Edit tour

Windows Analysis Report
https://geminloogi.godaddysites.com/

Overview

General Information

Sample URL:	https://geminloogi.godaddysites.com/
Analysis ID:	1521991
Tags:	openphish
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2076 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2380,i,7960251330218049171,2370960506557245725,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://geminloogi.godaddysites.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /accounts HTTP/1.1Host: api.ola.godaddy.comConnection: keep-aliveContent-Length: 54sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-Type: application/json;charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://geminloogi.godaddysites.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://geminloogi.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://geminloogi.godaddysites.com/	HTTP Parser: No favicon
Source: https://geminloogi.godaddysites.com/	HTTP Parser: No favicon
Source: https://geminloogi.godaddysites.com/projects	HTTP Parser: No favicon
Source: https://geminloogi.godaddysites.com/about	HTTP Parser: No favicon
Source: https://geminloogi.godaddysites.com/about	HTTP Parser: No favicon
Source: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base	HTTP Parser: No favicon

Source: https://geminloogi.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://geminloogi.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://geminloogi.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://geminloogi.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49788 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: geminloogi.godaddysites.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: isteam.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.reamaze.com
Source: global traffic	DNS traffic detected: DNS query: api.ola.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: push.reamaze.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: secure.gravatar.com
Source: global traffic	DNS traffic detected: DNS query: i0.wp.com
Source: global traffic	DNS traffic detected: DNS query: www.godaddy.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 04:58:13 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://geminloogi.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: e1e5da8995bd4a312096de5838622a2cX-Runtime: 0.003210vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 04:58:20 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://geminloogi.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: 0b7de0a524f08335c0fea1e2fea3d93fX-Runtime: 0.003829vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 04:58:33 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://geminloogi.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: fba78f41ca4b7e59140be23712a31a41X-Runtime: 0.004082vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 04:58:41 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://geminloogi.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: fed1ba58c8bd4f91458fd933a483a643X-Runtime: 0.004442vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 04:58:46 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://geminloogi.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: 5080fbe901fe8eb10b20cc66f6aacf98X-Runtime: 0.004466vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 04:58:51 GMTContent-Type: application/json; charset=utf-8Content-Length: 29Connection: closeaccess-control-allow-origin: https://geminloogi.godaddysites.comaccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEADaccess-control-expose-headers: access-control-max-age: 7200access-control-allow-credentials: trueX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheX-Request-Id: 90633cd558d8be458bbbd16538e4f546X-Runtime: 0.004522vary: Accept, OriginStrict-Transport-Security: max-age=15724800; includeSubDomains

Source: chromecache_257.2.dr, chromecache_356.2.dr, chromecache_277.2.dr, chromecache_317.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr, chromecache_380.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_385.2.dr, chromecache_342.2.dr	String found in binary or memory: https://api.ola.$
Source: chromecache_385.2.dr, chromecache_342.2.dr	String found in binary or memory: https://cart-checkout.dev-secureserver.net
Source: chromecache_385.2.dr, chromecache_342.2.dr	String found in binary or memory: https://cart-checkout.secureserver.net
Source: chromecache_385.2.dr, chromecache_342.2.dr	String found in binary or memory: https://cart-checkout.test-secureserver.net
Source: chromecache_275.2.dr	String found in binary or memory: https://cdn.reamaze.com/assets/external/fontawesome6/webfonts/fa-regular-400-7d81a1a7cc07e1ab196e404
Source: chromecache_275.2.dr	String found in binary or memory: https://cdn.reamaze.com/assets/external/fontawesome6/webfonts/fa-regular-400-9169d8be7a8177e5a92a4d0
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Gochi-Hand-latin-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-cyrillic-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-cyrillic-700.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-cyrillic-ext-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-cyrillic-ext-700.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-devanagari-700.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-devanagri-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-greek-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-greek-700.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-greek-ext-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-greek-ext-700.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-latin-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-latin-700.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-latin-ext-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-latin-ext-700.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-vietnamese-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Noto-Sans-vietnamese-700.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-300.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-700.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-300.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-700
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-300.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-700.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-ext-300.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-ext-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-ext-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-latin-ext-700.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-vietnamese-300.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-vietnamese-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-vietnamese-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Nunito-vietnamese-700.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Sacramento-latin-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Sacramento-latin-ext-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-cyrillic-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-cyrillic-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-cyrillic-ext-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-ext-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-ext-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-ext-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-ext-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-vietnamese-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Code-Pro-vietnamese-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-200.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-300.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-200.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-300.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-200.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-ext-200.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-ext-300.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-ext-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-ext-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-200.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-300.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-ext-200.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-ext-300.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-ext-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-ext-600.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-vietnamese-300.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-vietnamese-400.woff2
Source: chromecache_235.2.dr	String found in binary or memory: https://cdn.reamaze.com/fonts/Source-Sans-Pro-vietnamese-600.woff2
Source: chromecache_274.2.dr	String found in binary or memory: https://contact.apps-api.instantpage.secureserver.net
Source: chromecache_275.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_275.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_327.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIFzCqgsI0mp9CG_oC-Nw.woff2)
Source: chromecache_327.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2)
Source: chromecache_327.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2)
Source: chromecache_327.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neIIzCqgsI0mp9gz25WPFqwKUQ.woff2)
Source: chromecache_327.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2)
Source: chromecache_327.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/gudea/v15/neILzCqgsI0mp9CNzoymM5Ez.woff2)
Source: chromecache_234.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNXaxMICA.woff2)
Source: chromecache_234.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTPYgFE_.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://geminloogi.godaddysites.com/
Source: chromecache_383.2.dr	String found in binary or memory: https://geminloogi.godaddysites.com/about
Source: chromecache_380.2.dr	String found in binary or memory: https://geminloogi.godaddysites.com/contact
Source: chromecache_227.2.dr	String found in binary or memory: https://geminloogi.godaddysites.com/projects
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr, chromecache_380.2.dr	String found in binary or memory: https://github.com/clauseggers/Playfair-Display)
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CG_oC-Nw.woff2)
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2)
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2)
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WPFqwKUQ.woff2)
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2)
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoymM5Ez.woff2)
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNXaxMICA.woff2)
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2)
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2)
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTPYgFE_.woff2)
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2)
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2)
Source: chromecache_380.2.dr	String found in binary or memory: https://img1.wsimg.com/isteam/ip/d259ecf2-ac02-4260-94af-4f91e605cf8e/architecture-chair-color-10806
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr, chromecache_380.2.dr	String found in binary or memory: https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
Source: chromecache_274.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_274.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_313.2.dr, chromecache_378.2.dr	String found in binary or memory: https://pusher.com/
Source: chromecache_230.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/80df4b4f3c5a5ccbda4d99e5cf205abf?default=https%3A%2F%2Freamaze.co
Source: chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr, chromecache_380.2.dr	String found in binary or memory: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2380,i,7960251330218049171,2370960506557245725,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://geminloogi.godaddysites.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2380,i,7960251330218049171,2370960506557245725,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://policies.google.com/terms	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
3.121.64.201	isteam.wsimg.com	United States	16509	AMAZON-02US	false
13.248.243.5	geminloogi.godaddysites.com	United States	16509	AMAZON-02US	false
104.22.9.8	push.reamaze.com	United States	13335	CLOUDFLARENETUS	false
192.0.77.2	i0.wp.com	United States	2635	AUTOMATTICUS	false
104.22.8.8	cdn.reamaze.com	United States	13335	CLOUDFLARENETUS	false
198.71.248.123	proxy.k8s.pnc.iad.secureserver.net	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
192.0.73.2	secure.gravatar.com	United States	2635	AUTOMATTICUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.67.28.250	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

IP
192.168.2.4
192.168.2.5

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521991
Start date and time:	2024-09-29 06:57:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://geminloogi.godaddysites.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@20/266@34/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://geminloogi.godaddysites.com/projects Browse: https://geminloogi.godaddysites.com/about Browse: https://geminloogi.godaddysites.com/contact Browse: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base

