Edit tour

Windows Analysis Report
https://welcomewinner.com/?action=register&sub_id=RADIASI-CUBLUK

Overview

General Information

Sample URL:	https://welcomewinner.com/?action=register&sub_id=RADIASI-CUBLUK
Analysis ID:	1369311
Infos:

Detection

Phisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected Phisher

Creates files inside the system directory

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6616 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2208,i,14863551230937185152,8612885440129298656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6004 --field-trial-handle=2208,i,14863551230937185152,8612885440129298656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4492 --field-trial-handle=2208,i,14863551230937185152,8612885440129298656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2952 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://welcomewinner.com/?action=register&sub_id=RADIASI-CUBLUK MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_161	JoeSecurity_Phisher_1	Yara detected Phisher	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Boot Survival

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://x.s788n.com/click?pid=6&offer_id=686&ref_id=f9bacfe2148f83780db2af09YLRqKdBx_4a8c9935_4fc4400d&sub1=4a8c9935&sub8=	Avira URL Cloud: Label: malware
Source: https://ad-blocking24.net/c2cpl2k.php?lp=1	Avira URL Cloud: Label: malware

Phishing

Yara detected Phisher

Source: Yara match

File source: dropped/chromecache_161, type: DROPPED

Source: https://welcomewinner.com/?action=register&sub_id=RADIASI-CUBLUK

HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49728 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 173.223.108.114:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.223.108.114:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49792 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49728 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103

Source: global traffic	HTTP traffic detected: GET /?action=register&sub_id=RADIASI-CUBLUK HTTP/1.1Host: welcomewinner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/3.3.5/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://welcomewinner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4829350&@f16&@g1&@h1&@i1&@j1704289538295&@k0&@l1&@mRedirecting%20to%20Secure%20Page&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:4801847&@b3:1704289538&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fwelcomewinner.com%2F%3Faction%3Dregister%26sub_id%3DRADIASI-CUBLUK&@w HTTP/1.1Host: s4.histats.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://welcomewinner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: welcomewinner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://welcomewinner.com/?action=register&sub_id=RADIASI-CUBLUKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b1ada6b2e7ceb6a3eb90fcdd680bd25d; HstCfa4829350=1704289538295; HstCla4829350=1704289538295; HstCmu4829350=1704289538295; HstPn4829350=1; HstPt4829350=1; HstCnv4829350=1; HstCns4829350=1
Source: global traffic	HTTP traffic detected: GET /scripts/un981c6l?a_aid=4a8c9935&a_bid=4fc4400d&chan=RADIASI-CUBLUK HTTP/1.1Host: www.888mjb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://welcomewinner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g?visitorid=f9bacfe2148f83780db2af09YLRqKdBx&refid=4a8c9935&bannerid=4fc4400d&extra_data1=&extra_data2= HTTP/1.1Host: 46j3w.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://welcomewinner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /click?pid=6&offer_id=686&ref_id=f9bacfe2148f83780db2af09YLRqKdBx_4a8c9935_4fc4400d&sub1=4a8c9935&sub8= HTTP/1.1Host: x.s788n.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://welcomewinner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jump/next.php?r=3052727&sub1=pcpa1-64a8c9935-686-5f0f018d2bdea5690c593f07 HTTP/1.1Host: predictionds.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://welcomewinner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jump/next.php?stamat=m%257CJiIifrtiaQdHkAH0dEdHP3xP.587%252CS0kXXHXf2ck-DOZ9HRvwuA46yEfXiahxG_MMl0_BtyYKbtmJleGxHtSohruLnrH9kiKzUmAHaOVwPWHavpN39yzV0wqPwYCo5oDu8aoGcKB-JgfHQyzdVKYQ5s3j_riYbxdnEUVZoL6RYN1mtVERig%252C%252C&cbpage=https://predictionds.com/jump/next.php?r=3052727&sub1=pcpa1-64a8c9935-686-5f0f018d2bdea5690c593f07&cbur=0.3441691510833784&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=907&cbdescription=&cbkeywords=&cbref=https%3A%2F%2Fwelcomewinner.com%2F HTTP/1.1Host: predictionds.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=36SRHOnSTp3xXPH&MD=tgH6alxm HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /script/i.php?t=1&stamat=m%257C%252C%252CwiImd2MmtGU3BE-GH0dEdHP3xP.a10%252CwFKnGPz3du6uvJyqhczqBMqamPsUBUihLCvvAIxYrU-Fsu_t-LcWEdVJae-kFEIKWajGRSS1Sb3DKu-gF_OE9Pg1AUopoKq9cJo0dMDuKV73B1NRIbuWDhYeMDkYqnPXczmM6TKT-bA_My0qbINeX0bYLt9skx3Zcxie03DNRweJzT5mzOu47LhLSIi7A8-cMswkV_ZKJWCamlzkf6sRrlq-p-19yHsS8pnN_1n6G_jkkHGaZKrkDTL51qmt9DHJjBjDcyTvHFNN6HzYDHrCp22PJF9ow147Dfkqvz667LcmZpaLukhSgie3-bA0umRFykzaGVo81V1bcXx4iRRO3Epg0lUlVQIpOFBAuvAlPlm_MMYCtTg1ftMTRUYKyCBrq7UyQMpGans_08ZT3SdLQ1u0_l5Fgpmian_pJ8-53bzcMI_unGol1_zGIPt6HDLZylWQLWoVGKwmbC7jnUqFOAmEL6epZdyB8hqjV2jQlRmEPMItcCzayeSqvq-BbCAM6wJd8vmSNcJvr0Ng43LyD_lcWG8bB9Gb9w7Q8mzGFDntWg9NoTkS7GoBfk_ye0OfvAFcNp3ssRHyQjgiXYKYMTUASbcP6rNOmrn1U48z1qU0Rghzm-WBnbxBdqzLqGiGuFzCEWv-5ZENsryQe4v63xzAqsZ8M1PWAjOyI7UIP68%252C HTTP/1.1Host: predictionds.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /click?pid=6&offer_id=2435339&sub1=170428954710000TUSTV435634649624Ved&sub2=3052727-3652300265-0 HTTP/1.1Host: tracking.trackingshub.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cp4kl7k.php?key=g41o6sl3837gl3j3xmr7&externalid=6595650d88d9e60001d74e77&source=6_3052727-3652300265-0 HTTP/1.1Host: ad-blocking24.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78 HTTP/1.1Host: futureforgelabs.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/css/eaabcd84b27bb7b4.css HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /_next/static/css/0906ef9272eafb5e.css HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /sxp/i/8c3dd651469c9787e366b6d88eb7fa51.js HTTP/1.1Host: euob.thatmonkeybites3.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://futureforgelabs.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/browser-icons/available-in-chrome.svg HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://futureforgelabs.net/_next/static/css/eaabcd84b27bb7b4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /images/extension-icons/essential-adblocker/logo.svg HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://futureforgelabs.net/_next/static/css/eaabcd84b27bb7b4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/928-a459b970dcaa21c2.js HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/111.d74668583b293cce.js HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-b4a1b77b7d714b13.js HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-2c79e2a64abdb08b.js HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-349ca23c9762ec02.js HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-7432be77a845fe72.js HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/index-6b7d39010ea4aed2.js HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /_next/static/Vxm9QTlnFMdrLEve3mXV0/_buildManifest.js HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /_next/static/Vxm9QTlnFMdrLEve3mXV0/_ssgManifest.js HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /images/extension-icons/essential-adblocker/logo.svg HTTP/1.1Host: futureforgelabs.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /images/browser-icons/available-in-chrome.svg HTTP/1.1Host: futureforgelabs.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /cp4kl7k.php?add_event6=1&uclick=8ribj68w3y HTTP/1.1Host: ad-blocking24.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /ct?id=46468&url=https%3A%2F%2Ffutureforgelabs.net%2F%3Fextension%3Dessential_adblocker%26promo%3Dorange%26bg%3Dnone%26clk_domain%3Dad-blocking24.net%26flow%3Dbinom%26campaignId%3D10660%26trafficsource%3D21%26src%3D6_3052727-3652300265-0%26cid%3D07ea88ribj68w3y912%26lpkey%3D174104192884986e50%26uclick%3D8ribj68w3y%26uclickhash%3D8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1704289552713&hl=1&op=0&ag=300509663&rand=632802577229790806082920670607811912006096016012965810178197122970612211201297189572&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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
Source: global traffic	HTTP traffic detected: GET /cp4kl7k.php?add_event6=1&uclick=8ribj68w3y HTTP/1.1Host: ad-blocking24.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=hEqba8j0Bw&ts=1346&cb=1704289554059 HTTP/1.1Host: obseu.thatmonkeybites3.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://futureforgelabs.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=842735e7037412ce7b00f1299c1f0b58
Source: global traffic	HTTP traffic detected: GET /images/extension-icons/essential-adblocker/favicon.ico HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78; _cq_duid=1.1704289552.h9HcrthzLtqY55Qx; _cq_suid=1.1704289552.tCRR0UZuhVDJohPY; _ga_D9B6K7HFTW=GS1.1.1704289552.1.0.1704289552.0.0.0; _ga=GA1.1.1741304258.1704289553
Source: global traffic	HTTP traffic detected: GET /images/extension-icons/essential-adblocker/favicon.ico HTTP/1.1Host: futureforgelabs.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78; _cq_duid=1.1704289552.h9HcrthzLtqY55Qx; _cq_suid=1.1704289552.tCRR0UZuhVDJohPY; _ga_D9B6K7HFTW=GS1.1.1704289552.1.0.1704289552.0.0.0; _ga=GA1.1.1741304258.1704289553
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=hEqba8j0Bw&ts=1346&cb=1704289554059 HTTP/1.1Host: obseu.thatmonkeybites3.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=842735e7037412ce7b00f1299c1f0b58
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.thatmonkeybites3.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=842735e7037412ce7b00f1299c1f0b58
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.thatmonkeybites3.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=842735e7037412ce7b00f1299c1f0b58
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.thatmonkeybites3.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=842735e7037412ce7b00f1299c1f0b58
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.thatmonkeybites3.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=842735e7037412ce7b00f1299c1f0b58
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.thatmonkeybites3.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=842735e7037412ce7b00f1299c1f0b58
Source: global traffic	HTTP traffic detected: GET /c2cpl2k.php?lp=1 HTTP/1.1Host: ad-blocking24.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://futureforgelabs.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /nlp/index.php?promo=blue&extension=essential_adblocker&cid=07ea88ribj68w3y912&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&url_bnm_redirect=https://futureforgelabs.net/offer-w HTTP/1.1Host: ad-blocking24.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://futureforgelabs.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /offer-w?promo=blue&extension=essential_adblocker&cid=07ea88ribj68w3y912&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0 HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ad-blocking24.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78; _cq_duid=1.1704289552.h9HcrthzLtqY55Qx; _cq_suid=1.1704289552.tCRR0UZuhVDJohPY; _ga=GA1.1.1741304258.1704289553; _ga_D9B6K7HFTW=GS1.1.1704289552.1.1.1704289580.0.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ad-blocking24.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ad-blocking24.net/nlp/index.php?promo=blue&extension=essential_adblocker&cid=07ea88ribj68w3y912&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&url_bnm_redirect=https://futureforgelabs.net/offer-wAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/offer-w-34f32a734f481004.js HTTP/1.1Host: futureforgelabs.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://futureforgelabs.net/offer-w?promo=blue&extension=essential_adblocker&cid=07ea88ribj68w3y912&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: extension=essential_adblocker; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78; _cq_duid=1.1704289552.h9HcrthzLtqY55Qx; _cq_suid=1.1704289552.tCRR0UZuhVDJohPY; _ga=GA1.1.1741304258.1704289553; _ga_D9B6K7HFTW=GS1.1.1704289552.1.1.1704289580.0.0.0; promo=blue
Source: global traffic	HTTP traffic detected: GET /webstore/detail/essential-adblocker-ad-fr/hkoedmbnopkigkfofkknbmfambbljolg HTTP/1.1Host: chrome.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /ct?id=46468&url=https%3A%2F%2Ffutureforgelabs.net%2Foffer-w%3Fpromo%3Dblue%26extension%3Dessential_adblocker%26cid%3D07ea88ribj68w3y912%26clk_domain%3Dad-blocking24.net%26flow%3Dbinom%26campaignId%3D10660%26trafficsource%3D21%26src%3D6_3052727-3652300265-0&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1704289581372&hl=2&op=0&ag=300509663&rand=642015967875210728161017572205967299100229128922287706979990120751571222661629576987&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=https%3A%2F%2Fad-blocking24.net%2F&ss=1280x1024&nc=0&at=&di=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
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=g4LlPWi2ZK&ts=1053&cb=1704289582425 HTTP/1.1Host: obseu.thatmonkeybites3.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://futureforgelabs.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=842735e7037412ce7b00f1299c1f0b58
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=36SRHOnSTp3xXPH&MD=tgH6alxm HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /5KhDb_CYPuUIBdZgLu4AOFIRjerLSQdC9Jrbv5ReXPQudO7_RlcNHZZJDqNrWQpoN2-xMg20j2uASzVdBoI1sq0kECo=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Gvd9WqmofXO17650SPv8kuFVEZfAxG0p-a1Augo8OlwHMOdijMLartYw6rUmSBbRECCq5C4npVdEwAHHk-wlz_E=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1Hb2yEBXzKMqWKGGlsaPhlKHfyprb7NyzBgWWE7gROy3HQ9ucFzd8mQD_3V9_Z-eU8XJ_ykMSqixWYx6pFfUOqvc=s60 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /HuPU5Xxn8YWE4u6N9Mb5tWZ4SqImCD-U_4stMDX_ZnZLnTubBqJqT_0AlXNxhS3RhEiqyWYzTmrukNYFJpfJ2ler=s60 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/ACg8ocJz5FutL5JY2j9bRWlzm4RNDL66pUe9J0YinQWxgEPZ=s48-w48-h48 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/ACg8ocIkgIphZxAPOoYhcfkQvnfPYqCYMUkuoaYJsofOhOs5=s48-w48-h48 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/ACg8ocJLHmLd4lP8y_DZWxcd1-cxziX36bs52FCmNw4toOyU=s48-w48-h48 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WkarSPmIEHDBgNzsjj-4J2dL0uqHML88d5N5_dogTyBwv-U10nz-5YXQq9vOgnbOE1z8uq10XOlR5PUJiU8RXDIl=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S0EQG2M08nt6BxtsBmVo3Goj6xBCGPtAHwWnVBafzQfhtlvqWNcJx6DlsPi6iJduTKOVK75X-ksxtW6Y-Hl4qRTt=s1280-w1280-h800 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /W-cTDXeBPHHb-uWBgrBEq6ABHzFIcWf7E3J0a9S-2JXPT1smMw5jyiEJcV9PD0hRXknkYzNChIfsrcRrdpogHrr7Cw=s1280-w1280-h800 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6YEbnjfh-Iet0b8VrqBnkWZLiSc2hzlr8T2naKiEvzw66-S8CWwvMlXrW9DZlk97mX1uTTywj9sQ3HEV3XwnuLRF=s1280-w1280-h800 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /W-cTDXeBPHHb-uWBgrBEq6ABHzFIcWf7E3J0a9S-2JXPT1smMw5jyiEJcV9PD0hRXknkYzNChIfsrcRrdpogHrr7Cw=s192-w192-h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6YEbnjfh-Iet0b8VrqBnkWZLiSc2hzlr8T2naKiEvzw66-S8CWwvMlXrW9DZlk97mX1uTTywj9sQ3HEV3XwnuLRF=s192-w192-h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S0EQG2M08nt6BxtsBmVo3Goj6xBCGPtAHwWnVBafzQfhtlvqWNcJx6DlsPi6iJduTKOVK75X-ksxtW6Y-Hl4qRTt=s192-w192-h120 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.q86ihocu0HA.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9gC2cqySYcBh8kT9LMyuiwdwIYGQ/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.q86ihocu0HA.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9gC2cqySYcBh8kT9LMyuiwdwIYGQ/cb=gapi.loaded_1 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=TnnnTd3rNaAMa0HOG-U3wPgApVfUeydUw_oI9PU5UzF75hBDPCJimUPHB5j38k9Q7m8VlRPPnShUg0nzobpB9MgBE21pIlnVXO4O67WuziFjzjOdNGV_9C9mBcW8wXtx6N6KUy5XCGj_4fSj_17g-GrEwAqQ9uGvjPMsrl4RSrVyY-CzEa2_Bg
Source: global traffic	HTTP traffic detected: GET /static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.q86ihocu0HA.O%2Fd%3D1%2Frs%3DAHpOoo9gC2cqySYcBh8kT9LMyuiwdwIYGQ%2Fm%3D__features__ HTTP/1.1Host: scone-pa.clients6.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=S4k2U8RQSBOOyZqek3Px1_tIFr09ynu3uSxQXryZ3DJcYb2DaC_otjpzctFYY27IFVmsclouuYGsUh4tHLaheQOCYdMkqfQ6MLogiKnhDA2yOd4ggMwxE3bD9uhwWCrZfJHRhHTyRMhKDc45J6svTbvZfvKXqDvg0FtpHgYgp7gkz68yjpr-ISk
Source: global traffic	HTTP traffic detected: GET /js/googleapis.proxy.js?onload=startup HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://scone-pa.clients6.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=S4k2U8RQSBOOyZqek3Px1_tIFr09ynu3uSxQXryZ3DJcYb2DaC_otjpzctFYY27IFVmsclouuYGsUh4tHLaheQOCYdMkqfQ6MLogiKnhDA2yOd4ggMwxE3bD9uhwWCrZfJHRhHTyRMhKDc45J6svTbvZfvKXqDvg0FtpHgYgp7gkz68yjpr-ISk
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.q86ihocu0HA.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9gC2cqySYcBh8kT9LMyuiwdwIYGQ/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://scone-pa.clients6.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=S4k2U8RQSBOOyZqek3Px1_tIFr09ynu3uSxQXryZ3DJcYb2DaC_otjpzctFYY27IFVmsclouuYGsUh4tHLaheQOCYdMkqfQ6MLogiKnhDA2yOd4ggMwxE3bD9uhwWCrZfJHRhHTyRMhKDc45J6svTbvZfvKXqDvg0FtpHgYgp7gkz68yjpr-ISk

Source: chromecache_122.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=uA(a,c,e);O(121);if("https://www.facebook.com/tr/"===k["gtm.elementUrl"])return O(122),!0;if(d&&f){for(var m=db(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},xA=function(){var a=[],b=function(c){return Ja(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_120.2.dr	String found in binary or memory: disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""}, equals www.youtube.com (Youtube)
Source: chromecache_122.2.dr	String found in binary or memory: f\|\|g.length\|\|k.length))return;var n={gh:d,eh:e,fh:f,Ih:g,Jh:k,Be:m,ob:b},p=z.YT,q=function(){BC(n)};if(p)return p.ready&&p.ready(q),b;var r=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){r&&r();q()};H(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(EC(w,"iframe_api")\|\|EC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!vC&&CC(x[A],n.Be))return Kc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_180.2.dr, chromecache_122.2.dr, chromecache_116.2.dr	String found in binary or memory: return b}sC.F="internal.enableAutoEventOnTimer";var yc=ea(["data-gtm-yt-inspected-"]),tC=["www.youtube.com","www.youtube-nocookie.com"],uC,vC=!1; equals www.youtube.com (Youtube)
Source: chromecache_122.2.dr	String found in binary or memory: var JB=function(a,b,c,d,e){var f=Fy("fsl",c?"nv.mwt":"mwt",0),g;g=c?Fy("fsl","nv.ids",[]):Fy("fsl","ids",[]);if(!g.length)return!0;var k=By(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if("https://www.facebook.com/tr/"===m)return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Nx(k,Ox(b, equals www.facebook.com (Facebook)
Source: chromecache_136.2.dr	String found in binary or memory: void 0,void 0,"OCpkoe"),b.V(),b.close());b.close();if(l){b.open("div","iq9Bs");b.T(FIa\|\|(FIa=["class","FxokVe","jsname","uKE2yf"]));b.O();a=c.length;for(l=0;l<a;l++)f=c[l],b.U("IPmiae"),AIa(b,f,l,l===(c.length+d)%c.length),b.V();b.close()}},BIa,CIa,DIa,EIa,FIa,zIa=function(a,b,c){b="https://img.youtube.com/vi/"+_.gJ(b.o()).substring(_.gJ("https://www.youtube.com/embed/").length,_.gJ("https://www.youtube.com/embed/").length+11)+"/hqdefault.jpg";a.open("img","P6f1D");a.T(GIa\|\|(GIa=["loading","lazy"])); equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1238date: Wed, 03 Jan 2024 13:45:43 GMTserver: LiteSpeedalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Source: chromecache_147.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_162.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_150.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/%
Source: chromecache_150.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/%
Source: chromecache_142.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_147.2.dr, chromecache_165.2.dr, chromecache_131.2.dr, chromecache_120.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_147.2.dr, chromecache_120.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_165.2.dr, chromecache_131.2.dr, chromecache_120.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_120.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_175.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_150.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_120.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js
Source: chromecache_130.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js?onload=startup
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/%
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/%
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/%
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/%
Source: chromecache_180.2.dr, chromecache_122.2.dr, chromecache_116.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_136.2.dr	String found in binary or memory: https://chrome.google.com/webstore/detail/
Source: chromecache_120.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_120.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_147.2.dr, chromecache_165.2.dr, chromecache_131.2.dr, chromecache_120.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_147.2.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_147.2.dr, chromecache_165.2.dr, chromecache_131.2.dr, chromecache_120.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_147.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_165.2.dr, chromecache_131.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_120.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_136.2.dr	String found in binary or memory: https://developer.chrome.com/docs/webstore/program-policies/limited-use/
Source: chromecache_147.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_147.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_147.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_147.2.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_165.2.dr, chromecache_131.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_120.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_120.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_150.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_150.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_150.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_150.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_150.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_142.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_142.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_142.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_142.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_161.2.dr	String found in binary or memory: https://futureforgelabs.net/offer-w?promo=blue&extension=essential_adblocker&cid=07ea88ribj68w3y912&
Source: chromecache_162.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_150.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_136.2.dr	String found in binary or memory: https://img.youtube.com/vi/
Source: chromecache_150.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/%
Source: chromecache_150.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/%
Source: chromecache_180.2.dr, chromecache_122.2.dr, chromecache_116.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_120.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_136.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_120.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_131.2.dr, chromecache_120.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_165.2.dr, chromecache_131.2.dr, chromecache_120.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_117.2.dr	String found in binary or memory: https://predictionds.com/ad/visit.php?al=1
Source: chromecache_117.2.dr	String found in binary or memory: https://predictionds.com/jump/next.php?stamat=m%257CJi9jO6NjaQdHkAH0dEdHP3xP.78e%252CTwuhcE9ytvGl4nF
Source: chromecache_117.2.dr	String found in binary or memory: https://predictionds.com/jump/next.php?stamat=m%257CJiIifrtiaQdHkAH0dEdHP3xP.587%252CS0kXXHXf2ck-DOZ
Source: chromecache_150.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_150.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_150.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_136.2.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/chrome_logo_96.png
Source: chromecache_136.2.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/chrome_web_store_v2_1200x630.png
Source: chromecache_136.2.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_logo.png
Source: chromecache_136.2.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_logo_2x.png
Source: chromecache_171.2.dr, chromecache_136.2.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_promo_tile.png
Source: chromecache_171.2.dr, chromecache_136.2.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_promo_tile_2x.png
Source: chromecache_147.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_120.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_150.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_180.2.dr, chromecache_122.2.dr, chromecache_116.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_180.2.dr, chromecache_122.2.dr, chromecache_116.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_150.2.dr, chromecache_136.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_136.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/95414
Source: chromecache_136.2.dr	String found in binary or memory: https://support.google.com/chrome_webstore/?hl=
Source: chromecache_136.2.dr	String found in binary or memory: https://support.google.com/chrome_webstore/answer/12225786?p=cws_reviews_results
Source: chromecache_136.2.dr	String found in binary or memory: https://support.google.com/chrome_webstore/answer/12225786?p=cws_reviews_results&hl=
Source: chromecache_136.2.dr	String found in binary or memory: https://support.google.com/chrome_webstore/answer/1698338
Source: chromecache_150.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_120.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_180.2.dr, chromecache_122.2.dr, chromecache_116.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_150.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_175.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_165.2.dr, chromecache_131.2.dr, chromecache_120.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_150.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_136.2.dr	String found in binary or memory: https://www.google.com/chrome/?brand=GGRF&utm_source=google.com&utm_medium=material-callout&utm_camp
Source: chromecache_142.2.dr, chromecache_175.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_120.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_120.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_150.2.dr, chromecache_136.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_150.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_150.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_147.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_131.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_131.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_180.2.dr, chromecache_122.2.dr, chromecache_116.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_136.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_136.2.dr	String found in binary or memory: https://www.gstatic.com/chrome/webstore/images/item_not_available.png
Source: chromecache_136.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_142.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_142.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_142.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_142.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_142.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/search_black_24dp.png
Source: chromecache_142.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_120.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_136.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_150.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_180.2.dr, chromecache_122.2.dr, chromecache_116.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog/mc/collect
Source: chromecache_136.2.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_122.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_120.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 173.223.108.114:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.223.108.114:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49792 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_6616_979226108

