Windows Analysis Report
http://theglassguru.com

Overview

General Information

Sample URL:	http://theglassguru.com
Analysis ID:	1524371
Infos:

Errors URL not reachable

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Uses insecure TLS / SSL version for HTTPS connection

Classification

Signatures

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49785 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49782 version: TLS 1.2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49785 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.theglassguru.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/12/vanilla-ice-project.png HTTP/1.1Host: www.theglassguru.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.theglassguru.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_google_apps_login=8bd44ec6beae3a0126041d931ab98817
Source: global traffic	HTTP traffic detected: GET /pixel/?ad_log=referer&action=content&pixid=d28093f3-b445-48d7-8d09-677eef7f7c2a HTTP/1.1Host: data.adxcel-ec2.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.theglassguru.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/pdm/dist/svgs/quote.svg HTTP/1.1Host: www.theglassguru.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_google_apps_login=8bd44ec6beae3a0126041d931ab98817
Source: global traffic	HTTP traffic detected: GET /pixel/?ad_log=referer&action=content&pixid=d28093f3-b445-48d7-8d09-677eef7f7c2a HTTP/1.1Host: data.adxcel-ec2.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: theglassguru.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: theglassguru.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_43.2.dr	String found in binary or memory: <a href="https://www.youtube.com/watch?v=fPiZwSNfRbA" target="_blank"><img fetchpriority="high" decoding="async" src="https://www.theglassguru.com/wp-content/uploads/2024/06/theglassguru.com-youtube.webp" alt="" width="980" height="552" class="aligncenter size-full wp-image-16412" style="min-width:98%;" /></a> equals www.youtube.com (Youtube)
Source: chromecache_43.2.dr	String found in binary or memory: "embedUrl": "https://www.youtube.com/embed/fPiZwSNfRbA", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: theglassguru.com
Source: global traffic	DNS traffic detected: DNS query: www.theglassguru.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: majorbrdide.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: data.adxcel-ec2.com

Source: chromecache_43.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_43.2.dr	String found in binary or memory: http://schema.org/WatchAction
Source: chromecache_43.2.dr	String found in binary or memory: http://theglassguru.com/services/shower-bath/
Source: chromecache_43.2.dr	String found in binary or memory: http://theglassgurufranchise.com/
Source: chromecache_43.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_43.2.dr	String found in binary or memory: https://data.adxcel-ec2.com/pixel/?ad_log=referer&action=content&pixid=d28093f3-b445-48d7-8d09-677ee
Source: chromecache_43.2.dr	String found in binary or memory: https://kcseopro.com/wordpress-seo-structured-data-schema-plugin/
Source: chromecache_43.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_43.2.dr	String found in binary or memory: https://schema.org/
Source: chromecache_43.2.dr	String found in binary or memory: https://theglassguru.careerplug.com/account
Source: chromecache_43.2.dr	String found in binary or memory: https://wp-rocket.me
Source: chromecache_43.2.dr	String found in binary or memory: https://www.google.com/maps/search/?api=1&query=The
Source: chromecache_43.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=GT-NNM9PH9
Source: chromecache_43.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-111185122-1
Source: chromecache_43.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_43.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-MJJXDWG
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/#/schema/logo/image/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/#breadcrumb
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/#organization
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/#primaryimage
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/#website
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/?s=
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/about-us/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/blog/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/faqs/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/financing/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/free-estimate/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/gallery/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/locations/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/privacy-policy/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/reviews/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/commercial-2/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/commercial-2/commercial-storefront/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/doors/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/doors/door-glass-inserts/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/glass/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/glass/custom-glass/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/glass/decorative-glass/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/glass/glass-panels-partitions/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/glass/window-door-glass/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/mirrors/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/mirrors/mirror-frames/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/screens/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/screens/screen-doors/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/screens/solar-screens/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/screens/window-screens/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/shower-bath/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/windows/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/windows/window-restoration/foggy-window-repair/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/windows/window-restoration/glass-stain-removal/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/cache/min/1/e4e969cc8a20ff5111f6ffdbe31758aa.js
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2020/11/1-water-stain-removal_crp.jpg
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2020/12/city-bath-crashers-150x91.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2020/12/city-bath-crashers.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2020/12/vanilla-ice-project-150x96.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2020/12/vanilla-ice-project.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/01/1-guru-1.jpg
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/01/favicon.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/01/logo.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/05/3-guru.jpg
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/05/550-replacement-contractors-2020-150x124.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/05/550-replacement-contractors-2020.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/05/iStock_000002694005Medium-768x512.jpg
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2024/05/2024-05-09-TheGlassGuru.com-Header-2.webp
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2024/06/theglassguru.com-youtube.webp
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2024/07/theglassguru.com-footer-logo-2024-o-150x103.
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2024/07/theglassguru.com-footer-logo-2024-o.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2024/07/theglassguru.com-header-logo-2024.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-includes/js/jquery/jquery.min.js
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-json/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.theglassguru.com%2F
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.theglassguru.com%2F&#038
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-json/wp/v2/pages/7
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/xmlrpc.php?rsd
Source: chromecache_43.2.dr	String found in binary or memory: https://www.youtube.com/embed/fPiZwSNfRbA
Source: chromecache_43.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=fPiZwSNfRbA
Source: chromecache_43.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/
Source: chromecache_43.2.dr	String found in binary or memory: https://youtu.be/fPiZwSNfRbA