Name	IP	Active	Malicious	Reputation
geminloogi.godaddysites.com	13.248.243.5	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
secure.gravatar.com	192.0.73.2	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.google.com	172.217.16.196	true	false	unknown
cdn.reamaze.com	104.22.8.8	true	false	unknown
i0.wp.com	192.0.77.2	true	false	unknown
isteam.wsimg.com	3.121.64.201	true	false	unknown
push.reamaze.com	104.22.9.8	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
proxy.k8s.pnc.iad.secureserver.net	198.71.248.123	true	false	unknown
img1.wsimg.com	unknown	unknown	false	unknown
www.godaddy.com	unknown	unknown	false	unknown
api.ola.godaddy.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://geminloogi.godaddysites.com/contact	true	unknown
https://geminloogi.godaddysites.com/sw.js	true	unknown
https://cdn.reamaze.com/assets/reamaze-loader.js	false	unknown
https://api.ola.godaddy.com/accounts/5c425178-0ec3-4aa1-b622-5db3a547ab77/config?fields[]=cart	false	unknown
https://cdn.reamaze.com/data/brands/5c425178-0ec3-4aa1-b622-5db3a547ab77/ping	false	unknown
https://cdn.reamaze.com/fonts/Nunito-latin-700.woff2	false	unknown
https://geminloogi.godaddysites.com/projects	true	unknown
https://cdn.reamaze.com/fonts/Nunito-latin-400.woff2	false	unknown
https://push.reamaze.com/assets/reamaze-push.js	false	unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base	false	unknown
https://i0.wp.com/reamaze.com/assets/default_avatars/missing-2-35081955adb72bb30340076958efdb72257bed3564518d0b1af8f2bf109b0aa6.png?ssl=1	false	unknown
https://api.ola.godaddy.com/accounts	false	unknown
https://api.ola.godaddy.com/accounts/5c425178-0ec3-4aa1-b622-5db3a547ab77/config	false	unknown
https://geminloogi.godaddysites.com/about	true	unknown
https://api.ola.godaddy.com/v2/accounts/5c425178-0ec3-4aa1-b622-5db3a547ab77/categories	false	unknown
https://secure.gravatar.com/avatar/80df4b4f3c5a5ccbda4d99e5cf205abf?default=https%3A%2F%2Freamaze.com%2Fassets%2Fdefault_avatars%2Fmissing-2-35081955adb72bb30340076958efdb72257bed3564518d0b1af8f2bf109b0aa6.png&rating=pg&size=48	false	unknown
https://cdn.reamaze.com/assets/fonts.css	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/pusher/7.0.1/pusher.min.js	false	unknown
https://cdn.reamaze.com/assets/reamaze.js	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.reamaze.com/fonts/Source-Code-Pro-vietnamese-600.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Noto-Sans-cyrillic-ext-400.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-400.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-vietnamese-400.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Nunito-latin-300.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-ext-600.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-300.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Noto-Sans-devanagari-700.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-ext-400.woff2	chromecache_235.2.dr	false		unknown
https://cart-checkout.dev-secureserver.net	chromecache_385.2.dr, chromecache_342.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNXaxMICA.woff2)	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2)	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2)	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	false		unknown
https://policies.google.com/terms	chromecache_274.2.dr	false	URL Reputation: safe	unknown
https://fontawesome.com	chromecache_275.2.dr	false	URL Reputation: safe	unknown
https://cdn.reamaze.com/fonts/	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Code-Pro-cyrillic-ext-400.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Nunito-vietnamese-600.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/assets/external/fontawesome6/webfonts/fa-regular-400-7d81a1a7cc07e1ab196e404	chromecache_275.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-300.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Code-Pro-cyrillic-400.woff2	chromecache_235.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2)	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Sacramento-latin-400.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Noto-Sans-latin-700.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Nunito-cyrillic-400.woff2	chromecache_235.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WPFqwKUQ.woff2)	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	false		unknown
https://cart-checkout.test-secureserver.net	chromecache_385.2.dr, chromecache_342.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2)	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	false		unknown
https://github.com/clauseggers/Playfair-Display)	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr, chromecache_380.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTPYgFE_.woff2)	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-600.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Sacramento-latin-ext-400.woff2	chromecache_235.2.dr	false		unknown
https://contact.apps-api.instantpage.secureserver.net	chromecache_274.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Nunito-cyrillic-700.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Nunito-cyrillic-300.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-600.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-ext-200.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-600.woff2	chromecache_235.2.dr	false		unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr, chromecache_380.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2)	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2)	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-600.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Nunito-latin-ext-400.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-cyrillic-400.woff2	chromecache_235.2.dr	false		unknown
https://pusher.com/	chromecache_313.2.dr, chromecache_378.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Noto-Sans-greek-ext-700.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Noto-Sans-vietnamese-400.woff2	chromecache_235.2.dr	false		unknown
https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr, chromecache_380.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-ext-600.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-700	chromecache_235.2.dr	false		unknown
https://policies.google.com/privacy	chromecache_274.2.dr	false	URL Reputation: safe	unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-400.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-ext-200.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-ext-400.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Code-Pro-greek-ext-400.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-200.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-600.woff2	chromecache_235.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CG_oC-Nw.woff2)	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-ext-200.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-vietnamese-600.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Code-Pro-vietnamese-400.woff2	chromecache_235.2.dr	false		unknown
https://fontawesome.com/license/free	chromecache_275.2.dr	false	URL Reputation: safe	unknown
https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-ext-600.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Code-Pro-latin-400.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Nunito-cyrillic-ext-300.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Nunito-latin-ext-700.woff2	chromecache_235.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoymM5Ez.woff2)	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-latin-300.woff2	chromecache_235.2.dr	false		unknown
https://cart-checkout.secureserver.net	chromecache_385.2.dr, chromecache_342.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Noto-Sans-greek-ext-400.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Nunito-vietnamese-400.woff2	chromecache_235.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2)	chromecache_383.2.dr, chromecache_353.2.dr, chromecache_227.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Noto-Sans-greek-400.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Noto-Sans-vietnamese-700.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-greek-ext-300.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Noto-Sans-devanagri-400.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Nunito-cyrillic-600.woff2	chromecache_235.2.dr	false		unknown
http://jedwatson.github.io/classnames	chromecache_257.2.dr, chromecache_356.2.dr, chromecache_277.2.dr, chromecache_317.2.dr	false	URL Reputation: safe	unknown
https://cdn.reamaze.com/fonts/Source-Sans-Pro-vietnamese-300.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Source-Code-Pro-cyrillic-600.woff2	chromecache_235.2.dr	false		unknown
https://cdn.reamaze.com/fonts/Gochi-Hand-latin-400.woff2	chromecache_235.2.dr	false		unknown

Input	Output
URL: https://geminloogi.godaddysites.com/projects Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://geminloogi.godaddysites.com/contact Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://geminloogi.godaddysites.com/about Model: jbxai	{ "brand":["Globi"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://geminloogi.godaddysites.com/about Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://geminloogi.godaddysites.com/about Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 640x800, components 3
Category:	dropped
Size (bytes):	43374
Entropy (8bit):	7.965811572930236
Encrypted:	false
SSDEEP:	768:jiLTACeWquqUXGLRmGIEHdzxmQS4wkVo/ffCPRRoI760F8wMQY1ACS:g8ZWJ6Xdzwqwk2Cb76i8wMQj
MD5:	8F93ACFDC3D2FB58FD039E8AA1C3DF63
SHA1:	36478EC32D8289BDDA0C3D8355AE6AD87E5FEF18
SHA-256:	AA75E0BC7C78F3A46F06BF66D41067D16AE59178B2FF3539C39D6A4F7A6A20FB
SHA-512:	7D11779A4079F50035F0591D6F549AE2A35E64B7AC58EE7A87AF7ACF7DEA4FEB26FBE92720A74F46BD280845B913CD1CB84D86CC959B25DF053D5C4A0752E85D
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......8c......8c................0210....................0100................................ ..........C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... ....".........................................K.........................!1..AQ"aq..2..#3BR..$4b..Cr...S....%5.&DTc..Es................................'......................1.!AQ.."2a.BqR.............?..H%.(.T..P..J.(@.BT.....P.8 T!..!.@!.P.."P.J. ..J.B...R%@!.@!.P.....!..!..!...B..B..B..B.)v>.R..b.........q...Z.a..e.......f.y....m.\._.}B...E.R....."R...N.Jwz+.T./....#.r...u...o...u...d.$....z..&.5+r..b........Y..-!js.U...\|]...........YZ...`..9>)9.F.5.B-.}.g.x.v...F,..;O.{...C.......F.*f5}...R8..\|.Ty..1.....g....V.Z...........M...tfj......nNM#X..E.9.._....&$..N........Zl...G.B.k.#r....=....1..l.&..)..\.....=.bE......N_...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 06:58:02.502759933 CEST	53	56956	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:02.596759081 CEST	53	58857	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:03.521465063 CEST	55776	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:03.521517038 CEST	51294	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:03.529906988 CEST	53	55776	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:03.530884027 CEST	53	51294	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:03.861387968 CEST	53	62038	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:04.223867893 CEST	51808	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:04.224080086 CEST	62721	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:04.225955963 CEST	53	60661	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:04.228408098 CEST	50518	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:04.228559017 CEST	53483	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:04.237426043 CEST	53	53483	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:04.239298105 CEST	53	50518	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:04.752820015 CEST	57681	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:04.752979040 CEST	57094	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:04.768389940 CEST	53	57681	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:04.769270897 CEST	53	57094	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:05.661865950 CEST	53287	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:05.662369013 CEST	63358	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:12.236277103 CEST	62597	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:12.243259907 CEST	49452	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:12.243307114 CEST	53	62597	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:12.250771999 CEST	53	49452	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:12.870809078 CEST	54967	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:12.870960951 CEST	63819	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:12.878613949 CEST	53	63819	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:12.878645897 CEST	53	54967	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:13.307415009 CEST	61309	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:13.307787895 CEST	51047	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:13.316370964 CEST	53	61309	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:13.319308043 CEST	53	51047	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:15.486454964 CEST	59547	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:15.487319946 CEST	49206	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:15.495929956 CEST	53	49206	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:15.496030092 CEST	53	59547	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:18.521642923 CEST	49515	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:18.522128105 CEST	63738	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:18.528449059 CEST	53	49515	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:18.529385090 CEST	53	63738	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:19.034060955 CEST	59617	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:19.034274101 CEST	65519	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:19.040966988 CEST	53	59617	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:19.041201115 CEST	53	65519	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:19.256604910 CEST	138	138	192.168.2.4	192.168.2.255
Sep 29, 2024 06:58:21.016637087 CEST	51071	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:21.017550945 CEST	58360	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:21.024688959 CEST	53	58360	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:21.025135994 CEST	53	51071	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:21.201560974 CEST	53	58952	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:25.109817982 CEST	65431	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:25.110153913 CEST	60363	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:25.116525888 CEST	53	65431	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:25.116642952 CEST	53	60363	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:36.321196079 CEST	64243	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:36.321893930 CEST	50490	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:36.328115940 CEST	53	64243	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:36.329149008 CEST	53	50490	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:37.347261906 CEST	60135	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:37.348083973 CEST	50807	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:37.354202032 CEST	53	60135	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:37.354888916 CEST	53	50807	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:39.738334894 CEST	53982	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:39.738467932 CEST	62537	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:39.745073080 CEST	53	53982	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:39.745795012 CEST	53	62537	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:41.747725964 CEST	53	54446	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:43.267545938 CEST	53	53732	1.1.1.1	192.168.2.4
Sep 29, 2024 06:58:47.920284986 CEST	54910	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:58:47.920284986 CEST	59657	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:59:02.090383053 CEST	53	58473	1.1.1.1	192.168.2.4
Sep 29, 2024 06:59:06.737391949 CEST	53	57061	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:04 UTC	670	OUT	GET / HTTP/1.1 Host: geminloogi.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:58:04 UTC	1370	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.10.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: e4c7ccab430b65ccd2ed545ff9a53edf Date: Sun, 29 Sep 2024 04:58:04 GMT Connection: close Transfer-Encoding: chunked
2024-09-29 04:58:04 UTC	15014	IN	Data Raw: 63 35 63 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 35 63 34 32 35 31 37 38 2d 30 65 63 33 2d 34 61 61 31 2d 62 36 32 32 2d 35 64 62 33 61 35 34 37 61 62 37 37 2f 66 61 76 69 63 6f 6e 2f 34 62 63 38 64 32 63 32 2d 37 39 32 30 2d 34 39 30 37 2d 61 34 35 63 2d 65 38 65 35 35 35 32 36 31 64 36 33 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 36 2c 68 3a 31 36 2c 6d 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f Data Ascii: c5c2<!DOCTYPE html><html lang="en-US"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/5c425178-0ec3-4aa1-b622-5db3a547ab77/favicon/4bc8d2c2-7920-4907-a45c-e8e555261d63.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com/
2024-09-29 04:58:04 UTC	16384	IN	Data Raw: 72 74 61 6e 74 7d 2e 73 69 64 65 6c 69 6e 65 2d 66 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 7d 2e 64 69 73 61 62 6c 65 2d 73 63 72 6f 6c 6c 7b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 76 77 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 65 72 73 63 61 6c 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 6f 70 61 63 69 74 79 3a 31 7d 34 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 31 29 3b 6f 70 61 63 69 74 79 3a 2e 37 7d 38 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 Data Ascii: rtant}.sideline-footer{margin-top:auto}.disable-scroll{touch-action:none;overflow:hidden;position:fixed;max-width:100vw}@-webkit-keyframes loaderscale{0%{transform:scale(1);opacity:1}45%{transform:scale(.1);opacity:.7}80%{transform:scale(1);opacity:1}}@ke
2024-09-29 04:58:04 UTC	16384	IN	Data Raw: 31 2d 76 20 63 31 2d 77 20 63 31 2d 32 61 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 42 6c 6f 63 6b 22 20 69 64 3d 22 6e 61 76 42 61 72 49 64 2d 32 31 39 34 36 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 32 62 20 63 31 2d 31 6b 20 63 31 2d 31 32 20 63 31 2d 31 33 20 63 31 2d 32 63 20 63 31 2d 32 64 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 32 65 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 42 6c 6f 63 6b 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 34 20 63 31 2d 32 66 20 Data Ascii: 1-v c1-w c1-2a c1-b c1-c c1-d c1-e c1-f c1-g"><div data-ux="Block" id="navBarId-21946" class="x-el x-el-div c1-1 c1-2 c1-2b c1-1k c1-12 c1-13 c1-2c c1-2d c1-b c1-c c1-d c1-2e c1-e c1-f c1-g"><div data-ux="Block" class="x-el x-el-div c1-1 c1-2 c1-14 c1-2f
2024-09-29 04:58:04 UTC	2857	IN	Data Raw: 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 34 20 63 31 2d 35 33 20 63 31 2d 35 34 20 63 31 2d 35 35 20 63 31 2d 31 35 20 63 31 2d 31 36 20 63 31 2d 31 37 20 63 31 2d 31 38 20 63 31 2d 31 32 20 63 31 2d 35 66 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 47 72 69 64 43 65 6c 6c 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 35 33 20 63 31 2d 36 6a 20 63 31 2d 35 37 20 63 31 2d 35 65 20 63 31 2d 32 61 20 63 31 2d 32 63 20 63 31 2d 31 63 20 63 31 2d 32 64 20 63 31 2d 31 64 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 36 6b 20 63 31 2d 36 6c 20 63 31 Data Ascii: ="x-el x-el-div c1-1 c1-2 c1-14 c1-53 c1-54 c1-55 c1-15 c1-16 c1-17 c1-18 c1-12 c1-5f c1-b c1-c c1-d c1-e c1-f c1-g"><div data-ux="GridCell" class="x-el x-el-div c1-1 c1-2 c1-53 c1-6j c1-57 c1-5e c1-2a c1-2c c1-1c c1-2d c1-1d c1-b c1-c c1-d c1-6k c1-6l c1