Jump to behavior

Source: classification engine

Classification label: mal56.phis.win@30/71@64/23

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2208,i,14863551230937185152,8612885440129298656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://welcomewinner.com/?action=register&sub_id=RADIASI-CUBLUK
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6004 --field-trial-handle=2208,i,14863551230937185152,8612885440129298656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4492 --field-trial-handle=2208,i,14863551230937185152,8612885440129298656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2208,i,14863551230937185152,8612885440129298656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6004 --field-trial-handle=2208,i,14863551230937185152,8612885440129298656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4492 --field-trial-handle=2208,i,14863551230937185152,8612885440129298656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://welcomewinner.com/?action=register&sub_id=RADIASI-CUBLUK	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://www.broofa.com	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://futureforgelabs.net/_next/static/chunks/928-a459b970dcaa21c2.js	0%	Avira URL Cloud	safe
https://futureforgelabs.net/_next/static/chunks/pages/index-6b7d39010ea4aed2.js	0%	Avira URL Cloud	safe
https://ad-blocking24.net/cp4kl7k.php?key=g41o6sl3837gl3j3xmr7&externalid=6595650d88d9e60001d74e77&source=6_3052727-3652300265-0	0%	Avira URL Cloud	safe
https://futureforgelabs.net/images/extension-icons/essential-adblocker/favicon.ico	0%	Avira URL Cloud	safe
https://csp.withgoogle.com/csp/lcreport/	0%	URL Reputation	safe
https://localhost.proxy.googlers.com/inapp/%	0%	URL Reputation	safe
https://x.s788n.com/click?pid=6&offer_id=686&ref_id=f9bacfe2148f83780db2af09YLRqKdBx_4a8c9935_4fc4400d&sub1=4a8c9935&sub8=	100%	Avira URL Cloud	malware
https://ad-blocking24.net/c2cpl2k.php?lp=1	100%	Avira URL Cloud	malware
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://obseu.thatmonkeybites3.com/tracker/tc_imp.gif?e=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&cri=g4LlPWi2ZK&ts=1053&cb=1704289582425	0%	Avira URL Cloud	safe
https://futureforgelabs.net/_next/static/chunks/framework-2c79e2a64abdb08b.js	0%	Avira URL Cloud	safe
https://futureforgelabs.net/_next/static/chunks/main-349ca23c9762ec02.js	0%	Avira URL Cloud	safe
https://predictionds.com/jump/next.php?r=3052727&sub1=pcpa1-64a8c9935-686-5f0f018d2bdea5690c593f07	0%	Avira URL Cloud	safe
https://futureforgelabs.net/_next/static/css/eaabcd84b27bb7b4.css	0%	Avira URL Cloud	safe
https://obseu.thatmonkeybites3.com/tracker/tc_imp.gif?e=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&cri=hEqba8j0Bw&ts=1346&cb=1704289554059	0%	Avira URL Cloud	safe
https://futureforgelabs.net/_next/static/chunks/pages/offer-w-34f32a734f481004.js	0%	Avira URL Cloud	safe
https://predictionds.com/ad/visit.php?al=1	0%	Avira URL Cloud	safe
https://futureforgelabs.net/_next/static/chunks/pages/_app-7432be77a845fe72.js	0%	Avira URL Cloud	safe
https://futureforgelabs.net/images/extension-icons/essential-adblocker/logo.svg	0%	Avira URL Cloud	safe
https://futureforgelabs.net/_next/static/Vxm9QTlnFMdrLEve3mXV0/_ssgManifest.js	0%	Avira URL Cloud	safe
https://futureforgelabs.net/_next/static/css/0906ef9272eafb5e.css	0%	Avira URL Cloud	safe
https://tracking.trackingshub.com/click?pid=6&offer_id=2435339&sub1=170428954710000TUSTV435634649624Ved&sub2=3052727-3652300265-0	0%	Avira URL Cloud	safe
https://futureforgelabs.net/images/browser-icons/available-in-chrome.svg	0%	Avira URL Cloud	safe
https://futureforgelabs.net/offer-w?promo=blue&extension=essential_adblocker&cid=07ea88ribj68w3y912&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
scone-pa.clients6.google.com	142.250.138.95	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
accounts.google.com	142.251.116.84	true	false	high
chromewebstore.google.com	142.250.115.138	true	false	high
plus.l.google.com	142.251.116.138	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
predictionds.com	104.21.50.133	true	false	unknown
ad-blocking24.net	172.67.156.69	true	false	unknown
www.888mjb.com	172.67.130.96	true	false	unknown
futureforgelabs.net	104.21.11.84	true	false	unknown
x.s788n.com	104.21.10.187	true	false	unknown
obseu.thatmonkeybites3.com	34.251.101.162	true	false	unknown
welcomewinner.com	203.175.9.73	true	false	unknown
www3.l.google.com	142.251.116.100	true	false	high
play.google.com	142.251.116.100	true	false	high
s4.histats.com	149.56.240.132	true	false	high
www.google.com	142.251.116.147	true	false	high
46j3w.com	172.67.169.184	true	false	unknown
clients.l.google.com	142.250.115.139	true	false	high
euob.thatmonkeybites3.com	18.161.170.99	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.113.132	true	false	high
primeroll.go2affise.com	34.90.20.163	true	false	high
clients1.google.com	unknown	unknown	false	high
lh3.googleusercontent.com	unknown	unknown	false	high
tracking.trackingshub.com	unknown	unknown	false	unknown
clients2.google.com	unknown	unknown	false	high
chrome.google.com	unknown	unknown	false	high
s10.histats.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://chrome.google.com/webstore/detail/essential-adblocker-ad-fr/hkoedmbnopkigkfofkknbmfambbljolg	false		high
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false		high
https://futureforgelabs.net/_next/static/chunks/928-a459b970dcaa21c2.js	false	Avira URL Cloud: safe	unknown
https://futureforgelabs.net/images/extension-icons/essential-adblocker/favicon.ico	false	Avira URL Cloud: safe	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.q86ihocu0HA.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9gC2cqySYcBh8kT9LMyuiwdwIYGQ/cb=gapi.loaded_0?le=scs	false		high
https://ad-blocking24.net/c2cpl2k.php?lp=1	true	Avira URL Cloud: malware	unknown
https://futureforgelabs.net/_next/static/chunks/pages/index-6b7d39010ea4aed2.js	false	Avira URL Cloud: safe	unknown
https://ad-blocking24.net/cp4kl7k.php?key=g41o6sl3837gl3j3xmr7&externalid=6595650d88d9e60001d74e77&source=6_3052727-3652300265-0	false	Avira URL Cloud: safe	unknown
https://x.s788n.com/click?pid=6&offer_id=686&ref_id=f9bacfe2148f83780db2af09YLRqKdBx_4a8c9935_4fc4400d&sub1=4a8c9935&sub8=	true	Avira URL Cloud: malware	unknown
https://lh3.googleusercontent.com/Gvd9WqmofXO17650SPv8kuFVEZfAxG0p-a1Augo8OlwHMOdijMLartYw6rUmSBbRECCq5C4npVdEwAHHk-wlz_E=s275-w275-h175	false		high
https://a.nel.cloudflare.com/report/v3?s=bKS0DLzzAyDp0pTp3AtoG5FbkD5prUS85F6PL50AeL8OFZnJ%2Bl9HfJRDLA3LdBxwsckK4uZJEdtK3wvVV5wbln0ipWmyom6jSbt6It06ISoiL%2B6qmEIQV7lzxkzayB7Utz400Q%3D%3D	false		high
https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78	false		unknown
https://s4.histats.com/stats/0.php?4829350&@f16&@g1&@h1&@i1&@j1704289538295&@k0&@l1&@mRedirecting%20to%20Secure%20Page&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:4801847&@b3:1704289538&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fwelcomewinner.com%2F%3Faction%3Dregister%26sub_id%3DRADIASI-CUBLUK&@w	false		high
https://obseu.thatmonkeybites3.com/tracker/tc_imp.gif?e=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&cri=g4LlPWi2ZK&ts=1053&cb=1704289582425	false	Avira URL Cloud: safe	unknown
https://futureforgelabs.net/_next/static/chunks/framework-2c79e2a64abdb08b.js	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/6YEbnjfh-Iet0b8VrqBnkWZLiSc2hzlr8T2naKiEvzw66-S8CWwvMlXrW9DZlk97mX1uTTywj9sQ3HEV3XwnuLRF=s1280-w1280-h800	false		high
https://futureforgelabs.net/_next/static/chunks/main-349ca23c9762ec02.js	false	Avira URL Cloud: safe	unknown
https://scone-pa.clients6.google.com/v1/survey/trigger/trigger_anonymous?key=AIzaSyA0vwca3tL87eYFZub4l3oBUxBL9Em8QVQ	false		high
https://welcomewinner.com/?action=register&sub_id=RADIASI-CUBLUK	false		unknown
https://lh3.googleusercontent.com/6YEbnjfh-Iet0b8VrqBnkWZLiSc2hzlr8T2naKiEvzw66-S8CWwvMlXrW9DZlk97mX1uTTywj9sQ3HEV3XwnuLRF=s192-w192-h120	false		high
https://predictionds.com/jump/next.php?r=3052727&sub1=pcpa1-64a8c9935-686-5f0f018d2bdea5690c593f07	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/a/ACg8ocJLHmLd4lP8y_DZWxcd1-cxziX36bs52FCmNw4toOyU=s48-w48-h48	false		high
https://lh3.googleusercontent.com/a/ACg8ocJz5FutL5JY2j9bRWlzm4RNDL66pUe9J0YinQWxgEPZ=s48-w48-h48	false		high
https://obseu.thatmonkeybites3.com/tracker/tc_imp.gif?e=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&cri=hEqba8j0Bw&ts=1346&cb=1704289554059	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/S0EQG2M08nt6BxtsBmVo3Goj6xBCGPtAHwWnVBafzQfhtlvqWNcJx6DlsPi6iJduTKOVK75X-ksxtW6Y-Hl4qRTt=s1280-w1280-h800	false		high
https://futureforgelabs.net/_next/static/css/eaabcd84b27bb7b4.css	false	Avira URL Cloud: safe	unknown
https://futureforgelabs.net/_next/static/chunks/pages/offer-w-34f32a734f481004.js	false	Avira URL Cloud: safe	unknown
https://futureforgelabs.net/_next/static/chunks/pages/_app-7432be77a845fe72.js	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/HuPU5Xxn8YWE4u6N9Mb5tWZ4SqImCD-U_4stMDX_ZnZLnTubBqJqT_0AlXNxhS3RhEiqyWYzTmrukNYFJpfJ2ler=s60	false		high
https://futureforgelabs.net/images/extension-icons/essential-adblocker/logo.svg	false	Avira URL Cloud: safe	unknown
https://futureforgelabs.net/_next/static/Vxm9QTlnFMdrLEve3mXV0/_ssgManifest.js	false	Avira URL Cloud: safe	unknown
https://futureforgelabs.net/_next/static/css/0906ef9272eafb5e.css	false	Avira URL Cloud: safe	unknown
https://tracking.trackingshub.com/click?pid=6&offer_id=2435339&sub1=170428954710000TUSTV435634649624Ved&sub2=3052727-3652300265-0	false	Avira URL Cloud: safe	unknown
https://futureforgelabs.net/images/browser-icons/available-in-chrome.svg	false	Avira URL Cloud: safe	unknown
https://scone-pa.clients6.google.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.q86ihocu0HA.O%2Fd%3D1%2Frs%3DAHpOoo9gC2cqySYcBh8kT9LMyuiwdwIYGQ%2Fm%3D__features__#parent=https%3A%2F%2Fchromewebstore.google.com&rpctoken=709413818	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.q86ihocu0HA.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9gC2cqySYcBh8kT9LMyuiwdwIYGQ/cb=gapi.loaded_1	false		high
https://futureforgelabs.net/offer-w?promo=blue&extension=essential_adblocker&cid=07ea88ribj68w3y912&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_180.2.dr, chromecache_122.2.dr, chromecache_116.2.dr	false		high
https://support.google.com/chrome_webstore/answer/12225786?p=cws_reviews_results&hl=	chromecache_136.2.dr	false		high
https://support.google.com/chrome_webstore/answer/1698338	chromecache_136.2.dr	false		high
http://www.broofa.com	chromecache_142.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/client.js	chromecache_150.2.dr	false		high
http://localhost.corp.google.com/inapp/%	chromecache_150.2.dr	false		high
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_150.2.dr	false		high
https://www.youtube.com/embed/	chromecache_136.2.dr	false		high
https://apis.google.com/js/googleapis.proxy.js	chromecache_120.2.dr	false		high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_150.2.dr	false		high
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_120.2.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_165.2.dr, chromecache_131.2.dr, chromecache_120.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_122.2.dr	false		high
https://pay.google.com/gp/v/widget/save	chromecache_120.2.dr	false		high
http://getbootstrap.com)	chromecache_162.2.dr	false	Avira URL Cloud: safe	low
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_120.2.dr	false		high
https://developers.google.com/	chromecache_147.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_147.2.dr	false		high
https://www.google.com/tools/feedback	chromecache_150.2.dr, chromecache_136.2.dr	false		high
https://developer.chrome.com/docs/webstore/program-policies/limited-use/	chromecache_136.2.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_150.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/%	chromecache_150.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_175.2.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_120.2.dr	false		high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_150.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_180.2.dr, chromecache_122.2.dr, chromecache_116.2.dr	false	URL Reputation: safe	unknown
https://plus.google.com	chromecache_131.2.dr, chromecache_120.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_136.2.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_150.2.dr	false		high
https://asx-frontend-staging.corp.google.com/tools/feedback/%	chromecache_150.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_162.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_180.2.dr, chromecache_122.2.dr, chromecache_116.2.dr	false		high
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_120.2.dr	false		high
https://clients6.google.com	chromecache_147.2.dr, chromecache_165.2.dr, chromecache_131.2.dr, chromecache_120.2.dr	false		high
https://accounts.google.com/o/oauth2/iframe	chromecache_147.2.dr, chromecache_120.2.dr	false		high
https://www.google.com/log?format=json&hasfast=true	chromecache_142.2.dr, chromecache_175.2.dr, chromecache_136.2.dr	false		high
https://console.developers.google.com/	chromecache_147.2.dr	false		high
https://support.google.com/inapp/%	chromecache_150.2.dr	false		high
https://accounts.google.com/o/oauth2/postmessageRelay	chromecache_165.2.dr, chromecache_131.2.dr, chromecache_120.2.dr	false		high
https://asx-frontend-staging.corp.google.com/inapp/%	chromecache_150.2.dr	false		high
https://predictionds.com/ad/visit.php?al=1	chromecache_117.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/	chromecache_150.2.dr, chromecache_136.2.dr	false		high
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_120.2.dr	false		high
https://csp.withgoogle.com/csp/lcreport/	chromecache_165.2.dr, chromecache_131.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/chrome_webstore/?hl=	chromecache_136.2.dr	false		high
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_120.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/tools/feedback/%	chromecache_150.2.dr	false		high
https://scone-pa.clients6.google.com	chromecache_150.2.dr	false		high
https://accounts.google.com/o/oauth2/auth	chromecache_147.2.dr, chromecache_165.2.dr, chromecache_131.2.dr, chromecache_120.2.dr	false		high
https://developers.google.com/api-client-library/javascript/reference/referencedocs	chromecache_147.2.dr	false		high
https://localhost.proxy.googlers.com/inapp/%	chromecache_150.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com	chromecache_120.2.dr	false		high
https://www.google.com/chrome/?brand=GGRF&utm_source=google.com&utm_medium=material-callout&utm_camp	chromecache_136.2.dr	false		high
https://domains.google.com/suggest/flow	chromecache_165.2.dr, chromecache_131.2.dr	false		high
https://support.google.com/chrome_webstore/answer/12225786?p=cws_reviews_results	chromecache_136.2.dr	false		high
https://feedback2-test.corp.google.com/inapp/%	chromecache_150.2.dr	false		high
https://classroom.google.com/sharewidget?usegapi=1	chromecache_120.2.dr	false		high
https://chrome.google.com/webstore/detail/	chromecache_136.2.dr	false		high
https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html	chromecache_147.2.dr	false		high
https://feedback2-test.corp.googleusercontent.com/inapp/%	chromecache_150.2.dr	false		high
https://www.google.cn/tools/feedback/%	chromecache_150.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.10.187	x.s788n.com	United States	13335	CLOUDFLARENETUS	false
142.251.116.100	www3.l.google.com	United States	15169	GOOGLEUS	false
34.90.20.163	primeroll.go2affise.com	United States	15169	GOOGLEUS	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.21.7.199	unknown	United States	13335	CLOUDFLARENETUS	false
149.56.240.132	s4.histats.com	Canada	16276	OVHFR	false
142.251.116.147	www.google.com	United States	15169	GOOGLEUS	false
172.67.169.184	46j3w.com	United States	13335	CLOUDFLARENETUS	false
18.161.170.99	euob.thatmonkeybites3.com	United States	3	MIT-GATEWAYSUS	false
104.21.11.84	futureforgelabs.net	United States	13335	CLOUDFLARENETUS	false
142.250.113.132	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.50.133	predictionds.com	United States	13335	CLOUDFLARENETUS	false
142.251.116.138	plus.l.google.com	United States	15169	GOOGLEUS	false
172.67.130.96	www.888mjb.com	United States	13335	CLOUDFLARENETUS	false
172.67.156.69	ad-blocking24.net	United States	13335	CLOUDFLARENETUS	false
142.251.116.84	accounts.google.com	United States	15169	GOOGLEUS	false
203.175.9.73	welcomewinner.com	Indonesia	131303	FCCDCI-NET-PH4FPodiumRCBCPlazaTowerIPH	false
34.251.101.162	obseu.thatmonkeybites3.com	United States	16509	AMAZON-02US	false
172.67.206.138	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.138.95	scone-pa.clients6.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1369311
Start date and time:	2024-01-03 14:44:40 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://welcomewinner.com/?action=register&sub_id=RADIASI-CUBLUK
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@30/71@64/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.115.94, 34.104.35.123, 104.20.80.99, 104.20.79.99, 72.21.81.240, 192.229.211.108, 52.165.164.15, 142.251.116.97, 142.250.115.100, 142.250.115.139, 142.250.115.101, 142.250.115.113, 142.250.115.102, 142.250.115.138, 142.251.116.94, 142.250.113.94, 142.250.115.95, 142.250.114.95, 142.250.113.95, 142.251.116.95, 142.250.114.101, 142.250.114.102, 142.250.114.139, 142.250.114.113, 142.250.114.138, 142.250.114.100
Excluded domains from analysis (whitelisted): ssl.gstatic.com, fs.microsoft.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, ocsp.digicert.com, edgedl.me.gvt1.com, www.googletagmanager.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, s10.histats.com.cdn.cloudflare.net, www.gstatic.com, www.google-analytics.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 3 12:45:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.977360827060768
Encrypted:	false
SSDEEP:	48:8GdkTIIGHbcidAKZdA19ehwiZUklqehhy+3:8t35iy
MD5:	0594078B71573806FF4A8D17DE6C1A2E
SHA1:	BA5FCBE780515B4E4A2A13EAC5862D9253D739C0
SHA-256:	23EDCAD08723EF9C5337A545D1F857D5F78AAA33201FD2DD2C2CC723B713FB95
SHA-512:	6601AE1FF5DF45249B8F92A89D783FC1FC3CDB6C86A3205222680E686210B23F3610CBF699861606D21F0CF045E8CE2FC50FAEC190858788E1D36FDB8110AE5A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....J...K>..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I#X.m....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V#X.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V#X.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V#X.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V#X.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Qo......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 3, 2024 14:45:32.706310034 CET	56102	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:32.706571102 CET	51257	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:32.707072973 CET	51404	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:32.707360029 CET	57606	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:32.838962078 CET	53	55294	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:32.838977098 CET	53	56102	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:32.839811087 CET	53	51404	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:32.840336084 CET	53	57606	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:32.840348959 CET	53	51257	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:33.705797911 CET	53	55994	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:34.291121960 CET	64174	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:34.291349888 CET	56385	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:34.506244898 CET	53	56385	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:34.673191071 CET	58857	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:34.673445940 CET	52798	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:34.726938009 CET	53	64174	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:34.805373907 CET	53	52798	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:34.805546999 CET	53	58857	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:37.660516977 CET	49949	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:37.661529064 CET	51481	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:37.792294025 CET	53	49949	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:37.794328928 CET	53	51481	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:38.890074015 CET	56925	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:38.891669035 CET	61528	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:39.648943901 CET	50661	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:39.650047064 CET	53386	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:39.781980991 CET	53	50661	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:39.783312082 CET	53	53386	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:42.808628082 CET	57028	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:42.810075998 CET	64296	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:42.945023060 CET	53	64296	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:42.978741884 CET	53	57028	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:44.067614079 CET	57991	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:44.068576097 CET	64299	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:44.201628923 CET	53	57991	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:44.202187061 CET	53	64299	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:45.210086107 CET	54519	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:45.210417032 CET	61816	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:45.345213890 CET	53	61816	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:45.348197937 CET	53	54519	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:46.182430029 CET	57518	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:46.182827950 CET	65147	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:46.317035913 CET	53	65147	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:46.321690083 CET	53	57518	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:47.937329054 CET	62024	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:47.938611031 CET	57037	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:48.103816986 CET	53	62024	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:48.104898930 CET	53	57037	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:49.174087048 CET	60402	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:49.175000906 CET	59217	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:49.312716961 CET	53	60402	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:49.312937021 CET	53	59217	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:50.259495974 CET	49944	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:50.259783983 CET	54351	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:50.393949032 CET	53	54351	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:50.398467064 CET	53	49944	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:50.812325001 CET	53	56315	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:51.350150108 CET	59601	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:51.350548983 CET	53605	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:51.481157064 CET	53	63521	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:51.485522985 CET	53	53605	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:51.490034103 CET	53	59601	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:53.182455063 CET	58105	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:53.182838917 CET	57311	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:53.316360950 CET	53	58105	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:53.380806923 CET	53	57311	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:54.084510088 CET	63131	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:54.084891081 CET	51566	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:54.175791025 CET	58077	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:54.176379919 CET	61503	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:54.219707966 CET	53	63131	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:54.220484972 CET	53	51566	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:54.239919901 CET	53	61492	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:54.309422970 CET	53	58077	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:54.309813976 CET	53	61503	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:55.168540955 CET	65229	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:55.169154882 CET	61913	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:55.303639889 CET	53	61913	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:55.336574078 CET	53	65229	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:56.452653885 CET	49673	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:56.452969074 CET	52295	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:45:56.587469101 CET	53	52295	1.1.1.1	192.168.2.5
Jan 3, 2024 14:45:56.587613106 CET	53	49673	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:09.650331974 CET	53	49296	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:21.588956118 CET	64223	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:21.589379072 CET	60773	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:21.589736938 CET	55372	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:21.589893103 CET	64051	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:21.721957922 CET	53	55372	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:21.756943941 CET	53	64051	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:21.758466005 CET	53	60773	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:21.759994984 CET	53	64223	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:22.441433907 CET	63420	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:22.441651106 CET	53899	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:22.573374033 CET	53	63420	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:22.573659897 CET	53	53899	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:22.756736040 CET	64274	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:22.756977081 CET	52078	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:22.889163971 CET	53	64274	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:22.891536951 CET	53	52078	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:23.496417999 CET	54358	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:23.496829987 CET	51199	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:23.628850937 CET	53	54358	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:23.632452965 CET	53	51199	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:25.709896088 CET	52892	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:25.710289001 CET	59970	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:25.785808086 CET	53	51506	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:25.798719883 CET	53	64310	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:25.840820074 CET	53	50053	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:25.841845989 CET	53	52892	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:25.842065096 CET	53	59970	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:27.044084072 CET	53	57415	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:27.569310904 CET	64863	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:27.569778919 CET	58622	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:27.701340914 CET	53	64863	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:27.701600075 CET	53	58622	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:28.581516981 CET	51757	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:28.581901073 CET	62962	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:28.668867111 CET	53	53977	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:28.713895082 CET	53	62962	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:28.714055061 CET	53	51757	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:31.109031916 CET	60313	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:31.109491110 CET	65312	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:31.240941048 CET	53	60313	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:31.241977930 CET	53	65312	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:32.346556902 CET	53	59889	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:32.650206089 CET	53	57832	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:34.038276911 CET	64764	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:34.038835049 CET	59334	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:34.171133041 CET	53	64764	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:34.171406984 CET	53	59334	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:59.711102962 CET	59415	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:59.711502075 CET	53198	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:46:59.843830109 CET	53	59415	1.1.1.1	192.168.2.5
Jan 3, 2024 14:46:59.844136953 CET	53	53198	1.1.1.1	192.168.2.5
Jan 3, 2024 14:47:01.391311884 CET	53	49953	1.1.1.1	192.168.2.5
Jan 3, 2024 14:47:28.588644028 CET	53820	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:47:28.589128971 CET	49964	53	192.168.2.5	1.1.1.1
Jan 3, 2024 14:47:28.722273111 CET	53	53820	1.1.1.1	192.168.2.5
Jan 3, 2024 14:47:28.722902060 CET	53	49964	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 3, 2024 14:45:53.380876064 CET	192.168.2.5	1.1.1.1	c233	(Port unreachable)	Destination Unreachable
Jan 3, 2024 14:46:21.757011890 CET	192.168.2.5	1.1.1.1	c264	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:33 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-03 13:45:33 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-01-03 13:45:33 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 03 Jan 2024 13:45:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-EVujsf7iD33Cn-29SXPscg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-03 13:45:33 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-01-03 13:45:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:37 UTC	698	OUT	GET /?action=register&sub_id=RADIASI-CUBLUK HTTP/1.1 Host: welcomewinner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-03 13:45:37 UTC	516	IN	HTTP/1.1 200 OK Connection: close set-cookie: PHPSESSID=b1ada6b2e7ceb6a3eb90fcdd680bd25d; path=/; secure expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-type: text/html; charset=UTF-8 content-length: 4238 date: Wed, 03 Jan 2024 13:45:37 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-03 13:45:37 UTC	852	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 53 65 63 75 72 65 20 50 61 67 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 38 38 38 6d 6a 62 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 75 6e 39 38 31 63 36 6c 3f 61 5f 61 69 64 3d 34 61 38 63 39 39 33 35 26 61 5f 62 69 64 3d 34 66 63 34 34 30 30 64 26 63 68 61 6e 3d 52 41 44 49 41 53 49 2d 43 55 42 4c 55 4b 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f Data Ascii: <html><head><title>Redirecting to Secure Page</title><meta http-equiv="refresh" content="0;url=https://www.888mjb.com/scripts/un981c6l?a_aid=4a8c9935&a_bid=4fc4400d&chan=RADIASI-CUBLUK"><link rel="stylesheet" href="//maxcdn.bootstrapcdn.com/bootstrap/
2024-01-03 13:45:37 UTC	3386	IN	Data Raw: 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0a 20 20 63 6f 6c 6f 72 3a 23 33 35 43 34 46 30 3b 0a 7d 0a 0a 23 6c 6f 61 64 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 7b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 2e 32 73 3b 0a 20 20 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 2e 32 73 3b 0a 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 2e 32 73 3b 0a 20 20 2d 77 65 62 6b Data Ascii: nsform:rotate(180deg); -o-transform:rotate(180deg); -moz-transform:rotate(180deg); -webkit-transform:rotate(180deg); color:#35C4F0;}#load div:nth-child(2) { animation-delay:0.2s; -o-animation-delay:0.2s; -moz-animation-delay:0.2s; -webk

