Windows Analysis Report
https://gemini_logip.godaddysites.com/

Overview

General Information

Sample URL:	https://gemini_logip.godaddysites.com/
Analysis ID:	1521847
Tags:	openphish
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Signatures

AV Detection

Multi AV Scanner detection for submitted file

Source: https://gemini_logip.godaddysites.com/

Virustotal: Detection: 5%

Perma Link

Source: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-in_corp_applications_base

HTTP Parser: No favicon

Source: https://gemini_logip.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://gemini_logip.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://gemini_logip.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49828 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49745 version: TLS 1.2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49828 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://gemini_logip.godaddysites.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET /faq HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=O0ZB0yHIDrTqQ88Kx_Fc-320MxQ&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21 HTTP/1.1Host: ms.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contact-us HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=O0ZB0yHIDrTqQ88Kx_Fc-320MxQ&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21 HTTP/1.1Host: ms.godaddy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: azk=ue1-a226e66401e841d8b57198dcfdcbf221; azk-ss=true
Source: global traffic	HTTP traffic detected: GET /services HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=2&C_TOUCH=2024-09-29T02:39:58.438Z
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://gemini_logip.godaddysites.com/sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=2&C_TOUCH=2024-09-29T02:39:58.438ZIf-None-Match: 4c26bd2f89896c19bab99604434afdbc
Source: global traffic	HTTP traffic detected: GET /accounts/d9bbf6cd-f2e9-4d78-b2b1-0725c30312e3/config HTTP/1.1Host: api.ola.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json;charset=UTF-8Origin: https://gemini_logip.godaddysites.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=2&C_TOUCH=2024-09-29T02:39:58.438Z
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=6mk4uf6kNYs3G_8pCQfSNajh5_Y&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21 HTTP/1.1Host: ms.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: azk=ue1-a226e66401e841d8b57198dcfdcbf221; azk-ss=true
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/faqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=3&C_TOUCH=2024-09-29T02:40:04.804Z
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=3&C_TOUCH=2024-09-29T02:40:04.804Z
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=kRe9BLUyE9MxUxVuO1JpFk_kRWg&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21 HTTP/1.1Host: ms.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: azk-ss=true; azk=ue1-34c71e35ccbc4bef980b6d6a24087c13
Source: global traffic	HTTP traffic detected: GET /v2/accounts/d9bbf6cd-f2e9-4d78-b2b1-0725c30312e3/categories HTTP/1.1Host: api.ola.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json;charset=UTF-8Origin: https://gemini_logip.godaddysites.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/contact-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=4&C_TOUCH=2024-09-29T02:40:11.574Z
Source: global traffic	HTTP traffic detected: GET /i.gif?e=eyJ2IjoiMS4xMiIsImF2IjoxMzc5NjY0LCJhdCI6MjQ0NywiYnQiOjAsImNtIjozNjk2NjY5OTcsImNoIjo1NDQ0NSwiY2siOnt9LCJjciI6NDA4ODkzMDIyLCJkaSI6IjQ1NmUyZjVkODBhOTRjY2ViYjlhNWFhMWIyNmVmNzA3IiwiZGoiOjAsImlpIjoiN2M2OTk5YmMxYzcwNGZiYThmYTQ1ZTZlMjFkMWRiNmQiLCJkbSI6MywiZmMiOjU4Mzk1MjEyMywiZmwiOjU3MTk5NDU0MywiaXAiOiI2NC4yMDIuMTYwLjAiLCJrdyI6Int7a2V5d29yZH19IiwibnciOjEwNjYzLCJwYyI6MCwib3AiOjAsIm1wIjowLCJlYyI6MCwiZ20iOjAsImVwIjpudWxsLCJwciI6MjE4NDY1LCJydCI6MSwicnMiOjUwMCwic2EiOiI1MiIsInNiIjoiaS0wYjQ5OTg3NDE5ODVjNWJmNiIsInNwIjoyMDM3NTUzLCJzdCI6MTI3NjI2NCwidWsiOiJ1ZTEtZGJhOGEzN2FhZWU2NGVhYThjMzgyNWU2MDdjMDZlMzEiLCJ6biI6MzA3NDk1LCJ0cyI6MTcyNzU3NzYxNDAyMywicG4iOiJ3YW0iLCJnYyI6dHJ1ZSwiZ0MiOnRydWUsImdzIjoibm9uZSIsImRjIjoxLCJ0eiI6IlVUQyIsImJhIjoxLCJmcSI6MH0&s=2DgoOwp_fMVVqIQ5imUSMskq2gg&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21 HTTP/1.1Host: ms.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: azk-ss=true; azk=ue1-c41caae1b801412abac24f7c4e1e93f8
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=4&C_TOUCH=2024-09-29T02:40:11.574Z
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://gemini_logip.godaddysites.com/sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=4&C_TOUCH=2024-09-29T02:40:11.574ZIf-None-Match: 4c26bd2f89896c19bab99604434afdbc

Source: global traffic	DNS traffic detected: DNS query: gemini_logip.godaddysites.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: isteam.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: events.api.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: ms.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: www.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: api.ola.godaddy.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1727577561007&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 02:40:02 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://gemini_logip.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: c6d0d052e29acfa4805d18a3261718f3X-Runtime: 0.004971vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 02:40:11 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://gemini_logip.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: 93d8697bc5ae04de45f8f8acf4af69b1X-Runtime: 0.004026vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains

Source: chromecache_210.2.dr, chromecache_302.2.dr, chromecache_226.2.dr, chromecache_296.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_243.2.dr, chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIFzCqgsI0mp9CG_oC-Nw.woff2)
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2)
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2)
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIIzCqgsI0mp9gz25WPFqwKUQ.woff2)
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2)
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neILzCqgsI0mp9CNzoymM5Ez.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q-bHNiZg.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q0bHNiZg.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q1bHNiZg.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q3bHNiZg.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q6bHM.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVep1q4dHc.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVepFq4dHc.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVepVq4dHc.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVerlq4dHc.woff2)
Source: chromecache_219.2.dr	String found in binary or memory: https://gemini_logip.godaddysites.com/
Source: chromecache_201.2.dr	String found in binary or memory: https://gemini_logip.godaddysites.com/contact-us
Source: chromecache_200.2.dr	String found in binary or memory: https://gemini_logip.godaddysites.com/faq
Source: chromecache_243.2.dr	String found in binary or memory: https://gemini_logip.godaddysites.com/services
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CG_oC-Nw.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WPFqwKUQ.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoymM5Ez.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q-bHNiZg.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q0bHNiZg.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q1bHNiZg.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q3bHNiZg.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q6bHM.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVep1q4dHc.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVepFq4dHc.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVepVq4dHc.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVerlq4dHc.woff2)
Source: chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/isteam/ip/d9bbf6cd-f2e9-4d78-b2b1-0725c30312e3/gemini-login-.png
Source: chromecache_243.2.dr, chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
Source: chromecache_300.2.dr, chromecache_239.2.dr	String found in binary or memory: https://ms.godaddy.com/i.gif?e=eyJ2IjoiMS4xMiIsImF2IjoxMzc5NjY0LCJhdCI6MjQ0NywiYnQiOjAsImNtIjoz
Source: chromecache_300.2.dr, chromecache_239.2.dr	String found in binary or memory: https://ms.godaddy.com/r?e=eyJ2IjoiMS4xMiIsImF2IjoxMzc5NjY0LCJhdCI6MjQ0NywiYnQiOjAsImNtIjozNjk2
Source: chromecache_243.2.dr, chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49745 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@20/219@26/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1964,i,14964113352374650661,4813199552823465559,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://gemini_logip.godaddysites.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1964,i,14964113352374650661,4813199552823465559,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.121.64.201	isteam.wsimg.com	United States	16509	AMAZON-02US	false
13.248.243.5	gemini_logip.godaddysites.com	United States	16509	AMAZON-02US	false
198.71.248.123	proxy.k8s.pnc.iad.secureserver.net	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
34.250.180.246	e-prod-alb-s102-eu-west-1-02.adzerk.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4
192.168.2.5