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:09 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 04:58:09 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=128813 Date: Sun, 29 Sep 2024 04:58:09 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:10 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 04:58:11 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=128842 Date: Sun, 29 Sep 2024 04:58:10 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 04:58:11 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:12 UTC	550	OUT	GET /assets/reamaze-loader.js HTTP/1.1 Host: cdn.reamaze.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://geminloogi.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:58:12 UTC	315	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 04:58:12 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-encoding last-modified: Fri, 27 Sep 2024 20:05:02 GMT etag: W/"1a0-6231f5ed15780" CF-Cache-Status: HIT Age: 2336 Server: cloudflare CF-RAY: 8ca965961b0642e6-EWR
2024-09-29 04:58:12 UTC	711	IN	Data Raw: 32 63 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 21 31 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 43 68 72 6f 6d 65 2d 4c 69 67 68 74 68 6f 75 73 65 2f 29 2c 74 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 41 6e 64 72 6f 69 64 20 31 31 2e 2a 3f 6d 6f 74 6f 20 67 20 70 6f 77 65 72 2e 2a 3f 32 30 32 32 2e 2a 3f 43 68 72 6f 6d 65 5c 2f 31 31 39 2f 29 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 26 26 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 52 65 61 6d 61 7a 65 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e Data Ascii: 2c0!function(){var a=!1,e=function(){var e=navigator.userAgent.match(/Chrome-Lighthouse/),t=navigator.userAgent.match(/Android 11.?moto g power.?2022.*?Chrome\/119/);setTimeout(function(){if(!a&&"undefined"==typeof Reamaze){var e=document.createElemen
2024-09-29 04:58:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://geminloogi.godaddysites.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Windows Analysis Report
https://geminloogi.godaddysites.com/

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:13 UTC	506	OUT	GET /sw.js HTTP/1.1 Host: geminloogi.godaddysites.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://geminloogi.godaddysites.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
2024-09-29 04:58:13 UTC	663	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: application/javascript Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 62968c39d31223921ce799c10d4e6a09 Date: Sun, 29 Sep 2024 04:58:13 GMT Connection: close Transfer-Encoding: chunked
2024-09-29 04:58:13 UTC	15721	IN	Data Raw: 38 30 63 61 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 38 39 35 3a 28 29 3d 3e 7b 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 63 61 63 68 65 61 62 6c 65 2d 72 65 73 70 6f 6e 73 65 3a 36 2e 34 2e 31 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 32 35 39 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 42 3a 28 29 3d 3e 61 7d 29 2c 73 28 39 31 33 29 3b 63 6c 61 73 73 20 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 65 2c 74 29 3d 3e 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 65 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 74 7d 29 29 7d 7d 7d 2c 31 32 35 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 56 3a Data Ascii: 80ca(()=>{"use strict";var e={895:()=>{try{self["workbox:cacheable-response:6.4.1"]&&_()}catch(e){}},259:(e,t,s)=>{s.d(t,{B:()=>a}),s(913);class a{constructor(){this.promise=new Promise(((e,t)=>{this.resolve=e,this.reject=t}))}}},125:(e,t,s)=>{s.d(t,{V:
2024-09-29 04:58:13 UTC	16384	IN	Data Raw: 65 2c 74 29 7c 7c 52 2e 68 61 73 28 65 2c 74 29 7d 2c 73 28 35 35 30 29 3b 63 6f 6e 73 74 20 76 3d 22 63 61 63 68 65 2d 65 6e 74 72 69 65 73 22 2c 62 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 55 52 4c 28 65 2c 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 68 61 73 68 3d 22 22 2c 74 2e 68 72 65 66 7d 3b 63 6c 61 73 73 20 78 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 5f 64 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 61 63 68 65 4e 61 6d 65 3d 65 7d 5f 75 70 67 72 61 64 65 44 62 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 53 74 6f 72 65 28 76 2c 7b 6b 65 79 50 61 74 68 3a 22 69 64 22 7d 29 3b 74 2e 63 72 65 61 74 65 49 6e 64 65 78 28 22 63 61 63 68 65 4e 61 6d 65 22 2c 22 Data Ascii: e,t)\|\|R.has(e,t)},s(550);const v="cache-entries",b=e=>{const t=new URL(e,location.href);return t.hash="",t.href};class x{constructor(e){this._db=null,this._cacheName=e}_upgradeDb(e){const t=e.createObjectStore(v,{keyPath:"id"});t.createIndex("cacheName","
2024-09-29 04:58:13 UTC	878	IN	Data Raw: 65 67 69 73 74 65 72 52 6f 75 74 65 29 28 28 28 7b 72 65 71 75 65 73 74 3a 65 7d 29 3d 3e 22 73 74 79 6c 65 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 7c 7c 22 73 63 72 69 70 74 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 29 2c 6e 65 77 20 74 2e 53 74 61 6c 65 57 68 69 6c 65 52 65 76 61 6c 69 64 61 74 65 28 7b 63 61 63 68 65 4e 61 6d 65 3a 22 73 74 61 74 69 63 2d 72 65 73 6f 75 72 63 65 73 22 2c 70 6c 75 67 69 6e 73 3a 5b 6e 65 77 20 61 2e 43 61 63 68 65 61 62 6c 65 52 65 73 70 6f 6e 73 65 50 6c 75 67 69 6e 28 7b 73 74 61 74 75 73 65 73 3a 5b 32 30 30 5d 7d 29 5d 7d 29 29 2c 28 30 2c 65 2e 72 65 67 69 73 74 65 72 52 6f 75 74 65 29 28 28 28 7b 75 72 6c 3a 65 7d 29 3d 3e 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 Data Ascii: egisterRoute)((({request:e})=>"style"===e.destination\|\|"script"===e.destination),new t.StaleWhileRevalidate({cacheName:"static-resources",plugins:[new a.CacheableResponsePlugin({statuses:[200]})]})),(0,e.registerRoute)((({url:e})=>"https://fonts.googleapi

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:13 UTC	558	OUT	GET /manifest.webmanifest HTTP/1.1 Host: geminloogi.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://geminloogi.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:58:13 UTC	666	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: application/manifest+json Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: f411b5d44eae225d8a97cf2bf1130592 Date: Sun, 29 Sep 2024 04:58:13 GMT Connection: close Transfer-Encoding: chunked
2024-09-29 04:58:13 UTC	531	IN	Data Raw: 32 30 37 0d 0a 7b 22 73 63 6f 70 65 22 3a 22 2f 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 22 31 39 32 78 31 39 32 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 73 72 63 22 3a 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 35 63 34 32 35 31 37 38 2d 30 65 63 33 2d 34 61 61 31 2d 62 36 32 32 2d 35 64 62 33 61 35 34 37 61 62 37 37 2f 66 61 76 69 63 6f 6e 2f 34 62 63 38 64 32 63 32 2d 37 39 32 30 2d 34 39 30 37 2d 61 34 35 63 2d 65 38 65 35 35 35 32 36 31 64 36 33 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 39 32 2c 68 3a 31 39 32 2c 6d 22 7d 2c 7b 22 73 69 7a 65 73 22 3a 22 Data Ascii: 207{"scope":"/","start_url":"/","display":"standalone","icons":[{"sizes":"192x192","type":"image/png","src":"//img1.wsimg.com/isteam/ip/5c425178-0ec3-4aa1-b622-5db3a547ab77/favicon/4bc8d2c2-7920-4907-a45c-e8e555261d63.png/:/rs=w:192,h:192,m"},{"sizes":"