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:38 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-03 13:45:38 UTC	784	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=37793 Date: Wed, 03 Jan 2024 13:45:38 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:38 UTC	575	OUT	GET /bootstrap/3.3.5/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://welcomewinner.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-03 13:45:38 UTC	932	IN	HTTP/1.1 200 OK Date: Wed, 03 Jan 2024 13:45:38 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"5d5357cb3704e1f43a1f5bfed2aebf42" Last-Modified: Mon, 25 Jan 2021 22:03:59 GMT CDN-CachedAt: 02/24/2022 14:58:46 CDN-ProxyVer: 1.02 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 864 CDN-Status: 200 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-RequestId: fbe7e6fea753e22c4e1fd8ba1cf2b066 CDN-Cache: HIT CF-Cache-Status: HIT Age: 5527033 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 83fbaeeed8202e6f-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:38 UTC	437	IN	Data Raw: 37 63 30 64 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 35 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b Data Ascii: 7c0d/! Bootstrap v3.3.5 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{
2024-01-03 13:45:38 UTC	1369	IN	Data Raw: 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 Data Ascii: y{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dot
2024-01-03 13:45:38 UTC	1369	IN	Data Raw: 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 Data Ascii: ype=search]{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;-webkit-appearance:textfield}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance:none}fieldset{padd
2024-01-03 13:45:38 UTC	1369	IN	Data Raw: 72 74 61 6e 74 7d 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6c 79 70 68 69 63 6f 6e 73 20 48 61 6c 66 6c 69 6e 67 73 27 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c Data Ascii: rtant}}@font-face{font-family:'Glyphicons Halflings';src:url(../fonts/glyphicons-halflings-regular.eot);src:url(../fonts/glyphicons-halflings-regular.eot?#iefix) format('embedded-opentype'),url(../fonts/glyphicons-halflings-regular.woff2) format('woff2'),
2024-01-03 13:45:38 UTC	1369	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a Data Ascii: ore{content:"\e011"}.glyphicon-th-list:before{content:"\e012"}.glyphicon-ok:before{content:"\e013"}.glyphicon-remove:before{content:"\e014"}.glyphicon-zoom-in:before{content:"\e015"}.glyphicon-zoom-out:before{content:"\e016"}.glyphicon-off:before{content:
2024-01-03 13:45:38 UTC	1369	IN	Data Raw: 65 6e 74 3a 22 5c 65 30 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 68 65 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 Data Ascii: ent:"\e044"}.glyphicon-print:before{content:"\e045"}.glyphicon-camera:before{content:"\e046"}.glyphicon-font:before{content:"\e047"}.glyphicon-bold:before{content:"\e048"}.glyphicon-italic:before{content:"\e049"}.glyphicon-text-height:before{content:"\e05
2024-01-03 13:45:38 UTC	1369	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 69 6e 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 Data Ascii: re{content:"\e077"}.glyphicon-eject:before{content:"\e078"}.glyphicon-chevron-left:before{content:"\e079"}.glyphicon-chevron-right:before{content:"\e080"}.glyphicon-plus-sign:before{content:"\e081"}.glyphicon-minus-sign:before{content:"\e082"}.glyphicon-r
2024-01-03 13:45:38 UTC	1369	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 Data Ascii: ore{content:"\e111"}.glyphicon-magnet:before{content:"\e112"}.glyphicon-chevron-up:before{content:"\e113"}.glyphicon-chevron-down:before{content:"\e114"}.glyphicon-retweet:before{content:"\e115"}.glyphicon-shopping-cart:before{content:"\e116"}.glyphicon-f
2024-01-03 13:45:38 UTC	1369	IN	Data Raw: 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 70 65 72 63 6c 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 72 74 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 75 73 68 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 73 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 38 22 7d 2e 67 6c 79 Data Ascii: "}.glyphicon-paperclip:before{content:"\e142"}.glyphicon-heart-empty:before{content:"\e143"}.glyphicon-link:before{content:"\e144"}.glyphicon-phone:before{content:"\e145"}.glyphicon-pushpin:before{content:"\e146"}.glyphicon-usd:before{content:"\e148"}.gly
2024-01-03 13:45:38 UTC	1369	IN	Data Raw: 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 75 74 6c 65 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: hicon-floppy-remove:before{content:"\e174"}.glyphicon-floppy-save:before{content:"\e175"}.glyphicon-floppy-open:before{content:"\e176"}.glyphicon-credit-card:before{content:"\e177"}.glyphicon-transfer:before{content:"\e178"}.glyphicon-cutlery:before{conte

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:38 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-03 13:45:38 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=37846 Date: Wed, 03 Jan 2024 13:45:38 GMT Content-Length: 55 Connection: close X-CID: 2
2024-01-03 13:45:38 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:40 UTC	793	OUT	GET /stats/0.php?4829350&@f16&@g1&@h1&@i1&@j1704289538295&@k0&@l1&@mRedirecting%20to%20Secure%20Page&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:4801847&@b3:1704289538&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fwelcomewinner.com%2F%3Faction%3Dregister%26sub_id%3DRADIASI-CUBLUK&@w HTTP/1.1 Host: s4.histats.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://welcomewinner.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-03 13:45:40 UTC	134	IN	HTTP/1.1 200 OK Date: Wed, 03 Jan 2024 13:45:45 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 47 Connection: close
2024-01-03 13:45:40 UTC	47	IN	Data Raw: 5f 48 53 54 5f 63 6e 74 76 61 6c 3d 22 49 6e 69 74 69 61 6c 69 7a 69 6e 67 2e 2e 22 3b 63 68 66 68 28 5f 48 53 54 5f 63 6e 74 76 61 6c 29 3b Data Ascii: _HST_cntval="Initializing..";chfh(_HST_cntval);

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:42 UTC	833	OUT	GET /favicon.ico HTTP/1.1 Host: welcomewinner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://welcomewinner.com/?action=register&sub_id=RADIASI-CUBLUK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b1ada6b2e7ceb6a3eb90fcdd680bd25d; HstCfa4829350=1704289538295; HstCla4829350=1704289538295; HstCmu4829350=1704289538295; HstPn4829350=1; HstPt4829350=1; HstCnv4829350=1; HstCns4829350=1
2024-01-03 13:45:43 UTC	416	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Wed, 03 Jan 2024 13:45:43 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-03 13:45:43 UTC	952	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s
2024-01-03 13:45:43 UTC	286	IN	Data Raw: 62 72 3e 50 72 6f 75 64 6c 79 20 70 6f 77 65 72 65 64 20 62 79 20 20 3c 61 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 66 66 3b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 69 74 65 73 70 65 65 64 74 65 63 68 2e 63 6f 6d 2f 65 72 72 6f 72 2d 70 61 67 65 22 3e 4c 69 74 65 53 70 65 65 64 20 57 65 62 20 53 65 72 76 65 72 3c 2f 61 3e 3c 70 3e 50 6c 65 61 73 65 20 62 65 20 61 64 76 69 73 65 64 20 74 68 61 74 20 4c 69 74 65 53 70 65 65 64 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 20 49 6e 63 2e 20 69 73 20 6e 6f 74 20 61 20 77 65 62 20 68 6f 73 74 69 6e 67 20 63 6f 6d 70 61 6e 79 20 61 6e 64 2c 20 61 73 20 73 75 63 68 2c 20 68 61 73 20 6e 6f 20 63 6f 6e 74 72 6f 6c 20 6f 76 65 72 20 63 6f 6e 74 65 6e 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 Data Ascii: br>Proudly powered by <a style="color:#fff;" href="http://www.litespeedtech.com/error-page">LiteSpeed Web Server</a><p>Please be advised that LiteSpeed Technologies Inc. is not a web hosting company and, as such, has no control over content found on this

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:43 UTC	746	OUT	GET /scripts/un981c6l?a_aid=4a8c9935&a_bid=4fc4400d&chan=RADIASI-CUBLUK HTTP/1.1 Host: www.888mjb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://welcomewinner.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-03 13:45:44 UTC	1084	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 03 Jan 2024 13:45:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: private, no-cache, no-store, max-age=0 Expires: Sat, 26 Jul 1997 05:00:00 GMT Set-Cookie: PAPAffiliateId=4a8c9935; Expires=Wed, 03 Jan 2024 13:50:43 GMT; path=/; Secure; SameSite=None Set-Cookie: PAPVisitorId=f9bacfe2148f83780db2af09YLRqKdBx; Expires=Thu, 02 Jan 2025 13:45:43 GMT; path=/; Secure; SameSite=None Location: https://46j3w.com/g?visitorid=f9bacfe2148f83780db2af09YLRqKdBx&refid=4a8c9935&bannerid=4fc4400d&extra_data1=&extra_data2= X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jd9yKQW2Fnlt6JRF6poHPMJ0N6WYAPWbI3w0F7tiyStsd705AdN6B5lfRsH9ibE3%2BrYHpJ81Hk6YxKMuQcG7dLfk5tLgmqD9CTRVvnm2ZhiEj1vGxbAiXhxYjNcxc99IEQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf0f6fd2ea22-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:44 UTC	778	OUT	GET /g?visitorid=f9bacfe2148f83780db2af09YLRqKdBx&refid=4a8c9935&bannerid=4fc4400d&extra_data1=&extra_data2= HTTP/1.1 Host: 46j3w.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://welcomewinner.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-03 13:45:45 UTC	1015	IN	HTTP/1.1 302 Found Date: Wed, 03 Jan 2024 13:45:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache Location: https://x.s788n.com/click?pid=6&offer_id=686&ref_id=f9bacfe2148f83780db2af09YLRqKdBx_4a8c9935_4fc4400d&sub1=4a8c9935&sub8= Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: 4013851d-0d27-4254-8a9d-a3f42fe50d42 X-Runtime: 0.007848 X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C3OQv8tNfLzofBbYqN8W90yLn4Pb7QEloxONZRRjQFyEfwwuTEhwQsva3abcPv%2BEEuM9zMSBmrWmD7puxxc1Y9kz1TInPU1s%2BBS4j3T4S7flHw%2BYmBbp7ftXuZo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf168e550bef-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:45 UTC	210	IN	Data Raw: 63 63 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 73 37 38 38 6e 2e 63 6f 6d 2f 63 6c 69 63 6b 3f 70 69 64 3d 36 26 61 6d 70 3b 6f 66 66 65 72 5f 69 64 3d 36 38 36 26 61 6d 70 3b 72 65 66 5f 69 64 3d 66 39 62 61 63 66 65 32 31 34 38 66 38 33 37 38 30 64 62 32 61 66 30 39 59 4c 52 71 4b 64 42 78 5f 34 61 38 63 39 39 33 35 5f 34 66 63 34 34 30 30 64 26 61 6d 70 3b 73 75 62 31 3d 34 61 38 63 39 39 33 35 26 61 6d 70 3b 73 75 62 38 3d 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: cc<html><body>You are being <a href="https://x.s788n.com/click?pid=6&offer_id=686&ref_id=f9bacfe2148f83780db2af09YLRqKdBx_4a8c9935_4fc4400d&sub1=4a8c9935&sub8=">redirected</a>.</body></html>
2024-01-03 13:45:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:45 UTC	779	OUT	GET /click?pid=6&offer_id=686&ref_id=f9bacfe2148f83780db2af09YLRqKdBx_4a8c9935_4fc4400d&sub1=4a8c9935&sub8= HTTP/1.1 Host: x.s788n.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://welcomewinner.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-03 13:45:46 UTC	714	IN	HTTP/1.1 302 Found Date: Wed, 03 Jan 2024 13:45:46 GMT Content-Length: 0 Connection: close X-Adjust-Use-Original-Forwarded-For: 1 Location: https://predictionds.com/jump/next.php?r=3052727&sub1=pcpa1-64a8c9935-686-5f0f018d2bdea5690c593f07 Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zCGHq87zB11i%2B6rxG4o9vIyr3leWOprQFY2IkT7z8yeJFyum8O%2FylKG1NhGIPOaBJK1Oa3202yyNzcffuB%2BntzDqe4Zk%2FBfgRE5pQmjH7tOD%2BK4%2FGLJsiVt48iRQyQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf1dae1d463e-DFW alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:46 UTC	755	OUT	GET /jump/next.php?r=3052727&sub1=pcpa1-64a8c9935-686-5f0f018d2bdea5690c593f07 HTTP/1.1 Host: predictionds.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://welcomewinner.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-03 13:45:46 UTC	717	IN	HTTP/1.1 200 OK Date: Wed, 03 Jan 2024 13:45:46 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-headers: Content-Type access-control-allow-methods: GET, POST, OPTIONS via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PA7UG3gsbsdyoBliDZ2ux7Jni%2FI918Euyp90jlD8RVG7Ml05wJPO2zzZkPKiZLP5KP%2BmWX607fIYpJbJqA6Sqdl5PJaDPBBjb7L979P%2Bb7XlZXhyZge8p2MoojdOOIbb%2B0dM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf23cc746c3a-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:46 UTC	652	IN	Data Raw: 31 64 62 32 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 70 72 65 64 69 63 74 69 6f 6e 64 73 2e 63 6f 6d 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 70 72 65 64 69 63 74 69 6f 6e 64 73 2e 63 6f 6d 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 65 76 65 72 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 3e 0a 20 20 20 20 3c 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 69 64 Data Ascii: 1db2<html><head> <link rel="dns-prefetch" href="//predictionds.com"/> <link rel="preconnect" href="//predictionds.com"/> <meta name="referrer" content="never"> <meta name="referrer" content="no-referrer"> <noscript> <meta id
2024-01-03 13:45:46 UTC	1369	IN	Data Raw: 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 77 69 6e 64 6f 77 2e 73 65 6c 66 20 21 3d 3d 20 77 69 6e 64 6f 77 2e 74 6f 70 29 20 3f 20 31 20 3a 20 30 3b 0a 20 20 20 20 7d 0a 20 20 20 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 31 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 44 6f 63 75 6d 65 6e 74 42 6f 64 79 28 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 0a 20 20 20 20 20 20 20 20 28 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 20 21 3d 20 6e 75 6c 6c 29 20 7c 7c 20 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d Data Ascii: try { return (window.self !== window.top) ? 1 : 0; } catch (e) { return 1; }}function checkDocumentBody() { return (typeof document.body != 'undefined' && ((document.body != null) \|\| (typeof document.getElem
2024-01-03 13:45:46 UTC	1369	IN	Data Raw: 6f 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 27 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 74 68 69 73 2e 5f 67 65 74 57 69 64 74 68 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 74 68 Data Ascii: o); } } } catch (e) { } return ''; }; this._getWidth = function () { return window.innerWidth \|\| document.documentElement.clientWidth \|\| document.body.clientWidth; }; th
2024-01-03 13:45:46 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 2b 20 27 26 63 62 74 69 74 6c 65 3d 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 68 69 73 2e 5f 67 65 74 54 69 74 6c 65 28 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2b 20 27 26 63 62 69 66 72 61 6d 65 3d 27 20 2b 20 69 6e 49 66 72 61 6d 65 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2b 20 27 26 63 62 57 69 64 74 68 3d 27 20 2b 20 74 68 69 73 2e 5f 67 65 74 57 69 64 74 68 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2b 20 27 26 63 62 48 65 69 67 68 74 3d 27 20 2b 20 74 68 69 73 2e 5f 67 65 74 48 65 69 67 68 74 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2b 20 27 26 63 62 64 65 73 63 72 69 70 74 69 6f 6e 3d 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 68 69 73 2e 5f 67 65 74 Data Ascii: + '&cbtitle=' + encodeURIComponent(this._getTitle()) + '&cbiframe=' + inIframe() + '&cbWidth=' + this._getWidth() + '&cbHeight=' + this._getHeight() + '&cbdescription=' + encodeURIComponent(this._get
2024-01-03 13:45:46 UTC	1369	IN	Data Raw: 69 64 3a 20 2f 61 6e 64 72 6f 69 64 2f 2e 74 65 73 74 28 6e 29 2c 0a 20 20 20 20 20 20 20 20 6d 61 63 3a 20 2f 6d 61 63 69 6e 74 6f 73 68 2f 2e 74 65 73 74 28 6e 29 2c 0a 20 20 20 20 20 20 20 20 62 6c 61 63 6b 62 65 72 72 79 3a 20 2f 62 6c 61 63 6b 62 65 72 72 79 2f 2e 74 65 73 74 28 6e 29 2c 0a 20 20 20 20 20 20 20 20 69 6f 73 3a 20 2f 69 70 61 64 7c 69 70 6f 64 7c 69 70 68 6f 6e 65 2f 2e 74 65 73 74 28 6e 29 2c 0a 20 20 20 20 20 20 20 20 2f 2f 20 46 61 63 65 42 6f 6f 6b 20 75 73 65 72 41 67 65 6e 74 0a 20 20 20 20 20 20 20 20 66 62 3a 20 2f 66 62 61 6e 5c 2f 66 62 69 6f 73 7c 66 62 61 76 7c 66 62 69 6f 73 7c 66 62 5f 69 61 62 5c 2f 66 62 34 61 2f 2e 74 65 73 74 28 6e 29 2c 0a 20 20 20 20 20 20 20 20 70 72 65 73 74 6f 3a 20 2f 70 72 65 73 74 6f 2f 2e 74 Data Ascii: id: /android/.test(n), mac: /macintosh/.test(n), blackberry: /blackberry/.test(n), ios: /ipad\|ipod\|iphone/.test(n), // FaceBook userAgent fb: /fban\/fbios\|fbav\|fbios\|fb_iab\/fb4a/.test(n), presto: /presto/.t
2024-01-03 13:45:46 UTC	1369	IN	Data Raw: 20 76 61 72 20 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 20 3d 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 20 7c 7c 20 30 3b 0a 0a 20 20 20 20 69 66 20 28 70 61 72 73 65 49 6e 74 28 76 69 65 77 70 6f 72 74 57 69 64 74 68 29 20 3c 20 31 30 20 7c 7c 20 70 61 72 73 65 49 6e 74 28 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 29 20 3c 20 31 30 20 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 31 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 30 3b 0a 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 72 65 70 70 6f 70 65 64 52 65 64 69 72 65 63 74 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: var viewportHeight = window.innerHeight \|\| document.documentElement.clientHeight \|\| 0; if (parseInt(viewportWidth) < 10 \|\| parseInt(viewportHeight) < 10 ) { return 1; } return 0;} function preppopedRedirect() {
2024-01-03 13:45:46 UTC	113	IN	Data Raw: 6c 65 66 74 3a 20 2d 31 30 30 30 70 78 3b 20 74 6f 70 3a 20 2d 31 30 30 30 70 78 3b 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 70 72 65 64 69 63 74 69 6f 6e 64 73 2e 63 6f 6d 2f 61 64 2f 76 69 73 69 74 2e 70 68 70 3f 61 6c 3d 31 27 3e 26 6e 62 73 70 3b 3c 2f 61 3e 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0a 0d 0a Data Ascii: left: -1000px; top: -1000px;' href='https://predictionds.com/ad/visit.php?al=1'> </a> </body></html>
2024-01-03 13:45:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:47 UTC	1110	OUT	GET /jump/next.php?stamat=m%257CJiIifrtiaQdHkAH0dEdHP3xP.587%252CS0kXXHXf2ck-DOZ9HRvwuA46yEfXiahxG_MMl0_BtyYKbtmJleGxHtSohruLnrH9kiKzUmAHaOVwPWHavpN39yzV0wqPwYCo5oDu8aoGcKB-JgfHQyzdVKYQ5s3j_riYbxdnEUVZoL6RYN1mtVERig%252C%252C&cbpage=https://predictionds.com/jump/next.php?r=3052727&sub1=pcpa1-64a8c9935-686-5f0f018d2bdea5690c593f07&cbur=0.3441691510833784&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=907&cbdescription=&cbkeywords=&cbref=https%3A%2F%2Fwelcomewinner.com%2F HTTP/1.1 Host: predictionds.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-03 13:45:47 UTC	1365	IN	HTTP/1.1 302 Found Date: Wed, 03 Jan 2024 13:45:47 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS location: https://predictionds.com/script/i.php?t=1&stamat=m%257C%252C%252CwiImd2MmtGU3BE-GH0dEdHP3xP.a10%252CwFKnGPz3du6uvJyqhczqBMqamPsUBUihLCvvAIxYrU-Fsu_t-LcWEdVJae-kFEIKWajGRSS1Sb3DKu-gF_OE9Pg1AUopoKq9cJo0dMDuKV73B1NRIbuWDhYeMDkYqnPXczmM6TKT-bA_My0qbINeX0bYLt9skx3Zcxie03DNRweJzT5mzOu47LhLSIi7A8-cMswkV_ZKJWCamlzkf6sRrlq-p-19yHsS8pnN_1n6G_jkkHGaZKrkDTL51qmt9DHJjBjDcyTvHFNN6HzYDHrCp22PJF9ow147Dfkqvz667LcmZpaLukhSgie3-bA0umRFykzaGVo81V1bcXx4iRRO3Epg0lUlVQIpOFBAuvAlPlm_MMYCtTg1ftMTRUYKyCBrq7UyQMpGans_08ZT3SdLQ1u0_l5Fgpmian_pJ8-53bzcMI_unGol1_zGIPt6HDLZylWQLWoVGKwmbC7jnUqFOAmEL6epZdyB8hqjV2jQlRmEPMItcCzayeSqvq-BbCAM6wJd8vmSNcJvr0Ng43LyD_lcWG8bB9Gb9w7Q8mzGFDntWg9NoTkS7GoBfk_ye0OfvAFcNp3ssRHyQjgiXYKYMTUASbcP6rNOmrn1U48z1qU0Rghzm-WBnbxBdqzLqGiGuFzCEWv-5ZENsryQe4v63xzAqsZ8M1PWAjOyI7UIP68%252C access-control-allow-headers: Content-Type via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zW0Psv6xVKFG6qVy2IC1HaGTS2BCXA7lpvYMT4WjdUKBj5ELngXbhKGRoK7o28P9fRpLZpv9fY02eoO1Gvof1ZRcT595h7jhCB1l6iV4Y5U%2BWm4I6zLr8bqVY1PoEqC6uuL3"}],"group":"cf-nel","max_age":604800}
2024-01-03 13:45:47 UTC	149	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 33 66 62 61 66 32 37 65 39 63 39 37 32 66 35 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 83fbaf27e9c972f5-DFWalt-svc: h3=":443"; ma=86400
2024-01-03 13:45:47 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2024-01-03 13:45:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:47 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=36SRHOnSTp3xXPH&MD=tgH6alxm HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-01-03 13:45:47 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: b76e8a4c-83ca-49e3-af52-ef40f7c1ac2f MS-RequestId: 9a6c8b26-1deb-4cba-9869-9a43cab4fa63 MS-CV: R52f6997hEmAsHxD.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 03 Jan 2024 13:45:47 GMT Connection: close Content-Length: 24490
2024-01-03 13:45:47 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-01-03 13:45:47 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:47 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2483 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1704289514788&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-01-03 13:45:47 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-01-03 13:45:47 UTC	2482	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-01-03 13:45:47 UTC	476	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: A8247643C08E4ECFA20913377EF38D37 Ref B: PAOEDGE0614 Ref C: 2024-01-03T13:45:47Z Date: Wed, 03 Jan 2024 13:45:47 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1704289547.8afe1751

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:47 UTC	1409	OUT	GET /script/i.php?t=1&stamat=m%257C%252C%252CwiImd2MmtGU3BE-GH0dEdHP3xP.a10%252CwFKnGPz3du6uvJyqhczqBMqamPsUBUihLCvvAIxYrU-Fsu_t-LcWEdVJae-kFEIKWajGRSS1Sb3DKu-gF_OE9Pg1AUopoKq9cJo0dMDuKV73B1NRIbuWDhYeMDkYqnPXczmM6TKT-bA_My0qbINeX0bYLt9skx3Zcxie03DNRweJzT5mzOu47LhLSIi7A8-cMswkV_ZKJWCamlzkf6sRrlq-p-19yHsS8pnN_1n6G_jkkHGaZKrkDTL51qmt9DHJjBjDcyTvHFNN6HzYDHrCp22PJF9ow147Dfkqvz667LcmZpaLukhSgie3-bA0umRFykzaGVo81V1bcXx4iRRO3Epg0lUlVQIpOFBAuvAlPlm_MMYCtTg1ftMTRUYKyCBrq7UyQMpGans_08ZT3SdLQ1u0_l5Fgpmian_pJ8-53bzcMI_unGol1_zGIPt6HDLZylWQLWoVGKwmbC7jnUqFOAmEL6epZdyB8hqjV2jQlRmEPMItcCzayeSqvq-BbCAM6wJd8vmSNcJvr0Ng43LyD_lcWG8bB9Gb9w7Q8mzGFDntWg9NoTkS7GoBfk_ye0OfvAFcNp3ssRHyQjgiXYKYMTUASbcP6rNOmrn1U48z1qU0Rghzm-WBnbxBdqzLqGiGuFzCEWv-5ZENsryQe4v63xzAqsZ8M1PWAjOyI7UIP68%252C HTTP/1.1 Host: predictionds.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-03 13:45:47 UTC	769	IN	HTTP/1.1 302 Found Date: Wed, 03 Jan 2024 13:45:47 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * location: https://tracking.trackingshub.com/click?pid=6&offer_id=2435339&sub1=170428954710000TUSTV435634649624Ved&sub2=3052727-3652300265-0 via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gAlni7rTwxFNZskop%2Flf%2FvSYmK6xD2b6a9AJILU5WLUlyyL9PpKyZKOUi4A6l%2Bx4KvW1w%2FaincBZlYMmrQUntFMSNZi8fXq86F1NDdycyMB6gYNuilwEFFxnzUa4Io%2FxfBMS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf295bd36c68-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:47 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2024-01-03 13:45:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:48 UTC	749	OUT	GET /click?pid=6&offer_id=2435339&sub1=170428954710000TUSTV435634649624Ved&sub2=3052727-3652300265-0 HTTP/1.1 Host: tracking.trackingshub.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-03 13:45:49 UTC	539	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 03 Jan 2024 13:45:49 GMT Content-Length: 0 Connection: close X-Adjust-Use-Original-Forwarded-For: 1 Location: https://ad-blocking24.net/cp4kl7k.php?key=g41o6sl3837gl3j3xmr7&externalid=6595650d88d9e60001d74e77&source=6_3052727-3652300265-0 Set-Cookie: afclick=6595650d88d9e60001d74e77; expires=Thu, 02 Jan 2025 13:45:49 GMT; secure; SameSite=None Set-Cookie: afoffers={"2435339":1704289549}; expires=Thu, 02 Jan 2025 13:45:49 GMT; secure; SameSite=None Access-Control-Allow-Origin: *

