 73 65 74 2c 2e 78 2d 65 6c 2d 69 6e 70 75 74 2c 2e 78 2d 65 6c 2d 73 65 6c 65 63 74 2c 2e 78 2d 65 6c 2d 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 78 2d 65 6c 2d 66 69 65 6c 64 73 65 74 2c 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 78 2d 65 6c 2d 74 65 78 74 61 72 65 61 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 78 2d 65 6c 2d 6c Data Ascii: ,.x-el-th{padding:0}.x{-webkit-font-smoothing:antialiased}.x-el-hr{border:0}.x-el-fieldset,.x-el-input,.x-el-select,.x-el-textarea{margin-top:0;margin-bottom:0}.x-el-fieldset,.x-el-input[type=email],.x-el-input[type=text],.x-el-textarea{width:100%}.x-el-l
2024-09-28 05:29:35 UTC	16384	IN	Data Raw: 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 42 6c 6f 63 6b 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 64 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 42 6c 6f 63 6b 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 65 20 63 31 2d 31 66 20 63 31 2d 31 67 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 42 6c 6f 63 6b 22 20 64 61 74 61 2d 61 69 64 3d 22 48 45 41 44 45 52 5f 4c 4f 47 4f 5f 52 45 4e 44 45 52 45 44 22 20 63 6c 61 73 Data Ascii: "><div data-ux="Block" class="x-el x-el-div c1-1 c1-2 c1-1d c1-b c1-c c1-d c1-e c1-f c1-g"></div><div data-ux="Block" class="x-el x-el-div c1-1 c1-2 c1-1e c1-1f c1-1g c1-b c1-c c1-d c1-e c1-f c1-g"><div data-ux="Block" data-aid="HEADER_LOGO_RENDERED" clas
2024-09-28 05:29:35 UTC	9900	IN	Data Raw: 76 69 67 61 74 69 6f 6e 44 72 61 77 65 72 4c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 22 20 64 61 74 61 2d 70 61 67 65 3d 22 30 66 30 32 64 66 36 38 2d 34 39 31 64 2d 34 63 38 64 2d 39 61 38 66 2d 61 35 31 34 32 62 38 35 33 31 66 64 22 20 64 61 74 61 2d 65 64 69 74 2d 69 6e 74 65 72 61 63 74 69 76 65 3d 22 74 72 75 65 22 20 64 61 74 61 2d 63 6c 6f 73 65 3d 22 74 72 75 65 22 20 68 72 65 66 3d 22 2f 63 6f 6e 74 61 63 74 2d 75 73 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 4e 61 76 42 65 74 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 61 20 63 31 2d 35 72 20 63 31 2d 32 33 20 63 31 2d 31 70 20 63 31 2d 31 71 20 63 31 2d 31 72 20 63 31 2d 31 39 20 63 31 2d 31 74 20 63 31 2d 34 63 20 63 31 2d 34 64 20 63 31 2d 78 20 63 31 2d 79 20 63 Data Ascii: vigationDrawerLink" target="" data-page="0f02df68-491d-4c8d-9a8f-a5142b8531fd" data-edit-interactive="true" data-close="true" href="/contact-us" data-typography="NavBeta" class="x-el x-el-a c1-5r c1-23 c1-1p c1-1q c1-1r c1-19 c1-1t c1-4c c1-4d c1-x c1-y c

Timestamp	Bytes transferred	Direction	Data
2024-09-28 05:29:36 UTC	646	OUT	GET / HTTP/1.1 Host: loggmaskemttaa.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://loggmaskemttaa.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=09367c44-307b-47b2-aa88-eb5ecfb7601f; _tccl_visit=09367c44-307b-47b2-aa88-eb5ecfb7601f; _scc_session=pc=1&C_TOUCH=2024-09-28T05:29:26.670Z
2024-09-28 05:29:36 UTC	1147	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: d81dbb970e54f9c70a980bf1463251e3 Date: Sat, 28 Sep 2024 05:29:36 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 05:29:36 UTC	15237	IN	Data Raw: 31 32 34 61 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 4d 65 74 f0 9d 96 86 6d 61 73 6b 20 7c 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e Data Ascii: 124aa<!DOCTYPE html><html lang="en-US"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>Metmask \| Login</title><meta name="description" con