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:13 UTC	543	OUT	GET /assets/reamaze.js HTTP/1.1 Host: cdn.reamaze.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://geminloogi.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:58:13 UTC	317	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 04:58:13 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-encoding last-modified: Fri, 27 Sep 2024 20:05:02 GMT etag: W/"33204-6231f5ed15780" CF-Cache-Status: HIT Age: 6524 Server: cloudflare CF-RAY: 8ca9659cc9b94303-EWR
2024-09-29 04:58:13 UTC	1052	IN	Data Raw: 37 65 36 31 0d 0a 66 75 6e 63 74 69 6f 6e 20 6f 75 69 62 6f 75 6e 63 65 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 3f 74 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 61 29 2c 66 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 65 2e 63 6c 69 65 6e 74 59 3e 6c 7c 7c 28 68 3d 73 65 74 54 69 6d 65 6f 75 74 28 6f 2c 75 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 68 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 29 2c 68 3d 6e 75 6c 6c 29 7d 66 75 6e Data Ascii: 7e61function ouibounce(e,t){"use strict";function n(e,t){return void 0===e?t:e}function r(){f.addEventListener("mouseleave",a),f.addEventListener("mouseenter",i)}function a(e){e.clientY>l\|\|(h=setTimeout(o,u))}function i(){h&&(clearTimeout(h),h=null)}fun
2024-09-29 04:58:13 UTC	1369	IN	Data Raw: 61 72 6b 65 64 2e 52 65 6e 64 65 72 65 72 3b 74 3f 72 3d 21 28 6e 3d 7b 65 6c 65 6d 65 6e 74 73 3a 5b 22 73 70 61 6e 22 5d 2c 61 74 74 72 69 62 75 74 65 73 3a 7b 73 70 61 6e 3a 5b 22 63 6c 61 73 73 22 5d 7d 7d 29 3a 28 6e 3d 7b 65 6c 65 6d 65 6e 74 73 3a 5b 5d 7d 2c 72 3d 21 30 29 3b 76 61 72 20 69 3d 6e 65 77 20 53 61 6e 69 74 69 7a 65 28 6e 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6f 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6d 61 72 6b 65 64 28 65 2c 7b 73 61 6e 69 74 69 7a 65 3a 72 2c 67 66 6d 3a 21 30 2c 72 65 6e 64 65 72 65 72 3a 61 2c 73 69 6c 65 6e 74 3a 21 30 7d 29 3b 76 61 72 20 73 3d 69 2e 63 6c 65 61 6e 5f 6e 6f 64 65 28 6f 29 2c 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d Data Ascii: arked.Renderer;t?r=!(n={elements:["span"],attributes:{span:["class"]}}):(n={elements:[]},r=!0);var i=new Sanitize(n),o=document.createElement("div");o.innerHTML=marked(e,{sanitize:r,gfm:!0,renderer:a,silent:!0});var s=i.clean_node(o),p=document.createElem
2024-09-29 04:58:13 UTC	1369	IN	Data Raw: 30 29 3b 6e 26 26 39 3c 28 69 2a 3d 32 29 26 26 28 69 2d 3d 39 29 2c 74 2b 3d 69 2c 6e 3d 21 6e 7d 72 65 74 75 72 6e 20 74 25 31 30 3d 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6c 6f 72 46 72 6f 6d 47 64 43 6f 6c 6f 72 50 61 63 6b 28 65 29 7b 72 65 74 75 72 6e 20 63 6f 6c 6f 72 50 61 63 6b 43 6f 6e 66 69 67 3d 7b 22 30 30 30 22 3a 22 23 66 66 64 37 30 30 22 2c 22 30 30 31 22 3a 22 23 66 35 62 35 30 30 22 2c 22 30 30 32 22 3a 22 23 66 66 39 63 30 30 22 2c 22 30 30 33 22 3a 22 23 65 65 36 36 31 62 22 2c 22 30 30 34 22 3a 22 23 63 38 34 38 33 35 22 2c 22 30 30 35 22 3a 22 23 64 32 32 66 32 35 22 2c 22 30 30 36 22 3a 22 23 61 30 32 36 32 66 22 2c 22 30 30 37 22 3a 22 23 66 32 36 31 39 33 22 2c 22 30 30 38 22 3a 22 23 64 61 32 32 35 65 22 2c 22 30 30 Data Ascii: 0);n&&9<(i*=2)&&(i-=9),t+=i,n=!n}return t%10==0}function getColorFromGdColorPack(e){return colorPackConfig={"000":"#ffd700","001":"#f5b500","002":"#ff9c00","003":"#ee661b","004":"#c84835","005":"#d22f25","006":"#a0262f","007":"#f26193","008":"#da225e","00
2024-09-29 04:58:13 UTC	1369	IN	Data Raw: 74 75 72 6e 20 52 65 61 63 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 2c 5f 65 78 74 65 6e 64 73 28 7b 73 65 74 54 69 6d 65 6f 75 74 3a 54 69 6d 65 72 4d 69 78 69 6e 2e 73 65 74 54 69 6d 65 6f 75 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 3a 54 69 6d 65 72 4d 69 78 69 6e 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 3a 54 69 6d 65 72 4d 69 78 69 6e 2e 73 65 74 49 6e 74 65 72 76 61 6c 2e 62 69 6e 64 28 74 68 69 73 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 3a 54 69 6d 65 72 4d 69 78 69 6e 2e 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 2e 62 69 6e 64 28 74 68 69 73 29 2c 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 54 69 6d 65 72 4d 69 78 69 6e 2e 73 65 74 49 6d 6d Data Ascii: turn React.createElement(a,_extends({setTimeout:TimerMixin.setTimeout.bind(this),clearTimeout:TimerMixin.clearTimeout.bind(this),setInterval:TimerMixin.setInterval.bind(this),clearInterval:TimerMixin.clearInterval.bind(this),setImmediate:TimerMixin.setImm
2024-09-29 04:58:13 UTC	1369	IN	Data Raw: 63 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 28 65 2c 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 30 3c 3d 74 2e 69 6e 64 65 78 4f 66 28 72 29 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 72 29 26 26 28 6e 5b 72 5d 3d 65 5b 72 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 4a 53 4f 4e 3b 77 69 6e 64 6f 77 2e 5f 6f 72 69 67 69 6e 61 6c 5f 65 78 70 6f 72 74 3d 77 69 6e 64 6f 77 5b 22 65 78 70 6f 72 74 22 5d 2c 77 69 6e 64 6f 77 2e 5f 6f 72 69 67 69 6e 61 6c 5f 65 78 70 6f 72 74 73 3d 77 69 6e 64 6f 77 2e 65 78 70 6f 72 74 73 2c 77 69 6e 64 6f 77 2e 5f 6f 72 69 67 69 6e 61 6c 5f 72 65 71 75 69 72 65 3d 77 69 6e 64 6f 77 2e 72 65 71 Data Ascii: ctWithoutProperties(e,t){var n={};for(var r in e)0<=t.indexOf(r)\|\|Object.prototype.hasOwnProperty.call(e,r)&&(n[r]=e[r]);return n}var JSON;window._original_export=window["export"],window._original_exports=window.exports,window._original_require=window.req
2024-09-29 04:58:13 UTC	1369	IN	Data Raw: 69 3b 6e 2b 3d 31 29 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 65 70 5b 6e 5d 26 26 28 61 3d 73 74 72 28 72 3d 72 65 70 5b 6e 5d 2c 70 29 29 26 26 6f 2e 70 75 73 68 28 71 75 6f 74 65 28 72 29 2b 28 67 61 70 3f 22 3a 20 22 3a 22 3a 22 29 2b 61 29 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 70 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 70 2c 72 29 26 26 28 61 3d 73 74 72 28 72 2c 70 29 29 26 26 6f 2e 70 75 73 68 28 71 75 6f 74 65 28 72 29 2b 28 67 61 70 3f 22 3a 20 22 3a 22 3a 22 29 2b 61 29 3b 72 65 74 75 72 6e 20 61 3d 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 3f 22 7b 7d 22 3a 67 61 70 3f 22 7b 5c 6e 22 2b 67 61 70 2b 6f 2e 6a 6f 69 6e 28 22 2c 5c 6e 22 2b 67 61 70 29 2b 22 5c Data Ascii: i;n+=1)"string"==typeof rep[n]&&(a=str(r=rep[n],p))&&o.push(quote(r)+(gap?": ":":")+a);else for(r in p)Object.prototype.hasOwnProperty.call(p,r)&&(a=str(r,p))&&o.push(quote(r)+(gap?": ":":")+a);return a=0===o.length?"{}":gap?"{\n"+gap+o.join(",\n"+gap)+"\
2024-09-29 04:58:13 UTC	1369	IN	Data Raw: 4f 4e 2e 70 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 65 78 74 2c 72 65 76 69 76 65 72 29 7b 66 75 6e 63 74 69 6f 6e 20 77 61 6c 6b 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 61 3d 65 5b 74 5d 3b 69 66 28 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 29 66 6f 72 28 6e 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 6e 29 26 26 28 28 72 3d 77 61 6c 6b 28 61 2c 6e 29 29 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 5b 6e 5d 3d 72 3a 64 65 6c 65 74 65 20 61 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 72 65 76 69 76 65 72 2e 63 61 6c 6c 28 65 2c 74 2c 61 29 7d 76 61 72 20 6a 3b 69 66 28 74 65 78 74 3d 53 74 72 69 6e 67 28 74 65 78 74 29 2c 63 78 2e 6c 61 73 74 49 6e Data Ascii: ON.parse=function(text,reviver){function walk(e,t){var n,r,a=e[t];if(a&&"object"==typeof a)for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&((r=walk(a,n))!==undefined?a[n]=r:delete a[n]);return reviver.call(e,t,a)}var j;if(text=String(text),cx.lastIn
2024-09-29 04:58:13 UTC	1369	IN	Data Raw: 75 72 6e 2d 31 3c 68 65 2e 69 6e 41 72 72 61 79 28 65 2c 6e 29 21 3d 3d 72 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 66 6f 72 28 3b 28 65 3d 65 5b 74 5d 29 26 26 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 65 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 7a 65 29 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 5b 74 5d 3d 21 30 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 72 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 69 29 2c 45 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: urn-1<he.inArray(e,n)!==r})}function n(e,t){for(;(e=e[t])&&1!==e.nodeType;);return e}function c(e){var n={};return he.each(e.match(ze)\|\|[],function(e,t){n[t]=!0}),n}function a(){re.addEventListener?(re.removeEventListener("DOMContentLoaded",i),E.removeEve
2024-09-29 04:58:13 UTC	1369	IN	Data Raw: 69 3f 68 65 2e 63 61 63 68 65 3a 65 2c 73 3d 69 3f 65 5b 68 65 2e 65 78 70 61 6e 64 6f 5d 3a 68 65 2e 65 78 70 61 6e 64 6f 3b 69 66 28 6f 5b 73 5d 29 7b 69 66 28 74 26 26 28 72 3d 6e 3f 6f 5b 73 5d 3a 6f 5b 73 5d 2e 64 61 74 61 29 29 7b 61 3d 28 74 3d 68 65 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 63 6f 6e 63 61 74 28 68 65 2e 6d 61 70 28 74 2c 68 65 2e 63 61 6d 65 6c 43 61 73 65 29 29 3a 74 20 69 6e 20 72 3f 5b 74 5d 3a 28 74 3d 68 65 2e 63 61 6d 65 6c 43 61 73 65 28 74 29 29 69 6e 20 72 3f 5b 74 5d 3a 74 2e 73 70 6c 69 74 28 22 20 22 29 29 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 61 2d 2d 3b 29 64 65 6c 65 74 65 20 72 5b 74 5b 61 5d 5d 3b 69 66 28 6e 3f 21 6c 28 72 29 3a 21 68 65 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 72 29 29 72 65 74 75 72 6e 7d Data Ascii: i?he.cache:e,s=i?e[he.expando]:he.expando;if(o[s]){if(t&&(r=n?o[s]:o[s].data)){a=(t=he.isArray(t)?t.concat(he.map(t,he.camelCase)):t in r?[t]:(t=he.camelCase(t))in r?[t]:t.split(" ")).length;for(;a--;)delete r[t[a]];if(n?!l(r):!he.isEmptyObject(r))return}
2024-09-29 04:58:13 UTC	1369	IN	Data Raw: 29 26 26 28 65 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 65 2e 63 68 65 63 6b 65 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 2c 6e 2c 72 2c 61 29 7b 66 6f 72 28 76 61 72 20 69 2c 6f 2c 73 2c 70 2c 6c 2c 63 2c 75 2c 64 3d 65 2e 6c 65 6e 67 74 68 2c 68 3d 67 28 74 29 2c 66 3d 5b 5d 2c 6d 3d 30 3b 6d 3c 64 3b 6d 2b 2b 29 69 66 28 28 6f 3d 65 5b 6d 5d 29 7c 7c 30 3d 3d 3d 6f 29 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 68 65 2e 74 79 70 65 28 6f 29 29 68 65 2e 6d 65 72 67 65 28 66 2c 6f 2e 6e 6f 64 65 54 79 70 65 3f 5b 6f 5d 3a 6f 29 3b 65 6c 73 65 20 69 66 28 59 65 2e 74 65 73 74 28 6f 29 29 7b 66 6f 72 28 70 3d 70 7c 7c 68 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 3d 28 48 Data Ascii: )&&(e.defaultChecked=e.checked)}function m(e,t,n,r,a){for(var i,o,s,p,l,c,u,d=e.length,h=g(t),f=[],m=0;m<d;m++)if((o=e[m])\|\|0===o)if("object"===he.type(o))he.merge(f,o.nodeType?[o]:o);else if(Ye.test(o)){for(p=p\|\|h.appendChild(t.createElement("div")),l=(H