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:49 UTC	748	OUT	GET /cp4kl7k.php?key=g41o6sl3837gl3j3xmr7&externalid=6595650d88d9e60001d74e77&source=6_3052727-3652300265-0 HTTP/1.1 Host: ad-blocking24.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-03 13:45:50 UTC	1191	IN	HTTP/1.1 302 Found Date: Wed, 03 Jan 2024 13:45:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: uclick=8ribj68w3y; expires=Thu, 04-Jan-2024 13:45:50 GMT; Max-Age=86400; path=/; secure; SameSite=none Set-Cookie: uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78; expires=Thu, 04-Jan-2024 13:45:50 GMT; Max-Age=86400; path=/; secure; SameSite=none Location: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eIC7Zl1ywpi5Nj1lh9MZcL%2BEDrwwkuClhx0yVC4mwoz%2BnvJtWoI2Lgw0XtoPsTYUIMXO7f3qi0o%2FV3G8zHJ5Q%2Fa7%2FKH%2B0cPOUqTpQXjjDhrou6PguI14U1V0SOAfEgVCIlMbSA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf367dfa463e-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:50 UTC	931	OUT	GET /?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78 HTTP/1.1 Host: futureforgelabs.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-03 13:45:51 UTC	1327	IN	HTTP/1.1 200 OK Date: Wed, 03 Jan 2024 13:45:51 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: extension=essential_adblocker;domain=.futureforgelabs.net;max-age=864000000;path=/;samesite=none;secure; Set-Cookie: promo=orange;domain=.futureforgelabs.net;max-age=864000000;path=/;samesite=none;secure; Set-Cookie: bg=none;domain=.futureforgelabs.net;max-age=864000000;path=/;samesite=none;secure; Set-Cookie: clk_domain=ad-blocking24.net;domain=.futureforgelabs.net;max-age=864000000;path=/;samesite=none;secure; Set-Cookie: flow=binom;domain=.futureforgelabs.net;max-age=864000000;path=/;samesite=none;secure; Set-Cookie: campaignId=10660;domain=.futureforgelabs.net;max-age=864000000;path=/;samesite=none;secure; Set-Cookie: trafficsource=21;domain=.futureforgelabs.net;max-age=864000000;path=/;samesite=none;secure; Set-Cookie: src=6_3052727-3652300265-0;domain=.futureforgelabs.net;max-age=864000000;path=/;samesite=none;secure; Set-Cookie: cid=07ea88ribj68w3y912;domain=.futureforgelabs.net;max-age=864000000;path=/;samesite=none;secure; Set-Cookie: lpkey=174104192884986e50;domain=.futureforgelabs.net;max-age=864000000;path=/;samesite=none;secure; Set-Cookie: uclick=8ribj68w3y;domain=.futureforgelabs.net;max-age=864000000;path=/;samesite=none;secure;
2024-01-03 13:45:51 UTC	843	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 75 63 6c 69 63 6b 68 61 73 68 3d 38 72 69 62 6a 36 38 77 33 79 2d 38 72 69 62 6a 36 38 77 33 79 2d 73 79 69 34 2d 70 32 76 72 2d 75 73 78 39 2d 67 68 71 6e 2d 38 70 68 65 2d 39 30 36 66 37 38 3b 64 6f 6d 61 69 6e 3d 2e 66 75 74 75 72 65 66 6f 72 67 65 6c 61 62 73 2e 6e 65 74 3b 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 30 30 30 30 3b 70 61 74 68 3d 2f 3b 73 61 6d 65 73 69 74 65 3d 6e 6f 6e 65 3b 73 65 63 75 72 65 3b 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 4e 65 78 74 2e 6a 73 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 56 61 72 79 3a 20 41 Data Ascii: Set-Cookie: uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78;domain=.futureforgelabs.net;max-age=864000000;path=/;samesite=none;secure;X-Powered-By: Next.jsCache-Control: private, no-cache, no-store, max-age=0, must-revalidateVary: A
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 65 30 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 74 69 74 6c 65 3e 45 73 73 65 6e 74 69 61 6c 20 41 64 42 6c 6f 63 6b 65 72 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 65 78 74 65 6e 73 69 6f 6e 2d 69 63 6f 6e 73 2f 65 73 73 65 6e 74 69 61 6c 2d 61 64 62 6c 6f 63 6b 65 72 2f 66 61 76 69 63 6f 6e 2e Data Ascii: e06<!DOCTYPE html><html><head><meta charSet="utf-8"/><title>Essential AdBlocker</title><meta name="viewport" content="width=device-width, initial-scale=1.0"/><link rel="icon" type="image/x-icon" href="/images/extension-icons/essential-adblocker/favicon.
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 37 62 37 64 37 31 34 62 31 33 2e 6a 73 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 66 72 61 6d 65 77 6f 72 6b 2d 32 63 37 39 65 32 61 36 34 61 62 64 62 30 38 62 2e 6a 73 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 6d 61 69 6e 2d 33 34 39 63 61 32 33 63 39 37 36 32 65 63 30 32 2e 6a 73 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 5f 61 70 70 2d 37 34 33 32 62 65 37 37 61 38 34 35 66 65 37 32 Data Ascii: 7b7d714b13.js" defer=""></script><script src="/_next/static/chunks/framework-2c79e2a64abdb08b.js" defer=""></script><script src="/_next/static/chunks/main-349ca23c9762ec02.js" defer=""></script><script src="/_next/static/chunks/pages/_app-7432be77a845fe72
2024-01-03 13:45:51 UTC	859	IN	Data Raw: 3d 22 74 78 74 63 6c 69 63 6b 6f 6e 31 22 3e 43 6c 69 63 6b 20 6f 6e 3c 21 2d 2d 20 2d 2d 3e 20 3c 2f 73 70 61 6e 3e 3c 62 3e 49 6e 73 74 61 6c 6c 3c 2f 62 3e 3c 2f 68 32 3e 3c 68 32 3e 3c 73 70 61 6e 20 69 64 3d 22 74 78 74 73 32 22 3e 53 74 65 70 20 32 3c 21 2d 2d 20 2d 2d 3e 3a 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 69 64 3d 22 74 78 74 63 6c 69 63 6b 6f 6e 31 22 3e 43 6c 69 63 6b 20 6f 6e 3c 21 2d 2d 20 2d 2d 3e 20 3c 2f 73 70 61 6e 3e 3c 62 3e 3c 73 70 61 6e 20 69 64 3d 22 74 78 74 61 74 63 22 3e 3c 62 3e 41 64 64 20 74 6f 20 43 68 72 6f 6d 65 3c 21 2d 2d 20 2d 2d 3e 20 3c 2f 62 3e 3c 2f 73 70 61 6e 3e 3c 2f 62 3e 3c 2f 68 32 3e 3c 68 32 3e 3c 73 70 61 6e 20 69 64 3d 22 74 78 74 73 33 22 3e 53 74 65 70 20 33 3c 21 2d 2d 20 2d 2d 3e 3a 3c 2f 73 70 61 Data Ascii: ="txtclickon1">Click on... --> </span><b>Install</b></h2><h2><span id="txts2">Step 2... -->:</span><span id="txtclickon1">Click on... --> </span><b><span id="txtatc"><b>Add to Chrome... --> </b></span></b></h2><h2><span id="txts3">Step 3... -->:</spa
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 39 63 37 0d 0a 3c 21 2d 2d 2f 24 2d 2d 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 69 64 3d 22 5f 5f 4e 45 58 54 5f 44 41 54 41 5f 5f 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 3e 7b 22 70 72 6f 70 73 22 3a 7b 22 70 61 67 65 50 72 6f 70 73 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 66 75 74 75 72 65 66 6f 72 67 65 6c 61 62 73 2e 6e 65 74 22 2c 22 68 65 61 64 65 72 73 22 3a 7b 22 63 6f 6e 6e 65 63 74 69 6f 6e 22 3a 22 75 70 67 72 61 64 65 22 2c 22 63 66 2d 69 70 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 68 6f 73 74 22 3a 22 66 75 74 75 72 65 66 6f 72 67 65 6c 61 62 73 2e 6e 65 74 22 2c 22 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 22 3a 22 67 7a 69 70 22 2c 22 78 2d 66 6f 72 77 61 72 64 65 64 2d 66 6f 72 22 3a 22 32 31 32 Data Ascii: 9c7.../$--></div><script id="__NEXT_DATA__" type="application/json">{"props":{"pageProps":{"domain":"futureforgelabs.net","headers":{"connection":"upgrade","cf-ipcountry":"US","host":"futureforgelabs.net","accept-encoding":"gzip","x-forwarded-for":"212
2024-01-03 13:45:51 UTC	1141	IN	Data Raw: 6b 6f 65 64 6d 62 6e 6f 70 6b 69 67 6b 66 6f 66 6b 6b 6e 62 6d 66 61 6d 62 62 6c 6a 6f 6c 67 22 2c 22 6c 6f 63 61 74 69 6f 6e 53 65 61 72 63 68 22 3a 22 3f 65 78 74 65 6e 73 69 6f 6e 3d 65 73 73 65 6e 74 69 61 6c 5f 61 64 62 6c 6f 63 6b 65 72 5c 75 30 30 32 36 70 72 6f 6d 6f 3d 6f 72 61 6e 67 65 5c 75 30 30 32 36 62 67 3d 6e 6f 6e 65 5c 75 30 30 32 36 63 6c 6b 5f 64 6f 6d 61 69 6e 3d 61 64 2d 62 6c 6f 63 6b 69 6e 67 32 34 2e 6e 65 74 5c 75 30 30 32 36 66 6c 6f 77 3d 62 69 6e 6f 6d 5c 75 30 30 32 36 63 61 6d 70 61 69 67 6e 49 64 3d 31 30 36 36 30 5c 75 30 30 32 36 74 72 61 66 66 69 63 73 6f 75 72 63 65 3d 32 31 5c 75 30 30 32 36 73 72 63 3d 36 5f 33 30 35 32 37 32 37 2d 33 36 35 32 33 30 30 32 36 35 2d 30 5c 75 30 30 32 36 63 69 64 3d 30 37 65 61 38 38 72 Data Ascii: koedmbnopkigkfofkknbmfambbljolg","locationSearch":"?extension=essential_adblocker\u0026promo=orange\u0026bg=none\u0026clk_domain=ad-blocking24.net\u0026flow=binom\u0026campaignId=10660\u0026trafficsource=21\u0026src=6_3052727-3652300265-0\u0026cid=07ea88r
2024-01-03 13:45:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://welcomewinner.com/?action=register&sub_id=RADIASI-CUBLUK

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Windows Analysis Report
https://welcomewinner.com/?action=register&sub_id=RADIASI-CUBLUK

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:51 UTC	1160	OUT	GET /_next/static/css/eaabcd84b27bb7b4.css HTTP/1.1 Host: futureforgelabs.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
2024-01-03 13:45:51 UTC	865	IN	HTTP/1.1 200 OK Date: Wed, 03 Jan 2024 13:45:51 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000, immutable Last-Modified: Mon, 18 Dec 2023 08:09:16 GMT ETag: W/"9e79-18c7bf8dd99" Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: DENY X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1402525 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=72rLEW%2FpSzbXwdA8dMdQzMV5cUruL9hV1SbcJm0Wb%2F7dW2TuCI2zIEuQ75CFcKxU5cdFjsDe2j0Ze%2FO8OA35dEh4%2BvBZIx7tip1LklmsuvrH0Ybp6ebUYK1iPXHTWIj8fhwirzCp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf435c69e901-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:51 UTC	504	IN	Data Raw: 37 63 34 66 0d 0a 62 6f 64 79 2c 68 74 6d 6c 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 7d 23 5f 5f 6e 65 78 74 2c 62 6f 64 79 2c 68 74 6d 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 62 67 2d 69 6d 61 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 2e 74 65 78 74 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 75 6e 73 65 74 7d 2e 63 68 72 6f 6d 65 2d 62 72 6f 77 73 65 72 2d 69 63 6f 6e 2c 2e 63 68 72 6f 6d 65 2d 73 68 6f 77 2c 2e 63 68 72 6f 6d 65 2d 73 68 6f 77 2d 62 6c 6f 63 6b 2c 2e 63 68 72 6f 6d 65 2d 73 68 6f 77 2d 66 6c 65 78 2c 2e 63 68 72 6f 6d 65 2d Data Ascii: 7c4fbody,html{min-height:100%}#__next,body,html{height:100%}.bg-image{background-repeat:no-repeat}.text-button{border:none;outline:none;cursor:pointer;background-color:unset}.chrome-browser-icon,.chrome-show,.chrome-show-block,.chrome-show-flex,.chrome-
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 6c 65 78 2c 2e 73 61 66 61 72 69 2d 73 68 6f 77 2c 2e 73 61 66 61 72 69 2d 73 68 6f 77 2d 62 6c 6f 63 6b 2c 2e 73 61 66 61 72 69 2d 73 68 6f 77 2d 66 6c 65 78 2c 2e 73 61 66 61 72 69 2d 73 68 6f 77 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 68 72 6f 6d 65 20 2e 63 68 72 6f 6d 65 2d 62 72 6f 77 73 65 72 2d 69 63 6f 6e 2c 2e 63 68 72 6f 6d 65 20 2e 63 68 72 6f 6d 65 2d 73 68 6f 77 2c 2e 65 64 67 65 20 2e 65 64 67 65 2d 62 72 6f 77 73 65 72 2d 69 63 6f 6e 2c 2e 65 64 67 65 20 2e 65 64 67 65 2d 73 68 6f 77 2c 2e 66 69 72 65 66 6f 78 20 2e 66 69 72 65 66 6f 78 2d 73 68 6f 77 2c 2e 6f 70 65 72 61 20 2e 6f 70 65 72 61 2d 73 68 6f 77 2c 2e 73 61 66 61 72 69 20 2e 73 61 66 61 72 69 2d 73 68 6f Data Ascii: lex,.safari-show,.safari-show-block,.safari-show-flex,.safari-show-inline-flex{display:none!important}.chrome .chrome-browser-icon,.chrome .chrome-show,.edge .edge-browser-icon,.edge .edge-show,.firefox .firefox-show,.opera .opera-show,.safari .safari-sho
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 50 79 78 63 56 53 72 6b 7a 30 75 4c 72 6e 56 56 72 79 71 36 2f 6e 54 45 47 63 32 62 74 54 6b 73 7a 47 31 2b 62 74 39 2f 4c 69 36 76 47 2b 52 56 44 72 5a 47 54 58 48 79 58 7a 31 74 6e 35 34 4f 44 61 63 48 62 4d 48 79 2f 2b 37 71 4c 2f 2f 50 44 39 34 6d 7a 39 33 31 54 71 6e 6b 48 74 5a 31 58 30 71 4a 2f 33 73 6b 58 73 61 45 50 6f 69 42 6c 4d 77 6f 62 67 5a 54 44 68 56 79 50 7a 34 71 58 66 4f 69 62 4c 50 30 48 6e 62 33 48 58 32 38 2b 49 72 4d 6e 52 68 6f 72 34 30 39 48 73 64 33 72 4a 47 68 2f 6f 6f 61 62 6c 52 30 33 2f 39 4d 48 2f 2b 65 44 72 76 35 33 38 78 30 64 4f 78 6f 6a 37 31 43 4f 4d 30 4b 33 4e 6f 31 72 4e 6b 69 6e 33 37 64 62 6a 77 6f 66 65 73 45 78 51 73 6f 48 75 7a 56 71 78 7a 75 63 41 6a 45 64 71 55 6a 75 31 79 64 6a 5a 33 75 4b 6b 73 79 46 54 69 Data Ascii: PyxcVSrkz0uLrnVVryq6/nTEGc2btTkszG1+bt9/Li6vG+RVDrZGTXHyXz1tn54ODacHbMHy/+7qL//PD94mz931TqnkHtZ1X0qJ/3skXsaEPoiBlMwobgZTDhVyPz4qXfOibLP0Hnb3HX28+IrMnRhor409Hsd3rJGh/ooablR03/9MH/+eDrv538x0dOxoj71COM0K3No1rNkin37dbjwofesExQsoHuzVqxzucAjEdqUju1ydjZ3uKksyFTi
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 63 61 7a 69 61 54 72 4b 76 44 34 6f 6a 6d 34 59 49 4f 42 4a 54 34 4b 4f 4c 50 6f 35 72 36 69 4c 67 77 4e 48 47 44 67 30 61 54 61 4d 6a 47 6f 71 48 49 78 69 69 7a 6b 69 57 6c 5a 38 38 49 38 34 51 54 2b 6b 34 73 47 46 6b 57 51 41 66 34 53 4e 54 51 53 57 79 6a 47 32 56 45 68 58 2b 71 45 71 67 41 7a 37 59 34 45 30 4b 4b 31 52 2f 48 59 36 6f 75 42 59 57 5a 46 6e 35 76 4c 44 74 66 33 37 31 35 43 6c 4c 35 2b 31 64 76 61 6b 6c 6e 45 67 64 53 42 76 58 2b 56 44 59 58 6c 75 39 5a 4d 6b 50 4a 30 2b 5a 75 33 31 35 31 59 6a 4b 6a 65 4e 6a 6a 76 50 38 45 6b 36 7a 64 4e 37 55 79 68 46 6c 31 62 55 4c 4e 73 55 5a 70 32 4c 6a 5a 42 43 6e 67 65 42 55 6c 34 77 64 57 37 51 78 48 65 66 75 53 47 30 66 5a 2f 58 53 4b 61 43 6c 63 7a 6c 4e 57 55 6e 74 32 4b 4b 69 6f 74 66 66 4f 77 Data Ascii: caziaTrKvD4ojm4YIOBJT4KOLPo5r6iLgwNHGDg0aTaMjGoqHIxiizkiWlZ88I84QT+k4sGFkWQAf4SNTQSWyjG2VEhX+qEqgAz7Y4E0KK1R/HY6ouBYWZFn5vLDtf3715ClL5+1dvaklnEgdSBvX+VDYXlu9ZMkPJ0+Zu3151YjKjeNjjvP8Ek6zdN7UyhFl1bULNsUZp2LjZBCngeBUl4wdW7QxHefuSG0fZ/XSKaClczlNWUnt2KKiotffOw
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 70 32 76 33 57 32 37 2b 78 71 52 4a 48 4b 5a 2b 38 61 74 65 71 74 58 6b 4e 63 63 5a 48 41 4d 63 54 74 51 78 39 38 74 66 36 4e 47 6a 52 33 31 39 2f 66 45 2f 49 38 32 36 6d 76 4b 38 30 79 33 67 6e 45 50 69 49 59 7a 52 56 54 66 56 31 2f 2f 78 31 54 2f 35 4e 43 75 44 51 6e 31 6e 71 49 61 50 35 35 44 59 43 45 4a 45 72 37 70 78 38 78 39 47 65 54 53 2f 61 49 62 7a 6d 55 2f 6b 78 69 55 36 59 59 69 6b 62 2b 61 56 49 30 33 50 6e 7a 66 42 61 66 68 55 74 36 36 78 6f 76 47 49 63 67 66 30 76 61 48 6e 79 70 37 76 6e 45 37 48 36 66 66 4a 37 68 31 4a 48 49 57 31 2b 34 74 66 2b 74 6d 77 56 4a 79 47 54 33 66 72 47 71 4e 39 30 35 7a 6f 59 2b 64 33 71 51 68 77 47 76 72 31 7a 59 30 76 6a 46 2b 37 75 31 2f 2f 6c 55 37 46 69 4e 50 77 39 57 34 64 59 37 64 72 57 69 6f 4d 41 2f 70 Data Ascii: p2v3W27+xqRJHKZ+8ateqtXkNccZHAMcTtQx98tf6NGjR319/fE/I826mvK80y3gnEPiIYzRVTfV1//x1T/5NCuDQn1nqIaP55DYCEJEr7px8x9GeTS/aIbzmU/kxiU6YYikb+aVI03PnzfBafhUt66xovGIcgf0vaHnyp7vnE7H6ffJ7h1JHIW1+4tf+tmwVJyGT3frGqN905zoY+d3qQhwGvr1zY0vjF+7u1//lU7FiNPw9W4dY7drWioMA/p
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 61 64 62 6c 6f 63 6b 65 72 2d 6c 6f 67 6f 2d 66 75 6c 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 61 67 65 73 2f 65 78 74 65 6e 73 69 6f 6e 2d 69 63 6f 6e 73 2f 6f 72 69 67 69 6e 2d 61 64 62 6c 6f 63 6b 65 72 2f 6c 6f 67 6f 2d 66 75 6c 6c 2e 73 76 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 7d 2e 79 74 75 62 65 5f 61 64 73 6b 69 70 70 65 72 2d 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 61 67 65 73 2f 65 78 74 65 6e 73 69 6f 6e 2d 69 63 6f 6e 73 2f 79 74 75 62 65 2d 61 64 73 6b 69 70 70 65 Data Ascii: adblocker-logo-full{background-repeat:no-repeat;background-image:url(/images/extension-icons/origin-adblocker/logo-full.svg);background-size:100%}.ytube_adskipper-logo{background-repeat:no-repeat;background-image:url(/images/extension-icons/ytube-adskippe
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 65 6d 65 2d 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 61 67 65 73 2f 65 78 74 65 6e 73 69 6f 6e 2d 69 63 6f 6e 73 2f 61 64 2d 73 75 70 72 65 6d 65 2f 6c 6f 67 6f 2e 73 76 67 29 7d 2e 61 64 5f 73 75 70 72 65 6d 65 2d 6c 6f 67 6f 2c 2e 61 64 5f 73 75 70 72 65 6d 65 2d 6c 6f 67 6f 2d 66 75 6c 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 7d 2e 61 64 5f 73 75 70 72 65 6d 65 2d 6c 6f 67 6f 2d 66 75 6c 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 61 67 65 73 2f 65 78 74 65 6e 73 69 6f 6e 2d 69 63 6f 6e 73 2f 61 64 2d 73 75 70 72 65 6d 65 2f 6c 6f 67 6f 2d 66 75 6c 6c 2e 73 76 67 29 Data Ascii: eme-logo{background-image:url(/images/extension-icons/ad-supreme/logo.svg)}.ad_supreme-logo,.ad_supreme-logo-full{background-repeat:no-repeat;background-size:100%}.ad_supreme-logo-full{background-image:url(/images/extension-icons/ad-supreme/logo-full.svg)
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 6c 6f 63 6b 2f 6c 6f 67 6f 2d 66 75 6c 6c 2e 73 76 67 29 7d 2e 65 6c 69 74 65 5f 61 64 62 2d 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 61 67 65 73 2f 65 78 74 65 6e 73 69 6f 6e 2d 69 63 6f 6e 73 2f 65 6c 69 74 65 2d 61 64 62 6c 6f 63 6b 65 72 2f 6c 6f 67 6f 2e 73 76 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 7d 2e 65 6c 69 74 65 5f 61 64 62 2d 6c 6f 67 6f 2d 66 75 6c 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 61 67 65 73 2f 65 78 74 65 6e 73 69 6f 6e 2d 69 63 6f 6e 73 2f 65 6c 69 74 65 Data Ascii: lock/logo-full.svg)}.elite_adb-logo{background-repeat:no-repeat;background-image:url(/images/extension-icons/elite-adblocker/logo.svg);background-size:100%}.elite_adb-logo-full{background-repeat:no-repeat;background-image:url(/images/extension-icons/elite
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 6f 76 4b 69 61 52 58 35 38 30 6d 36 43 6d 78 38 55 41 2f 47 66 56 76 34 33 64 66 65 4a 76 74 50 4c 78 37 4d 32 2f 6d 2b 4d 73 38 34 4b 39 55 31 6b 4c 76 4b 4f 46 31 33 45 44 44 6f 68 4a 61 7a 45 6c 4e 6b 79 77 32 78 73 34 62 34 58 74 47 62 47 4e 55 43 65 38 6c 75 43 55 38 74 48 75 73 2f 4f 6e 7a 6f 69 65 68 43 6f 54 32 32 66 6f 58 73 2f 41 41 2b 46 44 46 46 2f 4a 68 50 78 4f 39 5a 38 54 2b 62 75 62 4e 74 6d 62 75 69 42 38 44 70 7a 7a 61 2b 6d 79 61 7a 68 6b 43 4e 51 49 44 55 63 77 46 62 70 2f 50 52 50 2b 69 53 6e 30 47 53 54 30 43 50 35 52 79 38 68 69 37 54 47 55 36 68 77 42 68 56 37 59 6d 35 70 6d 7a 72 37 4d 31 2f 77 48 32 77 37 32 62 76 37 37 45 49 71 41 2b 51 6b 38 34 4f 39 44 56 61 70 73 43 38 56 65 48 4a 73 32 63 50 64 45 57 5a 77 65 57 39 6b 6d 5a Data Ascii: ovKiaRX580m6Cmx8UA/GfVv43dfeJvtPLx7M2/m+Ms84K9U1kLvKOF13EDDohJazElNkyw2xs4b4XtGbGNUCe8luCU8tHus/OnzoiehCoT22foXs/AA+FDFF/JhPxO9Z8T+bubNtmbuiB8Dpzza+myazhkCNQIDUcwFbp/PRP+iSn0GST0CP5Ry8hi7TGU6hwBhV7Ym5pmzr7M1/wH2w72bv77EIqA+Qk84O9DVapsC8VeHJs2cPdEWZweW9kmZ
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 64 72 4e 67 34 47 77 51 2b 44 5a 4e 45 4f 2b 2b 48 7a 31 41 47 30 52 47 78 54 65 43 43 39 37 53 77 4c 4e 38 68 75 61 51 36 73 36 46 4a 65 51 6b 63 53 49 41 69 74 39 6d 64 41 70 52 33 77 77 6e 39 50 5a 37 4a 39 39 6a 78 2b 74 44 67 67 44 52 35 74 6a 64 2b 6c 4e 74 46 30 77 61 46 4a 49 57 72 31 4c 50 53 6a 4d 77 6d 4e 33 2f 64 7a 2b 4c 69 6e 32 54 42 56 30 6c 49 75 64 64 75 59 36 69 4c 4b 79 51 4f 75 50 44 36 59 67 78 6c 72 6e 69 2f 67 2f 50 6a 62 44 2b 31 47 32 70 6f 75 58 76 43 30 66 6f 59 55 59 4a 71 37 46 43 64 30 6c 73 37 42 74 64 2f 64 33 48 34 4d 33 35 6a 64 6f 38 32 39 49 33 6e 39 41 68 50 61 70 48 4b 54 68 2f 68 37 76 33 4e 64 44 6e 73 44 6a 49 58 36 75 71 39 4e 66 58 7a 72 61 49 72 59 45 4c 47 42 53 50 59 57 30 36 37 37 5a 46 51 5a 31 79 65 4c 30 Data Ascii: drNg4GwQ+DZNEO++Hz1AG0RGxTeCC97SwLN8huaQ6s6FJeQkcSIAit9mdApR3wwn9PZ7J99jx+tDggDR5tjd+lNtF0waFJIWr1LPSjMwmN3/dz+Lin2TBV0lIudduY6iLKyQOuPD6Ygxlrni/g/PjbD+1G2pouXvC0foYUYJq7FCd0ls7Btd/d3H4M35jdo829I3n9AhPapHKTh/h7v3NdDnsDjIX6uq9NfXzraIrYELGBSPYW0677ZFQZ1yeL0