2024-09-28 05:29:37 UTC	16384	IN	Data Raw: 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 Data Ascii: pe=radio]{box-sizing:border-box;padding:0}.x-el-input[type=number]::-webkit-inner-spin-button,.x-el-input[type=number]::-webkit-outer-spin-button{height:auto}.x-el-input[type=search]{-webkit-appearance:textfield;box-sizing:content-box}.x-el-input[type=sea
2024-09-28 05:29:37 UTC	16384	IN	Data Raw: 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 32 38 38 64 70 69 29 7b 2e 78 20 2e 63 31 2d 37 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 20 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 20 31 30 30 25 29 2c 20 75 72 6c 28 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 31 61 65 61 35 34 30 66 2d 30 37 30 34 2d 34 30 66 35 2d 62 62 37 35 2d 64 66 66 65 37 65 64 38 35 34 38 61 2f 64 61 6e 65 2d 64 65 61 6e 65 72 2d 35 34 31 37 38 35 2d 75 6e 73 70 6c 61 73 68 2e 6a 70 67 2f 3a 2f 72 73 3d 77 3a 34 36 30 35 2c 6d 22 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 Data Ascii: n-resolution: 288dpi){.x .c1-7o{background-image:linear-gradient(to bottom, rgba(0, 0, 0, 0) 0%, rgba(0, 0, 0, 0) 100%), url("//img1.wsimg.com/isteam/ip/1aea540f-0704-40f5-bb75-dffe7ed8548a/dane-deaner-541785-unsplash.jpg/:/rs=w:4605,m")}}@media (min-widt
2024-09-28 05:29:37 UTC	16384	IN	Data Raw: 66 2d 61 35 31 34 32 62 38 35 33 31 66 64 22 20 64 61 74 61 2d 65 64 69 74 2d 69 6e 74 65 72 61 63 74 69 76 65 3d 22 74 72 75 65 22 20 68 72 65 66 3d 22 2f 63 6f 6e 74 61 63 74 2d 75 73 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 4e 61 76 41 6c 70 68 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 61 20 63 31 2d 33 6f 20 63 31 2d 32 33 20 63 31 2d 31 70 20 63 31 2d 31 71 20 63 31 2d 31 72 20 63 31 2d 33 70 20 63 31 2d 31 74 20 63 31 2d 34 32 20 63 31 2d 34 33 20 63 31 2d 34 34 20 63 31 2d 34 35 20 63 31 2d 34 36 20 63 31 2d 34 37 20 63 31 2d 34 38 20 63 31 2d 34 39 20 63 31 2d 62 20 63 31 2d 32 63 20 63 31 2d 33 72 20 63 31 2d 33 73 20 63 31 2d 33 77 20 63 31 2d 33 78 20 63 31 2d 33 79 20 63 31 2d 33 7a 20 63 31 2d 34 30 20 63 31 Data Ascii: f-a5142b8531fd" data-edit-interactive="true" href="/contact-us" data-typography="NavAlpha" class="x-el x-el-a c1-3o c1-23 c1-1p c1-1q c1-1r c1-3p c1-1t c1-42 c1-43 c1-44 c1-45 c1-46 c1-47 c1-48 c1-49 c1-b c1-2c c1-3r c1-3s c1-3w c1-3x c1-3y c1-3z c1-40 c1
2024-09-28 05:29:37 UTC	10547	IN	Data Raw: 65 6c 2d 73 6c 69 64 65 20 63 61 72 6f 75 73 65 6c 2d 73 6c 69 64 65 2d 6c 6f 61 64 69 6e 67 22 3e 3c 2f 6c 69 3e 3c 6c 69 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 68 65 69 67 68 74 3a 36 30 30 70 78 3b 77 69 64 74 68 3a 69 6e 68 65 72 69 74 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 30 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 6d 69 6e 2d 77 69 64 74 68 3a 69 6e 68 65 72 69 74 3b 6f 70 61 63 69 74 79 3a 30 2e 33 22 20 64 61 74 61 2d 69 6e 64 65 78 3d 22 34 22 20 63 6c 61 73 73 3d 22 63 61 72 6f 75 73 65 6c 2d 73 6c 69 64 65 20 63 61 72 6f 75 73 65 6c 2d 73 6c 69 64 65 2d 6c 6f 61 64 69 6e 67 22 3e 3c 2f 6c 69 3e 3c 6c 69 20 73 74 79 6c 65 3d 22 6d 61 Data Ascii: el-slide carousel-slide-loading"></li><li style="margin-left:5px;height:600px;width:inherit;overflow-y:hidden;min-height:600px;overflow-x:hidden;min-width:inherit;opacity:0.3" data-index="4" class="carousel-slide carousel-slide-loading"></li><li style="ma

Timestamp	Bytes transferred	Direction	Data