Contacted Domains

Name	IP	Active
e-prod-alb-s102-eu-west-1-02.adzerk.net	34.250.180.246	true
www.google.com	142.250.186.164	true
gemini_logip.godaddysites.com	13.248.243.5	true
isteam.wsimg.com	3.121.64.201	true
fp2e7a.wpc.phicdn.net	192.229.221.95	true
proxy.k8s.pnc.iad.secureserver.net	198.71.248.123	true
img1.wsimg.com	unknown	unknown
csp.secureserver.net	unknown	unknown
events.api.secureserver.net	unknown	unknown
www.godaddy.com	unknown	unknown
ms.godaddy.com	unknown	unknown
api.ola.godaddy.com	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
https://ms.godaddy.com/i.gif?e=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&s=2DgoOwp_fMVVqIQ5imUSMskq2gg&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21	false	unknown
https://gemini_logip.godaddysites.com/contact-us	true	unknown
https://ms.godaddy.com/i.gif?e=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&s=kRe9BLUyE9MxUxVuO1JpFk_kRWg&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21	false	unknown
https://gemini_logip.godaddysites.com/markup/ad	true	unknown
https://gemini_logip.godaddysites.com/faq	true	unknown
https://gemini_logip.godaddysites.com/sw.js	true	unknown
https://api.ola.godaddy.com/v2/accounts/d9bbf6cd-f2e9-4d78-b2b1-0725c30312e3/categories	false	unknown
https://api.ola.godaddy.com/accounts/d9bbf6cd-f2e9-4d78-b2b1-0725c30312e3/config	false	unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-in_corp_applications_base	false	unknown
https://ms.godaddy.com/i.gif?e=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&s=6mk4uf6kNYs3G_8pCQfSNajh5_Y&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21	false	unknown
https://gemini_logip.godaddysites.com/	true	unknown
https://gemini_logip.godaddysites.com/manifest.webmanifest	true	unknown
https://api.ola.godaddy.com/accounts	false	unknown
https://gemini_logip.godaddysites.com/services	true	unknown
https://ms.godaddy.com/i.gif?e=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&s=O0ZB0yHIDrTqQ88Kx_Fc-320MxQ&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21	false	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 01:39:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	18A649846E04D28670B85D2EC49A2D1E	961962523D8A4C35E246C3A84703A734F9CFFAA5	0E63DC35435C81E2F4EEAF010B991A8E2D078EF7B495A2C390A454C19199DE94
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 01:39:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	22FCE371016AD0986957A5B1B1D6ABE0	F0488CC4CED73FD485EB3F726B57A49A2A92AB1F	D9E85A3ECCA0B8B7228082B55994D9566F2D91510B8AB56A74FB86BCEDDF8279
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	4A2A7768C8A68BFA6360542FE39AA4CE	12E07FD736E7311ECB4A058C5A51D958068C24EA	3FBE48C9B6FEC5FE4533F2059D1B6127981FB821B09843AC1C28BA6ABBB070FC
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 01:39:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	DD38E661B03D0C354D694749C83F9CBA	647FB68C8DFF8F95CB16D5210F465BC5F67DA34C	B7F1DBF84B15043BA0ED18679AA0B780D5A1592CB2C4A67F2E85DA81A9594386
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 01:39:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	2D7ADEC163C31D0B896DD21E2D7B8B85	D3D1381ED5CC335A30DB7B2F5007045790851845	1C0BA0548B3FAC9A61A80E26EEA032599C391FB42CB96C550ED14F8EB010BCC8
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 01:39:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	3F9A73F8098934DDA23B739F54E652F8	52A4FD7E56DEC4AA480814B8CD295FD1A517D1AE	833BAF301CAADBBD1A830E3605C2F1FFA0B239BD4F70DBCBA60C3EE1200D8470
Chrome Cache Entry: 197	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 198	ASCII text, with very long lines (442)	5F10DF611C856F376981BE4DFBD17753	4463A27419B2FDFDBD81770C74DEE2E74BE948E0	EBD2BA2A0E879AE2CEC7D513324E04346153A581BE3AA202662E6C9D5B1CE6E1
Chrome Cache Entry: 199	ASCII text	79C8C3272AE93DDD279B82E38F580731	B36F37B044DE3DE7B0AD183CF7C58EB94778E61C	27768E828E38226811592F48E452CA0DB2E95BCF8740C317F91B84A8AC8A9201
Chrome Cache Entry: 200	HTML document, Unicode text, UTF-8 text, with very long lines (27484)	17BC6619989B1B965435ECB4C259E444	87872914383F3320D08A8B993FB5A90C5705389E	D0D91C6C3C5AE290C2A63F92C030F2A0AA9950CBFE5DA74629477F3EC908A70B
Chrome Cache Entry: 201	HTML document, Unicode text, UTF-8 text, with very long lines (29084)	F2B63757CF3FE51222B369FB607C8098	75AFB739285F9AEBDB1391025C8C7344246D25EE	AF5DEDB50A092DEA45CB81970D1CFE8CE67CC2A4257B74798EA10E3F669BA625