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:51 UTC	1160	OUT	GET /_next/static/css/0906ef9272eafb5e.css HTTP/1.1 Host: futureforgelabs.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
2024-01-03 13:45:51 UTC	865	IN	HTTP/1.1 200 OK Date: Wed, 03 Jan 2024 13:45:51 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000, immutable Last-Modified: Thu, 07 Dec 2023 14:55:13 GMT ETag: W/"4036-18c44c6923e" Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: DENY X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1662448 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z0%2BIOaOt7Mb%2F6pfwgNuPEiMx9kCVhT9baHRG8O1NRsV13Ob3G9xS0He9JF5z5ftHoJe0NQ4x3hVkcBHtQR%2FOICIG%2BaYSe0cVpmMkhpAXW5Sm88WvvUQvV5So7QqLHbFB1lIAm3fQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf435d346b04-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:51 UTC	504	IN	Data Raw: 34 30 33 36 0d 0a 62 6f 64 79 2c 68 74 6d 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 61 7b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 7d 2e 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 23 62 6f 78 7b 68 65 69 67 68 74 3a 38 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 73 63 72 6f 6c 6c 3b 6d 61 72 67 69 6e 3a 31 Data Ascii: 4036body,html{font-size:13px;font-family:Arial,Helvetica,sans-serif;color:#404040;min-height:100%;width:100%}body{margin:0;padding:0}a{color:#404040}.title{font-size:18px;font-weight:700;text-transform:uppercase}#box{height:80px;overflow:scroll;margin:1
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 39 39 38 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 70 61 63 69 74 79 3a 2e 35 7d 23 70 6f 70 74 78 74 7b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 36 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 30 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 77 69 64 74 68 3a 36 32 30 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 35 70 78 20 Data Ascii: {background:#000;width:100%;height:100%;z-index:998;margin:0;padding:0;opacity:.5}#poptxt{padding:15px 60px;min-height:300px;border-radius:10px;border:1px solid #fff;width:620px;display:block;margin:0 auto;background-color:#fff;z-index:999;box-shadow:5px
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 2c 23 74 78 74 63 6c 69 63 6b 6f 6e 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 74 78 74 61 65 78 2c 23 74 78 74 61 74 63 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 23 69 6e 73 74 72 75 63 74 69 6f 6e 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 35 70 78 20 30 20 2d 38 70 78 7d 23 62 61 6e 6e 65 72 7b 6d 61 72 67 69 6e 3a 31 35 70 78 20 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 73 74 65 70 73 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 70 72 69 76 61 63 79 50 6f 70 75 70 7b 7a 2d 69 6e 64 Data Ascii: ,#txtclickon2{margin-left:5px}#txtaex,#txtatc{font-weight:700;text-decoration:none}#instructions{display:none;margin:5px 0 -8px}#banner{margin:15px auto;display:block}h2{font-size:18px;font-weight:400}#steps{display:table;margin:0 auto}.privacyPopup{z-ind
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 2d 73 69 7a 65 3a 33 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 34 30 70 78 7d 2e 61 6c 65 72 74 50 6f 70 75 70 43 6f 6e 74 65 6e 74 20 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 47 6f 74 68 69 63 20 41 31 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 33 36 33 36 33 36 3b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 31 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 61 6c 65 72 74 50 6f 70 75 70 43 6f 6e 74 65 6e 74 20 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 2e 37 7d 2e 61 6c 65 72 74 50 6f 70 75 Data Ascii: -size:30px;margin:0 0 40px}.alertPopupContent button{font-family:Gothic A1,sans-serif;color:#363636;margin:0;font-size:16px;background:none;border:none;padding:8px 15px;border-radius:5px;cursor:pointer}.alertPopupContent button:hover{opacity:.7}.alertPopu
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 72 6d 3a 73 63 61 6c 65 59 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 70 78 29 20 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 72 69 67 68 74 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 20 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 72 69 67 68 74 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 72 69 67 68 74 7d 32 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 2e 31 29 20 Data Ascii: rm:scaleY(1) translateY(-10px) rotate(90deg);transform-origin:right}to{transform:scaleY(1) translateY(0) rotate(90deg);transform-origin:right}}@keyframes b{0%{transform:scaleX(1) translateX(0) rotate(0deg);transform-origin:right}25%{transform:scaleX(1.1)
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 31 35 2e 38 36 20 31 39 38 2e 37 4c 39 36 32 20 31 34 34 68 2d 36 6c 36 35 20 36 36 7a 27 2f 25 33 45 25 33 43 70 61 74 68 20 69 64 3d 27 6c 27 20 64 3d 27 4d 31 30 37 39 20 31 37 31 76 2d 35 34 68 32 30 76 35 34 7a 27 2f 25 33 45 25 33 43 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 27 61 27 20 78 31 3d 27 31 30 32 37 27 20 78 32 3d 27 31 30 32 38 27 20 79 31 3d 27 32 31 30 27 20 79 32 3d 27 37 38 27 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 27 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 27 25 33 45 25 33 43 73 74 6f 70 20 6f 66 66 73 65 74 3d 27 30 27 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 37 66 63 36 65 65 27 2f 25 33 45 25 33 43 73 74 6f 70 20 6f 66 66 73 65 74 3d 27 31 27 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 34 62 37 63 Data Ascii: 15.86 198.7L962 144h-6l65 66z'/%3E%3Cpath id='l' d='M1079 171v-54h20v54z'/%3E%3ClinearGradient id='a' x1='1027' x2='1028' y1='210' y2='78' gradientUnits='userSpaceOnUse'%3E%3Cstop offset='0' stop-color='%237fc6ee'/%3E%3Cstop offset='1' stop-color='%234b7c
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 27 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 27 25 33 45 25 33 43 73 74 6f 70 20 6f 66 66 73 65 74 3d 27 30 27 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 37 66 63 36 65 65 27 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 27 30 27 2f 25 33 45 25 33 43 73 74 6f 70 20 6f 66 66 73 65 74 3d 27 2e 36 34 27 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 64 31 65 61 66 39 27 2f 25 33 45 25 33 43 73 74 6f 70 20 6f 66 66 73 65 74 3d 27 31 27 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 66 66 66 27 2f 25 33 45 25 33 43 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 25 33 45 25 33 43 2f 64 65 66 73 25 33 45 25 33 43 75 73 65 20 66 69 6c 6c 3d 27 75 72 6c 28 25 32 33 61 29 27 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 27 25 32 33 Data Ascii: gradientUnits='userSpaceOnUse'%3E%3Cstop offset='0' stop-color='%237fc6ee' stop-opacity='0'/%3E%3Cstop offset='.64' stop-color='%23d1eaf9'/%3E%3Cstop offset='1' stop-color='%23fff'/%3E%3C/linearGradient%3E%3C/defs%3E%3Cuse fill='url(%23a)' xlink:href='%23
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 74 68 20 69 64 3d 27 6a 27 20 64 3d 27 4d 31 30 31 35 2e 38 36 20 31 39 38 2e 37 4c 39 36 32 20 31 34 34 68 2d 36 6c 36 35 20 36 36 7a 27 2f 25 33 45 25 33 43 70 61 74 68 20 69 64 3d 27 6c 27 20 64 3d 27 4d 31 30 37 39 20 31 37 31 76 2d 35 34 68 32 30 76 35 34 7a 27 2f 25 33 45 25 33 43 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 27 61 27 20 78 31 3d 27 31 30 32 37 27 20 78 32 3d 27 31 30 32 38 27 20 79 31 3d 27 32 31 30 27 20 79 32 3d 27 37 38 27 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 27 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 27 25 33 45 25 33 43 73 74 6f 70 20 6f 66 66 73 65 74 3d 27 30 27 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 37 66 63 36 65 65 27 2f 25 33 45 25 33 43 73 74 6f 70 20 6f 66 66 73 65 74 3d 27 31 27 20 73 74 6f Data Ascii: th id='j' d='M1015.86 198.7L962 144h-6l65 66z'/%3E%3Cpath id='l' d='M1079 171v-54h20v54z'/%3E%3ClinearGradient id='a' x1='1027' x2='1028' y1='210' y2='78' gradientUnits='userSpaceOnUse'%3E%3Cstop offset='0' stop-color='%237fc6ee'/%3E%3Cstop offset='1' sto
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 3d 27 31 34 34 27 20 79 32 3d 27 31 34 34 27 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 27 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 27 25 33 45 25 33 43 73 74 6f 70 20 6f 66 66 73 65 74 3d 27 30 27 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 37 66 63 36 65 65 27 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 27 30 27 2f 25 33 45 25 33 43 73 74 6f 70 20 6f 66 66 73 65 74 3d 27 2e 36 34 27 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 64 31 65 61 66 39 27 2f 25 33 45 25 33 43 73 74 6f 70 20 6f 66 66 73 65 74 3d 27 31 27 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 66 66 66 27 2f 25 33 45 25 33 43 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 25 33 45 25 33 43 2f 64 65 66 73 25 33 45 25 33 43 75 73 65 20 66 69 6c 6c 3d 27 75 72 6c 28 25 32 33 61 29 27 Data Ascii: ='144' y2='144' gradientUnits='userSpaceOnUse'%3E%3Cstop offset='0' stop-color='%237fc6ee' stop-opacity='0'/%3E%3Cstop offset='.64' stop-color='%23d1eaf9'/%3E%3Cstop offset='1' stop-color='%23fff'/%3E%3C/linearGradient%3E%3C/defs%3E%3Cuse fill='url(%23a)'
2024-01-03 13:45:51 UTC	1369	IN	Data Raw: 20 64 3d 27 4d 31 30 31 36 20 39 30 6c 2d 35 34 20 35 34 68 2d 36 6c 36 35 2e 31 34 2d 36 35 2e 31 34 7a 27 2f 25 33 45 25 33 43 70 61 74 68 20 69 64 3d 27 68 27 20 64 3d 27 4d 31 30 39 39 20 31 37 31 68 2d 37 37 76 33 39 6c 2d 35 2d 35 76 2d 33 39 68 38 32 7a 27 2f 25 33 45 25 33 43 70 61 74 68 20 69 64 3d 27 6a 27 20 64 3d 27 4d 31 30 31 35 2e 38 36 20 31 39 38 2e 37 4c 39 36 32 20 31 34 34 68 2d 36 6c 36 35 20 36 36 7a 27 2f 25 33 45 25 33 43 70 61 74 68 20 69 64 3d 27 6c 27 20 64 3d 27 4d 31 30 37 39 20 31 37 31 76 2d 35 34 68 32 30 76 35 34 7a 27 2f 25 33 45 25 33 43 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 27 61 27 20 78 31 3d 27 31 30 32 37 27 20 78 32 3d 27 31 30 32 38 27 20 79 31 3d 27 32 31 30 27 20 79 32 3d 27 37 38 27 20 67 72 61 Data Ascii: d='M1016 90l-54 54h-6l65.14-65.14z'/%3E%3Cpath id='h' d='M1099 171h-77v39l-5-5v-39h82z'/%3E%3Cpath id='j' d='M1015.86 198.7L962 144h-6l65 66z'/%3E%3Cpath id='l' d='M1079 171v-54h20v54z'/%3E%3ClinearGradient id='a' x1='1027' x2='1028' y1='210' y2='78' gra

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:51 UTC	569	OUT	GET /sxp/i/8c3dd651469c9787e366b6d88eb7fa51.js HTTP/1.1 Host: euob.thatmonkeybites3.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://futureforgelabs.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-03 13:45:52 UTC	504	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 102253 Connection: close Server: Caddy Date: Wed, 03 Jan 2024 13:45:52 GMT Cache-Control: max-age=43200 Expires: Wed, 03 Jan 2024 22:19:56 GMT ETag: "18f6d-tFKRPoim4uiMLaGgw2Lq6cqTxu4" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ea730cf145a958de62264b3d66d50d70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW57-P3 X-Amz-Cf-Id: nQUVzEbNIO2mYDl_RukFsUuA9klu4Ragjrre8G38ERvsjgs9zouhgQ== Age: 12356
2024-01-03 13:45:52 UTC	2825	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 6e 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=fun
2024-01-03 13:45:52 UTC	16384	IN	Data Raw: 62 3d 33 32 36 36 34 38 39 39 31 37 2c 77 3d 33 37 34 37 36 31 33 39 33 2c 53 3d 34 32 39 34 39 30 31 37 36 30 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 33 29 3b 72 65 74 75 72 6e 28 72 3d 32 35 36 2a 28 72 3d 32 35 36 2a 28 72 3d 32 35 36 2a 72 2b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 32 29 29 2b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 31 29 29 2b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 29 29 3e 3e 3e 30 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3c 3c 6e 3e 3e 3e 30 7c 74 3e 3e 3e 33 32 2d 6e 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 36 35 35 33 35 26 74 2c 65 3d 36 35 35 33 35 26 6e 3b 72 65 74 75 72 6e Data Ascii: b=3266489917,w=374761393,S=4294901760,C=function(t,n){var r=t.charCodeAt(n+3);return(r=256(r=256(r=256*r+t.charCodeAt(n+2))+t.charCodeAt(n+1))+t.charCodeAt(n))>>>0},I=function(t,n){return t<<n>>>0\|t>>>32-n},E=function(t,n){var r=65535&t,e=65535&n;return
2024-01-03 13:45:52 UTC	16384	IN	Data Raw: 29 7c 7c 22 22 7d 2c 72 3d 78 2e 72 6e 28 74 29 3b 28 72 3d 72 2e 6c 65 6e 67 74 68 26 26 72 5b 30 5d 29 7c 7c 28 72 3d 28 72 3d 78 2e 72 6e 28 22 63 74 5f 63 6c 69 63 6b 74 72 75 65 22 29 29 2e 6c 65 6e 67 74 68 26 26 72 5b 30 5d 29 3b 76 61 72 20 65 3d 7b 7d 2c 69 3d 78 2e 6e 6e 28 22 63 68 22 2c 72 2e 73 72 63 29 3b 72 65 74 75 72 6e 20 65 2e 63 68 3d 69 3f 63 28 65 2e 63 68 29 3a 6e 28 22 63 68 22 29 2c 65 2e 75 76 69 64 3d 6e 28 22 64 61 74 61 2d 75 76 69 64 22 29 2c 65 2e 74 70 63 3d 6e 28 22 74 70 63 22 29 2c 65 2e 65 78 74 3d 6e 28 22 65 78 74 22 29 2c 65 2e 6a 73 6f 6e 70 3d 6e 28 22 6a 73 6f 6e 70 22 29 2c 65 2e 61 64 54 65 73 74 3d 6e 28 22 64 61 74 61 2d 61 64 74 65 73 74 22 29 2c 65 2e 61 75 74 6f 52 65 66 72 65 73 68 3d 6e 28 22 64 61 74 61 Data Ascii: )\|\|""},r=x.rn(t);(r=r.length&&r[0])\|\|(r=(r=x.rn("ct_clicktrue")).length&&r[0]);var e={},i=x.nn("ch",r.src);return e.ch=i?c(e.ch):n("ch"),e.uvid=n("data-uvid"),e.tpc=n("tpc"),e.ext=n("ext"),e.jsonp=n("jsonp"),e.adTest=n("data-adtest"),e.autoRefresh=n("data
2024-01-03 13:45:52 UTC	16384	IN	Data Raw: 72 65 74 75 72 6e 20 73 2e 77 69 64 74 68 3c 3d 31 7c 7c 73 2e 68 65 69 67 68 74 3c 3d 31 7d 2c 64 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 61 76 61 69 6c 48 65 69 67 68 74 3c 3d 31 7c 7c 73 2e 61 76 61 69 6c 57 69 64 74 68 3c 3d 31 7d 2c 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6f 2e 42 28 59 28 22 63 65 66 51 75 65 72 79 22 29 29 2c 6e 3d 6f 2e 42 28 59 28 22 63 65 66 51 75 65 72 79 43 61 6e 63 65 6c 22 29 29 2c 72 3d 21 31 3b 72 65 74 75 72 6e 28 74 7c 7c 6e 29 26 26 28 72 3d 21 30 2c 61 74 28 34 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 5b 2b 74 2c 2b 6e 5d 29 29 29 2c 72 7d 2c 5f 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 52 5b 77 28 54 2c 4f 2b 44 29 5d 28 6e 61 76 69 67 61 74 6f 72 2c Data Ascii: return s.width<=1\|\|s.height<=1},dt=function(){return s.availHeight<=1\|\|s.availWidth<=1},ht=function(){var t=o.B(Y("cefQuery")),n=o.B(Y("cefQueryCancel")),r=!1;return(t\|\|n)&&(r=!0,at(4,JSON.stringify([+t,+n]))),r},_t=function(){var t=R[w(T,O+D)](navigator,
2024-01-03 13:45:52 UTC	16384	IN	Data Raw: 5d 2c 65 3d 5b 5d 2c 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 5b 74 5b 69 5d 5d 3d 21 30 3b 66 6f 72 28 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 5b 6e 5b 69 5d 5d 3f 64 65 6c 65 74 65 20 72 5b 6e 5b 69 5d 5d 3a 72 5b 6e 5b 69 5d 5d 3d 21 30 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 72 29 65 2e 70 75 73 68 28 61 29 3b 72 65 74 75 72 6e 20 65 7d 76 61 72 20 72 3d 50 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2c 65 3d 6e 28 74 28 75 29 2c 74 28 72 29 29 2e 73 6c 69 63 65 28 30 2c 35 30 29 2c 69 3d 6e 28 74 28 6c 2c 21 30 29 2c 74 28 72 2e 6e 61 76 69 67 61 74 6f 72 2c 21 30 29 29 2e 73 6c 69 63 65 28 30 2c 35 30 29 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 77 3a 65 2c 6e 3a 69 2c 64 3a 5b 5d Data Ascii: ],e=[],i=0;i<t.length;i++)r[t[i]]=!0;for(i=0;i<n.length;i++)r[n[i]]?delete r[n[i]]:r[n[i]]=!0;for(var a in r)e.push(a);return e}var r=P.contentWindow,e=n(t(u),t(r)).slice(0,50),i=n(t(l,!0),t(r.navigator,!0)).slice(0,50);return JSON.stringify({w:e,n:i,d:[]
2024-01-03 13:45:52 UTC	16384	IN	Data Raw: 6e 29 2c 43 74 2e 65 6e 61 62 6c 65 56 65 72 74 65 78 41 74 74 72 69 62 41 72 72 61 79 28 30 29 3b 76 61 72 20 65 3d 43 74 2e 67 65 74 55 6e 69 66 6f 72 6d 4c 6f 63 61 74 69 6f 6e 28 6e 2c 22 74 22 29 2c 69 3d 43 74 2e 63 72 65 61 74 65 42 75 66 66 65 72 28 29 3b 72 65 74 75 72 6e 20 43 74 2e 62 69 6e 64 42 75 66 66 65 72 28 33 34 39 36 32 2c 69 29 2c 43 74 2e 62 75 66 66 65 72 44 61 74 61 28 33 34 39 36 32 2c 6e 65 77 20 46 6c 6f 61 74 33 32 41 72 72 61 79 28 5b 30 2c 31 2c 2d 31 2c 2d 31 2c 31 2c 2d 31 5d 29 2c 33 35 30 34 34 29 2c 43 74 2e 76 65 72 74 65 78 41 74 74 72 69 62 50 6f 69 6e 74 65 72 28 30 2c 32 2c 35 31 32 36 2c 21 31 2c 30 2c 30 29 2c 43 74 2e 63 6c 65 61 72 28 31 36 33 38 34 29 2c 43 74 2e 75 6e 69 66 6f 72 6d 31 66 28 65 2c 33 2e 36 35 Data Ascii: n),Ct.enableVertexAttribArray(0);var e=Ct.getUniformLocation(n,"t"),i=Ct.createBuffer();return Ct.bindBuffer(34962,i),Ct.bufferData(34962,new Float32Array([0,1,-1,-1,1,-1]),35044),Ct.vertexAttribPointer(0,2,5126,!1,0,0),Ct.clear(16384),Ct.uniform1f(e,3.65
2024-01-03 13:45:52 UTC	16384	IN	Data Raw: 26 26 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 3f 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 3a 76 6f 69 64 20 30 21 3d 3d 74 2e 72 65 74 75 72 6e 56 61 6c 75 65 26 26 28 74 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 29 3b 76 61 72 20 6e 3d 5b 5d 3b 74 72 79 7b 69 66 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 7b 76 61 72 20 72 3d 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3b 6e 2e 70 75 73 68 28 61 2e 5f 6e 28 72 2c 22 6f 70 61 63 69 74 79 22 29 2c 61 2e 5f 6e 28 72 2c 22 7a 49 6e 64 65 78 22 29 29 7d 7d 63 61 74 63 68 28 74 29 7b 7d 6d 28 22 68 69 64 61 22 2c 7b 69 74 3a 74 2e 69 73 54 72 75 73 74 65 64 2c 73 74 3a 6e 2e 6a 6f 69 6e 28 22 2c 22 29 7d 29 7d Data Ascii: &&t.stopPropagation?(t.preventDefault(),t.stopPropagation()):void 0!==t.returnValue&&(t.returnValue=!1);var n=[];try{if(t.currentTarget){var r=t.currentTarget;n.push(a._n(r,"opacity"),a._n(r,"zIndex"))}}catch(t){}m("hida",{it:t.isTrusted,st:n.join(",")})}
2024-01-03 13:45:52 UTC	1124	IN	Data Raw: 65 73 73 6f 72 28 29 3b 74 72 79 7b 69 2e 74 79 70 65 3d 22 74 72 69 61 6e 67 6c 65 22 2c 69 2e 66 72 65 71 75 65 6e 63 79 2e 76 61 6c 75 65 3d 31 65 34 2c 61 2e 74 68 72 65 73 68 6f 6c 64 2e 76 61 6c 75 65 3d 2d 35 30 2c 61 2e 6b 6e 65 65 2e 76 61 6c 75 65 3d 34 30 2c 61 2e 61 74 74 61 63 6b 2e 76 61 6c 75 65 3d 30 7d 63 61 74 63 68 28 74 29 7b 7d 69 2e 63 6f 6e 6e 65 63 74 28 61 29 2c 61 2e 63 6f 6e 6e 65 63 74 28 65 29 2c 61 2e 63 6f 6e 6e 65 63 74 28 72 2e 64 65 73 74 69 6e 61 74 69 6f 6e 29 2c 69 2e 73 74 61 72 74 28 30 29 2c 72 2e 73 74 61 72 74 52 65 6e 64 65 72 69 6e 67 28 29 7d 7d 2c 77 3d 7b 75 65 3a 33 36 31 2c 4a 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 75 2e 73 70 65 65 63 68 53 79 6e 74 68 65 73 69 73 3b 69 66 28 21 6e 29 Data Ascii: essor();try{i.type="triangle",i.frequency.value=1e4,a.threshold.value=-50,a.knee.value=40,a.attack.value=0}catch(t){}i.connect(a),a.connect(e),a.connect(r.destination),i.start(0),r.startRendering()}},w={ue:361,Je:function(t){var n=u.speechSynthesis;if(!n)