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49782 version: TLS 1.2

Source: classification engine

Classification label: unknown0.win@19/18@18/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1984,i,17754463736748942375,16654701587173049969,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://theglassguru.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1984,i,17754463736748942375,16654701587173049969,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
141.193.213.21	9162u90jurgp.wpeproxy.com	United States	396845	DV-PRIMARY-ASN1US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.152.44.233	unknown	United States	14618	AMAZON-AESUS	false
104.26.11.145	theglassguru.com	United States	13335	CLOUDFLARENETUS	false
52.87.131.204	data.adxcel-ec2.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.6

Contacted Domains

Name	IP	Active
9162u90jurgp.wpeproxy.com	141.193.213.21	true
data.adxcel-ec2.com	52.87.131.204	true
theglassguru.com	104.26.11.145	true
www.google.com	172.217.18.4	true
majorbrdide.com	147.45.47.98	true
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.43	true
fp2e7a.wpc.phicdn.net	192.229.221.95	true
use.fontawesome.com	unknown	unknown
use.typekit.net	unknown	unknown
www.theglassguru.com	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.theglassguru.com/	false	unknown
https://data.adxcel-ec2.com/pixel/?ad_log=referer&action=content&pixid=d28093f3-b445-48d7-8d09-677eef7f7c2a	false	unknown
https://www.theglassguru.com/wp-content/uploads/2020/12/vanilla-ice-project.png	false	unknown
https://www.theglassguru.com/wp-content/themes/pdm/dist/svgs/quote.svg	false	unknown
http://theglassguru.com/	false	unknown