Chrome Cache Entry: 202	RIFF (little-endian) data, Web/P image, VP8 encoding, 365x365, Scaling: [none]x[none], YUV color, decoders should clamp	4BA6F0475183E075C4D97654EFC5E848	CA1BB796D9AD945B27BFD302E3CD80D0E891A617	4B504C62A97BE98ED2B56D065F5D3AB2BC6C45CDAD63EAB49D79BFDAB4F99FF0
Chrome Cache Entry: 203	ASCII text, with very long lines (905)	62A914B2C847D4D02B76164D7A2A54C6	20D9F49A90A51FA6C8420640610DF77F7A96D919	B08C2864EC27736C507B1CA4B3A225A19147841B861CD8494DAF95FA370FE639
Chrome Cache Entry: 204	Web Open Font Format (Version 2), TrueType, length 23676, version 1.0	CF998D6DAF053B010F73A15D3CE83379	98EF2A599277119EFC6D822DA522E5176D29BF03	DF8F44081C6CE8517DC973654BEE1300B7C12642ADBD646ECC83E2132692D365
Chrome Cache Entry: 205	Web Open Font Format (Version 2), TrueType, length 7920, version 1.0	797AD5F8D84A297AB16F9A9C983ADFC2	AF074543E3BBD78E086CEFA983867E0936515C41	E0037277509761BE84D1C44B520649C2363DF89E00568561EBF015CB3CEDC91A
Chrome Cache Entry: 206	ASCII text, with very long lines (651)	7B01FCDF2048E82F4DF741791CD44F61	D1D126931B5D6937B1496E7950342D6A06F361B9	CBC04C06117804A9A97013C97A0714B027DF8279C5F1D0FD0478756A0944AEE6
Chrome Cache Entry: 207	Web Open Font Format (Version 2), TrueType, length 25548, version 1.0	FD73ED1B0D8EF524D32C809878488633	CB6174199EC26A9464C279712AC582418EEB141B	38DF0CBE13E3CDF0E45F3525950C8A81395DACF6C90226B77CFCFCC5ADC561FE
Chrome Cache Entry: 208	Web Open Font Format (Version 2), TrueType, length 28000, version 1.66	A4BCA6C95FED0D0C5CC46CF07710DCEC	73B56E33B82B42921DB8702A33EFD0F2B2EC9794	5A51D246AF54D903F67F07F2BD820CE77736F8D08C5F1602DB07469D96DBF77F
Chrome Cache Entry: 209	ASCII text, with very long lines (2368)	70BC240B39FD393F6E3003CC69E4FE73	B69B4A25E3EB749ADFD1E13224FC59DC73B196ED	9CE79703BF9EF25C61BA4FEED40992772B9231110F6AAB72B714D9517219B3F9
Chrome Cache Entry: 210	Unicode text, UTF-8 text, with very long lines (63425)	31E273E89FB56A44D86D206F1BCDCDB4	C1D25BAD06F8485EB76D39134C4BEC22A44E5534	9E3C0FE8C9D6F0325C883709CEDE8898CE5D70F0640420ED058E0709C636531B
Chrome Cache Entry: 211	HTML document, ASCII text	246F0E39897B4B479B9AD01E4635EF13	B9C6981B1EB9BBB93B279BDF33D3781735C5CBE3	CEEE4DFD7DB0B570871E8948AD5C75CEFF737976F8E86A7673515270D728E1B8
Chrome Cache Entry: 212	ASCII text, with very long lines (21556)	1C56940A864F144FAE2EB40EE952CB94	EBFC754CE962A1F9025853F2995B3987F0383D87	3C37A4AA3CF6AAAE6921A4B750C0E4F81FD338D6878BE90B0FAF2F921039CB23
Chrome Cache Entry: 213	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 32x32, components 3	65D29642F4A833DF226E1349A668354B	AE6C19A8E6B1646E29410FDB0751A47722F48AD3	3E6AD6638B9014FAB7BD4BE96706AB0C9853C97B8794A1590A9219D246BAE6C1
Chrome Cache Entry: 214	ASCII text, with very long lines (12251)	9F94046AEA26739AC8888A6D3ED17E16	9AD04A9430086B1A1A403D9FB0485174393EB8BC	5712A0DCF37AC601A9E017FBA9F9276C9206A730ADF495186421AF66D4B3F49E
Chrome Cache Entry: 215	ASCII text, with very long lines (1177)	00271173E31BB8A376C14119D53968B4	EF477A5104FDA982D95403512F29D15672A1081B	C29C9E9F7FBAF2C4F26B2C98803345F8A4A74BE8DC508246068EED42DB296A8D
Chrome Cache Entry: 216	ASCII text, with very long lines (19615)	5FD30BB38EBA06E3522AE28610AC8C74	B9FA328B098321E7C7AABC154A2135DC165D25F7	A94E9E0D7E80FB8129F6C33F78F6B03F08C2EB5722870CCFA7CC2893190C9C20
Chrome Cache Entry: 217	ASCII text, with very long lines (51029)	A54E8E63C5FB8CF7C1B38566287BBFF5	0552F8B0B429F270D832DC4447052119001B8FDF	DCCC7ED901462B926A1EFBCE4AFAFF4CC65A9B72521CB2D445729A418E4AA5B6
Chrome Cache Entry: 218	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 219	HTML document, Unicode text, UTF-8 text, with very long lines (26537)	89F6AC1A65905F591CA96C6EB167EFC5	6581C0FADFCF4BBF2D594F0A212B3FF9F26D71CE	55C154F420CC2C234D370FE1C5D546050651D90D4EB9FA6C318DD2DFEC1F7AD6
Chrome Cache Entry: 220	ASCII text, with very long lines (1211)	CB9BFA0FBDD957FBE7F4841B70341DB2	9CAD12A3580D3E4D340CB867E88B687C75564C5A	513864FD4EBD1926F3E1E78B436A90C2BC3A5D16835B50415E7B318D7DEEC2A2
Chrome Cache Entry: 221	ASCII text, with very long lines (829)	F806FAAB29346709AA36F154927B3AC6	26A0B7AD2B844F2318229738927519A822D93445	DF2BB9597A554B46BD807CFD97EC6E3F7194CCC218B95D7F1E899657C1CF9FCC
Chrome Cache Entry: 222	RIFF (little-endian) data, Web/P image, VP8 encoding, 1535x685, Scaling: [none]x[none], YUV color, decoders should clamp	CAB01FFF4B29032F4AECAAA116D6E5B3	A774DC00FFE88F51D6C649149FD6B0E978BC797D	81FB49D2344498F0B95D6020470688702B19FE608B1ED4323ABB68272124A907