2024-09-28 05:29:37 UTC	656	OUT	GET /contact-us HTTP/1.1 Host: loggmaskemttaa.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://loggmaskemttaa.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=09367c44-307b-47b2-aa88-eb5ecfb7601f; _tccl_visit=09367c44-307b-47b2-aa88-eb5ecfb7601f; _scc_session=pc=1&C_TOUCH=2024-09-28T05:29:26.670Z
2024-09-28 05:29:37 UTC	845	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js>; rel=preload; as=script; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin,<https://api.ola.godaddy.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 2aca1fe53b8c694098f49ad01b6c5959 Date: Sat, 28 Sep 2024 05:29:37 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 05:29:37 UTC	15539	IN	Data Raw: 31 33 64 32 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 6c 6f 67 67 6d 61 73 6b 65 6d 74 74 61 61 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 6f 67 67 Data Ascii: 13d28<!DOCTYPE html><html lang="en-US"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>loggmaskemttaa</title><meta name="author" content="logg
2024-09-28 05:29:37 UTC	16384	IN	Data Raw: 73 69 7a 65 3a 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 78 20 2e 63 31 2d 39 63 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 78 20 2e 63 31 2d 39 64 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 2e 78 20 2e 63 31 2d 39 65 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6c 69 6e 65 2d 74 68 72 6f 75 67 68 7d 2e 78 20 2e 63 31 2d 39 66 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 78 20 2e 63 31 2d 39 68 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 33 73 7d 2e 78 20 2e 63 31 2d 39 69 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 7d 2e 78 20 2e 63 31 2d 39 6a 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 78 20 2e 63 31 2d 39 6b 7b 64 69 73 70 Data Ascii: size:inherit !important}.x .c1-9c{line-height:inherit}.x .c1-9d{font-style:italic}.x .c1-9e{text-decoration:line-through}.x .c1-9f{text-decoration:underline}.x .c1-9h{transition:all 0.3s}.x .c1-9i{margin-top:24px}.x .c1-9j{border-style:none}.x .c1-9k{disp
2024-09-28 05:29:37 UTC	16384	IN	Data Raw: 31 2d 37 74 7b 66 6c 65 78 2d 62 61 73 69 73 3a 35 30 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 7b 2e 78 20 2e 63 31 2d 37 75 7b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 7b 2e 78 20 2e 63 31 2d 37 76 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 7b 2e 78 20 2e 63 31 2d 37 77 20 3e 20 2a 7b 6d 61 78 2d 77 69 64 74 68 3a 37 30 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 7b 2e 78 20 2e 63 31 2d 38 31 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d Data Ascii: 1-7t{flex-basis:50%}}@media (min-width: 1024px){.x .c1-7u{max-width:50%}}@media (min-width: 1024px){.x .c1-7v{justify-content:center}}@media (min-width: 1024px){.x .c1-7w > *{max-width:70%}}@media (min-width: 1024px){.x .c1-81{padding-left:40px}}@media (m
2024-09-28 05:29:37 UTC	16384	IN	Data Raw: 2d 32 63 20 63 31 2d 32 64 20 63 31 2d 32 65 20 63 31 2d 32 66 20 63 31 2d 32 67 20 63 31 2d 32 68 20 63 31 2d 32 69 20 63 31 2d 32 6a 22 3e 6c 6f 67 67 6d 61 73 6b 65 6d 74 74 61 61 3c 2f 68 33 3e 3c 73 70 61 6e 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 4e 61 4e 22 20 64 61 74 61 2d 75 78 3d 22 73 63 61 6c 65 72 22 20 64 61 74 61 2d 73 69 7a 65 3d 22 78 78 6c 61 72 67 65 22 20 64 61 74 61 2d 73 63 61 6c 65 72 2d 69 64 3d 22 73 63 61 6c 65 72 2d 6c 6f 67 6f 2d 63 6f 6e 74 61 69 6e 65 72 2d 31 39 35 37 37 36 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 4c 6f 67 6f 41 6c 70 68 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 73 70 61 6e Data Ascii: -2c c1-2d c1-2e c1-2f c1-2g c1-2h c1-2i c1-2j">loggmaskemttaa</h3><span role="heading" aria-level="NaN" data-ux="scaler" data-size="xxlarge" data-scaler-id="scaler-logo-container-195776" aria-hidden="true" data-typography="LogoAlpha" class="x-el x-el-span