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:52 UTC	967	OUT	GET /images/browser-icons/available-in-chrome.svg HTTP/1.1 Host: futureforgelabs.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://futureforgelabs.net/_next/static/css/eaabcd84b27bb7b4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
2024-01-03 13:45:52 UTC	837	IN	HTTP/1.1 200 OK Date: Wed, 03 Jan 2024 13:45:52 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=14400 Last-Modified: Wed, 03 Jan 2024 06:14:17 GMT ETag: W/"5287-18ccdf557b6" Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: DENY X-Content-Type-Options: nosniff CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e8pdgyFN0jARl4xMR4ORL24FvlyInnG5RGm3bwMvPKKfWZMfp%2BWl1flre86LLoT7mqBDEzjty3DrTPJMrWCb0TZs%2FsTLwh%2FTG7kmYna0dv%2FPdtExVPYtpmc%2BoluBOC0c3iPHBLbD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf473f8f3ac2-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:52 UTC	532	IN	Data Raw: 35 32 38 37 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 30 20 34 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 2e 37 30 30 35 36 20 33 2e 33 31 30 33 39 48 33 39 2e 31 38 31 38 56 33 33 2e 38 37 37 32 43 33 39 2e 31 38 31 38 20 33 34 2e 39 38 31 38 20 33 38 2e 32 38 36 34 20 33 35 2e 38 37 37 32 20 33 37 2e 31 38 31 38 20 33 35 2e 38 37 37 32 48 33 2e 37 30 30 35 36 43 32 2e 35 39 35 39 39 20 33 35 2e 38 37 37 32 20 31 2e 37 30 30 35 36 20 33 34 2e 39 38 31 38 20 31 2e 37 30 30 35 36 20 33 33 2e 38 37 37 32 56 33 2e 33 31 30 Data Ascii: 5287<svg width="150" height="40" viewBox="0 0 150 40" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1.70056 3.31039H39.1818V33.8772C39.1818 34.9818 38.2864 35.8772 37.1818 35.8772H3.70056C2.59599 35.8772 1.70056 34.9818 1.70056 33.8772V3.310
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 2e 37 30 30 35 36 20 33 2e 33 31 30 33 39 48 33 39 2e 31 38 31 38 56 31 39 2e 35 39 33 38 48 31 2e 37 30 30 35 36 56 33 2e 33 31 30 33 39 5a 22 20 66 69 6c 6c 3d 22 23 32 31 32 31 32 31 22 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 30 2e 30 35 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 2e 37 30 30 35 36 20 31 39 2e 33 35 34 32 48 33 39 2e 31 38 31 38 56 31 39 2e 35 35 39 34 48 31 2e 37 30 30 35 36 56 31 39 2e 33 35 34 32 5a 22 20 66 69 6c 6c 3d 22 23 32 31 32 31 32 31 22 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 30 2e 30 32 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 2e 37 30 30 35 36 20 31 39 2e 35 39 33 37 48 33 39 2e 31 38 31 38 56 31 39 2e 37 39 38 39 48 31 2e 37 30 30 35 36 56 31 39 2e 35 39 33 37 5a 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 Data Ascii: .70056 3.31039H39.1818V19.5938H1.70056V3.31039Z" fill="#212121" fill-opacity="0.05"/><path d="M1.70056 19.3542H39.1818V19.5594H1.70056V19.3542Z" fill="#212121" fill-opacity="0.02"/><path d="M1.70056 19.5937H39.1818V19.7989H1.70056V19.5937Z" fill="white"
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 20 33 35 2e 38 37 37 32 48 33 36 2e 36 33 30 39 43 33 38 2e 30 32 35 34 20 33 35 2e 38 37 37 32 20 33 39 2e 31 38 31 38 20 33 34 2e 37 31 34 31 20 33 39 2e 31 38 31 38 20 33 33 2e 33 31 31 35 56 33 2e 33 31 30 33 39 48 31 2e 37 30 30 35 36 5a 4d 32 34 2e 36 39 32 37 20 31 30 2e 31 35 32 32 48 31 36 2e 31 38 39 37 43 31 35 2e 32 33 37 33 20 31 30 2e 31 35 32 32 20 31 34 2e 34 38 39 31 20 39 2e 33 39 39 35 36 20 31 34 2e 34 38 39 31 20 38 2e 34 34 31 37 32 43 31 34 2e 34 38 39 31 20 37 2e 34 38 33 38 37 20 31 35 2e 32 33 37 33 20 36 2e 37 33 31 32 38 20 31 36 2e 31 38 39 37 20 36 2e 37 33 31 32 38 48 32 34 2e 36 39 32 37 43 32 35 2e 36 34 35 20 36 2e 37 33 31 32 38 20 32 36 2e 33 39 33 33 20 37 2e 34 38 33 38 37 20 32 36 2e 33 39 33 33 20 38 2e 34 34 31 37 Data Ascii: 35.8772H36.6309C38.0254 35.8772 39.1818 34.7141 39.1818 33.3115V3.31039H1.70056ZM24.6927 10.1522H16.1897C15.2373 10.1522 14.4891 9.39956 14.4891 8.44172C14.4891 7.48387 15.2373 6.73128 16.1897 6.73128H24.6927C25.645 6.73128 26.3933 7.48387 26.3933 8.4417
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 37 37 20 32 39 2e 31 39 36 20 32 34 2e 34 39 38 35 20 32 35 2e 38 38 37 37 20 32 30 2e 34 34 31 31 20 32 35 2e 38 38 37 37 43 31 36 2e 33 38 33 37 20 32 35 2e 38 38 37 37 20 31 33 2e 30 39 34 35 20 32 39 2e 31 39 36 20 31 33 2e 30 39 34 35 20 33 33 2e 32 37 36 39 43 31 33 2e 30 39 34 35 20 33 37 2e 33 35 37 37 20 31 36 2e 33 38 33 37 20 34 30 2e 36 36 36 20 32 30 2e 34 34 31 31 20 34 30 2e 36 36 36 5a 22 20 66 69 6c 6c 3d 22 23 46 31 46 31 46 31 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 30 2e 34 34 31 31 20 33 39 2e 31 39 35 31 43 32 33 2e 36 39 30 38 20 33 39 2e 31 39 35 31 20 32 36 2e 33 32 35 32 20 33 36 2e 35 34 35 35 20 32 36 2e 33 32 35 32 20 33 33 2e 32 37 37 43 32 36 2e 33 32 35 32 20 33 30 2e 30 30 38 35 20 32 33 2e 36 39 30 38 20 32 37 2e 33 Data Ascii: 77 29.196 24.4985 25.8877 20.4411 25.8877C16.3837 25.8877 13.0945 29.196 13.0945 33.2769C13.0945 37.3577 16.3837 40.666 20.4411 40.666Z" fill="#F1F1F1"/><path d="M20.4411 39.1951C23.6908 39.1951 26.3252 36.5455 26.3252 33.277C26.3252 30.0085 23.6908 27.3
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 30 33 37 20 36 30 2e 38 34 37 39 20 32 34 2e 36 35 36 34 20 35 39 2e 38 32 37 35 20 32 34 2e 36 35 36 34 43 35 39 2e 33 35 31 33 20 32 34 2e 36 35 36 34 20 35 38 2e 39 34 33 32 20 32 34 2e 38 36 31 36 20 35 38 2e 36 37 31 31 20 32 35 2e 32 33 37 39 43 35 38 2e 33 36 35 20 32 35 2e 36 31 34 32 20 35 38 2e 32 32 38 39 20 32 36 2e 30 35 38 39 20 35 38 2e 32 32 38 39 20 32 36 2e 35 37 32 31 56 32 39 2e 39 39 33 48 35 37 2e 30 37 32 35 56 32 30 2e 39 32 37 36 48 35 38 2e 32 32 38 39 5a 22 20 66 69 6c 6c 3d 22 23 35 46 36 33 36 38 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 35 2e 30 33 31 34 20 32 39 2e 39 39 33 32 48 36 33 2e 38 37 35 56 32 33 2e 37 36 37 32 48 36 34 2e 39 39 37 34 56 32 34 2e 37 39 33 35 48 36 35 2e 30 33 31 34 43 36 35 2e 31 33 33 34 20 32 Data Ascii: 037 60.8479 24.6564 59.8275 24.6564C59.3513 24.6564 58.9432 24.8616 58.6711 25.2379C58.365 25.6142 58.2289 26.0589 58.2289 26.5721V29.993H57.0725V20.9276H58.2289Z" fill="#5F6368"/><path d="M65.0314 29.9932H63.875V23.7672H64.9974V24.7935H65.0314C65.1334 2
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 22 20 66 69 6c 6c 3d 22 23 35 46 36 33 36 38 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 37 34 2e 39 39 37 31 20 32 39 2e 39 39 33 32 56 32 33 2e 37 36 37 32 48 37 36 2e 31 31 39 35 56 32 34 2e 36 35 36 36 48 37 36 2e 31 35 33 35 43 37 36 2e 33 32 33 35 20 32 34 2e 33 34 38 37 20 37 36 2e 35 39 35 36 20 32 34 2e 31 30 39 33 20 37 36 2e 39 36 39 38 20 32 33 2e 39 30 34 43 37 37 2e 33 34 33 39 20 32 33 2e 36 39 38 38 20 37 37 2e 36 38 34 20 32 33 2e 35 39 36 31 20 37 38 2e 30 35 38 32 20 32 33 2e 35 39 36 31 43 37 39 2e 30 31 30 35 20 32 33 2e 35 39 36 31 20 37 39 2e 36 35 36 37 20 32 34 2e 30 30 36 37 20 37 39 2e 39 39 36 39 20 32 34 2e 37 39 33 35 43 38 30 2e 35 30 37 20 32 34 2e 30 30 36 37 20 38 31 2e 32 32 31 33 20 32 33 2e 35 39 36 31 20 38 32 2e 31 33 Data Ascii: " fill="#5F6368"/><path d="M74.9971 29.9932V23.7672H76.1195V24.6566H76.1535C76.3235 24.3487 76.5956 24.1093 76.9698 23.904C77.3439 23.6988 77.684 23.5961 78.0582 23.5961C79.0105 23.5961 79.6567 24.0067 79.9969 24.7935C80.507 24.0067 81.2213 23.5961 82.13
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 34 20 38 39 2e 31 38 20 33 30 2e 31 39 38 34 20 38 38 2e 34 39 39 38 20 33 30 2e 31 39 38 34 5a 4d 39 30 2e 31 36 36 34 20 32 36 2e 31 32 37 36 43 39 30 2e 31 33 32 34 20 32 35 2e 37 38 35 35 20 38 39 2e 39 39 36 33 20 32 35 2e 34 34 33 34 20 38 39 2e 36 39 30 32 20 32 35 2e 31 30 31 33 43 38 39 2e 33 38 34 31 20 32 34 2e 37 39 33 35 20 38 38 2e 39 34 31 39 20 32 34 2e 36 32 32 34 20 38 38 2e 33 36 33 37 20 32 34 2e 36 32 32 34 43 38 37 2e 39 32 31 36 20 32 34 2e 36 32 32 34 20 38 37 2e 35 38 31 35 20 32 34 2e 37 35 39 32 20 38 37 2e 32 34 31 33 20 32 35 2e 30 33 32 39 43 38 36 2e 39 30 31 32 20 32 35 2e 33 30 36 36 20 38 36 2e 36 39 37 32 20 32 35 2e 36 34 38 37 20 38 36 2e 35 39 35 31 20 32 36 2e 31 32 37 36 48 39 30 2e 31 36 36 34 5a 22 20 66 69 6c 6c Data Ascii: 4 89.18 30.1984 88.4998 30.1984ZM90.1664 26.1276C90.1324 25.7855 89.9963 25.4434 89.6902 25.1013C89.3841 24.7935 88.9419 24.6224 88.3637 24.6224C87.9216 24.6224 87.5815 24.7592 87.2413 25.0329C86.9012 25.3066 86.6972 25.6487 86.5951 26.1276H90.1664Z" fill
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 30 39 35 39 20 31 31 34 2e 33 38 33 20 32 39 2e 38 39 30 36 43 31 31 34 2e 30 30 39 20 32 39 2e 36 38 35 34 20 31 31 33 2e 37 33 37 20 32 39 2e 34 34 35 39 20 31 31 33 2e 35 33 33 20 32 39 2e 31 33 38 48 31 31 33 2e 34 39 39 56 32 39 2e 39 39 33 33 48 31 31 32 2e 33 37 36 56 32 30 2e 39 32 37 39 48 31 31 33 2e 35 33 33 56 32 33 2e 38 30 31 35 4c 31 31 33 2e 34 39 39 20 32 34 2e 36 35 36 37 48 31 31 33 2e 35 33 33 43 31 31 33 2e 37 30 33 20 32 34 2e 33 34 38 38 20 31 31 34 2e 30 30 39 20 32 34 2e 31 30 39 34 20 31 31 34 2e 33 38 33 20 32 33 2e 39 30 34 31 43 31 31 34 2e 37 35 37 20 32 33 2e 36 39 38 38 20 31 31 35 2e 31 36 35 20 32 33 2e 35 39 36 32 20 31 31 35 2e 36 34 31 20 32 33 2e 35 39 36 32 43 31 31 36 2e 34 32 34 20 32 33 2e 35 39 36 32 20 31 31 37 Data Ascii: 0959 114.383 29.8906C114.009 29.6854 113.737 29.4459 113.533 29.138H113.499V29.9933H112.376V20.9279H113.533V23.8015L113.499 24.6567H113.533C113.703 24.3488 114.009 24.1094 114.383 23.9041C114.757 23.6988 115.165 23.5962 115.641 23.5962C116.424 23.5962 117
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 2e 32 34 20 32 31 2e 38 38 35 38 20 31 32 32 2e 37 35 20 32 31 2e 34 30 36 38 43 31 32 33 2e 32 36 20 32 30 2e 39 32 37 39 20 31 32 33 2e 39 34 20 32 30 2e 36 38 38 34 20 31 32 34 2e 37 35 37 20 32 30 2e 36 38 38 34 43 31 32 35 2e 35 30 35 20 32 30 2e 36 38 38 34 20 31 32 36 2e 31 35 31 20 32 30 2e 38 39 33 37 20 31 32 36 2e 36 32 37 20 32 31 2e 32 37 43 31 32 37 2e 31 30 33 20 32 31 2e 36 34 36 33 20 31 32 37 2e 34 30 39 20 32 32 2e 30 35 36 38 20 31 32 37 2e 35 34 36 20 32 32 2e 35 33 35 37 4c 31 32 36 2e 34 39 31 20 32 32 2e 39 38 30 34 43 31 32 36 2e 34 32 33 20 32 32 2e 37 30 36 38 20 31 32 36 2e 32 31 39 20 32 32 2e 34 33 33 31 20 31 32 35 2e 39 34 37 20 32 32 2e 31 39 33 36 43 31 32 35 2e 36 34 31 20 32 31 2e 39 35 34 32 20 31 32 35 2e 32 36 37 20 Data Ascii: .24 21.8858 122.75 21.4068C123.26 20.9279 123.94 20.6884 124.757 20.6884C125.505 20.6884 126.151 20.8937 126.627 21.27C127.103 21.6463 127.409 22.0568 127.546 22.5357L126.491 22.9804C126.423 22.7068 126.219 22.4331 125.947 22.1936C125.641 21.9542 125.267
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 2e 35 31 39 38 43 31 33 38 2e 37 36 39 20 32 35 2e 31 33 35 35 20 31 33 39 2e 30 34 32 20 32 35 2e 39 32 32 33 20 31 33 39 2e 30 34 32 20 32 36 2e 38 38 30 32 43 31 33 39 2e 30 34 32 20 32 37 2e 38 33 38 20 31 33 38 2e 37 33 35 20 32 38 2e 36 32 34 38 20 31 33 38 2e 31 35 37 20 32 39 2e 32 34 30 36 43 31 33 37 2e 35 34 35 20 32 39 2e 38 35 36 33 20 31 33 36 2e 37 39 37 20 33 30 2e 31 39 38 34 20 31 33 35 2e 38 37 38 20 33 30 2e 31 39 38 34 43 31 33 34 2e 39 36 20 33 30 2e 31 39 38 34 20 31 33 34 2e 32 31 32 20 32 39 2e 38 39 30 36 20 31 33 33 2e 36 20 32 39 2e 32 34 30 36 43 31 33 32 2e 39 38 37 20 32 38 2e 36 32 34 38 20 31 33 32 2e 37 31 35 20 32 37 2e 38 33 38 20 31 33 32 2e 37 31 35 20 32 36 2e 38 38 30 32 43 31 33 32 2e 37 31 35 20 32 35 2e 39 32 32 Data Ascii: .5198C138.769 25.1355 139.042 25.9223 139.042 26.8802C139.042 27.838 138.735 28.6248 138.157 29.2406C137.545 29.8563 136.797 30.1984 135.878 30.1984C134.96 30.1984 134.212 29.8906 133.6 29.2406C132.987 28.6248 132.715 27.838 132.715 26.8802C132.715 25.922

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:52 UTC	974	OUT	GET /images/extension-icons/essential-adblocker/logo.svg HTTP/1.1 Host: futureforgelabs.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://futureforgelabs.net/_next/static/css/eaabcd84b27bb7b4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
2024-01-03 13:45:52 UTC	839	IN	HTTP/1.1 200 OK Date: Wed, 03 Jan 2024 13:45:52 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=14400 Last-Modified: Wed, 03 Jan 2024 06:14:17 GMT ETag: W/"126c-18ccdf557be" Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: DENY X-Content-Type-Options: nosniff CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eM%2BR22GveWx7rABQD%2F6kIUudLV5myjqI4jJW2zNTFxcZXuCOZWeXnDUarkkoEghbQJC4reDtAwUA6QyC0Py6oH3Cle9jC48HTd8%2FGd%2BGezBXQEMXu%2BPgto160LYK8qo9Sc4V53%2Fm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf47785f2839-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:52 UTC	530	IN	Data Raw: 31 32 36 63 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 34 2e 32 38 30 38 20 30 2e 34 36 37 31 33 38 43 33 34 2e 30 34 33 39 20 30 2e 32 33 30 32 34 39 20 33 33 2e 37 32 32 36 20 30 2e 30 39 37 31 36 38 20 33 33 2e 33 38 37 36 20 30 2e 30 39 37 31 36 38 48 31 34 2e 36 31 34 31 43 31 34 2e 32 37 37 39 20 30 2e 30 39 37 31 36 38 20 31 33 2e 39 35 35 37 20 30 2e 32 33 31 31 35 37 20 31 33 2e 37 31 38 36 20 30 2e 34 36 39 34 37 34 4c 30 2e 35 33 37 35 36 33 20 31 33 2e 37 31 39 35 Data Ascii: 126c<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M34.2808 0.467138C34.0439 0.230249 33.7226 0.097168 33.3876 0.097168H14.6141C14.2779 0.097168 13.9557 0.231157 13.7186 0.469474L0.537563 13.7195
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 34 38 56 31 34 2e 36 31 32 33 43 34 37 2e 39 30 32 37 20 31 34 2e 32 37 37 33 20 34 37 2e 37 36 39 36 20 31 33 2e 39 35 36 20 34 37 2e 35 33 32 37 20 31 33 2e 37 31 39 31 4c 33 34 2e 32 38 30 38 20 30 2e 34 36 37 31 33 38 5a 4d 34 36 2e 38 30 39 36 20 33 32 2e 38 37 35 36 43 34 36 2e 38 30 39 36 20 33 33 2e 32 31 31 38 20 34 36 2e 36 37 35 36 20 33 33 2e 35 33 34 31 20 34 36 2e 34 33 37 32 20 33 33 2e 37 37 31 32 4c 33 33 2e 37 37 30 32 20 34 36 2e 33 36 39 33 43 33 33 2e 35 33 33 36 20 34 36 2e 36 30 34 37 20 33 33 2e 32 31 33 33 20 34 36 2e 37 33 36 38 20 33 32 2e 38 37 39 35 20 34 36 2e 37 33 36 38 48 31 35 2e 31 32 32 33 43 31 34 2e 37 38 37 33 20 34 36 2e 37 33 36 38 20 31 34 2e 34 36 36 20 34 36 2e 36 30 33 38 20 31 34 2e 32 32 39 31 20 34 36 2e 33 Data Ascii: 48V14.6123C47.9027 14.2773 47.7696 13.956 47.5327 13.7191L34.2808 0.467138ZM46.8096 32.8756C46.8096 33.2118 46.6756 33.5341 46.4372 33.7712L33.7702 46.3693C33.5336 46.6047 33.2133 46.7368 32.8795 46.7368H15.1223C14.7873 46.7368 14.466 46.6038 14.2291 46.3
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 39 20 31 30 2e 31 30 39 43 32 32 2e 38 31 37 34 20 31 30 2e 31 30 39 20 32 31 2e 39 34 35 38 20 31 30 2e 39 38 30 36 20 32 31 2e 39 34 35 38 20 31 32 2e 31 30 31 31 56 31 34 2e 30 33 31 43 32 31 2e 39 34 35 38 20 31 32 2e 39 31 30 34 20 32 31 2e 30 37 34 33 20 31 32 2e 30 33 38 39 20 31 39 2e 39 35 33 37 20 31 32 2e 30 33 38 39 43 31 38 2e 38 33 33 31 20 31 32 2e 30 33 38 39 20 31 37 2e 39 36 31 36 20 31 32 2e 39 31 30 34 20 31 37 2e 39 36 31 36 20 31 34 2e 30 33 31 56 32 34 2e 33 30 32 39 43 31 37 2e 39 36 31 36 20 32 32 2e 38 30 38 38 20 31 36 2e 37 37 38 37 20 32 31 2e 36 32 36 20 31 35 2e 32 38 34 36 20 32 31 2e 36 32 36 48 31 34 2e 30 33 39 36 56 33 32 2e 30 32 32 34 43 31 34 2e 30 33 39 36 20 33 32 2e 35 38 32 37 20 31 34 2e 32 32 36 33 20 33 33 2e Data Ascii: 9 10.109C22.8174 10.109 21.9458 10.9806 21.9458 12.1011V14.031C21.9458 12.9104 21.0743 12.0389 19.9537 12.0389C18.8331 12.0389 17.9616 12.9104 17.9616 14.031V24.3029C17.9616 22.8088 16.7787 21.626 15.2846 21.626H14.0396V32.0224C14.0396 32.5827 14.2263 33.
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 36 20 32 35 2e 39 33 30 31 20 31 32 2e 31 30 31 31 56 32 31 2e 37 35 30 35 4d 32 35 2e 38 36 37 38 20 32 31 2e 37 35 30 35 56 31 34 2e 30 33 31 43 32 35 2e 38 36 37 38 20 31 32 2e 39 31 30 34 20 32 36 2e 37 33 39 34 20 31 32 2e 30 33 38 39 20 32 37 2e 38 35 39 39 20 31 32 2e 30 33 38 39 43 32 38 2e 39 38 30 35 20 31 32 2e 30 33 38 39 20 32 39 2e 38 35 32 31 20 31 32 2e 39 31 30 34 20 32 39 2e 38 35 32 31 20 31 34 2e 30 33 31 56 32 31 2e 37 35 30 35 56 31 37 2e 39 35 33 43 32 39 2e 38 35 32 31 20 31 36 2e 38 33 32 34 20 33 30 2e 37 32 33 36 20 31 35 2e 39 36 30 39 20 33 31 2e 38 34 34 32 20 31 35 2e 39 36 30 39 43 33 32 2e 39 36 34 38 20 31 35 2e 39 36 30 39 20 33 33 2e 38 33 36 33 20 31 36 2e 38 33 32 34 20 33 33 2e 38 33 36 33 20 31 37 2e 39 35 33 56 33 Data Ascii: 6 25.9301 12.1011V21.7505M25.8678 21.7505V14.031C25.8678 12.9104 26.7394 12.0389 27.8599 12.0389C28.9805 12.0389 29.8521 12.9104 29.8521 14.031V21.7505V17.953C29.8521 16.8324 30.7236 15.9609 31.8442 15.9609C32.9648 15.9609 33.8363 16.8324 33.8363 17.953V3
2024-01-03 13:45:52 UTC	87	IN	Data Raw: 31 31 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 33 2e 35 37 38 39 20 39 2e 37 38 39 35 35 29 22 2f 3e 0a 3c 2f 63 6c 69 70 50 61 74 68 3e 0a 3c 2f 64 65 66 73 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: 11" fill="white" transform="translate(13.5789 9.78955)"/></clipPath></defs></svg>
2024-01-03 13:45:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:52 UTC	1152	OUT	GET /_next/static/chunks/928-a459b970dcaa21c2.js HTTP/1.1 Host: futureforgelabs.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
2024-01-03 13:45:52 UTC	881	IN	HTTP/1.1 200 OK Date: Wed, 03 Jan 2024 13:45:52 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000, immutable Last-Modified: Fri, 22 Dec 2023 13:08:09 GMT ETag: W/"e0e3-18c91a3f085" Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: DENY X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1038979 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G70z%2Fyn4wWMPtDwNcPV9PX8au%2BhQ3f3B4SldwWcVlu0qM%2Bft1GgGoFGiPpKZRapvhArRAr5LSgHOfIp8peO2vMv3K7fdwklJii4%2FJxGVXQOdqZBp5WKczGUpXYkPX%2BIvB9eN5Yec"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf477ee66c04-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:52 UTC	488	IN	Data Raw: 37 63 33 66 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 38 5d 2c 7b 35 36 38 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 2c 72 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 45 72 72 6f 72 29 2c 21 74 29 74 68 72 6f 77 20 6e 65 77 20 72 28 65 29 7d 72 2e 64 28 65 2c 7b 6b 47 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 7d 29 7d 2c 35 39 35 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 65 Data Ascii: 7c3f(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[928],{5687:function(t,e,r){"use strict";function n(t,e,r){if(void 0===r&&(r=Error),!t)throw new r(e)}r.d(e,{kG:function(){return n}})},5957:function(t,e,r){"use strict";function n(t,e){var r=e
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 6c 6c 28 74 68 69 73 2c 6e 29 2c 65 2e 73 65 74 28 69 2c 6f 29 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 33 29 2c 69 3d 72 28 6e 29 2c 6f 3d 65 2e 67 65 74 28 69 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 6e 29 2c 65 2e 73 65 74 28 69 2c 6f 29 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 61 3d 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 3f 69 3a 6f 3b 72 65 74 75 72 6e 20 72 3d 65 2e 63 61 63 68 65 2e 63 72 65 61 74 65 28 29 2c 6e 3d 65 2e 73 65 72 69 61 6c 69 7a 65 72 2c 61 2e 62 69 6e 64 28 74 68 69 73 2c Data Ascii: ll(this,n),e.set(i,o)),o}function o(t,e,r){var n=Array.prototype.slice.call(arguments,3),i=r(n),o=e.get(i);return void 0===o&&(o=t.apply(this,n),e.set(i,o)),o}function a(t,e){var r,n,a=1===t.length?i:o;return r=e.cache.create(),n=e.serializer,a.bind(this,
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 74 2e 74 79 70 65 3d 3d 3d 73 2e 70 6c 75 72 61 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 79 70 65 3d 3d 3d 73 2e 70 6f 75 6e 64 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 79 70 65 3d 3d 3d 73 2e 74 61 67 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 29 7b 72 65 74 75 72 6e 21 21 28 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 74 79 70 65 3d 3d 3d 75 2e 6e 75 6d 62 65 72 29 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 29 7b 72 65 74 75 72 6e 21 21 28 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 74 79 70 65 3d 3d 3d 75 2e 64 61 74 65 54 69 6d 65 29 7d 28 6e 3d 61 7c 7c 28 61 3d 7b 7d 29 29 5b 6e 2e 45 58 50 45 43 54 5f 41 Data Ascii: return t.type===s.plural}function d(t){return t.type===s.pound}function v(t){return t.type===s.tag}function T(t){return!!(t&&"object"==typeof t&&t.type===u.number)}function H(t){return!!(t&&"object"==typeof t&&t.type===u.dateTime)}(n=a\|\|(a={}))[n.EXPECT_A
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 45 4e 54 5f 53 45 4c 45 43 54 4f 52 5f 46 52 41 47 4d 45 4e 54 3d 31 38 5d 3d 22 45 58 50 45 43 54 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 5f 46 52 41 47 4d 45 4e 54 22 2c 6e 5b 6e 2e 49 4e 56 41 4c 49 44 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 3d 31 39 5d 3d 22 49 4e 56 41 4c 49 44 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 22 2c 6e 5b 6e 2e 44 55 50 4c 49 43 41 54 45 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 3d 32 30 5d 3d 22 44 55 50 4c 49 43 41 54 45 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 22 2c 6e 5b 6e 2e 44 55 50 4c 49 43 41 54 45 5f 53 45 4c 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f Data Ascii: ENT_SELECTOR_FRAGMENT=18]="EXPECT_PLURAL_ARGUMENT_SELECTOR_FRAGMENT",n[n.INVALID_PLURAL_ARGUMENT_SELECTOR=19]="INVALID_PLURAL_ARGUMENT_SELECTOR",n[n.DUPLICATE_PLURAL_ARGUMENT_SELECTOR=20]="DUPLICATE_PLURAL_ARGUMENT_SELECTOR",n[n.DUPLICATE_SELECT_ARGUMENT_
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 6d 75 6d 53 69 67 6e 69 66 69 63 61 6e 74 44 69 67 69 74 73 3d 72 2e 6c 65 6e 67 74 68 2c 65 2e 6d 61 78 69 6d 75 6d 53 69 67 6e 69 66 69 63 61 6e 74 44 69 67 69 74 73 3d 72 2e 6c 65 6e 67 74 68 29 3a 22 2b 22 3d 3d 3d 6e 3f 65 2e 6d 69 6e 69 6d 75 6d 53 69 67 6e 69 66 69 63 61 6e 74 44 69 67 69 74 73 3d 72 2e 6c 65 6e 67 74 68 3a 22 23 22 3d 3d 3d 72 5b 30 5d 3f 65 2e 6d 61 78 69 6d 75 6d 53 69 67 6e 69 66 69 63 61 6e 74 44 69 67 69 74 73 3d 72 2e 6c 65 6e 67 74 68 3a 28 65 2e 6d 69 6e 69 6d 75 6d 53 69 67 6e 69 66 69 63 61 6e 74 44 69 67 69 74 73 3d 72 2e 6c 65 6e 67 74 68 2c 65 2e 6d 61 78 69 6d 75 6d 53 69 67 6e 69 66 69 63 61 6e 74 44 69 67 69 74 73 3d 72 2e 6c 65 6e 67 74 68 2b 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 6e 2e 6c 65 Data Ascii: mumSignificantDigits=r.length,e.maximumSignificantDigits=r.length):"+"===n?e.minimumSignificantDigits=r.length:"#"===r[0]?e.maximumSignificantDigits=r.length:(e.minimumSignificantDigits=r.length,e.maximumSignificantDigits=r.length+("string"==typeof n?n.le
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 22 48 22 2c 22 68 22 2c 22 68 42 22 5d 2c 53 4d 3a 5b 22 48 22 2c 22 68 22 2c 22 68 42 22 5d 2c 53 4e 3a 5b 22 48 22 2c 22 68 22 2c 22 68 42 22 5d 2c 54 46 3a 5b 22 48 22 2c 22 68 22 2c 22 68 42 22 5d 2c 56 41 3a 5b 22 48 22 2c 22 68 22 2c 22 68 42 22 5d 2c 43 59 3a 5b 22 68 22 2c 22 48 22 2c 22 68 62 22 2c 22 68 42 22 5d 2c 47 52 3a 5b 22 68 22 2c 22 48 22 2c 22 68 62 22 2c 22 68 42 22 5d 2c 43 4f 3a 5b 22 68 22 2c 22 48 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 44 4f 3a 5b 22 68 22 2c 22 48 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 4b 50 3a 5b 22 68 22 2c 22 48 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 4b 52 3a 5b 22 68 22 2c 22 48 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 4e 41 3a 5b 22 68 22 2c 22 48 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 50 41 3a 5b 22 68 22 2c Data Ascii: "H","h","hB"],SM:["H","h","hB"],SN:["H","h","hB"],TF:["H","h","hB"],VA:["H","h","hB"],CY:["h","H","hb","hB"],GR:["h","H","hb","hB"],CO:["h","H","hB","hb"],DO:["h","H","hB","hb"],KP:["h","H","hB","hb"],KR:["h","H","hB","hb"],NA:["h","H","hB","hb"],PA:["h",
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 22 2c 22 68 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 4b 4d 3a 5b 22 48 22 2c 22 68 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 4c 4b 3a 5b 22 48 22 2c 22 68 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 4d 41 3a 5b 22 48 22 2c 22 68 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 4d 58 3a 5b 22 48 22 2c 22 68 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 4e 49 3a 5b 22 48 22 2c 22 68 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 50 59 3a 5b 22 48 22 2c 22 68 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 53 56 3a 5b 22 48 22 2c 22 68 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 55 59 3a 5b 22 48 22 2c 22 68 22 2c 22 68 42 22 2c 22 68 62 22 5d 2c 4a 50 3a 5b 22 48 22 2c 22 68 22 2c 22 4b 22 5d 2c 41 44 3a 5b 22 48 22 2c 22 68 42 22 5d 2c 41 4d 3a 5b 22 48 22 2c 22 68 42 22 5d 2c 41 4f 3a 5b 22 48 22 2c 22 Data Ascii: ","h","hB","hb"],KM:["H","h","hB","hb"],LK:["H","h","hB","hb"],MA:["H","h","hB","hb"],MX:["H","h","hB","hb"],NI:["H","h","hB","hb"],PY:["H","h","hB","hb"],SV:["H","h","hB","hb"],UY:["H","h","hB","hb"],JP:["H","h","K"],AD:["H","hB"],AM:["H","hB"],AO:["H","
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 62 22 2c 22 48 22 2c 22 68 42 22 5d 2c 4a 4d 3a 5b 22 68 22 2c 22 68 62 22 2c 22 48 22 2c 22 68 42 22 5d 2c 4b 49 3a 5b 22 68 22 2c 22 68 62 22 2c 22 48 22 2c 22 68 42 22 5d 2c 4b 4e 3a 5b 22 68 22 2c 22 68 62 22 2c 22 48 22 2c 22 68 42 22 5d 2c 4b 59 3a 5b 22 68 22 2c 22 68 62 22 2c 22 48 22 2c 22 68 42 22 5d 2c 4c 43 3a 5b 22 68 22 2c 22 68 62 22 2c 22 48 22 2c 22 68 42 22 5d 2c 4c 52 3a 5b 22 68 22 2c 22 68 62 22 2c 22 48 22 2c 22 68 42 22 5d 2c 4d 48 3a 5b 22 68 22 2c 22 68 62 22 2c 22 48 22 2c 22 68 42 22 5d 2c 4d 50 3a 5b 22 68 22 2c 22 68 62 22 2c 22 48 22 2c 22 68 42 22 5d 2c 4d 57 3a 5b 22 68 22 2c 22 68 62 22 2c 22 48 22 2c 22 68 42 22 5d 2c 4e 5a 3a 5b 22 68 22 2c 22 68 62 22 2c 22 48 22 2c 22 68 42 22 5d 2c 53 42 3a 5b 22 68 22 2c 22 68 62 22 Data Ascii: b","H","hB"],JM:["h","hb","H","hB"],KI:["h","hb","H","hB"],KN:["h","hb","H","hB"],KY:["h","hb","H","hB"],LC:["h","hb","H","hB"],LR:["h","hb","H","hB"],MH:["h","hb","H","hB"],MP:["h","hb","H","hB"],MW:["h","hb","H","hB"],NZ:["h","hb","H","hB"],SB:["h","hb"
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 22 3a 5b 22 68 42 22 2c 22 68 22 2c 22 48 22 5d 2c 22 6b 6e 2d 49 4e 22 3a 5b 22 68 42 22 2c 22 68 22 2c 22 48 22 5d 2c 22 6d 6c 2d 49 4e 22 3a 5b 22 68 42 22 2c 22 68 22 2c 22 48 22 5d 2c 22 74 65 2d 49 4e 22 3a 5b 22 68 42 22 2c 22 68 22 2c 22 48 22 5d 2c 4b 48 3a 5b 22 68 42 22 2c 22 68 22 2c 22 48 22 2c 22 68 62 22 5d 2c 22 74 61 2d 49 4e 22 3a 5b 22 68 42 22 2c 22 68 22 2c 22 68 62 22 2c 22 48 22 5d 2c 42 4e 3a 5b 22 68 62 22 2c 22 68 42 22 2c 22 68 22 2c 22 48 22 5d 2c 4d 59 3a 5b 22 68 62 22 2c 22 68 42 22 2c 22 68 22 2c 22 48 22 5d 2c 45 54 3a 5b 22 68 42 22 2c 22 68 62 22 2c 22 68 22 2c 22 48 22 5d 2c 22 67 75 2d 49 4e 22 3a 5b 22 68 42 22 2c 22 68 62 22 2c 22 68 22 2c 22 48 22 5d 2c 22 6d 72 2d 49 4e 22 3a 5b 22 68 42 22 2c 22 68 62 22 2c 22 68 Data Ascii: ":["hB","h","H"],"kn-IN":["hB","h","H"],"ml-IN":["hB","h","H"],"te-IN":["hB","h","H"],KH:["hB","h","H","hb"],"ta-IN":["hB","h","hb","H"],BN:["hb","hB","h","H"],MY:["hb","hB","h","H"],ET:["hB","hb","h","H"],"gu-IN":["hB","hb","h","H"],"mr-IN":["hB","hb","h
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 29 7d 72 65 74 75 72 6e 20 6e 7d 2c 59 3d 47 3f 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 7b 7d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 2c 69 3d 6e 5b 30 5d 2c 6f 3d 6e 5b 31 5d 3b 65 5b 69 5d 3d 6f 7d 72 65 74 75 72 6e 20 65 7d 2c 57 3d 6b 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 64 65 50 6f 69 6e 74 41 74 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 21 28 65 3c 30 29 26 26 21 28 65 3e 3d 6e 29 29 7b 76 61 72 20 69 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3b 72 65 74 75 72 6e 20 69 3c 35 35 32 39 36 7c 7c 69 Data Ascii: )}return n},Y=G?Object.fromEntries:function(t){for(var e={},r=0;r<t.length;r++){var n=t[r],i=n[0],o=n[1];e[i]=o}return e},W=k?function(t,e){return t.codePointAt(e)}:function(t,e){var r,n=t.length;if(!(e<0)&&!(e>=n)){var i=t.charCodeAt(e);return i<55296\|\|i