Chrome Cache Entry: 223	ASCII text, with very long lines (13449)	E135455ABAC1E365C75ACB29427BE2BD	386B236DC493D0EBE7827B2FD8897CC9DF4FE222	88C66FB773F05F8A1B9EA9092CDE47FD6204EB3D3E5EF91F8223BD8A62339B40
Chrome Cache Entry: 224	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 225	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 226	Unicode text, UTF-8 text, with very long lines (20947)	753CB19EE1A756E46FAA0F118B1B4E01	248885E3BFE7E71989BA9FFFB33B6EFF18166FEC	ED9FFA2FBA5ECC75AF2F99E6EBADD5B927086F258037C2A848E94449CC579991
Chrome Cache Entry: 227	Unicode text, UTF-8 text, with very long lines (65440), with no line terminators	A19F6ECD3F61C3CC1D66E2F0DB20484F	E3A06E669AC400C910E4E006ACC9F2DD3D0369C6	83B31EDE71101B73BDDF283CC128A277FE1A1624989E2069A0B2D1BC5902C773
Chrome Cache Entry: 228	ASCII text	8F12765EB30FBDCFCDC116D13F7FC272	506E45B7D3930756EACCE0DAD449A3C8CDB3EAC6	265995EB76326E95613750F6F6570B850F5C22280D262DE9B9632A16CEB98B9B
Chrome Cache Entry: 229	ASCII text	E0DD176C6926B0363ADAF4F9AAEF6EE1	22F6B48EF8091561BE6C2475FCFD98FDDD5A8876	7727F84EAC14FE82243924684B431EEEFA12F779C0CABC62F684DB7D3AAB8369
Chrome Cache Entry: 230	ASCII text, with very long lines (65536), with no line terminators	6A7950CC31489069917BF817B62B2BFE	44AAB6E9B8FDBAA23EA297CE69E26422277907C0	1B4DACB0DAFDA81D48EE0890EA113B3B8275BF2D16D5325F971F16EB75F7218A
Chrome Cache Entry: 231	ASCII text, with very long lines (905)	62A914B2C847D4D02B76164D7A2A54C6	20D9F49A90A51FA6C8420640610DF77F7A96D919	B08C2864EC27736C507B1CA4B3A225A19147841B861CD8494DAF95FA370FE639
Chrome Cache Entry: 232	ASCII text, with very long lines (383)	21AD22788E6CAA18A4E9E57F7372B108	50EBDD2452193BEAB7D1899F788FBBF32D90DD55	0FE26F07B9E5D49590F55D31CBC381CA9337850F89B09940E3B384FCD6D26464
Chrome Cache Entry: 233	ASCII text, with very long lines (2368)	70BC240B39FD393F6E3003CC69E4FE73	B69B4A25E3EB749ADFD1E13224FC59DC73B196ED	9CE79703BF9EF25C61BA4FEED40992772B9231110F6AAB72B714D9517219B3F9
Chrome Cache Entry: 234	ASCII text	DAA79AD7558674F6A12D962ABF47F2F6	03EEA0EBEBD11EC14CFA5A651EB0ACA2604829A7	604281887CD770ED21601933E9636A7A9C8A57A30D7D796AE7D760EEF64D5089
Chrome Cache Entry: 235	ASCII text, with very long lines (13353)	FEFE949A885176C867822E1BB9E1633E	82564452AF8F700BC486683218E5F766F1515220	D10C7F5DA9A98C58848E4826B3F778C10B0CCBDABD0D331E414531ADDC43864F
Chrome Cache Entry: 236	RIFF (little-endian) data, Web/P image, VP8 encoding, 365x365, Scaling: [none]x[none], YUV color, decoders should clamp	9F2C2E79BCEA46654E0A41BA69F304BD	4EF2E3BD0841C8D5DD0653DFBDE4079D8138C0DE	FC29979D75EFED6E41613458B336D312B07C6290AD232E0164B32996D9783052
Chrome Cache Entry: 237	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 238	ASCII text, with very long lines (13449)	E135455ABAC1E365C75ACB29427BE2BD	386B236DC493D0EBE7827B2FD8897CC9DF4FE222	88C66FB773F05F8A1B9EA9092CDE47FD6204EB3D3E5EF91F8223BD8A62339B40
Chrome Cache Entry: 239	HTML document, ASCII text, with very long lines (1781)	858DDC07C37A83827DCA1CCDD175629C	88CBDA4E5A473CBC5C5E58AE813F5574806CBFD2	2107789BC44300F6AECC835211EFF0825D0ACF1DFE9AD0EEC4B90F33BE046052
Chrome Cache Entry: 240	JSON data	945DC342BEFA9FAAA1A05F75CF6899EC	6888FE1F63A54DCF487321A8FFD7C7BB59B88088	D58812B2FA2ED0ED5ED6415F3D0F35DC435BD43C435A30AC458F5A3526EA531B
Chrome Cache Entry: 241	ASCII text, with very long lines (383)	21AD22788E6CAA18A4E9E57F7372B108	50EBDD2452193BEAB7D1899F788FBBF32D90DD55	0FE26F07B9E5D49590F55D31CBC381CA9337850F89B09940E3B384FCD6D26464
Chrome Cache Entry: 242	RIFF (little-endian) data, Web/P image, VP8 encoding, 365x365, Scaling: [none]x[none], YUV color, decoders should clamp	B4C0429C8E4F46EA0EA130138C086821	13E2BE1E26AB2E29D19531DCF554B7084F59D3FE	D0E8F3E55D9EA4D04A605BAFF319C274D8F346B86F2E3644852BBABDF4D3497F
Chrome Cache Entry: 243	HTML document, Unicode text, UTF-8 text, with very long lines (35272)	CDBC5FE8BAD0009DF18E2B5956D0D970	04001D9C08AC035ACC3B5AABF4DC696F4937A049	48211B96A3B99F145A4FB9D0019A0F7CE7CC664B5616236AD1004857742C9046
Chrome Cache Entry: 244	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1160x550, components 3	5C4C833C5A9AAC9DD62076429DF5623B	58657C197C62E03758ECDEA110902543B9144403	A4E4AE8C8DCBDE7A1B7B9DD3FC480A06C9E2ABBA8D1FBC42F6E5141ED63D0F2D
Chrome Cache Entry: 245	ASCII text, with very long lines (351)	D5CA1711AE41564F182DD22C78663190	8C250C629C3DA0190FF6AE4A724A4E8747885062	C5FF7A05C19DDA1F96317F1D6E1CB057984B797DB77DD349649B59B6C2154A31
Chrome Cache Entry: 246	Web Open Font Format (Version 2), TrueType, length 28584, version 1.66	17081510F3A6F2F619EC8C6F244523C7	87F34B2A1532C50F2A424C345D03FE028DB35635	2C7292014E2EF00374AEB63691D9F23159A010455784EE0B274BA7DB2BCCA956