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:13 UTC	637	OUT	GET /accounts/5c425178-0ec3-4aa1-b622-5db3a547ab77/config?fields[]=cart HTTP/1.1 Host: api.ola.godaddy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://geminloogi.godaddysites.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://geminloogi.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:58:14 UTC	748	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 04:58:13 GMT Content-Type: application/json; charset=utf-8 Content-Length: 29 Connection: close access-control-allow-origin: https://geminloogi.godaddysites.com access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD access-control-expose-headers: access-control-max-age: 7200 access-control-allow-credentials: true X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache X-Request-Id: e1e5da8995bd4a312096de5838622a2c X-Runtime: 0.003210 vary: Accept, Origin Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-09-29 04:58:14 UTC	29	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 41 63 63 6f 75 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 7d Data Ascii: {"error":"Account not found"}

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:14 UTC	491	OUT	GET /contact HTTP/1.1 Host: geminloogi.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://geminloogi.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
2024-09-29 04:58:14 UTC	845	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.10.js>; rel=preload; as=script; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin,<https://api.ola.godaddy.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 2b170d80a00c0078b233e9f362e4bcb4 Date: Sun, 29 Sep 2024 04:58:14 GMT Connection: close Transfer-Encoding: chunked
2024-09-29 04:58:14 UTC	15539	IN	Data Raw: 66 37 39 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 35 63 34 32 35 31 37 38 2d 30 65 63 33 2d 34 61 61 31 2d 62 36 32 32 2d 35 64 62 33 61 35 34 37 61 62 37 37 2f 66 61 76 69 63 6f 6e 2f 34 62 63 38 64 32 63 32 2d 37 39 32 30 2d 34 39 30 37 2d 61 34 35 63 2d 65 38 65 35 35 35 32 36 31 64 36 33 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 36 2c 68 3a 31 36 2c 6d 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f Data Ascii: f794<!DOCTYPE html><html lang="en-US"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/5c425178-0ec3-4aa1-b622-5db3a547ab77/favicon/4bc8d2c2-7920-4907-a45c-e8e555261d63.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com/
2024-09-29 04:58:14 UTC	16384	IN	Data Raw: 32 34 70 78 7d 2e 78 20 2e 63 31 2d 37 31 7b 77 69 64 74 68 3a 35 30 70 78 7d 2e 78 20 2e 63 31 2d 37 32 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 78 20 2e 63 31 2d 37 33 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 78 20 2e 63 31 2d 37 34 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 2e 78 20 2e 63 31 2d 37 35 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 32 70 78 7d 2e 78 20 2e 63 31 2d 37 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 32 34 70 78 7d 2e 78 20 2e 63 31 2d 37 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 78 20 2e 63 31 2d 37 63 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 7d 2e 78 20 2e 63 31 2d 37 64 7b 66 6c 65 78 2d 62 61 73 69 73 3a 30 25 7d 2e 78 20 2e 63 31 2d 37 Data Ascii: 24px}.x .c1-71{width:50px}.x .c1-72{box-sizing:border-box}.x .c1-73{flex-direction:row}.x .c1-74{flex-wrap:wrap}.x .c1-75{margin-right:-12px}.x .c1-76{margin-bottom:-24px}.x .c1-77{margin-left:-12px}.x .c1-7c{flex-shrink:1}.x .c1-7d{flex-basis:0%}.x .c1-7
2024-09-29 04:58:14 UTC	16384	IN	Data Raw: 73 2d 70 6c 61 79 66 61 69 72 2d 64 69 73 70 6c 61 79 20 20 78 2d 66 6f 6e 74 73 2d 6c 69 62 72 65 2d 62 61 73 6b 65 72 76 69 6c 6c 65 22 3e 3c 64 69 76 20 69 64 3d 22 6c 61 79 6f 75 74 2d 35 2d 63 2d 34 32 35 31 37 38 2d 30 2d 65 63 2d 33 2d 34 2d 61 61 2d 31 2d 62 2d 36 32 32 2d 35 2d 64 62 2d 33 2d 61 2d 35 34 37 2d 61 62 2d 37 37 22 20 63 6c 61 73 73 3d 22 6c 61 79 6f 75 74 20 6c 61 79 6f 75 74 2d 6c 61 79 6f 75 74 20 6c 61 79 6f 75 74 2d 6c 61 79 6f 75 74 2d 6c 61 79 6f 75 74 2d 31 33 20 6c 6f 63 61 6c 65 2d 65 6e 2d 55 53 20 6c 61 6e 67 2d 65 6e 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 50 61 67 65 22 20 69 64 3d 22 70 61 67 65 2d 39 31 32 35 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 78 2d 65 6c 20 63 31 2d 31 20 63 Data Ascii: s-playfair-display x-fonts-libre-baskerville"><div id="layout-5-c-425178-0-ec-3-4-aa-1-b-622-5-db-3-a-547-ab-77" class="layout layout-layout layout-layout-layout-13 locale-en-US lang-en"><div data-ux="Page" id="page-9125" class="x-el x-el-div x-el c1-1 c
2024-09-29 04:58:14 UTC	15086	IN	Data Raw: 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 34 20 63 31 2d 36 61 20 63 31 2d 36 62 20 63 31 2d 32 63 20 63 31 2d 32 64 20 63 31 2d 32 67 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 36 63 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 68 31 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 20 64 61 74 61 2d 75 78 3d 22 43 61 72 64 42 61 6e 6e 65 72 48 65 61 64 69 6e 67 22 20 64 61 74 61 2d 61 69 64 3d 22 43 4f 4e 54 45 4e 54 5f 53 45 43 54 49 4f 4e 5f 54 49 54 4c 45 5f 52 45 4e 44 45 52 45 44 22 20 64 61 74 61 2d 70 72 6f 6d 6f 74 65 64 2d 66 72 6f 6d 3d 22 32 22 20 64 61 74 61 2d 6f 72 64 65 72 3d 22 30 22 20 64 61 74 61 2d 74 79 70 6f 67 Data Ascii: lass="x-el x-el-div c1-1 c1-2 c1-14 c1-6a c1-6b c1-2c c1-2d c1-2g c1-b c1-c c1-d c1-6c c1-e c1-f c1-g"><h1 role="heading" aria-level="1" data-ux="CardBannerHeading" data-aid="CONTENT_SECTION_TITLE_RENDERED" data-promoted-from="2" data-order="0" data-typog