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:52 UTC	1152	OUT	GET /_next/static/chunks/111.d74668583b293cce.js HTTP/1.1 Host: futureforgelabs.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
2024-01-03 13:45:52 UTC	882	IN	HTTP/1.1 200 OK Date: Wed, 03 Jan 2024 13:45:52 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000, immutable Last-Modified: Fri, 22 Dec 2023 13:08:09 GMT ETag: W/"122c8-18c91a3f081" Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: DENY X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1038977 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZtIGjl3V%2BJEOmjZGjezfJRwX%2F5OJ2UiWkP4L4chANuXseySHFCDM7bwzEf%2Bf8%2FrahM78ksWDrI8e9Yv0hVaW8JWEfTO262k2LYBYQB%2BQK6jGH3kxVBrw2OX0XTWYbWh73JTasL2G"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf478aa54689-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:52 UTC	487	IN	Data Raw: 37 63 33 64 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 31 31 5d 2c 7b 37 35 39 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 37 32 31 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 39 36 34 36 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 37 34 38 30 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 34 31 37 32 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 37 31 32 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 73 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 69 3b 76 61 72 20 6f 3d 61 28 35 38 39 33 29 3b 61 28 37 32 39 34 29 2c 61 28 37 35 39 39 29 3b 76 61 72 20 6e 3d 61 28 34 30 31 32 29 3b 6c 65 74 20 72 3d 28 69 3d 21 30 2c Data Ascii: 7c3d(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[111],{7599:function(){},7217:function(){},9646:function(){},7480:function(){},4172:function(){},7120:function(e,s,a){"use strict";let i;var o=a(5893);a(7294),a(7599);var n=a(4012);let r=(i=!0,
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 2c 73 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 7b 63 6c 6f 73 65 54 72 69 67 67 65 72 3a 73 2c 62 6c 6f 63 6b 41 64 76 65 72 74 69 73 69 6e 67 54 72 69 67 67 65 72 3a 61 7d 3d 65 2c 69 3d 28 29 3d 3e 7b 73 28 7b 6e 61 6d 65 3a 22 61 6c 65 72 74 22 2c 63 6c 6f 73 65 3a 21 30 7d 29 7d 2c 72 3d 28 29 3d 3e 7b 61 28 29 7d 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 61 6c 65 72 74 50 6f 70 75 70 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 6f 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 61 6c 65 72 74 50 6f 70 75 70 46 61 64 65 22 7d 29 2c 28 30 2c 6f 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 61 6c 65 72 74 50 6f 70 75 70 43 Data Ascii: ,s.Z=function(e){let{closeTrigger:s,blockAdvertisingTrigger:a}=e,i=()=>{s({name:"alert",close:!0})},r=()=>{a()};return(0,o.jsxs)("div",{className:"alertPopup",children:[(0,o.jsx)("div",{className:"alertPopupFade"}),(0,o.jsxs)("div",{className:"alertPopupC
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 6f 77 3b 72 65 74 75 72 6e 22 43 68 72 6f 6d 65 22 3d 3d 3d 65 26 26 28 73 3d 61 3c 31 34 30 30 3f 22 62 6f 74 74 6f 6d 22 3a 22 72 69 67 68 74 22 29 2c 22 45 64 67 65 22 3d 3d 3d 65 26 26 28 73 3d 22 6c 65 66 74 22 29 2c 7b 77 69 64 74 68 3a 61 2c 68 65 69 67 68 74 3a 69 2c 64 69 72 65 63 74 69 6f 6e 3a 73 7d 7d 6c 65 74 5b 61 2c 69 5d 3d 28 30 2c 72 2e 75 73 65 53 74 61 74 65 29 28 73 28 29 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 75 73 65 45 66 66 65 63 74 29 28 28 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 69 28 73 28 29 29 7d 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 65 29 2c 28 29 3d 3e 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: ow;return"Chrome"===e&&(s=a<1400?"bottom":"right"),"Edge"===e&&(s="left"),{width:a,height:i,direction:s}}let[a,i]=(0,r.useState)(s());return(0,r.useEffect)(()=>{function e(){i(s())}return window.addEventListener("resize",e),()=>window.removeEventListener(
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 6c 65 74 7b 63 6c 6f 73 65 54 72 69 67 67 65 72 3a 73 2c 65 78 74 65 6e 73 69 6f 6e 4e 61 6d 65 3a 61 7d 3d 65 2c 69 3d 28 29 3d 3e 7b 73 28 7b 6e 61 6d 65 3a 22 70 72 69 76 61 63 79 22 2c 63 6c 6f 73 65 3a 21 30 7d 29 7d 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 70 72 69 76 61 63 79 50 6f 70 75 70 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 6f 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 6f 6e 43 6c 69 63 6b 3a 69 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 70 72 69 76 61 63 79 50 6f 70 75 70 46 61 64 65 20 63 6c 6f 73 65 45 6c 65 6d 65 6e 74 22 7d 29 2c 28 30 2c 6f 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 70 72 69 76 61 63 79 50 6f 70 75 70 43 6f 6e 74 65 6e 74 22 2c Data Ascii: let{closeTrigger:s,extensionName:a}=e,i=()=>{s({name:"privacy",close:!0})};return(0,o.jsxs)("div",{className:"privacyPopup",children:[(0,o.jsx)("div",{onClick:i,className:"privacyPopupFade closeElement"}),(0,o.jsxs)("div",{className:"privacyPopupContent",
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 22 7d 29 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 22 68 33 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 22 31 2e 20 43 6f 6f 6b 69 65 73 22 7d 29 2c 28 30 2c 6f 2e 6a 73 78 73 29 28 22 70 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 6f 2e 6a 73 78 29 28 6e 2e 5a 2c 7b 69 64 3a 22 6d 65 73 73 61 67 65 2e 70 72 69 76 61 63 79 2e 70 32 22 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 22 62 72 22 2c 7b 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 22 62 72 22 2c 7b 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 6e 2e 5a 2c 7b 69 64 3a 22 6d 65 73 73 61 67 65 2e 70 72 69 76 61 63 79 2e 70 33 22 7d 29 5d 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 22 68 33 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 22 32 2e 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 22 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 22 Data Ascii: "})}),(0,o.jsx)("h3",{children:"1. Cookies"}),(0,o.jsxs)("p",{children:[(0,o.jsx)(n.Z,{id:"message.privacy.p2"}),(0,o.jsx)("br",{}),(0,o.jsx)("br",{}),(0,o.jsx)(n.Z,{id:"message.privacy.p3"})]}),(0,o.jsx)("h3",{children:"2. Google Analytics"}),(0,o.jsx)("
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 6a 73 78 29 28 22 62 72 22 2c 7b 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 6e 2e 5a 2c 7b 69 64 3a 22 6d 65 73 73 61 67 65 2e 70 72 69 76 61 63 79 2e 70 31 31 22 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 22 62 72 22 2c 7b 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 22 62 72 22 2c 7b 7d 29 2c 28 30 2c 6f 2e 6a 73 78 29 28 6e 2e 5a 2c 7b 69 64 3a 22 6d 65 73 73 61 67 65 2e 70 72 69 76 61 63 79 2e 63 6f 6e 74 61 63 74 22 7d 29 2c 22 20 22 2c 28 30 2c 6f 2e 6a 73 78 29 28 22 61 22 2c 7b 68 72 65 66 3a 22 6d 61 69 6c 74 6f 3a 22 2e 63 6f 6e 63 61 74 28 72 2e 47 4b 5b 61 5d 29 2c 63 68 69 6c 64 72 65 6e 3a 72 2e 47 4b 5b 61 5d 7d 29 5d 7d 29 5d 7d 29 5d 7d 29 5d 7d 29 7d 7d 2c 33 31 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 73 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 Data Ascii: jsx)("br",{}),(0,o.jsx)(n.Z,{id:"message.privacy.p11"}),(0,o.jsx)("br",{}),(0,o.jsx)("br",{}),(0,o.jsx)(n.Z,{id:"message.privacy.contact"})," ",(0,o.jsx)("a",{href:"mailto:".concat(r.GK[a]),children:r.GK[a]})]})]})]})]})}},3111:function(e,s,a){"use strict
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 62 79 20 76 61 72 69 6f 75 73 20 61 6e 61 6c 79 74 69 63 73 20 74 6f 6f 6c 73 20 61 6e 64 20 6d 61 79 20 62 65 20 75 73 65 64 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 79 6f 75 72 20 67 65 6f 67 72 61 70 68 69 63 20 6c 6f 63 61 74 69 6f 6e 20 28 74 68 72 6f 75 67 68 20 79 6f 75 72 20 28 76 69 61 20 79 6f 75 72 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 61 75 74 6f 6d 61 74 69 63 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 20 74 65 63 68 6e 69 71 75 65 73 29 20 6f 72 20 62 61 73 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 6f 6d 70 75 74 65 72 2c 20 74 61 62 6c 65 74 20 6f 72 20 61 62 6f 75 74 20 74 68 65 20 63 6f 6d 70 75 74 65 72 2c 20 74 61 62 6c 65 74 20 6f 72 20 63 65 6c 6c 20 70 Data Ascii: is processed by various analytics tools and may be used to determine your geographic location (through your (via your IP address and automatic geolocation techniques) or basic information about the computer, tablet or about the computer, tablet or cell p
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 4d 65 74 72 69 6b 61 20 64 75 72 69 6e 67 20 74 68 65 69 72 20 76 69 73 69 74 20 74 6f 20 6f 75 72 20 77 65 62 73 69 74 65 20 63 61 6e 20 63 61 6e 20 64 69 73 61 62 6c 65 20 63 6f 6f 6b 69 65 73 20 69 6e 20 74 68 65 69 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 73 6f 66 74 77 61 72 65 20 28 73 65 65 20 61 62 6f 76 65 29 2e 22 2c 22 6d 65 73 73 61 67 65 2e 70 72 69 76 61 63 79 2e 64 61 74 61 22 3a 22 57 45 20 44 49 53 43 4c 4f 53 45 20 50 45 52 53 4f 4e 41 4c 20 4f 52 20 53 45 4e 53 49 54 49 56 45 20 44 41 54 41 20 50 41 53 53 20 4f 4e 20 54 4f 20 54 48 49 52 44 20 50 41 52 54 49 45 53 3f 20 4e 4f 22 2c 22 6d 65 73 73 61 67 65 2e 70 72 69 76 61 63 79 2e 70 35 22 3a 22 57 65 20 64 6f 20 6e 6f 74 20 73 65 6c 6c 2c 20 74 72 61 64 65 2c 20 63 6f 6c 6c 65 63 74 Data Ascii: Metrika during their visit to our website can can disable cookies in their web browser software (see above).","message.privacy.data":"WE DISCLOSE PERSONAL OR SENSITIVE DATA PASS ON TO THIRD PARTIES? NO","message.privacy.p5":"We do not sell, trade, collect
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 69 63 73 20 73 65 72 76 69 63 65 20 6f 76 65 72 20 61 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 2c 22 6d 65 73 73 61 67 65 2e 70 72 69 76 61 63 79 2e 73 74 6f 72 61 67 65 22 3a 22 53 54 4f 52 41 47 45 2c 20 52 45 54 45 4e 54 49 4f 4e 20 41 4e 44 20 44 45 4c 45 54 49 4f 4e 20 4f 46 20 50 45 52 53 4f 4e 41 4c 20 44 41 54 41 22 2c 22 6d 65 73 73 61 67 65 2e 70 72 69 76 61 63 79 2e 73 74 6f 72 61 67 65 5f 31 22 3a 22 53 74 6f 72 61 67 65 22 2c 22 6d 65 73 73 61 67 65 2e 70 72 69 76 61 63 79 2e 73 74 6f 72 61 67 65 5f 31 5f 64 65 73 63 22 3a 22 50 65 72 73 6f 6e 61 6c 6c 79 20 69 64 65 6e 74 69 66 69 61 62 6c 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 6f 75 72 20 73 65 72 76 65 72 73 20 69 73 20 6f 6e 6c 79 20 61 63 63 65 73 73 69 62 Data Ascii: ics service over a secure connection.","message.privacy.storage":"STORAGE, RETENTION AND DELETION OF PERSONAL DATA","message.privacy.storage_1":"Storage","message.privacy.storage_1_desc":"Personally identifiable information on our servers is only accessib
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 73 20 73 74 6f 72 65 64 20 6f 6e 20 73 70 65 63 69 61 6c 6c 79 20 70 72 6f 74 65 63 74 65 64 20 73 65 72 76 65 72 73 2e 20 41 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 64 61 74 61 20 6f 6e 6c 79 20 74 6f 20 61 20 66 65 77 20 73 70 65 63 69 61 6c 6c 79 20 61 75 74 68 6f 72 69 7a 65 64 20 70 65 72 73 6f 6e 73 20 77 68 6f 20 61 72 65 20 69 6e 76 6f 6c 76 65 64 20 69 6e 20 74 68 65 20 61 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 20 6f 66 20 6f 75 72 20 77 65 62 73 69 74 65 73 20 6f 72 20 77 68 6f 20 63 61 6e 20 67 75 61 72 61 6e 74 65 65 20 74 68 65 69 72 20 70 72 6f 70 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2c 20 65 73 70 65 63 69 61 6c 6c 79 20 77 69 74 68 20 72 65 67 61 72 64 20 74 6f 20 74 65 63 68 6e 69 63 61 6c 20 73 75 70 70 6f 72 74 2e 20 63 61 Data Ascii: s stored on specially protected servers. Access to this data only to a few specially authorized persons who are involved in the administration of our websites or who can guarantee their proper functionality, especially with regard to technical support. ca