Chrome Cache Entry: 247	ASCII text	DAA79AD7558674F6A12D962ABF47F2F6	03EEA0EBEBD11EC14CFA5A651EB0ACA2604829A7	604281887CD770ED21601933E9636A7A9C8A57A30D7D796AE7D760EEF64D5089
Chrome Cache Entry: 248	ASCII text, with very long lines (516)	4A37F23CB638C625FC8451584283E359	06E59198676105545F014464A40AD8D98C4DAD49	72C6DF194818462D86074EAF05FC75F13CABC26431999B329E51A0C26A9F4C81
Chrome Cache Entry: 249	ASCII text, with very long lines (51029)	BB967CE76F4A3F8DFA72F27DCF5FBE61	57107F23D275F660BC79302426B2E686490770AD	0E0FEE6451E1EA4930BF00D1DC5BDDA56FB9E2884CC8256254DC7BFAB860A983
Chrome Cache Entry: 250	ASCII text	8578A331AD09BB2EF6359FEC3916BEFC	38B68F5C02CBDB6E29C50F8858710E0392B0B8D6	3D7E7552E3801941A408C504AA732223FE2BED5D12E248680847D772182CB639
Chrome Cache Entry: 251	ASCII text, with very long lines (3283)	D2F3F3BB13567C7C3BA8C50DE05A8272	E96C9C5245969078F3CF6B4B055E6CA89056C1ED	F7B54B29718E20C7DEB19DE55648211D23A008BECC9AD6BFDE01A72A09072B2B
Chrome Cache Entry: 252	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 253	Web Open Font Format (Version 2), TrueType, length 8520, version 1.0	CE1C0390731A3E14E25947BEBA4D7BC7	314391B4D88BF5D37826B2D8E15684EE24839151	A23CDC6F17EBAF9A49D2BD7F3723CF8A185F0CDFA4065E83490C9769B643A587
Chrome Cache Entry: 254	ASCII text, with very long lines (367)	401821742DEF46C40D4CF5F0121C8BEC	1852305A4F2D7E120F9B7BD185790B98CDF9BFA6	462D8298239BC61418760DB4204CD135D990537E625782D059CB9D3A1D0266A4
Chrome Cache Entry: 255	ASCII text, with very long lines (651)	7B01FCDF2048E82F4DF741791CD44F61	D1D126931B5D6937B1496E7950342D6A06F361B9	CBC04C06117804A9A97013C97A0714B027DF8279C5F1D0FD0478756A0944AEE6
Chrome Cache Entry: 256	ASCII text, with very long lines (1352)	DA82F14F261B7847FC0BC55DAC30A9B3	94D7EDACB4F425A3CB1E6B7B70301A60027E3AF8	03F278836505E268D8B286774CF646016C5CC65BF893B7541BE1A2A63CC66D4C
Chrome Cache Entry: 257	ASCII text, with very long lines (3283)	D2F3F3BB13567C7C3BA8C50DE05A8272	E96C9C5245969078F3CF6B4B055E6CA89056C1ED	F7B54B29718E20C7DEB19DE55648211D23A008BECC9AD6BFDE01A72A09072B2B
Chrome Cache Entry: 258	ASCII text, with very long lines (14742)	4E56DDB045B48F1074F336A33249E577	2C5DED666EBC66F9D7A45135DF7A55C60C4DA6D1	B3FA00681128F7B43422A70A5463904CC1D9FB9AB2BB35859D7832E215AF16D3
Chrome Cache Entry: 259	ASCII text, with very long lines (330)	C86B7F8224FA45FB1682AC94D8F75AC6	9561F67AAE74B14702DB79C22F9C7F9E6F3B3239	010083B88E95F18CEFDB90796ACCE02073E91FC8DFEFB27A7F5F3F75529E4906
Chrome Cache Entry: 260	ASCII text	8578A331AD09BB2EF6359FEC3916BEFC	38B68F5C02CBDB6E29C50F8858710E0392B0B8D6	3D7E7552E3801941A408C504AA732223FE2BED5D12E248680847D772182CB639
Chrome Cache Entry: 261	ASCII text, with very long lines (65536), with no line terminators	AC50D350DAE5F3181BA00BCA11DCE5F2	B9D57482A471B434E4E54E8D631D8DF171456595	2A2FBBA7BA603306F1EF3C661AB56A2E87458F08902F4FD83F0ABC95E1018E24
Chrome Cache Entry: 262	ASCII text, with very long lines (19615)	5FD30BB38EBA06E3522AE28610AC8C74	B9FA328B098321E7C7AABC154A2135DC165D25F7	A94E9E0D7E80FB8129F6C33F78F6B03F08C2EB5722870CCFA7CC2893190C9C20
Chrome Cache Entry: 263	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 264	ASCII text, with very long lines (5517)	B1A99E14D671AE44FFB16B3448B36F2B	DDA5BAD23A80FA5EE5A6D881BDD86F044A0AC462	AFE3DF9E25F31A086AF11114012BB583341D63C768F0868C54CADD3A1CBD1FE2
Chrome Cache Entry: 265	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 266	ASCII text, with very long lines (65536), with no line terminators	AC50D350DAE5F3181BA00BCA11DCE5F2	B9D57482A471B434E4E54E8D631D8DF171456595	2A2FBBA7BA603306F1EF3C661AB56A2E87458F08902F4FD83F0ABC95E1018E24
Chrome Cache Entry: 267	ASCII text, with very long lines (21556)	1C56940A864F144FAE2EB40EE952CB94	EBFC754CE962A1F9025853F2995B3987F0383D87	3C37A4AA3CF6AAAE6921A4B750C0E4F81FD338D6878BE90B0FAF2F921039CB23
Chrome Cache Entry: 268	ASCII text	28654DCD60D10E8B544107786501D338	17FEB31DDE68506EEA0C1E2836FB2ABCB17A1361	C3FDCA29D46646EC2F89243FAEE15B1CB1AA26AB56128C15A88DD7C4E27EA741
Chrome Cache Entry: 269	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 32x32, components 3	65D29642F4A833DF226E1349A668354B	AE6C19A8E6B1646E29410FDB0751A47722F48AD3	3E6AD6638B9014FAB7BD4BE96706AB0C9853C97B8794A1590A9219D246BAE6C1
Chrome Cache Entry: 270	ASCII text, with very long lines (367)	401821742DEF46C40D4CF5F0121C8BEC	1852305A4F2D7E120F9B7BD185790B98CDF9BFA6	462D8298239BC61418760DB4204CD135D990537E625782D059CB9D3A1D0266A4