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:14 UTC	489	OUT	GET /about HTTP/1.1 Host: geminloogi.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://geminloogi.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
2024-09-29 04:58:14 UTC	1370	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.10.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 364b939f8142ccc51a779612d45371f9 Date: Sun, 29 Sep 2024 04:58:14 GMT Connection: close Transfer-Encoding: chunked
2024-09-29 04:58:14 UTC	15014	IN	Data Raw: 31 30 30 37 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 35 63 34 32 35 31 37 38 2d 30 65 63 33 2d 34 61 61 31 2d 62 36 32 32 2d 35 64 62 33 61 35 34 37 61 62 37 37 2f 66 61 76 69 63 6f 6e 2f 34 62 63 38 64 32 63 32 2d 37 39 32 30 2d 34 39 30 37 2d 61 34 35 63 2d 65 38 65 35 35 35 32 36 31 64 36 33 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 36 2c 68 3a 31 36 2c 6d 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d Data Ascii: 1007c<!DOCTYPE html><html lang="en-US"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/5c425178-0ec3-4aa1-b622-5db3a547ab77/favicon/4bc8d2c2-7920-4907-a45c-e8e555261d63.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com
2024-09-29 04:58:15 UTC	16384	IN	Data Raw: 65 7d 2e 78 2d 6c 6f 61 64 65 72 20 73 76 67 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 6c 6f 61 64 65 72 73 63 61 6c 65 20 2e 37 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 2c 2e 36 38 2c 2e 31 38 2c 31 2e 30 38 29 20 2d 2e 31 32 73 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6c 6f 61 64 65 72 73 63 61 6c 65 20 2e 37 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 2c 2e 36 38 2c 2e 31 38 2c 31 2e 30 38 29 20 2d 2e 31 32 73 20 69 6e 66 69 6e 69 74 65 7d 2e 78 2d 6c 6f 61 64 65 72 20 73 76 67 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 6c 6f 61 64 65 72 73 63 61 6c 65 20 2e 37 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 Data Ascii: e}.x-loader svg:nth-child(2){-webkit-animation:loaderscale .75s cubic-bezier(.2,.68,.18,1.08) -.12s infinite;animation:loaderscale .75s cubic-bezier(.2,.68,.18,1.08) -.12s infinite}.x-loader svg:nth-child(3){-webkit-animation:loaderscale .75s cubic-bezier
2024-09-29 04:58:15 UTC	16384	IN	Data Raw: 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 32 29 2c 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 35 33 36 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 39 32 30 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 31 39 32 64 70 69 29 7b 2e 78 20 2e 63 31 2d 38 38 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 32 29 20 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 32 29 20 31 30 30 25 29 2c 20 75 72 6c 28 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 64 32 35 39 65 Data Ascii: nd (-webkit-min-device-pixel-ratio: 2), (min-width: 1536px) and (max-width: 1920px) and (min-resolution: 192dpi){.x .c1-88{background-image:linear-gradient(to bottom, rgba(0, 0, 0, 0.02) 0%, rgba(0, 0, 0, 0.02) 100%), url("//img1.wsimg.com/isteam/ip/d259e
2024-09-29 04:58:15 UTC	16384	IN	Data Raw: 65 73 4d 65 6e 75 22 20 69 64 3d 22 6e 2d 36 30 39 32 36 31 31 32 2d 75 74 69 6c 69 74 79 2d 6d 65 6e 75 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 34 20 63 31 2d 31 32 20 63 31 2d 32 35 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 32 34 20 63 31 2d 64 20 63 31 2d 32 36 20 63 31 2d 32 37 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 73 70 61 6e 20 64 61 74 61 2d 75 78 3d 22 45 6c 65 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 73 70 61 6e 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 45 6c 65 6d 65 6e 74 22 20 69 64 3d 22 62 73 2d 34 22 20 Data Ascii: esMenu" id="n-60926112-utility-menu" class="x-el x-el-div c1-1 c1-2 c1-14 c1-12 c1-25 c1-b c1-c c1-24 c1-d c1-26 c1-27 c1-e c1-f c1-g"><span data-ux="Element" class="x-el x-el-span c1-1 c1-2 c1-b c1-c c1-d c1-e c1-f c1-g"><div data-ux="Element" id="bs-4"
2024-09-29 04:58:15 UTC	1508	IN	Data Raw: 20 63 31 2d 62 20 63 31 2d 38 78 20 63 31 2d 33 32 20 63 31 2d 31 71 20 63 31 2d 38 79 20 63 31 2d 38 7a 20 63 31 2d 33 36 20 63 31 2d 38 76 20 63 31 2d 38 6a 20 63 31 2d 33 37 20 63 31 2d 33 38 20 63 31 2d 33 39 22 20 64 61 74 61 2d 74 63 63 6c 3d 22 75 78 32 2e 46 4f 4f 54 45 52 2e 66 6f 6f 74 65 72 32 2e 4c 61 79 6f 75 74 2e 44 65 66 61 75 6c 74 2e 4c 69 6e 6b 2e 44 65 66 61 75 6c 74 2e 36 31 31 37 2e 63 6c 69 63 6b 2c 63 6c 69 63 6b 22 3e 47 6f 44 61 64 64 79 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 73 65 63 74 69 6f 6e 3e 20 20 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 30 63 39 35 61 33 62 34 2d 33 34 32 33 2d 34 31 61 36 2d 62 65 Data Ascii: c1-b c1-8x c1-32 c1-1q c1-8y c1-8z c1-36 c1-8v c1-8j c1-37 c1-38 c1-39" data-tccl="ux2.FOOTER.footer2.Layout.Default.Link.Default.6117.click,click">GoDaddy</a></span></p></div></div></div></div></section> </div></div></div><div id="0c95a3b4-3423-41a6-be

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:15 UTC	674	OUT	GET /m/api/reamaze/v2/customers/auth?brand=5c425178-0ec3-4aa1-b622-5db3a547ab77 HTTP/1.1 Host: geminloogi.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://geminloogi.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
2024-09-29 04:58:15 UTC	631	IN	HTTP/1.1 200 OK date: Sun, 29 Sep 2024 04:58:15 GMT content-type: application/json; charset=utf-8 cache-control: max-age=0, private, must-revalidate content-security-policy: default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: cid:; connect-src https: wss:; worker-src 'self' blob: ; child-src 'self' https: blob: ; etag: W/"44136fa355b3678a1146ad16f7e8649e" Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure Connection: close Transfer-Encoding: chunked
2024-09-29 04:58:15 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:15 UTC	689	OUT	GET /projects HTTP/1.1 Host: geminloogi.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
2024-09-29 04:58:15 UTC	1370	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.10.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 877190afeca1ab6359f6a75eb5d52658 Date: Sun, 29 Sep 2024 04:58:15 GMT Connection: close Transfer-Encoding: chunked
2024-09-29 04:58:15 UTC	15014	IN	Data Raw: 65 61 33 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 35 63 34 32 35 31 37 38 2d 30 65 63 33 2d 34 61 61 31 2d 62 36 32 32 2d 35 64 62 33 61 35 34 37 61 62 37 37 2f 66 61 76 69 63 6f 6e 2f 34 62 63 38 64 32 63 32 2d 37 39 32 30 2d 34 39 30 37 2d 61 34 35 63 2d 65 38 65 35 35 35 32 36 31 64 36 33 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 36 2c 68 3a 31 36 2c 6d 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f Data Ascii: ea36<!DOCTYPE html><html lang="en-US"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/5c425178-0ec3-4aa1-b622-5db3a547ab77/favicon/4bc8d2c2-7920-4907-a45c-e8e555261d63.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com/
2024-09-29 04:58:15 UTC	16384	IN	Data Raw: 69 74 65 7d 2e 78 2d 6c 6f 61 64 65 72 20 73 76 67 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 6c 6f 61 64 65 72 73 63 61 6c 65 20 2e 37 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 2c 2e 36 38 2c 2e 31 38 2c 31 2e 30 38 29 20 2d 2e 31 32 73 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6c 6f 61 64 65 72 73 63 61 6c 65 20 2e 37 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 2c 2e 36 38 2c 2e 31 38 2c 31 2e 30 38 29 20 2d 2e 31 32 73 20 69 6e 66 69 6e 69 74 65 7d 2e 78 2d 6c 6f 61 64 65 72 20 73 76 67 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 6c 6f 61 64 65 72 73 63 61 6c 65 20 2e 37 35 73 20 63 75 62 69 63 2d 62 65 7a 69 Data Ascii: ite}.x-loader svg:nth-child(2){-webkit-animation:loaderscale .75s cubic-bezier(.2,.68,.18,1.08) -.12s infinite;animation:loaderscale .75s cubic-bezier(.2,.68,.18,1.08) -.12s infinite}.x-loader svg:nth-child(3){-webkit-animation:loaderscale .75s cubic-bezi
2024-09-29 04:58:15 UTC	16384	IN	Data Raw: 74 6f 6e 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 31 65 6d 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 36 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 36 70 78 3b 0a 7d 0a 2e 63 61 72 6f 75 73 65 6c 20 2e 63 61 72 6f 75 73 65 6c 2d 64 6f 74 73 20 62 75 74 74 6f 6e 2e 73 65 6c 65 63 74 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0a 7d 0a 2e 63 61 72 6f 75 73 65 6c 20 2e 63 61 72 6f 75 73 65 6c 2d 64 6f 74 73 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0a 20 20 6f 75 74 6c 69 6e 65 Data Ascii: ton { border: 0; background: transparent; font-size: 1.1em; cursor: pointer; color: #CCC; padding-left: 6px; padding-right: 6px;}.carousel .carousel-dots button.selected { color: black;}.carousel .carousel-dots button:focus { outline
2024-09-29 04:58:15 UTC	12189	IN	Data Raw: 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 3e 20 3c 73 65 63 74 69 6f 6e 20 64 61 74 61 2d 75 78 3d 22 53 65 63 74 69 6f 6e 42 61 6e 6e 65 72 22 20 64 61 74 61 2d 74 65 73 74 2d 72 61 64 70 61 63 6b 3d 22 63 6c 69 65 6e 74 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 73 65 63 74 69 6f 6e 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 35 33 20 63 31 2d 68 20 63 31 2d 35 34 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 6c 20 63 31 2d 35 35 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 43 6f 6e 74 61 69 6e 65 72 22 20 63 6c 61 Data Ascii: c1-c c1-d c1-e c1-f c1-g c1-1 c1-2 c1-b c1-c c1-d c1-e c1-f c1-g"><div> <section data-ux="SectionBanner" data-test-radpack="client" class="x-el x-el-section c1-1 c1-2 c1-53 c1-h c1-54 c1-b c1-c c1-l c1-55 c1-d c1-e c1-f c1-g"><div data-ux="Container" cla