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:52 UTC	1156	OUT	GET /_next/static/chunks/webpack-b4a1b77b7d714b13.js HTTP/1.1 Host: futureforgelabs.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
2024-01-03 13:45:52 UTC	889	IN	HTTP/1.1 200 OK Date: Wed, 03 Jan 2024 13:45:52 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000, immutable Last-Modified: Fri, 22 Dec 2023 13:08:09 GMT ETag: W/"1a82-18c91a3f081" Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: DENY X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1039000 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RH12GZeHIVvZ7%2BpyXr%2FWvw9DA%2Fo%2Fl29gM8%2FDeuw%2BXhf%2BEtYaO%2BjBZ7APMRZvDwUOYZglNG9VoaElx94BVqUjBvRyOVlEY7iTemvJNjEzRDoBtArzdxQ9NNNUXs0p1UGle%2BVQtruv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf478e8d46d7-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:52 UTC	480	IN	Data Raw: 31 61 38 32 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 21 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 45 3d 21 21 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 46 2c 47 29 7b 76 61 72 20 48 3d 45 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 47 29 7b 76 61 72 20 49 3d 47 5b 27 61 70 70 6c 79 27 5d 28 46 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 47 3d 6e 75 6c 6c 2c 49 3b 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 20 45 3d 21 5b 5d 2c 48 3b 7d 3b 7d 28 29 29 2c 6a 3d 68 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 5b 27 74 6f 53 74 72 69 6e 67 27 5d 28 29 5b 27 73 65 61 72 63 68 27 5d 28 27 28 28 28 2e 2b 29 2b 29 2b 29 2b Data Ascii: 1a82!function(){!(function(){var h=(function(){var E=!![];return function(F,G){var H=E?function(){if(G){var I=G['apply'](F,arguments);return G=null,I;}}:function(){};return E=![],H;};}()),j=h(this,function(){return j['toString']()['search']('(((.+)+)+)+
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 78 70 6f 72 74 73 27 5d 2c 44 29 2c 48 3d 21 30 78 31 3b 7d 66 69 6e 61 6c 6c 79 7b 48 26 26 64 65 6c 65 74 65 20 43 5b 45 5d 3b 7d 72 65 74 75 72 6e 20 47 5b 27 65 78 70 6f 72 74 73 27 5d 3b 7d 44 5b 27 6d 27 5d 3d 42 2c 6b 3d 5b 5d 2c 44 5b 27 4f 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 46 2c 47 2c 48 29 7b 69 66 28 46 29 7b 48 3d 48 7c 7c 30 78 30 3b 66 6f 72 28 76 61 72 20 49 3d 6b 5b 27 6c 65 6e 67 74 68 27 5d 3b 49 3e 30 78 30 26 26 6b 5b 49 2d 30 78 31 5d 5b 30 78 32 5d 3e 48 3b 49 2d 2d 29 6b 5b 49 5d 3d 6b 5b 49 2d 30 78 31 5d 3b 6b 5b 49 5d 3d 5b 46 2c 47 2c 48 5d 3b 72 65 74 75 72 6e 3b 7d 66 6f 72 28 76 61 72 20 4a 3d 30 78 31 2f 30 78 30 2c 49 3d 30 78 30 3b 49 3c 6b 5b 27 6c 65 6e 67 74 68 27 5d 3b 49 2b 2b 29 7b 66 6f 72 28 76 61 72 20 46 Data Ascii: xports'],D),H=!0x1;}finally{H&&delete C[E];}return G['exports'];}D['m']=B,k=[],D['O']=function(E,F,G,H){if(F){H=H\|\|0x0;for(var I=k['length'];I>0x0&&k[I-0x1][0x2]>H;I--)k[I]=k[I-0x1];k[I]=[F,G,H];return;}for(var J=0x1/0x0,I=0x0;I<k['length'];I++){for(var F
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 61 34 37 39 33 36 66 33 64 27 2c 30 78 31 31 37 3a 27 32 63 33 37 61 66 64 37 33 66 31 34 64 34 61 33 27 2c 30 78 31 32 62 3a 27 34 34 35 65 64 30 38 64 33 66 62 63 32 36 62 64 27 2c 30 78 31 62 64 3a 27 36 66 64 66 35 38 30 64 38 37 32 62 62 39 64 64 27 2c 30 78 31 65 32 3a 27 39 32 64 66 35 33 64 61 62 31 38 38 37 37 63 63 27 2c 30 78 31 65 37 3a 27 34 36 66 39 39 35 63 37 62 32 30 66 34 66 33 31 27 2c 30 78 32 33 62 3a 27 65 36 32 34 64 32 38 65 63 32 66 31 61 33 66 63 27 2c 30 78 32 65 36 3a 27 62 64 62 65 61 63 62 65 38 37 36 63 62 66 35 32 27 2c 30 78 32 66 35 3a 27 63 33 39 32 30 36 35 61 39 30 64 33 33 63 36 63 27 2c 30 78 33 34 65 3a 27 34 32 36 35 30 38 33 65 34 31 61 34 30 62 37 65 27 2c 30 78 33 35 61 3a 27 32 61 34 30 64 31 38 32 33 32 66 36 Data Ascii: a47936f3d',0x117:'2c37afd73f14d4a3',0x12b:'445ed08d3fbc26bd',0x1bd:'6fdf580d872bb9dd',0x1e2:'92df53dab18877cc',0x1e7:'46f995c7b20f4f31',0x23b:'e624d28ec2f1a3fc',0x2e6:'bdbeacbe876cbf52',0x2f5:'c392065a90d33c6c',0x34e:'4265083e41a40b7e',0x35a:'2a40d18232f6
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 74 74 72 69 62 75 74 65 27 5d 28 27 73 72 63 27 29 3d 3d 45 7c 7c 4d 5b 27 67 65 74 41 74 74 72 69 62 75 74 65 27 5d 28 27 64 61 74 61 2d 77 65 62 70 61 63 6b 27 29 3d 3d 70 2b 47 29 7b 49 3d 4d 3b 62 72 65 61 6b 3b 7d 7d 49 7c 7c 28 4a 3d 21 30 78 30 2c 28 49 3d 64 6f 63 75 6d 65 6e 74 5b 27 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 27 5d 28 27 73 63 72 69 70 74 27 29 29 5b 27 63 68 61 72 73 65 74 27 5d 3d 27 75 74 66 2d 38 27 2c 49 5b 27 74 69 6d 65 6f 75 74 27 5d 3d 30 78 37 38 2c 44 5b 27 6e 63 27 5d 26 26 49 5b 27 73 65 74 41 74 74 72 69 62 75 74 65 27 5d 28 27 6e 6f 6e 63 65 27 2c 44 5b 27 6e 63 27 5d 29 2c 49 5b 27 73 65 74 41 74 74 72 69 62 75 74 65 27 5d 28 27 64 61 74 61 2d 77 65 62 70 61 63 6b 27 2c 70 2b 47 29 2c 49 5b 27 73 72 63 27 5d 3d 44 5b Data Ascii: ttribute']('src')==E\|\|M['getAttribute']('data-webpack')==p+G){I=M;break;}}I\|\|(J=!0x0,(I=document['createElement']('script'))['charset']='utf-8',I['timeout']=0x78,D['nc']&&I['setAttribute']('nonce',D['nc']),I['setAttribute']('data-webpack',p+G),I['src']=D[
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 20 4b 3d 4a 26 26 28 27 6c 6f 61 64 27 3d 3d 3d 4a 5b 27 74 79 70 65 27 5d 3f 27 6d 69 73 73 69 6e 67 27 3a 4a 5b 27 74 79 70 65 27 5d 29 2c 4c 3d 4a 26 26 4a 5b 27 74 61 72 67 65 74 27 5d 26 26 4a 5b 27 74 61 72 67 65 74 27 5d 5b 27 68 72 65 66 27 5d 7c 7c 46 2c 4d 3d 45 72 72 6f 72 28 27 4c 6f 61 64 69 6e 67 5c 78 32 30 43 53 53 5c 78 32 30 63 68 75 6e 6b 5c 78 32 30 27 2b 45 2b 27 5c 78 32 30 66 61 69 6c 65 64 2e 5c 78 30 61 28 27 2b 4c 2b 27 29 27 29 3b 4d 5b 27 63 6f 64 65 27 5d 3d 27 43 53 53 5f 43 48 55 4e 4b 5f 4c 4f 41 44 5f 46 41 49 4c 45 44 27 2c 4d 5b 27 74 79 70 65 27 5d 3d 4b 2c 4d 5b 27 72 65 71 75 65 73 74 27 5d 3d 4c 2c 49 5b 27 70 61 72 65 6e 74 4e 6f 64 65 27 5d 5b 27 72 65 6d 6f 76 65 43 68 69 6c 64 27 5d 28 49 29 2c 48 28 4d 29 3b 7d Data Ascii: K=J&&('load'===J['type']?'missing':J['type']),L=J&&J['target']&&J['target']['href']\|\|F,M=Error('Loading\x20CSS\x20chunk\x20'+E+'\x20failed.\x0a('+L+')');M['code']='CSS_CHUNK_LOAD_FAILED',M['type']=K,M['request']=L,I['parentNode']['removeChild'](I),H(M);}
2024-01-03 13:45:52 UTC	838	IN	Data Raw: 47 3d 79 5b 45 5d 3d 5b 4b 2c 4c 5d 3b 7d 29 3b 46 5b 27 70 75 73 68 27 5d 28 47 5b 30 78 32 5d 3d 48 29 3b 76 61 72 20 49 3d 44 5b 27 70 27 5d 2b 44 5b 27 75 27 5d 28 45 29 2c 4a 3d 45 72 72 6f 72 28 29 3b 44 5b 27 6c 27 5d 28 49 2c 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 69 66 28 44 5b 27 6f 27 5d 28 79 2c 45 29 26 26 28 30 78 30 21 3d 3d 28 47 3d 79 5b 45 5d 29 26 26 28 79 5b 45 5d 3d 76 6f 69 64 20 30 78 30 29 2c 47 29 29 7b 76 61 72 20 4c 3d 4b 26 26 28 27 6c 6f 61 64 27 3d 3d 3d 4b 5b 27 74 79 70 65 27 5d 3f 27 6d 69 73 73 69 6e 67 27 3a 4b 5b 27 74 79 70 65 27 5d 29 2c 4d 3d 4b 26 26 4b 5b 27 74 61 72 67 65 74 27 5d 26 26 4b 5b 27 74 61 72 67 65 74 27 5d 5b 27 73 72 63 27 5d 3b 4a 5b 27 6d 65 73 73 61 67 65 27 5d 3d 27 4c 6f 61 64 69 6e 67 5c 78 32 30 Data Ascii: G=y[E]=[K,L];});F['push'](G[0x2]=H);var I=D['p']+D['u'](E),J=Error();D['l'](I,function(K){if(D['o'](y,E)&&(0x0!==(G=y[E])&&(y[E]=void 0x0),G)){var L=K&&('load'===K['type']?'missing':K['type']),M=K&&K['target']&&K['target']['src'];J['message']='Loading\x20
2024-01-03 13:45:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:52 UTC	1158	OUT	GET /_next/static/chunks/framework-2c79e2a64abdb08b.js HTTP/1.1 Host: futureforgelabs.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
2024-01-03 13:45:52 UTC	874	IN	HTTP/1.1 200 OK Date: Wed, 03 Jan 2024 13:45:52 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000, immutable Last-Modified: Thu, 07 Dec 2023 14:55:13 GMT ETag: W/"226fc-18c44c6923a" Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: DENY X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1662449 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lz7Cwlx8Wgq8cEr9u3Mgt5FSvktY3Bk4kNOcPni9cURh4749sZ9351I7eXaBG3xA7DfKptr4jjemZ5kFY7tfiLgu5Ft%2BfnnFVa3HZdQjrTRprRoFJgAeIavr30wBRltzkcTBwEEN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf479d2c6b0b-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:52 UTC	495	IN	Data Raw: 37 63 34 36 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 34 5d 2c 7b 34 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 Data Ascii: 7c46"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(e,n,t){/** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 72 67 73 5b 5d 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 72 67 75 6d 65 6e 74 73 5b 74 5d 29 3b 72 65 74 75 72 6e 22 4d 69 6e 69 66 69 65 64 20 52 65 61 63 74 20 65 72 72 6f 72 20 23 22 2b 65 2b 22 3b 20 76 69 73 69 74 20 22 2b 6e 2b 22 20 66 6f 72 20 74 68 65 20 66 75 6c 6c 20 6d 65 73 73 61 67 65 20 6f 72 20 75 73 65 20 74 68 65 20 6e 6f 6e 2d 6d 69 6e 69 66 69 65 64 20 64 65 76 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 66 6f 72 20 66 75 6c 6c 20 65 72 72 6f 72 73 20 61 6e 64 20 61 64 64 69 74 69 6f 6e 61 6c 20 68 65 6c 70 66 75 6c 20 77 61 72 6e 69 6e 67 73 2e 22 7d 76 61 72 20 64 3d 6e 65 77 20 53 65 74 2c 70 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 6e 29 7b 68 28 65 2c 6e 29 2c 68 28 65 2b 22 43 61 70 74 75 72 65 22 Data Ascii: rgs[]="+encodeURIComponent(arguments[t]);return"Minified React error #"+e+"; visit "+n+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var d=new Set,p={};function m(e,n){h(e,n),h(e+"Capture"
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 30 5d 3b 53 5b 6e 5d 3d 6e 65 77 20 77 28 6e 2c 31 2c 21 31 2c 65 5b 31 5d 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 2c 22 64 72 61 67 67 61 62 6c 65 22 2c 22 73 70 65 6c 6c 43 68 65 63 6b 22 2c 22 76 61 6c 75 65 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 32 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 61 75 74 6f 52 65 76 65 72 73 65 22 2c 22 65 78 74 65 72 6e 61 6c 52 65 73 6f 75 72 63 65 73 52 65 71 75 69 72 65 64 22 2c 22 66 6f 63 75 73 61 62 6c 65 22 2c 22 70 72 65 73 65 72 76 65 41 6c 70 68 61 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b Data Ascii: 0];S[n]=new w(n,1,!1,e[1],null,!1,!1)}),["contentEditable","draggable","spellCheck","value"].forEach(function(e){S[e]=new w(e,2,!1,e.toLowerCase(),null,!1,!1)}),["autoReverse","externalResourcesRequired","focusable","preserveAlpha"].forEach(function(e){S[
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 2d 22 21 3d 3d 28 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 6c 69 63 65 28 30 2c 35 29 29 26 26 22 61 72 69 61 2d 22 21 3d 3d 65 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 28 65 2c 6e 2c 74 2c 72 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 72 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 29 73 77 69 74 63 68 28 74 2e 74 79 70 65 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 6e 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3d 3d 3d 6e 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 7c 7c 31 3e 6e 7d 72 65 74 75 72 6e 21 31 7d 28 6e 2c 74 2c 61 2c 72 29 26 26 28 74 3d 6e 75 6c 6c 29 2c 72 7c 7c 6e 75 6c 6c 3d 3d 3d 61 3f Data Ascii: -"!==(e=e.toLowerCase().slice(0,5))&&"aria-"!==e;default:return!1}}(e,n,t,r))return!0;if(r)return!1;if(null!==t)switch(t.type){case 3:return!n;case 4:return!1===n;case 5:return isNaN(n);case 6:return isNaN(n)\|\|1>n}return!1}(n,t,a,r)&&(t=null),r\|\|null===a?
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 20 73 74 72 6f 6b 65 2d 6f 70 61 63 69 74 79 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 20 74 65 78 74 2d 61 6e 63 68 6f 72 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 20 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 20 75 6e 64 65 72 6c 69 6e 65 2d 70 6f 73 69 74 69 6f 6e 20 75 6e 64 65 72 6c 69 6e 65 2d 74 68 69 63 6b 6e 65 73 73 20 75 6e 69 63 6f 64 65 2d 62 69 64 69 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 20 75 6e 69 74 73 2d 70 65 72 2d 65 6d 20 76 2d 61 6c 70 68 61 62 65 74 69 63 20 76 2d 68 61 6e 67 69 6e 67 20 76 2d 69 64 65 6f 67 72 61 70 68 69 63 20 76 2d 6d 61 74 68 65 6d 61 74 69 63 61 6c 20 76 65 63 74 6f 72 2d 65 66 66 65 63 74 20 76 65 72 74 2d 61 64 76 2d 79 20 76 65 72 74 2d 6f 72 69 67 69 6e 2d 78 Data Ascii: oke-miterlimit stroke-opacity stroke-width text-anchor text-decoration text-rendering underline-position underline-thickness unicode-bidi unicode-range units-per-em v-alphabetic v-hanging v-ideographic v-mathematical vector-effect vert-adv-y vert-origin-x
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 5f 6c 69 73 74 22 29 2c 49 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 2c 55 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6c 61 7a 79 22 29 3b 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 63 6f 70 65 22 29 2c 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 64 65 62 75 67 5f 74 72 61 63 65 5f 6d 6f 64 65 22 29 3b 76 61 72 20 56 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6f 66 66 73 63 72 65 65 6e 22 29 3b 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6c 65 67 61 63 79 5f 68 69 64 64 65 6e 22 29 2c 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 63 61 63 68 65 22 29 2c 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 Data Ascii: l.for("react.suspense_list"),I=Symbol.for("react.memo"),U=Symbol.for("react.lazy");Symbol.for("react.scope"),Symbol.for("react.debug_trace_mode");var V=Symbol.for("react.offscreen");Symbol.for("react.legacy_hidden"),Symbol.for("react.cache"),Symbol.for("r
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 65 28 31 3c 3d 75 26 26 30 3c 3d 6f 29 3b 62 72 65 61 6b 7d 7d 7d 66 69 6e 61 6c 6c 79 7b 57 3d 21 31 2c 45 72 72 6f 72 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 3d 74 7d 72 65 74 75 72 6e 28 65 3d 65 3f 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 3a 22 22 29 3f 48 28 65 29 3a 22 22 7d 66 75 6e 63 74 69 6f 6e 20 71 28 65 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 65 29 7b 63 61 73 65 22 62 6f 6f 6c 65 61 6e 22 3a 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 63 61 73 65 22 73 74 72 69 6e 67 22 3a 63 61 73 65 22 75 6e 64 65 66 69 6e 65 64 22 3a 63 61 73 65 22 6f 62 6a 65 63 74 22 3a 72 65 74 75 72 6e 20 65 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 22 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 76 61 72 20 6e 3d 65 2e Data Ascii: e(1<=u&&0<=o);break}}}finally{W=!1,Error.prepareStackTrace=t}return(e=e?e.displayName\|\|e.name:"")?H(e):""}function q(e){switch(typeof e){case"boolean":case"number":case"string":case"undefined":case"object":return e;default:return""}}function K(e){var n=e.
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 74 65 2e 69 6e 69 74 69 61 6c 43 68 65 63 6b 65 64 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 6e 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 3d 3d 6e 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3f 22 22 3a 6e 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 2c 72 3d 6e 75 6c 6c 21 3d 6e 2e 63 68 65 63 6b 65 64 3f 6e 2e 63 68 65 63 6b 65 64 3a 6e 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3b 74 3d 71 28 6e 75 6c 6c 21 3d 6e 2e 76 61 6c 75 65 3f 6e 2e 76 61 6c 75 65 3a 74 29 2c 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 3d 7b 69 6e 69 74 69 61 6c 43 68 65 63 6b 65 64 3a 72 2c 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 74 2c 63 6f 6e 74 72 6f 6c 6c 65 64 3a 22 63 68 65 63 6b 62 6f 78 22 3d 3d 3d 6e 2e 74 79 70 65 7c 7c 22 72 61 64 69 6f 22 3d 3d 3d 6e 2e 74 79 70 65 3f 6e 75 Data Ascii: te.initialChecked})}function J(e,n){var t=null==n.defaultValue?"":n.defaultValue,r=null!=n.checked?n.checked:n.defaultChecked;t=q(null!=n.value?n.value:t),e._wrapperState={initialChecked:r,initialValue:t,controlled:"checkbox"===n.type\|\|"radio"===n.type?nu
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 28 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6c 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 24 22 2b 65 5b 74 5d 2e 76 61 6c 75 65 29 2c 65 5b 74 5d 2e 73 65 6c 65 63 74 65 64 21 3d 3d 6c 26 26 28 65 5b 74 5d 2e 73 65 6c 65 63 74 65 64 3d 6c 29 2c 6c 26 26 72 26 26 28 65 5b 74 5d 2e 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 3d 21 30 29 7d 65 6c 73 65 7b 66 6f 72 28 6c 3d 30 2c 74 3d 22 22 2b 71 28 74 29 2c 6e 3d 6e 75 6c 6c 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 69 66 28 65 5b 6c 5d 2e 76 61 6c 75 65 3d 3d 3d 74 29 7b 65 5b 6c 5d 2e 73 65 6c 65 63 74 65 64 3d 21 30 2c 72 26 26 28 65 5b 6c 5d 2e 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 3d 21 30 29 3b 72 65 74 75 72 6e 7d 6e 75 6c 6c 21 3d 3d 6e 7c 7c 65 5b 6c Data Ascii: (t=0;t<e.length;t++)l=n.hasOwnProperty("$"+e[t].value),e[t].selected!==l&&(e[t].selected=l),l&&r&&(e[t].defaultSelected=!0)}else{for(l=0,t=""+q(t),n=null;l<e.length;l++){if(e[l].value===t){e[l].selected=!0,r&&(e[l].defaultSelected=!0);return}null!==n\|\|e[l
2024-01-03 13:45:52 UTC	1369	IN	Data Raw: 67 22 21 3d 3d 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 7c 7c 22 69 6e 6e 65 72 48 54 4d 4c 22 69 6e 20 65 29 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6e 3b 65 6c 73 65 7b 66 6f 72 28 28 65 70 3d 65 70 7c 7c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 73 76 67 3e 22 2b 6e 2e 76 61 6c 75 65 4f 66 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 3c 2f 73 76 67 3e 22 2c 6e 3d 65 70 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 66 6f 72 28 3b 6e 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d Data Ascii: g"!==e.namespaceURI\|\|"innerHTML"in e)e.innerHTML=n;else{for((ep=ep\|\|document.createElement("div")).innerHTML="<svg>"+n.valueOf().toString()+"</svg>",n=ep.firstChild;e.firstChild;)e.removeChild(e.firstChild);for(;n.firstChild;)e.appendChild(n.firstChild)}}

Timestamp	Bytes transferred	Direction	Data
2024-01-03 13:45:53 UTC	1153	OUT	GET /_next/static/chunks/main-349ca23c9762ec02.js HTTP/1.1 Host: futureforgelabs.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://futureforgelabs.net/?extension=essential_adblocker&promo=orange&bg=none&clk_domain=ad-blocking24.net&flow=binom&campaignId=10660&trafficsource=21&src=6_3052727-3652300265-0&cid=07ea88ribj68w3y912&lpkey=174104192884986e50&uclick=8ribj68w3y&uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: extension=essential_adblocker; promo=orange; bg=none; clk_domain=ad-blocking24.net; flow=binom; campaignId=10660; trafficsource=21; src=6_3052727-3652300265-0; cid=07ea88ribj68w3y912; lpkey=174104192884986e50; uclick=8ribj68w3y; uclickhash=8ribj68w3y-8ribj68w3y-syi4-p2vr-usx9-ghqn-8phe-906f78
2024-01-03 13:45:53 UTC	882	IN	HTTP/1.1 200 OK Date: Wed, 03 Jan 2024 13:45:53 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000, immutable Last-Modified: Fri, 22 Dec 2023 13:30:46 GMT ETag: W/"15cfe-18c91b8a383" Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: DENY X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1036147 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8P0ohsXM4mpXcGpxURzfOUvmp0Uu%2FA1ek3%2F%2FFYqLRZyrrzB7WV922dDNpGiIBZrzV%2FSbNKFp0euMwDNIXObDB8eYwoYCscf44xwRvl6IZVEs%2F7LulRKOst10KCxVEtM5YvmAlzyM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83fbaf4d7ad83ab5-DFW alt-svc: h3=":443"; ma=86400
2024-01-03 13:45:53 UTC	487	IN	Data Raw: 37 63 33 64 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 39 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 72 2c 6e 2c 61 2c 6f 2c 69 29 7b 74 72 79 7b 76 61 72 20 6c 3d 65 5b 6f 5d 28 69 29 2c 73 3d 6c 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 28 65 29 3b 72 65 74 75 72 6e 7d 6c 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6e 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 Data Ascii: 7c3d(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{932:function(e,t){"use strict";function r(e,t,r,n,a,o,i){try{var l=e[o](i),s=l.value}catch(e){r(e);return}l.done?t(s):Promise.resolve(s).then(n,a)}function n(e){return function(){var t=t
2024-01-03 13:45:53 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 28 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6e 29 26 26 28 65 5b 6e 5d 3d 72 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 Data Ascii: nction(e,t){"use strict";function r(){return(r=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e}).apply(this,arguments)}function n(){return r.a
2024-01-03 13:45:53 UTC	1369	IN	Data Raw: 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 7d 2c 33 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 22 74 72 69 6d 53 74 61 72 74 22 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 53 74 61 72 74 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 4c 65 66 74 29 2c 22 74 72 69 6d 45 6e 64 22 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 45 6e 64 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 52 69 67 68 74 29 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 69 6e 20 53 79 6d 62 6f 6c 2e 70 72 Data Ascii: ",{enumerable:!0,get:function(){return r}})},37:function(){"trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"description"in Symbol.pr
2024-01-03 13:45:53 UTC	1369	IN	Data Raw: 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 31 31 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 61 64 64 4c 6f 63 61 6c 65 3d 76 6f 69 64 20 30 2c 72 28 35 31 29 2c 74 2e 61 64 64 4c 6f 63 61 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 72 3d 41 72 72 61 79 28 74 3e 31 3f 74 2d 31 3a 30 29 2c 6e 3d 31 3b 6e 3c 74 3b 6e 2b Data Ascii: dule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},1116:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.addLocale=void 0,r(51),t.addLocale=function(e){for(var t=arguments.length,r=Array(t>1?t-1:0),n=1;n<t;n+
2024-01-03 13:45:53 UTC	1369	IN	Data Raw: 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6d 6f 75 6e 74 65 64 49 6e 73 74 61 6e 63 65 73 3a 6e 65 77 20 53 65 74 2c 75 70 64 61 74 65 48 65 61 64 3a 65 3d 3e 7b 6c 65 74 20 74 3d 7b 7d 3b 65 2e 66 6f 72 45 61 63 68 28 65 3d 3e 7b 69 66 28 22 6c 69 6e 6b 22 3d 3d 3d 65 2e 74 79 70 65 26 26 65 2e 70 72 6f 70 73 5b 22 64 61 74 61 2d 6f 70 74 69 6d 69 7a 65 64 2d 66 6f 6e 74 73 22 5d 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 73 74 79 6c 65 5b 64 61 74 61 2d 68 72 65 66 3d 22 27 2e 63 6f 6e 63 61 74 28 65 2e 70 72 6f 70 73 5b 22 64 61 74 61 2d 68 72 65 66 22 5d 2c 27 22 5d 27 29 29 29 72 65 74 75 72 6e 3b 65 2e 70 72 6f 70 73 2e 68 72 65 66 3d Data Ascii: alue:!0}),t.default=function(){return{mountedInstances:new Set,updateHead:e=>{let t={};e.forEach(e=>{if("link"===e.type&&e.props["data-optimized-fonts"]){if(document.querySelector('style[data-href="'.concat(e.props["data-href"],'"]')))return;e.props.href=
2024-01-03 13:45:53 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 28 74 29 3b 66 6f 72 28 6c 65 74 20 65 20 69 6e 20 6e 29 7b 69 66 28 21 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 7c 7c 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 65 7c 7c 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 5b 65 5d 29 63 6f 6e 74 69 6e 75 65 3b 6c 65 74 20 6f 3d 72 5b 65 5d 7c 7c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 22 73 63 72 69 70 74 22 3d 3d 3d 74 26 26 28 22 61 73 79 6e 63 22 3d 3d 3d 6f 7c 7c 22 64 65 66 65 72 22 3d 3d 3d 6f 7c 7c 22 6e 6f 4d 6f 64 75 6c 65 22 3d 3d 3d 6f 29 3f 61 5b 6f 5d 3d 21 21 6e 5b 65 5d 3a 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6f 2c 6e 5b 65 5d 29 7d 6c 65 74 7b 63 68 69 6c 64 72 65 6e 3a 6f Data Ascii: lement(t);for(let e in n){if(!n.hasOwnProperty(e)\|\|"children"===e\|\|"dangerouslySetInnerHTML"===e\|\|void 0===n[e])continue;let o=r[e]\|\|e.toLowerCase();"script"===t&&("async"===o\|\|"defer"===o\|\|"noModule"===o)?a[o]=!!n[e]:a.setAttribute(o,n[e])}let{children:o
2024-01-03 13:45:53 UTC	1369	IN	Data Raw: 2c 52 3d 72 28 36 33 38 29 2c 4d 3d 76 28 72 28 33 35 31 37 29 29 2c 41 3d 76 28 72 28 35 38 39 37 29 29 2c 4c 3d 76 28 72 28 38 33 39 34 29 29 2c 54 3d 72 28 32 35 36 35 29 2c 49 3d 72 28 31 36 35 29 2c 4e 3d 72 28 36 37 36 29 2c 6b 3d 72 28 37 37 37 34 29 2c 44 3d 72 28 33 34 30 38 29 2c 42 3d 72 28 32 38 31 31 29 2c 48 3d 72 28 34 30 34 34 29 2c 55 3d 72 28 31 38 34 35 29 2c 46 3d 72 28 31 37 36 29 2c 71 3d 76 28 72 28 32 31 36 29 29 3b 74 2e 76 65 72 73 69 6f 6e 3d 22 31 33 2e 31 2e 36 22 2c 74 2e 72 6f 75 74 65 72 3d 6e 3b 6c 65 74 20 57 3d 53 2e 64 65 66 61 75 6c 74 28 29 3b 74 2e 65 6d 69 74 74 65 72 3d 57 3b 6c 65 74 20 5a 3d 65 3d 3e 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 65 29 2c 7a 3d 21 31 3b 73 65 6c 66 2e 5f 5f 6e 65 78 74 5f 72 65 71 75 Data Ascii: ,R=r(638),M=v(r(3517)),A=v(r(5897)),L=v(r(8394)),T=r(2565),I=r(165),N=r(676),k=r(7774),D=r(3408),B=r(2811),H=r(4044),U=r(1845),F=r(176),q=v(r(216));t.version="13.1.6",t.router=n;let W=S.default();t.emitter=W;let Z=e=>[].slice.call(e),z=!1;self.__next_requ
2024-01-03 13:45:53 UTC	1369	IN	Data Raw: 70 74 4c 6f 61 64 65 72 29 7d 69 3d 6e 65 77 20 41 2e 64 65 66 61 75 6c 74 28 61 2e 62 75 69 6c 64 49 64 2c 65 29 3b 6c 65 74 20 74 3d 65 3d 3e 7b 6c 65 74 5b 74 2c 72 5d 3d 65 3b 72 65 74 75 72 6e 20 69 2e 72 6f 75 74 65 4c 6f 61 64 65 72 2e 6f 6e 45 6e 74 72 79 70 6f 69 6e 74 28 74 2c 72 29 7d 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 26 26 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 2e 6d 61 70 28 65 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 74 28 65 29 2c 30 29 29 2c 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 5b 5d 2c 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 2e 70 75 73 68 3d 74 2c 28 73 3d 4d 2e 64 65 66 61 75 6c 74 28 29 29 2e 67 65 74 49 73 53 73 72 3d 28 29 3d 3e 6e 2e 69 73 53 73 72 2c 6c 3d 64 6f 63 Data Ascii: ptLoader)}i=new A.default(a.buildId,e);let t=e=>{let[t,r]=e;return i.routeLoader.onEntrypoint(t,r)};return window.__NEXT_P&&window.__NEXT_P.map(e=>setTimeout(()=>t(e),0)),window.__NEXT_P=[],window.__NEXT_P.push=t,(s=M.default()).getIsSsr=()=>n.isSsr,l=doc
2024-01-03 13:45:53 UTC	1369	IN	Data Raw: 2c 65 72 72 3a 6c 7d 3d 65 3b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 6c 29 2c 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 41 20 63 6c 69 65 6e 74 2d 73 69 64 65 20 65 78 63 65 70 74 69 6f 6e 20 68 61 73 20 6f 63 63 75 72 72 65 64 2c 20 73 65 65 20 68 65 72 65 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 3a 20 68 74 74 70 73 3a 2f 2f 6e 65 78 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 6d 65 73 73 61 67 65 73 2f 63 6c 69 65 6e 74 2d 73 69 64 65 2d 65 78 63 65 70 74 69 6f 6e 2d 6f 63 63 75 72 72 65 64 22 29 2c 69 2e 6c 6f 61 64 50 61 67 65 28 22 2f 5f 65 72 72 6f 72 22 29 2e 74 68 65 6e 28 6e 3d 3e 7b 6c 65 74 7b 70 61 67 65 3a 61 2c 73 74 79 6c 65 53 68 65 65 74 73 3a 6f 7d 3d 6e 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 75 3f 76 6f 69 64 Data Ascii: ,err:l}=e;return console.error(l),console.error("A client-side exception has occurred, see here for more info: https://nextjs.org/docs/messages/client-side-exception-occurred"),i.loadPage("/_error").then(n=>{let{page:a,styleSheets:o}=n;return(null==u?void
2024-01-03 13:45:53 UTC	1369	IN	Data Raw: 69 65 73 42 79 4e 61 6d 65 28 22 72 6f 75 74 65 43 68 61 6e 67 65 22 2c 22 6d 61 72 6b 22 29 3b 65 2e 6c 65 6e 67 74 68 26 26 28 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 61 73 75 72 65 28 22 4e 65 78 74 2e 6a 73 2d 72 6f 75 74 65 2d 63 68 61 6e 67 65 2d 74 6f 2d 72 65 6e 64 65 72 22 2c 65 5b 30 5d 2e 6e 61 6d 65 2c 22 62 65 66 6f 72 65 52 65 6e 64 65 72 22 29 2c 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 61 73 75 72 65 28 22 4e 65 78 74 2e 6a 73 2d 72 65 6e 64 65 72 22 2c 22 62 65 66 6f 72 65 52 65 6e 64 65 72 22 2c 22 61 66 74 65 72 52 65 6e 64 65 72 22 29 2c 66 26 26 28 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 4e 61 6d 65 28 22 4e 65 78 74 2e 6a 73 2d 72 65 6e 64 65 72 22 29 2e 66 6f 72 45 61 63 68 28 66 29 2c 70 65 72 66 Data Ascii: iesByName("routeChange","mark");e.length&&(performance.measure("Next.js-route-change-to-render",e[0].name,"beforeRender"),performance.measure("Next.js-render","beforeRender","afterRender"),f&&(performance.getEntriesByName("Next.js-render").forEach(f),perf