2024-09-28 05:29:38 UTC	16384	IN	Data Raw: 69 20 63 31 2d 61 6a 20 63 31 2d 34 65 20 63 31 2d 61 6b 20 63 31 2d 62 20 63 31 2d 34 70 20 63 31 2d 63 20 63 31 2d 33 7a 20 63 31 2d 61 6c 20 63 31 2d 61 6d 20 63 31 2d 61 6e 20 63 31 2d 61 6f 20 63 31 2d 61 70 20 63 31 2d 61 71 20 63 31 2d 61 72 20 63 31 2d 61 73 20 63 31 2d 61 74 20 63 31 2d 61 75 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 2f 3e 3c 6c 61 62 65 6c 20 64 61 74 61 2d 75 78 3d 22 49 6e 70 75 74 46 6c 6f 61 74 4c 61 62 65 6c 4c 61 62 65 6c 22 20 66 6f 72 3d 22 69 6e 70 75 74 31 39 35 37 38 39 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 42 6f 64 79 41 6c 70 68 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 6c 61 62 65 6c 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 68 20 63 31 2d 31 71 20 63 31 Data Ascii: i c1-aj c1-4e c1-ak c1-b c1-4p c1-c c1-3z c1-al c1-am c1-an c1-ao c1-ap c1-aq c1-ar c1-as c1-at c1-au c1-d c1-e c1-f c1-g"/><label data-ux="InputFloatLabelLabel" for="input195789" data-typography="BodyAlpha" class="x-el x-el-label c1-1 c1-2 c1-1h c1-1q c1
2024-09-28 05:29:38 UTC	131	IN	Data Raw: 6f 73 73 6f 72 69 67 69 6e 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 74 63 63 2f 74 63 63 5f 6c 2e 63 6f 6d 62 69 6e 65 64 2e 31 2e 30 2e 36 2e 6d 69 6e 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: ossorigin></script><script defer src="//img1.wsimg.com/tcc/tcc_l.combined.1.0.6.min.js" crossorigin></script></body></html>0

Timestamp	Bytes transferred	Direction	Data
2024-09-28 05:29:38 UTC	654	OUT	GET /projects HTTP/1.1 Host: loggmaskemttaa.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://loggmaskemttaa.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=09367c44-307b-47b2-aa88-eb5ecfb7601f; _tccl_visit=09367c44-307b-47b2-aa88-eb5ecfb7601f; _scc_session=pc=1&C_TOUCH=2024-09-28T05:29:26.670Z
2024-09-28 05:29:39 UTC	1147	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: d30259ffefa1c0ee9474578084f79507 Date: Sat, 28 Sep 2024 05:29:38 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 05:29:39 UTC	15237	IN	Data Raw: 31 33 37 36 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 6c 6f 67 67 6d 61 73 6b 65 6d 74 74 61 61 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 6f 67 67 Data Ascii: 13763<!DOCTYPE html><html lang="en-US"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>loggmaskemttaa</title><meta name="author" content="logg
2024-09-28 05:29:39 UTC	16384	IN	Data Raw: 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 2e 78 2d 65 6c 2d 74 64 2c 2e 78 2d 65 6c 2d 74 68 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 78 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 2e 78 2d 65 6c 2d 68 72 7b 62 6f 72 64 65 72 3a 30 7d 2e 78 2d 65 6c 2d 66 69 65 6c 64 73 65 74 2c 2e 78 2d 65 6c 2d 69 6e 70 75 74 2c 2e 78 2d 65 6c 2d 73 65 6c 65 63 74 2c 2e 78 2d 65 6c 2d 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 78 2d 65 6c 2d 66 69 65 6c 64 73 65 74 2c 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 70 65 3d Data Ascii: apse:collapse;border-spacing:0}.x-el-td,.x-el-th{padding:0}.x{-webkit-font-smoothing:antialiased}.x-el-hr{border:0}.x-el-fieldset,.x-el-input,.x-el-select,.x-el-textarea{margin-top:0;margin-bottom:0}.x-el-fieldset,.x-el-input[type=email],.x-el-input[type=