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:15 UTC	484	OUT	GET / HTTP/1.1 Host: geminloogi.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://geminloogi.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
2024-09-29 04:58:16 UTC	1370	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.10.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neILzCqgsI0mp9CNzoKmMw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: e4c7ccab430b65ccd2ed545ff9a53edf Date: Sun, 29 Sep 2024 04:58:15 GMT Connection: close Transfer-Encoding: chunked
2024-09-29 04:58:16 UTC	15014	IN	Data Raw: 63 35 63 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 35 63 34 32 35 31 37 38 2d 30 65 63 33 2d 34 61 61 31 2d 62 36 32 32 2d 35 64 62 33 61 35 34 37 61 62 37 37 2f 66 61 76 69 63 6f 6e 2f 34 62 63 38 64 32 63 32 2d 37 39 32 30 2d 34 39 30 37 2d 61 34 35 63 2d 65 38 65 35 35 35 32 36 31 64 36 33 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 36 2c 68 3a 31 36 2c 6d 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f Data Ascii: c5c2<!DOCTYPE html><html lang="en-US"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/5c425178-0ec3-4aa1-b622-5db3a547ab77/favicon/4bc8d2c2-7920-4907-a45c-e8e555261d63.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com/
2024-09-29 04:58:16 UTC	16384	IN	Data Raw: 72 74 61 6e 74 7d 2e 73 69 64 65 6c 69 6e 65 2d 66 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 7d 2e 64 69 73 61 62 6c 65 2d 73 63 72 6f 6c 6c 7b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 76 77 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 65 72 73 63 61 6c 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 6f 70 61 63 69 74 79 3a 31 7d 34 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 31 29 3b 6f 70 61 63 69 74 79 3a 2e 37 7d 38 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 Data Ascii: rtant}.sideline-footer{margin-top:auto}.disable-scroll{touch-action:none;overflow:hidden;position:fixed;max-width:100vw}@-webkit-keyframes loaderscale{0%{transform:scale(1);opacity:1}45%{transform:scale(.1);opacity:.7}80%{transform:scale(1);opacity:1}}@ke
2024-09-29 04:58:16 UTC	16384	IN	Data Raw: 31 2d 76 20 63 31 2d 77 20 63 31 2d 32 61 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 42 6c 6f 63 6b 22 20 69 64 3d 22 6e 61 76 42 61 72 49 64 2d 32 31 39 34 36 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 32 62 20 63 31 2d 31 6b 20 63 31 2d 31 32 20 63 31 2d 31 33 20 63 31 2d 32 63 20 63 31 2d 32 64 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 32 65 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 42 6c 6f 63 6b 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 34 20 63 31 2d 32 66 20 Data Ascii: 1-v c1-w c1-2a c1-b c1-c c1-d c1-e c1-f c1-g"><div data-ux="Block" id="navBarId-21946" class="x-el x-el-div c1-1 c1-2 c1-2b c1-1k c1-12 c1-13 c1-2c c1-2d c1-b c1-c c1-d c1-2e c1-e c1-f c1-g"><div data-ux="Block" class="x-el x-el-div c1-1 c1-2 c1-14 c1-2f
2024-09-29 04:58:16 UTC	2857	IN	Data Raw: 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 34 20 63 31 2d 35 33 20 63 31 2d 35 34 20 63 31 2d 35 35 20 63 31 2d 31 35 20 63 31 2d 31 36 20 63 31 2d 31 37 20 63 31 2d 31 38 20 63 31 2d 31 32 20 63 31 2d 35 66 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 47 72 69 64 43 65 6c 6c 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 35 33 20 63 31 2d 36 6a 20 63 31 2d 35 37 20 63 31 2d 35 65 20 63 31 2d 32 61 20 63 31 2d 32 63 20 63 31 2d 31 63 20 63 31 2d 32 64 20 63 31 2d 31 64 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 36 6b 20 63 31 2d 36 6c 20 63 31 Data Ascii: ="x-el x-el-div c1-1 c1-2 c1-14 c1-53 c1-54 c1-55 c1-15 c1-16 c1-17 c1-18 c1-12 c1-5f c1-b c1-c c1-d c1-e c1-f c1-g"><div data-ux="GridCell" class="x-el x-el-div c1-1 c1-2 c1-53 c1-6j c1-57 c1-5e c1-2a c1-2c c1-1c c1-2d c1-1d c1-b c1-c c1-d c1-6k c1-6l c1