Chrome Cache Entry: 271	ASCII text, with very long lines (330)	C86B7F8224FA45FB1682AC94D8F75AC6	9561F67AAE74B14702DB79C22F9C7F9E6F3B3239	010083B88E95F18CEFDB90796ACCE02073E91FC8DFEFB27A7F5F3F75529E4906
Chrome Cache Entry: 272	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 273	ASCII text, with very long lines (51029)	A54E8E63C5FB8CF7C1B38566287BBFF5	0552F8B0B429F270D832DC4447052119001B8FDF	DCCC7ED901462B926A1EFBCE4AFAFF4CC65A9B72521CB2D445729A418E4AA5B6
Chrome Cache Entry: 274	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 275	Web Open Font Format (Version 2), TrueType, length 25548, version 1.0	FD73ED1B0D8EF524D32C809878488633	CB6174199EC26A9464C279712AC582418EEB141B	38DF0CBE13E3CDF0E45F3525950C8A81395DACF6C90226B77CFCFCC5ADC561FE
Chrome Cache Entry: 276	RIFF (little-endian) data, Web/P image	4145D20F55D406DCE2702CC4461FDDBE	4D7E57C7B9D8DCA0CA71B12580E2D944D4281082	01F6198A599A819DDD7EE1FA477253280C90D5E8556C86FBAAE9EE954AA1DF2B
Chrome Cache Entry: 277	RIFF (little-endian) data, Web/P image	8767B0B185BB395D7FD19F0B3A4F35FD	77E342FD240471A1B3021EDAC23B12F7604E6258	4F890E2BC7389D848F0A1F3CD97380686640E80EEC9E8F945A15C81B849C5DAC
Chrome Cache Entry: 278	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 279	ASCII text, with very long lines (5517)	A6063D0F3BCFC5D3F177EABBB8F10BC3	1D8F1EFC46C35759865AA565C0E81DA919DE8F51	87C4049140663F93FFE069333EF3F3DC37F1AC6BD4A6881A40FD20EC5412DCF7
Chrome Cache Entry: 280	ASCII text, with very long lines (32979), with no line terminators	4C26BD2F89896C19BAB99604434AFDBC	A80C147A54B4F4C595AFD395808FE2DDEE19F613	1DA79334F9130F3DB3A1E30D70D03869B8A4355876649387699F7442D414C737
Chrome Cache Entry: 281	ASCII text, with very long lines (51029)	2DF90BD2DF97C1ACA6C16E675272E588	5ADF70B123257EF8CE38462A982F88268936DBA0	BA063016A1BAE8E9FD517FBF919C5CB0BBE44ECAF920057F56F28E55FAFE5C39
Chrome Cache Entry: 282	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 283	ASCII text	8F12765EB30FBDCFCDC116D13F7FC272	506E45B7D3930756EACCE0DAD449A3C8CDB3EAC6	265995EB76326E95613750F6F6570B850F5C22280D262DE9B9632A16CEB98B9B
Chrome Cache Entry: 284	ASCII text, with very long lines (1352)	DA82F14F261B7847FC0BC55DAC30A9B3	94D7EDACB4F425A3CB1E6B7B70301A60027E3AF8	03F278836505E268D8B286774CF646016C5CC65BF893B7541BE1A2A63CC66D4C
Chrome Cache Entry: 285	ASCII text, with very long lines (12251)	9F94046AEA26739AC8888A6D3ED17E16	9AD04A9430086B1A1A403D9FB0485174393EB8BC	5712A0DCF37AC601A9E017FBA9F9276C9206A730ADF495186421AF66D4B3F49E
Chrome Cache Entry: 286	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 287	ASCII text, with very long lines (1211)	CB9BFA0FBDD957FBE7F4841B70341DB2	9CAD12A3580D3E4D340CB867E88B687C75564C5A	513864FD4EBD1926F3E1E78B436A90C2BC3A5D16835B50415E7B318D7DEEC2A2
Chrome Cache Entry: 288	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 289	ASCII text, with very long lines (1875)	DB9B98D640EBA155278DB0BBAA83050D	25F72D93FE64E2B9A398C2D74D6EC747533E613B	4666B9BD872EBF01AD511B5B7628C5E19362AA01B05A6EDC2A266527780E1865
Chrome Cache Entry: 290	Web Open Font Format (Version 2), TrueType, length 7908, version 1.0	15D9BBCFBC1D668A43C85D156D23262B	C436963710C58453C4AE27E66C051E85C084CD49	6DB83475C4B6E3BCD2DF60CA7AFCEDABC5140C3B55C9A6BB0CA636C5B6438E5F
Chrome Cache Entry: 291	ASCII text, with very long lines (45222)	1D783F819C225F5CB653EB21F3CD1ED5	F660C90E8348C99A259E90EFCE7203DB34ADB3C5	C4C619002C8382A064FE0CE867B979C2FAF83BEB821BBC4F9D096E70F0C16700
Chrome Cache Entry: 292	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 293	Web Open Font Format (Version 2), TrueType, length 8520, version 1.0	CE1C0390731A3E14E25947BEBA4D7BC7	314391B4D88BF5D37826B2D8E15684EE24839151	A23CDC6F17EBAF9A49D2BD7F3723CF8A185F0CDFA4065E83490C9769B643A587
Chrome Cache Entry: 294	ASCII text, with very long lines (442)	5F10DF611C856F376981BE4DFBD17753	4463A27419B2FDFDBD81770C74DEE2E74BE948E0	EBD2BA2A0E879AE2CEC7D513324E04346153A581BE3AA202662E6C9D5B1CE6E1
Chrome Cache Entry: 295	JSON data	A6D54152BED989F616129F2CBC6BC766	FDAB9DD9F6B7D60EADB17F3D5937714750B5D329	800C23B0D0E714D1DAAF9ADD5FCB1557F147D49C46916B1F25FA1C71CE6254D5
Chrome Cache Entry: 296	Unicode text, UTF-8 text, with very long lines (20947)	753CB19EE1A756E46FAA0F118B1B4E01	248885E3BFE7E71989BA9FFFB33B6EFF18166FEC	ED9FFA2FBA5ECC75AF2F99E6EBADD5B927086F258037C2A848E94449CC579991