2024-09-28 05:29:39 UTC	16384	IN	Data Raw: 74 3a 30 25 32 35 2c 6c 3a 30 25 32 35 2c 77 3a 31 30 30 25 32 35 2c 68 3a 31 30 30 25 32 35 2f 72 73 3d 77 3a 33 38 33 37 2c 6d 22 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 35 33 35 70 78 29 7b 2e 78 20 2e 63 31 2d 36 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 33 32 29 20 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 33 32 29 20 31 30 30 25 29 2c 20 75 72 6c 28 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 31 61 65 61 35 34 30 66 2d 30 37 30 34 2d 34 30 66 35 2d 62 Data Ascii: t:0%25,l:0%25,w:100%25,h:100%25/rs=w:3837,m")}}@media (min-width: 1280px) and (max-width: 1535px){.x .c1-6g{background-image:linear-gradient(to bottom, rgba(0, 0, 0, 0.32) 0%, rgba(0, 0, 0, 0.32) 100%), url("//img1.wsimg.com/isteam/ip/1aea540f-0704-40f5-b
2024-09-28 05:29:39 UTC	16384	IN	Data Raw: 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 73 70 61 6e 20 63 31 2d 32 32 20 63 31 2d 32 33 20 63 31 2d 32 6b 20 63 31 2d 32 6c 20 63 31 2d 32 34 20 63 31 2d 76 20 63 31 2d 77 20 63 31 2d 32 35 20 63 31 2d 74 20 63 31 2d 7a 20 63 31 2d 31 30 20 63 31 2d 32 36 20 63 31 2d 32 6d 20 63 31 2d 32 6e 20 63 31 2d 32 6f 20 63 31 2d 32 70 20 63 31 2d 32 71 20 63 31 2d 32 77 20 63 31 2d 31 66 20 63 31 2d 32 37 20 63 31 2d 32 38 20 63 31 2d 32 39 20 63 31 2d 32 61 20 63 31 2d 32 63 20 63 31 2d 32 65 20 63 31 2d 32 78 20 63 31 2d 32 67 20 63 31 2d 32 79 20 63 31 2d 32 7a 20 63 31 2d 33 30 22 3e 6c 6f 67 67 6d 61 73 6b 65 6d 74 74 61 61 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 64 61 74 61 2d 75 Data Ascii: " class="x-el x-el-span c1-22 c1-23 c1-2k c1-2l c1-24 c1-v c1-w c1-25 c1-t c1-z c1-10 c1-26 c1-2m c1-2n c1-2o c1-2p c1-2q c1-2w c1-1f c1-27 c1-28 c1-29 c1-2a c1-2c c1-2e c1-2x c1-2g c1-2y c1-2z c1-30">loggmaskemttaa</span></div></a></div></div><div data-u
2024-09-28 05:29:39 UTC	15340	IN	Data Raw: 65 3d 22 72 65 67 69 6f 6e 22 20 69 64 3d 22 62 34 39 61 35 30 33 37 2d 35 39 65 37 2d 34 37 37 63 2d 61 32 33 33 2d 62 65 66 62 33 32 64 63 30 64 66 35 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 78 2d 65 6c 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 33 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 3e 20 3c 64 69 76 20 72 6f 6c 65 3d 22 69 6d 67 22 20 64 61 74 61 2d 61 69 64 3d 22 42 41 43 4b 47 52 4f 55 4e 44 5f 49 4d 41 47 45 5f 52 45 4e 44 45 52 45 44 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 22 20 64 61 74 61 2d 75 78 3d 22 42 61 63 6b 67 72 6f 75 Data Ascii: e="region" id="b49a5037-59e7-477c-a233-befb32dc0df5" class="x-el x-el-div x-el c1-1 c1-2 c1-3 c1-b c1-c c1-d c1-e c1-f c1-g c1-1 c1-2 c1-b c1-c c1-d c1-e c1-f c1-g"><div> <div role="img" data-aid="BACKGROUND_IMAGE_RENDERED" aria-label="" data-ux="Backgrou

Timestamp	Bytes transferred	Direction	Data
2024-09-28 05:29:39 UTC	657	OUT	GET /our-company HTTP/1.1 Host: loggmaskemttaa.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://loggmaskemttaa.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=09367c44-307b-47b2-aa88-eb5ecfb7601f; _tccl_visit=09367c44-307b-47b2-aa88-eb5ecfb7601f; _scc_session=pc=1&C_TOUCH=2024-09-28T05:29:26.670Z