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 35	PNG image data, 212 x 135, 8-bit colormap, non-interlaced	5AFE1604AE08AAA32ACA91BF53F4F617	5C762ED0838C748D2268C8B8D957FCF81F3880AC	2F7A8F5DDE4BBC471FA108D67625AF6DDBC1348307BF98F142AF203584C1435D
Chrome Cache Entry: 36	data	D81AA20461D883B3A7EBB2EE3C80A58B	6912FB55676E51ED1F138CFC56CF33B25BEC7B14	AC2F87469EE556B9489627168D7238AAF25C766A934FC71342D1E326922FA0AC
Chrome Cache Entry: 37	GIF image data, version 89a, 1 x 1	A5098C60B3B0C879A2C7AF6C68B7B53F	939F40BE7F1AAF623F62886DE4AABA3886DF9B65	693D949D8C3FDC7FD4ACE7C340B5F177A9F0C5BE7BAFEE8BC93A7D88B7523D75
Chrome Cache Entry: 38	SVG Scalable Vector Graphics image	E66C022FFE771C91833301ABB9A1C575	853B183D280DB5D1B93D05AD983D22A2E978E6F1	9C6D21CA52AA21F3C8FBAC26E5BF9201D1FD99329391071ECD360C42934F6E9E
Chrome Cache Entry: 39	ASCII text, with no line terminators	E978F0B306FCD93F9FD2B9DDF539DD86	E895F04120F1140F93F04EBAB4DD89BB78842680	8CD706E146D1F05A0DAA9F124030E0F6620D7ADC8DAC7B5EAF9E18094B4BA9BC
Chrome Cache Entry: 40	GIF image data, version 89a, 1 x 1	A5098C60B3B0C879A2C7AF6C68B7B53F	939F40BE7F1AAF623F62886DE4AABA3886DF9B65	693D949D8C3FDC7FD4ACE7C340B5F177A9F0C5BE7BAFEE8BC93A7D88B7523D75
Chrome Cache Entry: 41	RIFF (little-endian) data, Web/P image	ACB5A7B7377339CA06622E7E64380D1D	CA895C974BEB34403E8402698D128A30467CAFE3	EE11B626F7B3DC252BE594C7AF4D9F00198F91E2FE62C42AA37E80D0FB001566
Chrome Cache Entry: 42	data	15A411EA0C918CF0E4B3B13732C3C120	6B273813186E8AB9AF0671EFFE2E3113A9A026AB	FBC32A909E1A225E8DB7F1118671F1FDFF074B98583548943B9CECA90B207214
Chrome Cache Entry: 43	HTML document, Unicode text, UTF-8 text, with very long lines (65465)	3E286AF61FF48F15772F14AC44AB04A3	C884DD3C875B0455BE0C643BC184A8D8E6D2E87F	331D50451B5612A12832317C2FEB225A0BB29C83AA27432A4EF0450CFFD7175D
Chrome Cache Entry: 44	Web Open Font Format (Version 2), TrueType, length 29384, version 1.0	CC0149F2F8347DB51E5A887803490C50	F014ACF01232CFA93F6E9268FDFB9089886B8E30	D489B866F669F2F15392D5CDCE4B6E23F9E66FD7E0F38155510282F5E68C8EC2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49785 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49782 version: TLS 1.2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49785 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.theglassguru.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/12/vanilla-ice-project.png HTTP/1.1Host: www.theglassguru.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.theglassguru.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_google_apps_login=8bd44ec6beae3a0126041d931ab98817
Source: global traffic	HTTP traffic detected: GET /pixel/?ad_log=referer&action=content&pixid=d28093f3-b445-48d7-8d09-677eef7f7c2a HTTP/1.1Host: data.adxcel-ec2.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.theglassguru.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/pdm/dist/svgs/quote.svg HTTP/1.1Host: www.theglassguru.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wordpress_google_apps_login=8bd44ec6beae3a0126041d931ab98817
Source: global traffic	HTTP traffic detected: GET /pixel/?ad_log=referer&action=content&pixid=d28093f3-b445-48d7-8d09-677eef7f7c2a HTTP/1.1Host: data.adxcel-ec2.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: theglassguru.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: theglassguru.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_43.2.dr	String found in binary or memory: <a href="https://www.youtube.com/watch?v=fPiZwSNfRbA" target="_blank"><img fetchpriority="high" decoding="async" src="https://www.theglassguru.com/wp-content/uploads/2024/06/theglassguru.com-youtube.webp" alt="" width="980" height="552" class="aligncenter size-full wp-image-16412" style="min-width:98%;" /></a> equals www.youtube.com (Youtube)
Source: chromecache_43.2.dr	String found in binary or memory: "embedUrl": "https://www.youtube.com/embed/fPiZwSNfRbA", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: theglassguru.com
Source: global traffic	DNS traffic detected: DNS query: www.theglassguru.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: majorbrdide.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: data.adxcel-ec2.com