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:58:16 UTC	620	OUT	GET /data/brands/5c425178-0ec3-4aa1-b622-5db3a547ab77/ping HTTP/1.1 Host: cdn.reamaze.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://geminloogi.godaddysites.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://geminloogi.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:58:16 UTC	898	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 04:58:16 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=300, public, must-revalidate vary: Accept,Accept-Encoding access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubDomains access-control-max-age: 1728000 x-request-id: 34bdbf31-7a02-42b9-a947-b64f2bf0440e access-control-allow-methods: POST, GET, OPTIONS, PUT x-runtime: 0.024659 x-content-type-options: nosniff content-security-policy: default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: cid:; connect-src https: wss:; worker-src 'self' blob: ; child-src 'self' https: blob: ; etag: W/"82f0f5aeba949545126fe933912e57a2" status: 200 OK CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 8ca965aa7a2d4362-EWR
2024-09-29 04:58:16 UTC	471	IN	Data Raw: 33 31 30 35 0d 0a 7b 22 6e 61 6d 65 22 3a 22 67 65 6d 69 6e 6c 6f 6f 67 69 22 2c 22 70 72 65 66 65 72 65 6e 63 65 73 22 3a 7b 22 6b 62 5f 6d 65 74 61 5f 72 65 64 75 63 65 5f 73 65 6f 22 3a 66 61 6c 73 65 2c 22 6b 62 5f 68 65 61 64 65 72 5f 62 67 5f 63 6f 6c 6f 72 22 3a 22 23 31 30 61 32 63 35 22 2c 22 6b 62 5f 68 65 61 64 65 72 5f 66 6f 6e 74 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 6b 62 5f 68 65 61 64 65 72 5f 75 72 6c 22 3a 22 2f 22 2c 22 6b 62 5f 68 65 61 64 65 72 5f 73 68 6f 77 5f 62 72 61 6e 64 5f 6c 6f 67 6f 22 3a 66 61 6c 73 65 2c 22 6b 62 5f 68 65 61 64 65 72 5f 6c 6f 67 6f 5f 75 72 6c 22 3a 22 22 2c 22 6b 62 5f 6c 61 6e 67 22 3a 22 22 2c 22 6b 62 5f 68 65 72 6f 5f 62 67 5f 63 6f 6c 6f 72 22 3a 22 23 31 30 61 32 63 35 22 2c 22 6b Data Ascii: 3105{"name":"geminloogi","preferences":{"kb_meta_reduce_seo":false,"kb_header_bg_color":"#10a2c5","kb_header_font_color":"#ffffff","kb_header_url":"/","kb_header_show_brand_logo":false,"kb_header_logo_url":"","kb_lang":"","kb_hero_bg_color":"#10a2c5","k
2024-09-29 04:58:16 UTC	1369	IN	Data Raw: 23 35 35 35 35 35 35 22 2c 22 6b 62 5f 74 69 74 6c 65 5f 6c 69 67 68 74 5f 63 6f 6c 6f 72 22 3a 22 23 46 42 46 42 46 42 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 6d 65 74 61 5f 68 74 6d 6c 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 68 65 61 64 65 72 5f 68 74 6d 6c 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 66 6f 6f 74 65 72 5f 68 74 6d 6c 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 63 73 73 5f 73 74 79 6c 65 73 68 65 65 74 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 67 6f 6f 67 6c 65 5f 61 6e 61 6c 79 74 69 63 73 22 3a 22 22 2c 22 6b 62 5f 63 75 73 74 6f 6d 5f 67 61 34 5f 75 6e 69 76 65 72 73 61 6c 22 3a 22 22 2c 22 6b 62 5f 61 6c 6c 6f 77 5f 66 65 65 64 62 61 63 6b 22 3a 66 61 6c 73 65 2c 22 6b 62 5f 65 6d 62 65 64 5f 75 72 6c 22 3a 22 22 Data Ascii: #555555","kb_title_light_color":"#FBFBFB","kb_custom_meta_html":"","kb_custom_header_html":"","kb_custom_footer_html":"","kb_custom_css_stylesheet":"","kb_custom_google_analytics":"","kb_custom_ga4_universal":"","kb_allow_feedback":false,"kb_embed_url":""
2024-09-29 04:58:16 UTC	1369	IN	Data Raw: 61 74 65 67 6f 72 69 7a 65 64 5f 74 6f 70 69 63 22 3a 22 4d 69 73 63 65 6c 6c 61 6e 65 6f 75 73 22 2c 22 74 72 61 6e 73 5f 61 72 74 69 63 6c 65 5f 68 65 6c 70 66 75 6c 22 3a 22 57 61 73 20 74 68 69 73 20 61 72 74 69 63 6c 65 20 68 65 6c 70 66 75 6c 3f 22 2c 22 74 72 61 6e 73 5f 61 72 74 69 63 6c 65 5f 64 6f 77 6e 6c 6f 61 64 73 22 3a 22 44 6f 77 6e 6c 6f 61 64 73 22 2c 22 74 72 61 6e 73 5f 63 6f 6e 74 61 63 74 5f 75 73 5f 68 65 61 64 65 72 22 3a 22 43 6f 6e 74 61 63 74 20 55 73 22 2c 22 74 72 61 6e 73 5f 63 6f 6e 74 61 63 74 5f 75 73 5f 70 72 6f 6d 70 74 22 3a 22 43 6f 6e 74 61 63 74 20 55 73 20 44 69 72 65 63 74 6c 79 22 2c 22 74 72 61 6e 73 5f 63 6f 6e 74 61 63 74 5f 75 73 5f 6e 65 77 5f 6d 65 73 73 61 67 65 5f 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 3a Data Ascii: ategorized_topic":"Miscellaneous","trans_article_helpful":"Was this article helpful?","trans_article_downloads":"Downloads","trans_contact_us_header":"Contact Us","trans_contact_us_prompt":"Contact Us Directly","trans_contact_us_new_message_confirmation":
2024-09-29 04:58:16 UTC	1369	IN	Data Raw: 65 63 6f 72 64 73 2e 22 2c 22 74 72 61 6e 73 5f 63 68 61 74 5f 73 74 61 66 66 5f 62 75 73 79 22 3a 22 57 65 20 61 70 6f 6c 6f 67 69 7a 65 20 66 6f 72 20 74 68 65 20 77 61 69 74 2c 20 77 65 20 6d 61 79 20 62 65 20 62 75 73 79 20 77 69 74 68 20 6f 74 68 65 72 20 63 75 73 74 6f 6d 65 72 73 20 72 69 67 68 74 20 6e 6f 77 2e 22 2c 22 74 72 61 6e 73 5f 63 68 61 74 5f 73 74 61 66 66 5f 62 75 73 79 5f 66 6f 6c 6c 6f 77 5f 75 70 22 3a 22 49 66 20 79 6f 75 27 76 65 20 65 6e 74 65 72 65 64 20 79 6f 75 72 20 63 6f 6e 74 61 63 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 77 65 27 6c 6c 20 66 6f 6c 6c 6f 77 20 75 70 20 77 69 74 68 20 79 6f 75 20 69 66 20 79 6f 75 20 67 6f 20 6f 66 66 6c 69 6e 65 2e 22 2c 22 74 72 61 6e 73 5f 63 68 61 74 5f 61 6c 6c 5f 73 74 61 66 66 5f Data Ascii: ecords.","trans_chat_staff_busy":"We apologize for the wait, we may be busy with other customers right now.","trans_chat_staff_busy_follow_up":"If you've entered your contact information, we'll follow up with you if you go offline.","trans_chat_all_staff_
2024-09-29 04:58:16 UTC	1369	IN	Data Raw: 73 5f 64 69 73 63 75 73 73 69 6f 6e 5f 6c 6f 67 69 6e 5f 70 72 6f 6d 70 74 22 3a 22 50 6c 65 61 73 65 20 6c 6f 67 20 69 6e 20 74 6f 20 72 65 70 6c 79 2e 22 2c 22 74 72 61 6e 73 5f 64 69 73 63 75 73 73 69 6f 6e 5f 63 6f 6d 6d 65 6e 74 5f 63 6f 75 6e 74 22 3a 22 7b 25 20 69 66 20 63 6f 75 6e 74 20 5c 75 30 30 33 65 20 30 20 25 7d 7b 7b 20 63 6f 75 6e 74 20 7c 20 70 6c 75 72 61 6c 69 7a 65 3a 20 27 64 69 73 63 75 73 73 69 6f 6e 20 63 6f 6d 6d 65 6e 74 27 7d 7d 7b 25 20 65 6c 73 65 20 25 7d 4e 6f 20 52 65 70 6c 69 65 73 20 53 6f 20 46 61 72 7b 25 20 65 6e 64 69 66 20 25 7d 22 2c 22 74 72 61 6e 73 5f 73 75 62 6a 65 63 74 22 3a 22 53 75 62 6a 65 63 74 22 2c 22 74 72 61 6e 73 5f 62 6f 64 79 22 3a 22 45 6e 74 65 72 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 20 6f Data Ascii: s_discussion_login_prompt":"Please log in to reply.","trans_discussion_comment_count":"{% if count \u003e 0 %}{{ count \| pluralize: 'discussion comment'}}{% else %}No Replies So Far{% endif %}","trans_subject":"Subject","trans_body":"Enter your question o
2024-09-29 04:58:16 UTC	1369	IN	Data Raw: 63 65 65 64 3a 22 2c 22 74 72 61 6e 73 5f 70 6f 70 75 70 5f 6e 65 77 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 70 72 6f 6d 70 74 22 3a 22 53 65 6e 64 20 61 20 4d 65 73 73 61 67 65 22 2c 22 74 72 61 6e 73 5f 70 6f 70 75 70 5f 6e 65 77 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 6f 6f 6f 5f 70 72 6f 6d 70 74 22 3a 22 4c 65 61 76 65 20 41 20 4d 65 73 73 61 67 65 22 2c 22 74 72 61 6e 73 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 5f 65 6e 64 65 64 22 3a 22 54 68 69 73 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 68 61 73 20 65 6e 64 65 64 2e 20 50 6c 65 61 73 65 20 73 74 61 72 74 20 61 20 6e 65 77 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 62 65 6c 6f 77 2e 22 2c 22 74 72 61 6e 73 5f 67 72 65 65 74 69 6e 67 5f 70 72 69 6d 61 72 79 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 Data Ascii: ceed:","trans_popup_new_conversation_prompt":"Send a Message","trans_popup_new_conversation_ooo_prompt":"Leave A Message","trans_conversation_ended":"This conversation has ended. Please start a new conversation below.","trans_greeting_primary_button_text"
2024-09-29 04:58:16 UTC	1369	IN	Data Raw: 61 6e 73 5f 75 6e 73 75 62 73 63 72 69 62 65 5f 74 69 74 6c 65 22 3a 22 55 6e 73 75 62 73 63 72 69 62 65 22 2c 22 74 72 61 6e 73 5f 75 6e 73 75 62 73 63 72 69 62 65 5f 6d 65 73 73 61 67 65 22 3a 22 59 6f 75 20 68 61 76 65 20 62 65 65 6e 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 75 6e 73 75 62 73 63 72 69 62 65 64 20 66 72 6f 6d 20 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 72 65 61 63 68 6f 75 74 73 2e 22 2c 22 74 72 61 6e 73 5f 68 75 62 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 5f 68 65 61 64 65 72 22 3a 22 52 65 63 65 6e 74 20 43 6f 6e 76 65 72 73 61 74 69 6f 6e 73 22 2c 22 74 72 61 6e 73 5f 68 75 62 5f 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 43 6f 6e 74 61 63 74 20 55 73 20 44 69 72 65 63 74 6c 79 22 2c 22 74 72 Data Ascii: ans_unsubscribe_title":"Unsubscribe","trans_unsubscribe_message":"You have been successfully unsubscribed from our personal reachouts.","trans_hub_conversations_header":"Recent Conversations","trans_hub_conversations_button_text":"Contact Us Directly","tr
2024-09-29 04:58:16 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 5f 68 6f 6d 65 22 3a 22 48 6f 6d 65 22 2c 22 74 72 61 6e 73 5f 61 72 69 61 5f 73 65 61 72 63 68 5f 72 65 73 75 6c 74 73 22 3a 22 53 65 61 72 63 68 20 52 65 73 75 6c 74 73 22 2c 22 74 72 61 6e 73 5f 61 72 69 61 5f 63 6c 6f 73 65 5f 73 68 6f 75 74 62 6f 78 22 3a 22 43 6c 6f 73 65 20 53 68 6f 75 74 62 6f 78 22 2c 22 74 72 61 6e 73 5f 68 65 6c 6c 6f 5f 62 6f 74 5f 72 65 73 70 6f 6e 73 65 5f 74 65 78 74 22 3a 22 48 69 21 20 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 20 61 6e 64 20 64 6f 6e 27 74 20 6c 65 61 76 65 20 6f 75 74 20 61 6e 79 20 64 65 74 61 69 6c 73 2e 20 54 68 69 73 20 77 69 6c 6c 20 68 65 6c 70 20 67 65 74 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 20 66 75 6c 6c 79 20 61 6e 73 77 65 72 65 64 20 61 Data Ascii: ation_home":"Home","trans_aria_search_results":"Search Results","trans_aria_close_shoutbox":"Close Shoutbox","trans_hello_bot_response_text":"Hi! Please enter your question and don't leave out any details. This will help get your question fully answered a
2024-09-29 04:58:16 UTC	1369	IN	Data Raw: 65 6d 2e 22 2c 22 74 72 61 6e 73 5f 62 6f 74 5f 72 65 6d 69 6e 64 5f 74 65 78 74 22 3a 22 57 65 20 68 61 76 65 6e e2 80 99 74 20 68 65 61 72 64 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 61 20 77 68 69 6c 65 2e 20 44 6f 20 79 6f 75 20 68 61 76 65 20 61 6e 79 20 71 75 65 73 74 69 6f 6e 73 3f 20 50 6c 65 61 73 65 20 6c 65 74 20 75 73 20 6b 6e 6f 77 20 69 66 20 79 6f 75 e2 80 99 64 20 6c 69 6b 65 20 74 6f 20 74 61 6c 6b 20 74 6f 20 61 20 68 75 6d 61 6e 20 69 6e 73 74 65 61 64 2e 22 2c 22 74 72 61 6e 73 5f 62 6f 74 5f 72 65 73 6f 6c 76 65 64 5f 74 65 78 74 22 3a 22 54 68 61 6e 6b 20 79 6f 75 2e 20 54 68 69 73 20 63 68 61 74 20 69 73 20 6e 6f 77 20 65 6e 64 65 64 2e 22 2c 22 74 72 61 6e 73 5f 61 70 70 6f 69 6e 74 6d 65 6e 74 5f 62 6f 74 5f 65 72 72 6f 72 5f 6d 65 Data Ascii: em.","trans_bot_remind_text":"We havent heard from you in a while. Do you have any questions? Please let us know if youd like to talk to a human instead.","trans_bot_resolved_text":"Thank you. This chat is now ended.","trans_appointment_bot_error_me
2024-09-29 04:58:16 UTC	1134	IN	Data Raw: 6e 63 65 22 3a 22 55 6e 64 65 72 20 4d 61 69 6e 74 65 6e 61 6e 63 65 22 2c 22 74 72 61 6e 73 5f 73 79 73 74 65 6d 5f 70 6c 61 6e 6e 65 64 22 3a 22 50 6c 61 6e 6e 65 64 22 2c 22 74 72 61 6e 73 5f 76 69 64 65 6f 5f 70 72 6f 6d 70 74 5f 74 65 78 74 22 3a 22 57 65 27 64 20 6c 69 6b 65 20 74 6f 20 73 74 61 72 74 20 61 20 76 69 64 65 6f 20 63 61 6c 6c 20 77 69 74 68 20 79 6f 75 21 22 2c 22 74 72 61 6e 73 5f 76 69 64 65 6f 5f 61 6e 73 77 65 72 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 41 6e 73 77 65 72 22 2c 22 74 72 61 6e 73 5f 76 69 64 65 6f 5f 64 65 63 6c 69 6e 65 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 44 65 63 6c 69 6e 65 22 7d 2c 22 69 6e 4f 66 66 69 63 65 22 3a 74 72 75 65 2c 22 64 65 70 61 72 74 6d 65 6e 74 73 41 76 61 69 6c 61 62 6c 65 22 3a 5b Data Ascii: nce":"Under Maintenance","trans_system_planned":"Planned","trans_video_prompt_text":"We'd like to start a video call with you!","trans_video_answer_button_text":"Answer","trans_video_decline_button_text":"Decline"},"inOffice":true,"departmentsAvailable":[