Chrome Cache Entry: 297	ASCII text, with very long lines (522)	FADB3719FFA2A9E96CDC64FFEA0220FA	B9B00833E59E99ECE036B518D8429AF5EFEC1163	E8A5463FF98210D3017DEEE55D5A287AD01AAA11DBE7DEB7D07F7D15D7F609F2
Chrome Cache Entry: 298	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 299	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 300	HTML document, ASCII text, with very long lines (1781)	259A1B558B8AE701ADB62DFDC7BDE1A5	DC1664F5475E46708EC528A79242110FA31727BB	FE4C559E7D146FFA683233D24535F5D876539807080B08D970487501A101DB86
Chrome Cache Entry: 301	JSON data	945DC342BEFA9FAAA1A05F75CF6899EC	6888FE1F63A54DCF487321A8FFD7C7BB59B88088	D58812B2FA2ED0ED5ED6415F3D0F35DC435BD43C435A30AC458F5A3526EA531B
Chrome Cache Entry: 302	Unicode text, UTF-8 text, with very long lines (63425)	31E273E89FB56A44D86D206F1BCDCDB4	C1D25BAD06F8485EB76D39134C4BEC22A44E5534	9E3C0FE8C9D6F0325C883709CEDE8898CE5D70F0640420ED058E0709C636531B
Chrome Cache Entry: 303	ASCII text, with very long lines (320)	CB31EE4371F4B980A9B0558E2BF33F25	D278B0649111A95915D3DEB53FFAE3C18643FCE0	B3C44B353138EC66F4305173807B5E489372C507F44B11223ED942E03C62D8C7
Chrome Cache Entry: 304	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 305	ASCII text, with very long lines (1824)	EDC15AD5DAAC3CFA744BFFDB1E0174BE	E314A5CA702D0E77B2C2C023ADDADE266EA223B2	3B54AEACFDA01BE53800632989A82F6F5A7F92E927159A37A4324B38D3DFFEF8
Chrome Cache Entry: 306	ASCII text	E0DD176C6926B0363ADAF4F9AAEF6EE1	22F6B48EF8091561BE6C2475FCFD98FDDD5A8876	7727F84EAC14FE82243924684B431EEEFA12F779C0CABC62F684DB7D3AAB8369
Chrome Cache Entry: 307	ASCII text, with very long lines (65536), with no line terminators	6A7950CC31489069917BF817B62B2BFE	44AAB6E9B8FDBAA23EA297CE69E26422277907C0	1B4DACB0DAFDA81D48EE0890EA113B3B8275BF2D16D5325F971F16EB75F7218A
Chrome Cache Entry: 308	ASCII text, with very long lines (522)	FADB3719FFA2A9E96CDC64FFEA0220FA	B9B00833E59E99ECE036B518D8429AF5EFEC1163	E8A5463FF98210D3017DEEE55D5A287AD01AAA11DBE7DEB7D07F7D15D7F609F2
Chrome Cache Entry: 309	ASCII text, with very long lines (2069)	185ACDE3DC543382E0F5B4E6D11A95F0	60D168A330A194CA844FC85AF28292C60BCA6E32	3DE509D9B85C3B24AAB7ACE6F4C1D687A5210D1F36464C3560115142261F5373
Chrome Cache Entry: 310	ASCII text, with very long lines (5517)	A6063D0F3BCFC5D3F177EABBB8F10BC3	1D8F1EFC46C35759865AA565C0E81DA919DE8F51	87C4049140663F93FFE069333EF3F3DC37F1AC6BD4A6881A40FD20EC5412DCF7
Chrome Cache Entry: 311	ASCII text, with very long lines (516)	4A37F23CB638C625FC8451584283E359	06E59198676105545F014464A40AD8D98C4DAD49	72C6DF194818462D86074EAF05FC75F13CABC26431999B329E51A0C26A9F4C81
Chrome Cache Entry: 312	Web Open Font Format (Version 2), TrueType, length 7920, version 1.0	797AD5F8D84A297AB16F9A9C983ADFC2	AF074543E3BBD78E086CEFA983867E0936515C41	E0037277509761BE84D1C44B520649C2363DF89E00568561EBF015CB3CEDC91A
Chrome Cache Entry: 313	ASCII text, with very long lines (829)	F806FAAB29346709AA36F154927B3AC6	26A0B7AD2B844F2318229738927519A822D93445	DF2BB9597A554B46BD807CFD97EC6E3F7194CCC218B95D7F1E899657C1CF9FCC
Chrome Cache Entry: 314	ASCII text, with very long lines (1875)	DB9B98D640EBA155278DB0BBAA83050D	25F72D93FE64E2B9A398C2D74D6EC747533E613B	4666B9BD872EBF01AD511B5B7628C5E19362AA01B05A6EDC2A266527780E1865
Chrome Cache Entry: 315	ASCII text, with very long lines (5517)	284AC8482DACE8AFD0E42562E65E4ED3	B390BCEC1E466589103161DCC565E5D4BC179E98	62266B3AA29DF798078279B795D7EED559FE22782E023566405B07E89DECC48F
Chrome Cache Entry: 316	RIFF (little-endian) data, Web/P image	4145D20F55D406DCE2702CC4461FDDBE	4D7E57C7B9D8DCA0CA71B12580E2D944D4281082	01F6198A599A819DDD7EE1FA477253280C90D5E8556C86FBAAE9EE954AA1DF2B
Chrome Cache Entry: 317	ASCII text, with very long lines (51029)	B118B95D52942B24C914C64B3FA5EB69	0F89D6E89CD800488E9413DAF2C6DEB788952639	C1105A0B61EC250192B8D250404A4DD17E2C58176014D46C5C5E7CDE7EDB69F4
Chrome Cache Entry: 318	ASCII text, with very long lines (14742)	4E56DDB045B48F1074F336A33249E577	2C5DED666EBC66F9D7A45135DF7A55C60C4DA6D1	B3FA00681128F7B43422A70A5463904CC1D9FB9AB2BB35859D7832E215AF16D3
Chrome Cache Entry: 319	ASCII text, with very long lines (1824)	EDC15AD5DAAC3CFA744BFFDB1E0174BE	E314A5CA702D0E77B2C2C023ADDADE266EA223B2	3B54AEACFDA01BE53800632989A82F6F5A7F92E927159A37A4324B38D3DFFEF8
Chrome Cache Entry: 320	Web Open Font Format (Version 2), TrueType, length 7908, version 1.0	15D9BBCFBC1D668A43C85D156D23262B	C436963710C58453C4AE27E66C051E85C084CD49	6DB83475C4B6E3BCD2DF60CA7AFCEDABC5140C3B55C9A6BB0CA636C5B6438E5F
Chrome Cache Entry: 321	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B