Source: chromecache_43.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_43.2.dr	String found in binary or memory: http://schema.org/WatchAction
Source: chromecache_43.2.dr	String found in binary or memory: http://theglassguru.com/services/shower-bath/
Source: chromecache_43.2.dr	String found in binary or memory: http://theglassgurufranchise.com/
Source: chromecache_43.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_43.2.dr	String found in binary or memory: https://data.adxcel-ec2.com/pixel/?ad_log=referer&action=content&pixid=d28093f3-b445-48d7-8d09-677ee
Source: chromecache_43.2.dr	String found in binary or memory: https://kcseopro.com/wordpress-seo-structured-data-schema-plugin/
Source: chromecache_43.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_43.2.dr	String found in binary or memory: https://schema.org/
Source: chromecache_43.2.dr	String found in binary or memory: https://theglassguru.careerplug.com/account
Source: chromecache_43.2.dr	String found in binary or memory: https://wp-rocket.me
Source: chromecache_43.2.dr	String found in binary or memory: https://www.google.com/maps/search/?api=1&query=The
Source: chromecache_43.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=GT-NNM9PH9
Source: chromecache_43.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-111185122-1
Source: chromecache_43.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_43.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-MJJXDWG
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/#/schema/logo/image/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/#breadcrumb
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/#organization
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/#primaryimage
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/#website
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/?s=
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/about-us/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/blog/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/faqs/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/financing/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/free-estimate/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/gallery/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/locations/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/privacy-policy/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/reviews/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/commercial-2/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/commercial-2/commercial-storefront/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/doors/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/doors/door-glass-inserts/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/glass/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/glass/custom-glass/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/glass/decorative-glass/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/glass/glass-panels-partitions/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/glass/window-door-glass/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/mirrors/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/mirrors/mirror-frames/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/screens/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/screens/screen-doors/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/screens/solar-screens/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/screens/window-screens/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/shower-bath/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/windows/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/windows/window-restoration/foggy-window-repair/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/services/windows/window-restoration/glass-stain-removal/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/cache/min/1/e4e969cc8a20ff5111f6ffdbe31758aa.js
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2020/11/1-water-stain-removal_crp.jpg
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2020/12/city-bath-crashers-150x91.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2020/12/city-bath-crashers.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2020/12/vanilla-ice-project-150x96.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2020/12/vanilla-ice-project.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/01/1-guru-1.jpg
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/01/favicon.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/01/logo.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/05/3-guru.jpg
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/05/550-replacement-contractors-2020-150x124.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/05/550-replacement-contractors-2020.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2021/05/iStock_000002694005Medium-768x512.jpg
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2024/05/2024-05-09-TheGlassGuru.com-Header-2.webp
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2024/06/theglassguru.com-youtube.webp
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2024/07/theglassguru.com-footer-logo-2024-o-150x103.
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2024/07/theglassguru.com-footer-logo-2024-o.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-content/uploads/2024/07/theglassguru.com-header-logo-2024.png
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-includes/js/jquery/jquery.min.js
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-json/
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.theglassguru.com%2F
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.theglassguru.com%2F&#038
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/wp-json/wp/v2/pages/7
Source: chromecache_43.2.dr	String found in binary or memory: https://www.theglassguru.com/xmlrpc.php?rsd
Source: chromecache_43.2.dr	String found in binary or memory: https://www.youtube.com/embed/fPiZwSNfRbA
Source: chromecache_43.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=fPiZwSNfRbA
Source: chromecache_43.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/
Source: chromecache_43.2.dr	String found in binary or memory: https://youtu.be/fPiZwSNfRbA

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49782 version: TLS 1.2

Source: classification engine

Classification label: unknown0.win@19/18@18/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1984,i,17754463736748942375,16654701587173049969,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://theglassguru.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=1984,i,17754463736748942375,16654701587173049969,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

ID:	1524371
Product:	CloudBasic
Start time:	17:54:44
Start date:	02.10.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
http://theglassguru.com

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report http://theglassguru.com

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
http://theglassguru.com