2024-09-28 05:29:39 UTC	1147	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: f3bfd2d047acdd633bf213fc739b531d Date: Sat, 28 Sep 2024 05:29:39 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 05:29:39 UTC	15237	IN	Data Raw: 31 33 65 38 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 6c 6f 67 67 6d 61 73 6b 65 6d 74 74 61 61 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 6f 67 67 Data Ascii: 13e89<!DOCTYPE html><html lang="en-US"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>loggmaskemttaa</title><meta name="author" content="logg
2024-09-28 05:29:39 UTC	16384	IN	Data Raw: 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 2e 78 2d 65 6c 2d 74 64 2c 2e 78 2d 65 6c 2d 74 68 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 78 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 2e 78 2d 65 6c 2d 68 72 7b 62 6f 72 64 65 72 3a 30 7d 2e 78 2d 65 6c 2d 66 69 65 6c 64 73 65 74 2c 2e 78 2d 65 6c 2d 69 6e 70 75 74 2c 2e 78 2d 65 6c 2d 73 65 6c 65 63 74 2c 2e 78 2d 65 6c 2d 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 78 2d 65 6c 2d 66 69 65 6c 64 73 65 74 2c 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 78 2d 65 6c 2d 69 6e 70 75 74 5b 74 79 Data Ascii: ollapse:collapse;border-spacing:0}.x-el-td,.x-el-th{padding:0}.x{-webkit-font-smoothing:antialiased}.x-el-hr{border:0}.x-el-fieldset,.x-el-input,.x-el-select,.x-el-textarea{margin-top:0;margin-bottom:0}.x-el-fieldset,.x-el-input[type=email],.x-el-input[ty
2024-09-28 05:29:39 UTC	16384	IN	Data Raw: 32 35 2f 72 73 3d 77 3a 31 35 33 35 2c 6d 22 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 35 33 35 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 32 29 2c 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 35 33 35 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 31 39 32 64 70 69 29 7b 2e 78 20 2e 63 31 2d 36 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 39 Data Ascii: 25/rs=w:1535,m")}}@media (min-width: 1280px) and (max-width: 1535px) and (-webkit-min-device-pixel-ratio: 2), (min-width: 1280px) and (max-width: 1535px) and (min-resolution: 192dpi){.x .c1-6h{background-image:linear-gradient(to bottom, rgba(0, 0, 0, 0.29
2024-09-28 05:29:39 UTC	16384	IN	Data Raw: 6c 3d 22 75 78 32 2e 48 45 41 44 45 52 2e 68 65 61 64 65 72 39 2e 4e 61 76 2e 44 65 66 61 75 6c 74 2e 4c 69 6e 6b 2e 41 63 74 69 76 65 2e 32 33 31 36 37 2e 63 6c 69 63 6b 2c 63 6c 69 63 6b 22 3e 4f 75 72 20 43 6f 6d 70 61 6e 79 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 64 61 74 61 2d 75 78 3d 22 4c 69 73 74 49 74 65 6d 49 6e 6c 69 6e 65 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 6c 69 20 6e 61 76 2d 69 74 65 6d 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 33 67 20 63 31 2d 33 37 20 63 31 2d 33 68 20 63 31 2d 31 68 20 63 31 2d 33 69 20 63 31 2d 33 6a 20 63 31 2d 33 6b 20 63 31 2d 33 6c 20 63 31 2d 73 20 63 31 2d 32 6d 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 33 6d 20 63 31 2d 33 6e 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e Data Ascii: l="ux2.HEADER.header9.Nav.Default.Link.Active.23167.click,click">Our Company</a></li><li data-ux="ListItemInline" class="x-el x-el-li nav-item c1-1 c1-2 c1-3g c1-37 c1-3h c1-1h c1-3i c1-3j c1-3k c1-3l c1-s c1-2m c1-b c1-c c1-3m c1-3n c1-d c1-e c1-f c1-g">