AV Detection

Multi AV Scanner detection for submitted file

Source: https://gemini_logip.godaddysites.com/

Virustotal: Detection: 5%

Perma Link

Source: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-in_corp_applications_base

HTTP Parser: No favicon

Source: https://gemini_logip.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://gemini_logip.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://gemini_logip.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49828 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49745 version: TLS 1.2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49828 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://gemini_logip.godaddysites.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET /faq HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=O0ZB0yHIDrTqQ88Kx_Fc-320MxQ&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21 HTTP/1.1Host: ms.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contact-us HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=O0ZB0yHIDrTqQ88Kx_Fc-320MxQ&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21 HTTP/1.1Host: ms.godaddy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: azk=ue1-a226e66401e841d8b57198dcfdcbf221; azk-ss=true
Source: global traffic	HTTP traffic detected: GET /services HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=1&C_TOUCH=2024-09-29T02:39:44.130Z
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=2&C_TOUCH=2024-09-29T02:39:58.438Z
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://gemini_logip.godaddysites.com/sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=2&C_TOUCH=2024-09-29T02:39:58.438ZIf-None-Match: 4c26bd2f89896c19bab99604434afdbc
Source: global traffic	HTTP traffic detected: GET /accounts/d9bbf6cd-f2e9-4d78-b2b1-0725c30312e3/config HTTP/1.1Host: api.ola.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json;charset=UTF-8Origin: https://gemini_logip.godaddysites.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=2&C_TOUCH=2024-09-29T02:39:58.438Z
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=6mk4uf6kNYs3G_8pCQfSNajh5_Y&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21 HTTP/1.1Host: ms.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: azk=ue1-a226e66401e841d8b57198dcfdcbf221; azk-ss=true
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/faqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=3&C_TOUCH=2024-09-29T02:40:04.804Z
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=3&C_TOUCH=2024-09-29T02:40:04.804Z
Source: global traffic	HTTP traffic detected: GET /i.gif?e=eyJ2IjoiMS4xMiIsImF2IjoxMzc5NjY0LCJhdCI6MjQ0NywiYnQiOjAsImNtIjozNjk2NjY5OTcsImNoIjo1NDQ0NSwiY2siOnt9LCJjciI6NDA4ODkzMDIyLCJkaSI6ImE4Y2RiMzJmZmNhODQwMjU5ZjY3YWQwYmVjNGJhNDRmIiwiZGoiOjAsImlpIjoiMDVmMmY4YTEwYjM3NDgyOWE3MTBiZjEyNjFjMzBhMGQiLCJkbSI6MywiZmMiOjU4Mzk1MjEyMywiZmwiOjU3MTk5NDU0MywiaXAiOiI2NC4yMDIuMTYwLjAiLCJrdyI6Int7a2V5d29yZH19IiwibnciOjEwNjYzLCJwYyI6MCwib3AiOjAsIm1wIjowLCJlYyI6MCwiZ20iOjAsImVwIjpudWxsLCJwciI6MjE4NDY1LCJydCI6MSwicnMiOjUwMCwic2EiOiI1MiIsInNiIjoiaS0wZjJkNDAyYmMxYmMwNjJjMyIsInNwIjoyMDQ3NTY3LCJzdCI6MTI3NjI2NCwidWsiOiJ1ZTEtYzQxY2FhZTFiODAxNDEyYWJhYzI0ZjdjNGUxZTkzZjgiLCJ6biI6MzA3NDk1LCJ0cyI6MTcyNzU3NzYwODE5MCwicG4iOiJ3YW0iLCJnYyI6dHJ1ZSwiZ0MiOnRydWUsImdzIjoibm9uZSIsImRjIjoxLCJ0eiI6IlVUQyIsImJhIjoxLCJmcSI6MH0&s=kRe9BLUyE9MxUxVuO1JpFk_kRWg&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21 HTTP/1.1Host: ms.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: azk-ss=true; azk=ue1-34c71e35ccbc4bef980b6d6a24087c13
Source: global traffic	HTTP traffic detected: GET /v2/accounts/d9bbf6cd-f2e9-4d78-b2b1-0725c30312e3/categories HTTP/1.1Host: api.ola.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json;charset=UTF-8Origin: https://gemini_logip.godaddysites.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/contact-usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=4&C_TOUCH=2024-09-29T02:40:11.574Z
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=2DgoOwp_fMVVqIQ5imUSMskq2gg&publisher_website_key=wam.md5.56a3c9444b6520a43a69f42d57ec8d21 HTTP/1.1Host: ms.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://gemini_logip.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: azk-ss=true; azk=ue1-c41caae1b801412abac24f7c4e1e93f8
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=4&C_TOUCH=2024-09-29T02:40:11.574Z
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: gemini_logip.godaddysites.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://gemini_logip.godaddysites.com/sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _tccl_visit=3dcb6b06-e37c-4744-9af4-bf62d9d11f80; _scc_session=pc=4&C_TOUCH=2024-09-29T02:40:11.574ZIf-None-Match: 4c26bd2f89896c19bab99604434afdbc

Source: global traffic	DNS traffic detected: DNS query: gemini_logip.godaddysites.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: isteam.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: events.api.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: ms.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: www.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: api.ola.godaddy.com

Source: unknown

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 02:40:02 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://gemini_logip.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: c6d0d052e29acfa4805d18a3261718f3X-Runtime: 0.004971vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 02:40:11 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://gemini_logip.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: 93d8697bc5ae04de45f8f8acf4af69b1X-Runtime: 0.004026vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains

Source: chromecache_210.2.dr, chromecache_302.2.dr, chromecache_226.2.dr, chromecache_296.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_243.2.dr, chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIFzCqgsI0mp9CG_oC-Nw.woff2)
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2)
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2)
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIIzCqgsI0mp9gz25WPFqwKUQ.woff2)
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2)
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neILzCqgsI0mp9CNzoymM5Ez.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q-bHNiZg.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q0bHNiZg.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q1bHNiZg.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q3bHNiZg.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q6bHM.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVep1q4dHc.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVepFq4dHc.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVepVq4dHc.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2)
Source: chromecache_199.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVerlq4dHc.woff2)
Source: chromecache_219.2.dr	String found in binary or memory: https://gemini_logip.godaddysites.com/
Source: chromecache_201.2.dr	String found in binary or memory: https://gemini_logip.godaddysites.com/contact-us
Source: chromecache_200.2.dr	String found in binary or memory: https://gemini_logip.godaddysites.com/faq
Source: chromecache_243.2.dr	String found in binary or memory: https://gemini_logip.godaddysites.com/services
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CG_oC-Nw.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WPFqwKUQ.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoymM5Ez.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q-bHNiZg.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q0bHNiZg.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q1bHNiZg.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q3bHNiZg.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q6bHM.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVep1q4dHc.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVepFq4dHc.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVepVq4dHc.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2)
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVerlq4dHc.woff2)
Source: chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/isteam/ip/d9bbf6cd-f2e9-4d78-b2b1-0725c30312e3/gemini-login-.png
Source: chromecache_243.2.dr, chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
Source: chromecache_300.2.dr, chromecache_239.2.dr	String found in binary or memory: https://ms.godaddy.com/i.gif?e=eyJ2IjoiMS4xMiIsImF2IjoxMzc5NjY0LCJhdCI6MjQ0NywiYnQiOjAsImNtIjoz
Source: chromecache_300.2.dr, chromecache_239.2.dr	String found in binary or memory: https://ms.godaddy.com/r?e=eyJ2IjoiMS4xMiIsImF2IjoxMzc5NjY0LCJhdCI6MjQ0NywiYnQiOjAsImNtIjozNjk2
Source: chromecache_243.2.dr, chromecache_200.2.dr, chromecache_201.2.dr, chromecache_219.2.dr	String found in binary or memory: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49745 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@20/219@26/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1964,i,14964113352374650661,4813199552823465559,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://gemini_logip.godaddysites.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1964,i,14964113352374650661,4813199552823465559,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

ID:	1521847
Product:	CloudBasic
Start time:	04:38:46
Start date:	29.09.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://gemini_logip.godaddysites.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://gemini_logip.godaddysites.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://gemini_logip.godaddysites.com/