2024-09-28 05:29:39 UTC	16384	IN	Data Raw: 34 20 63 31 2d 38 6a 20 63 31 2d 38 6b 20 63 31 2d 38 6c 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 69 6d 67 20 64 61 74 61 2d 6c 61 7a 79 69 6d 67 3d 22 74 72 75 65 22 20 64 61 74 61 2d 73 72 63 6c 61 7a 79 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 73 74 6f 63 6b 2f 37 33 33 34 39 2f 3a 2f 63 72 3d 74 3a 30 25 32 35 2c 6c 3a 34 31 2e 37 33 25 32 35 2c 77 3a 35 30 2e 34 25 32 35 2c 68 3a 38 30 2e 36 35 25 32 35 2f 72 73 3d 77 3a 33 36 35 2c 68 3a 33 36 35 2c 63 67 3a 74 72 75 65 2c 6d 22 20 73 72 63 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 67 69 66 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 41 44 2f 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 Data Ascii: 4 c1-8j c1-8k c1-8l c1-b c1-c c1-d c1-e c1-f c1-g"><img data-lazyimg="true" data-srclazy="//img1.wsimg.com/isteam/stock/73349/:/cr=t:0%25,l:41.73%25,w:50.4%25,h:80.65%25/rs=w:365,h:365,cg:true,m" src="data:image/gif;base64,R0lGODlhAQABAAD/ACwAAAAAAQABAAAC
2024-09-28 05:29:39 UTC	786	IN	Data Raw: 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 49 6e 74 6c 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 4c 6f 63 61 6c 65 22 69 6e 20 77 69 6e 64 6f 77 2e 49 6e 74 6c 7c 7c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 60 5c 78 33 43 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 70 6f 6c 79 2f 76 33 2f 70 6f 6c 79 66 69 6c 6c 2e 6d 69 6e 2e 6a 73 3f 72 75 6d 3d 30 26 75 6e 6b 6e 6f 77 6e 3d 70 6f 6c 79 66 69 6c 6c 26 66 6c 61 67 73 3d 67 61 74 65 64 26 66 65 61 74 75 72 65 73 3d 49 6e 74 6c 2e 7e 6c Data Ascii: ></div></div></div><script type="text/javascript">"IntersectionObserver"in window&&"Intl"in window&&"Locale"in window.Intl\|\|document.write(`\x3Cscript src="https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~l

Timestamp	Bytes transferred	Direction	Data
2024-09-28 05:29:46 UTC	645	OUT	GET /accounts/a6fcc29c-f937-40b9-92a2-3a60e79157ca/config?fields[]=cart HTTP/1.1 Host: api.ola.godaddy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://loggmaskemttaa.godaddysites.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://loggmaskemttaa.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 05:29:46 UTC	752	IN	HTTP/1.1 404 Not Found Date: Sat, 28 Sep 2024 05:29:46 GMT Content-Type: application/json; charset=utf-8 Content-Length: 29 Connection: close access-control-allow-origin: https://loggmaskemttaa.godaddysites.com access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD access-control-expose-headers: access-control-max-age: 7200 access-control-allow-credentials: true X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache X-Request-Id: 0a0460d92ce493830f1e82c6b7df7a30 X-Runtime: 0.003557 vary: Accept, Origin Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-09-28 05:29:46 UTC	29	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 41 63 63 6f 75 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 7d Data Ascii: {"error":"Account not found"}

Timestamp	Bytes transferred	Direction	Data
2024-09-28 05:29:49 UTC	722	OUT	GET /sw.js HTTP/1.1 Host: loggmaskemttaa.godaddysites.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://loggmaskemttaa.godaddysites.com/sw.js User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=09367c44-307b-47b2-aa88-eb5ecfb7601f; _tccl_visit=09367c44-307b-47b2-aa88-eb5ecfb7601f; _scc_session=pc=2&C_TOUCH=2024-09-28T05:29:44.521Z If-None-Match: c53d6a9d7a79e12a685e1c7056750848
2024-09-28 05:29:49 UTC	271	IN	HTTP/1.1 304 Not Modified Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: c53d6a9d7a79e12a685e1c7056750848 Date: Sat, 28 Sep 2024 05:29:49 GMT Connection: close